This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/p91jRhgPPPPCD8AUVVRLrLT2tSc.roa File: p91jRhgPPPPCD8AUVVRLrLT2tSc.roa (raw, json) Hash identifier: VHDy7CGzOsa6Fe1X3O2C9FkcWyn52HsGJPVnDhyYsx4= Subject key identifier: A7:DD:63:46:18:0F:3C:F3:C2:0F:C0:14:55:54:4B:AC:B4:F6:B5:27 Certificate issuer: /CN=7373c1ff55403d4792346493f769f8d033bef02c Certificate serial: 019B77C6D640D04325433973FCEF14C448DF Authority key identifier: 73:73:C1:FF:55:40:3D:47:92:34:64:93:F7:69:F8:D0:33:BE:F0:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3PB_1VAPUeSNGST92n40DO-8Cw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/p91jRhgPPPPCD8AUVVRLrLT2tSc.roa Signing time: Thu 01 Jan 2026 04:17:58 +0000 ROA not before: Thu 01 Jan 2026 04:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 213.230.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/c3PB_1VAPUeSNGST92n40DO-8Cw.crl rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/c3PB_1VAPUeSNGST92n40DO-8Cw.mft rsync://rpki.ripe.net/repository/DEFAULT/c3PB_1VAPUeSNGST92n40DO-8Cw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 01:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:d6:40:d0:43:25:43:39:73:fc:ef:14:c4:48:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7373c1ff55403d4792346493f769f8d033bef02c Validity Not Before: Jan 1 04:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a7dd6346180f3cf3c20fc01455544bacb4f6b527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:03:5d:4d:65:51:7e:f4:55:56:bc:48:2a:a7: 54:df:4d:ef:58:25:8f:74:41:c2:cd:75:e9:92:43: 70:24:ac:c3:1a:e1:e8:9e:ca:d2:fe:d6:4d:55:70: c4:e0:17:f9:78:d8:62:bd:d8:01:ac:cd:a2:1d:eb: f8:ae:1d:88:88:a7:7d:e9:1f:cd:35:c1:34:67:fe: 77:51:87:2a:bc:2a:d7:87:dc:64:d1:2a:c7:f6:92: 2d:2e:f0:3b:1d:82:13:80:66:81:70:ee:38:60:69: 41:b9:82:d4:f2:35:b1:d2:0b:93:ff:9e:b9:1e:bc: ee:3e:c3:7b:cd:44:34:0f:4d:f8:e8:54:34:64:bc: 05:e1:37:19:80:13:a1:a0:60:cf:c6:5e:1f:21:6f: de:6d:cb:40:3e:9d:e8:51:c9:6c:fd:9b:cb:b6:45: 08:6d:71:d0:b7:23:1a:72:fd:2e:37:2a:03:a4:a2: 83:21:4c:2e:93:32:c1:dc:9a:b9:36:b0:3c:37:2e: 96:82:4d:19:85:d2:2d:35:95:ce:d1:4c:09:af:6c: 54:46:c0:c0:97:91:ac:ba:6e:4f:7e:02:de:76:56: d1:60:ab:cc:49:78:8b:bc:f6:ae:26:d3:5f:ea:50: b3:73:cd:3e:bd:04:15:35:91:bf:01:f1:7e:e8:e1: 3c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:DD:63:46:18:0F:3C:F3:C2:0F:C0:14:55:54:4B:AC:B4:F6:B5:27 X509v3 Authority Key Identifier: keyid:73:73:C1:FF:55:40:3D:47:92:34:64:93:F7:69:F8:D0:33:BE:F0:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3PB_1VAPUeSNGST92n40DO-8Cw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/p91jRhgPPPPCD8AUVVRLrLT2tSc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/c3PB_1VAPUeSNGST92n40DO-8Cw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.230.203.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:96:94:70:ea:89:a3:7c:d2:e7:60:a1:b6:c1:d0:ab:ac:83: 4c:b5:1d:b0:d0:f5:0f:ac:3b:3b:e8:2f:f3:5c:31:58:31:15: 20:04:25:d4:d4:ee:7e:0b:be:92:cb:d9:de:06:61:8a:14:b4: a9:13:43:03:f2:6d:8a:34:9a:01:b6:ff:11:b8:48:2c:1e:41: cb:d0:5b:20:bc:44:55:f7:39:10:df:60:49:04:e8:5b:53:5a: bc:fb:0a:e3:4c:b3:7a:fd:8d:82:56:63:33:4c:e5:90:f1:29: f5:de:28:c8:5e:17:f4:a6:41:4b:7c:ad:fc:9d:e5:87:c5:af: 62:d4:36:41:88:aa:16:f0:35:dd:a0:15:b0:68:da:35:dd:3f: fd:6d:0c:40:de:c8:a1:ab:10:87:02:8e:d7:ad:91:4b:c3:74: e5:ef:36:a8:92:12:72:09:0d:c5:26:44:bc:16:ae:4e:c4:bc: ed:fc:1c:bf:49:54:7d:4f:45:3e:ed:2b:07:f7:9c:8c:36:e1: 10:07:ba:9c:52:bd:da:bd:8b:ae:83:04:89:a3:9b:9c:b0:6a: c1:2a:31:15:4a:12:a9:67:68:99:64:56:35:c9:85:cb:2a:64: 86:01:44:65:a3:1c:90:74:dd:20:48:27:74:43:47:21:d5:c8: dc:8b:5e:1d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xtZA0EMlQzlz/O8UxEjfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczNzNjMWZmNTU0MDNkNDc5MjM0NjQ5M2Y3NjlmOGQwMzNi ZWYwMmMwHhcNMjYwMTAxMDQxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhN2RkNjM0NjE4MGYzY2YzYzIwZmMwMTQ1NTU0NGJhY2I0ZjZiNTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ANdTWVRfvRVVrxIKqdU303vWCWP dEHCzXXpkkNwJKzDGuHonsrS/tZNVXDE4Bf5eNhivdgBrM2iHev4rh2IiKd96R/N NcE0Z/53UYcqvCrXh9xk0SrH9pItLvA7HYITgGaBcO44YGlBuYLU8jWx0guT/565 HrzuPsN7zUQ0D0346FQ0ZLwF4TcZgBOhoGDPxl4fIW/ebctAPp3oUcls/ZvLtkUI bXHQtyMacv0uNyoDpKKDIUwukzLB3Jq5NrA8Ny6Wgk0ZhdItNZXO0UwJr2xURsDA l5Gsum5PfgLedlbRYKvMSXiLvPauJtNf6lCzc80+vQQVNZG/AfF+6OE8pQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKfdY0YYDzzzwg/AFFVUS6y09rUnMB8GA1UdIwQY MBaAFHNzwf9VQD1HkjRkk/dp+NAzvvAsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzNQQl8xVkFQVWVTTkdTVDkybjQwRE8tOEN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8xYWZmMTAtZGQyOS00MzlmLThkMjMt YmM5YTVmNjYwNWZjLzEvcDkxalJoZ1BQUFBDRDhBVVZWUkxyTFQydFNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8xYWZmMTAtZGQyOS00MzlmLThkMjMtYmM5YTVmNjYwNWZj LzEvYzNQQl8xVkFQVWVTTkdTVDkybjQwRE8tOEN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1ebLMA0G CSqGSIb3DQEBCwUAA4IBAQBMlpRw6omjfNLnYKG2wdCrrINMtR2w0PUPrDs76C/z XDFYMRUgBCXU1O5+C76Sy9neBmGKFLSpE0MD8m2KNJoBtv8RuEgsHkHL0FsgvERV 9zkQ32BJBOhbU1q8+wrjTLN6/Y2CVmMzTOWQ8Sn13ijIXhf0pkFLfK38neWHxa9i 1DZBiKoW8DXdoBWwaNo13T/9bQxA3sihqxCHAo7XrZFLw3Tl7zaokhJyCQ3FJkS8 Fq5OxLzt/By/SVR9T0U+7SsH95yMNuEQB7qcUr3avYuugwSJo5ucsGrBKjEVShKp Z2iZZFY1yYXLKmSGAURloxyQdN0gSCd0Q0ch1cjci14d -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:32 2026 by rpki-client