This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/1de8pjWZdbZ222YYe2GXtR0jHsA.roa File: 1de8pjWZdbZ222YYe2GXtR0jHsA.roa (raw, json) Hash identifier: nh2vUuTt0Og2aMiOlGOrS+L6/mjzmIQi3XaIf1H65RY= Subject key identifier: D5:D7:BC:A6:35:99:75:B6:76:DB:66:18:7B:61:97:B5:1D:23:1E:C0 Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d Certificate serial: 019B77C7728531C3A9AD5CEE3DE2EC456F16 Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/1de8pjWZdbZ222YYe2GXtR0jHsA.roa Signing time: Thu 01 Jan 2026 04:18:38 +0000 ROA not before: Thu 01 Jan 2026 04:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61317 IP address blocks: 91.147.116.0/24 maxlen: 24 91.147.117.0/24 maxlen: 24 91.147.118.0/24 maxlen: 24 91.147.119.0/24 maxlen: 24 91.147.122.0/24 maxlen: 24 91.147.123.0/24 maxlen: 24 91.147.126.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 03:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:72:85:31:c3:a9:ad:5c:ee:3d:e2:ec:45:6f:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d Validity Not Before: Jan 1 04:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d5d7bca6359975b676db66187b6197b51d231ec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:04:6a:b9:ad:71:e0:06:a8:3f:d6:59:cb:7c: 96:3f:b0:5d:88:8c:a6:e5:34:51:5f:5f:9c:08:dd: 9a:cf:3d:c6:6c:c0:0f:e6:18:1f:1f:2d:d8:ec:e8: 64:97:c4:b1:61:cd:66:df:9e:05:76:00:27:2e:74: 8a:0e:18:84:c1:45:fd:76:0c:d3:57:a2:06:ed:fb: a6:c8:7b:45:9a:63:a5:6c:55:8a:4c:66:f8:68:a7: aa:46:08:59:f7:e0:c1:da:8c:5e:47:27:0d:38:66: 84:29:90:fe:04:06:c8:2c:c1:ee:42:40:76:a9:ac: 4a:24:c1:3e:61:9b:f3:a8:f3:27:6d:15:0f:6a:e7: bb:38:72:7a:e0:10:07:fb:20:c9:d6:24:b4:69:23: 4b:67:26:c3:66:86:26:f4:8b:72:6e:40:6b:f0:71: 92:54:af:6d:c3:c4:0c:f0:db:59:3a:fb:c4:b4:19: c9:eb:e1:ea:59:39:fb:fc:95:a9:93:78:f8:82:69: b5:1f:1f:2b:ba:d5:db:61:07:3b:74:42:55:38:e9: f6:34:e1:42:5c:a9:85:ab:b9:68:6a:cc:26:1f:62: b2:04:3c:8a:1a:33:d0:70:1a:b3:55:f0:83:75:2a: 8b:4b:86:57:98:bb:82:ac:9a:c5:a8:2e:8a:21:bb: 39:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:D7:BC:A6:35:99:75:B6:76:DB:66:18:7B:61:97:B5:1D:23:1E:C0 X509v3 Authority Key Identifier: keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/1de8pjWZdbZ222YYe2GXtR0jHsA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.147.116.0/22 91.147.122.0/23 91.147.126.0/23 Signature Algorithm: sha256WithRSAEncryption 72:30:2e:3d:50:a8:97:5b:4f:b5:e3:de:0b:db:4d:35:22:4f: 77:77:35:04:9f:38:3e:45:0b:88:59:a7:8c:10:1d:92:19:14: 44:da:8e:d6:2f:88:b3:f9:fc:78:38:f7:2c:36:c4:f2:7d:7a: 6c:4e:e3:4a:bc:51:3b:0d:45:77:c5:eb:ba:33:19:87:82:6a: aa:89:b2:8b:d9:59:1c:3b:f6:90:4f:e1:31:ad:7f:71:f7:10: 90:37:f3:19:45:29:0f:97:3a:cd:ed:b2:56:de:c7:72:50:cb: 2b:60:49:d1:ff:16:1f:3c:3f:8d:e5:87:e4:0a:b2:c7:ce:bd: cc:ea:c4:5d:b3:85:a9:97:0a:45:57:06:69:b0:00:63:e1:32: 2c:eb:66:d0:a3:ab:30:58:68:9e:48:87:3e:72:64:72:bf:42: a8:ab:da:2e:f8:9f:1d:b3:c0:15:c2:ff:52:2d:2e:6d:a9:9b: 8e:72:15:cd:dc:c8:32:50:09:35:d0:b9:99:34:dc:c6:f9:4a: 61:ce:1c:38:b2:93:96:c2:1b:ea:0e:0b:13:c0:d7:ac:45:3b: 68:c7:22:cc:c4:42:f5:63:b8:ae:7b:6b:a7:27:66:22:30:b0: 0e:04:4e:1f:b3:12:10:aa:0d:e0:ad:85:d1:4f:f7:92:40:ef: 28:3d:ab:83 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3x3KFMcOprVzuPeLsRW8WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiMDk4ZTQ1ZWY0YmI1ZDE4ZGJjODZjNWExMzVmNTdlYmNi ZTAwNWQwHhcNMjYwMTAxMDQxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNWQ3YmNhNjM1OTk3NWI2NzZkYjY2MTg3YjYxOTdiNTFkMjMxZWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgRqua1x4AaoP9ZZy3yWP7BdiIym 5TRRX1+cCN2azz3GbMAP5hgfHy3Y7Ohkl8SxYc1m354FdgAnLnSKDhiEwUX9dgzT V6IG7fumyHtFmmOlbFWKTGb4aKeqRghZ9+DB2oxeRycNOGaEKZD+BAbILMHuQkB2 qaxKJME+YZvzqPMnbRUPaue7OHJ64BAH+yDJ1iS0aSNLZybDZoYm9ItybkBr8HGS VK9tw8QM8NtZOvvEtBnJ6+HqWTn7/JWpk3j4gmm1Hx8rutXbYQc7dEJVOOn2NOFC XKmFq7loaswmH2KyBDyKGjPQcBqzVfCDdSqLS4ZXmLuCrJrFqC6KIbs5SwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNXXvKY1mXW2dttmGHthl7UdIx7AMB8GA1UdIwQY MBaAFDsJjkXvS7XRjbyGxaE19X68vgBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMt ZTEyYjE2NDIxNWI5LzEvMWRlOHBqV1pkYloyMjJZWWUyR1h0UjBqSHNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMtZTEyYjE2NDIxNWI5 LzEvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCW5N0AwQB W5N6AwQBW5N+MA0GCSqGSIb3DQEBCwUAA4IBAQByMC49UKiXW0+1494L2001Ik93 dzUEnzg+RQuIWaeMEB2SGRRE2o7WL4iz+fx4OPcsNsTyfXpsTuNKvFE7DUV3xeu6 MxmHgmqqibKL2VkcO/aQT+ExrX9x9xCQN/MZRSkPlzrN7bJW3sdyUMsrYEnR/xYf PD+N5YfkCrLHzr3M6sRds4WplwpFVwZpsABj4TIs62bQo6swWGieSIc+cmRyv0Ko q9ou+J8ds8AVwv9SLS5tqZuOchXN3MgyUAk10LmZNNzG+Uphzhw4spOWwhvqDgsT wNesRTtoxyLMxEL1Y7iue2unJ2YiMLAOBE4fsxIQqg3grYXRT/eSQO8oPauD -----END CERTIFICATE-----Generated at Thu Jan 8 12:58:26 2026 by rpki-client