This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/raO9iQAhVCpP5b8-hfSy9qJarpk.roa File: raO9iQAhVCpP5b8-hfSy9qJarpk.roa (raw, json) Hash identifier: 7TlVHnrM0tbsuCT/4folmrO+nyFLI9cWJJ9Gute0iZQ= Subject key identifier: AD:A3:BD:89:00:21:54:2A:4F:E5:BF:3E:85:F4:B2:F6:A2:5A:AE:99 Certificate issuer: /CN=da1a521ec13031527d2f2cacfc85eb99e4841256 Certificate serial: 019B7AC92F27B623116B11A9FDBFC06A8028 Authority key identifier: DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/raO9iQAhVCpP5b8-hfSy9qJarpk.roa Signing time: Thu 01 Jan 2026 18:19:23 +0000 ROA not before: Thu 01 Jan 2026 18:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 91.209.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:2f:27:b6:23:11:6b:11:a9:fd:bf:c0:6a:80:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da1a521ec13031527d2f2cacfc85eb99e4841256 Validity Not Before: Jan 1 18:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ada3bd890021542a4fe5bf3e85f4b2f6a25aae99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:9d:fd:d3:67:aa:8b:20:e6:3d:3d:c5:f9:1a: 14:60:3c:9f:ab:dc:80:97:0c:de:49:0d:36:cd:a7: bb:2d:30:07:78:be:05:ff:eb:25:85:c3:48:29:d1: 0f:bc:ca:f1:98:07:7a:87:6b:24:99:1d:73:0c:e1: e7:b0:f7:37:ee:84:8b:c6:4d:53:d3:80:bb:95:6f: 73:90:ab:5c:40:2c:26:ec:f2:d0:0b:8c:7e:99:bb: 72:df:7b:99:ea:3a:db:ff:ed:0b:4c:22:b9:27:c4: f6:36:05:aa:c5:90:c9:5d:6a:63:d6:b0:dc:bb:81: 0c:b1:f8:d3:c8:94:49:19:46:c3:8b:93:08:e0:8a: 6d:aa:9e:b4:61:65:e1:e8:63:54:1c:eb:c5:17:d1: c6:ee:f0:b7:d3:f2:fa:bc:b2:62:c7:02:9f:82:05: 9f:55:62:58:ef:c6:b6:b3:00:e2:5d:90:64:fe:73: 56:dd:47:d7:ea:d7:f6:53:70:cc:a3:7c:75:0d:7d: 79:ba:21:22:76:dd:c7:38:fa:d9:6d:ef:61:f6:db: 04:85:f5:8e:5f:8e:c6:79:0d:d6:ea:91:bb:41:b1: 00:2d:5e:b1:3a:d3:40:45:2f:0b:d2:8f:93:45:5b: e6:7b:22:4b:2c:13:51:f2:b7:4c:de:8f:cc:d6:e2: e6:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:A3:BD:89:00:21:54:2A:4F:E5:BF:3E:85:F4:B2:F6:A2:5A:AE:99 X509v3 Authority Key Identifier: keyid:DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/raO9iQAhVCpP5b8-hfSy9qJarpk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.81.0/24 Signature Algorithm: sha256WithRSAEncryption 73:b2:4b:84:43:6e:0b:f7:75:bf:0b:62:3a:bc:05:eb:61:8b: dd:c5:47:c8:54:96:34:1c:94:aa:3d:69:fe:df:78:93:f6:d4: f1:19:2b:95:37:81:ad:14:ad:dd:30:51:e2:d5:54:2c:f3:cf: df:c3:bb:0d:b7:58:48:9f:c8:1b:cb:f2:8d:cb:d0:f4:f6:14: 64:5b:11:85:d7:73:15:40:4c:76:3d:61:18:94:31:af:43:b9: 43:79:8b:8a:87:69:fe:5d:5a:f9:ce:75:bb:62:83:13:fd:ca: f5:00:26:c4:7f:fc:57:9c:f1:6f:1d:96:66:f3:bd:6f:c4:67: 74:1f:75:b4:8c:a4:bd:ac:a0:f8:e7:bd:8e:47:9c:d7:99:9f: fe:d2:dc:ce:f8:6e:a3:5e:bc:78:d8:8e:b8:09:5f:b7:33:a2: 95:ac:94:08:64:c3:1d:03:8f:c2:2b:f1:80:ad:79:58:35:69: d8:ae:60:dc:8b:46:ce:a4:a3:4e:54:c0:ad:4b:d0:7d:e1:58: 4d:f2:bf:9b:ac:79:11:8e:11:fb:1d:10:37:11:85:57:82:a4: 29:19:26:b2:43:98:c4:58:61:26:21:82:08:cf:ab:03:fb:cc: f7:31:c5:0b:2c:ac:79:b9:2e:c3:e5:b4:43:2d:99:2b:70:b9: b0:29:5c:6d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yS8ntiMRaxGp/b/AaoAoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhMWE1MjFlYzEzMDMxNTI3ZDJmMmNhY2ZjODVlYjk5ZTQ4 NDEyNTYwHhcNMjYwMTAxMTgxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZGEzYmQ4OTAwMjE1NDJhNGZlNWJmM2U4NWY0YjJmNmEyNWFhZTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Z3902eqiyDmPT3F+RoUYDyfq9yA lwzeSQ02zae7LTAHeL4F/+slhcNIKdEPvMrxmAd6h2skmR1zDOHnsPc37oSLxk1T 04C7lW9zkKtcQCwm7PLQC4x+mbty33uZ6jrb/+0LTCK5J8T2NgWqxZDJXWpj1rDc u4EMsfjTyJRJGUbDi5MI4Iptqp60YWXh6GNUHOvFF9HG7vC30/L6vLJixwKfggWf VWJY78a2swDiXZBk/nNW3UfX6tf2U3DMo3x1DX15uiEidt3HOPrZbe9h9tsEhfWO X47GeQ3W6pG7QbEALV6xOtNARS8L0o+TRVvmeyJLLBNR8rdM3o/M1uLmHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK2jvYkAIVQqT+W/PoX0svaiWq6ZMB8GA1UdIwQY MBaAFNoaUh7BMDFSfS8srPyF65nkhBJWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmhwU0hzRXdNVko5THl5c19JWHJtZVNFRWxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mZWFkMTYtZGQyZi00ZDY2LTg1MDMt NWQ1YWVjMjBmYzlhLzEvcmFPOWlRQWhWQ3BQNWI4LWhmU3k5cUphcnBrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9mZWFkMTYtZGQyZi00ZDY2LTg1MDMtNWQ1YWVjMjBmYzlh LzEvMmhwU0hzRXdNVko5THl5c19JWHJtZVNFRWxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9FRMA0G CSqGSIb3DQEBCwUAA4IBAQBzskuEQ24L93W/C2I6vAXrYYvdxUfIVJY0HJSqPWn+ 33iT9tTxGSuVN4GtFK3dMFHi1VQs88/fw7sNt1hIn8gby/KNy9D09hRkWxGF13MV QEx2PWEYlDGvQ7lDeYuKh2n+XVr5znW7YoMT/cr1ACbEf/xXnPFvHZZm871vxGd0 H3W0jKS9rKD4572OR5zXmZ/+0tzO+G6jXrx42I64CV+3M6KVrJQIZMMdA4/CK/GA rXlYNWnYrmDci0bOpKNOVMCtS9B94VhN8r+brHkRjhH7HRA3EYVXgqQpGSayQ5jE WGEmIYIIz6sD+8z3McULLKx5uS7D5bRDLZkrcLmwKVxt -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:42 2026 by rpki-client