This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/6b4a18-07bc-4353-b7ea-19ca50cf34ab/1/9TrF8CvIENAUqcixyxTQa2bps6c.roa File: 9TrF8CvIENAUqcixyxTQa2bps6c.roa (raw, json) Hash identifier: 45f33UvxirhWF+GLCEMK1OB/89v95KaqtgcQX1BWw+8= Subject key identifier: F5:3A:C5:F0:2B:C8:10:D0:14:A9:C8:B1:CB:14:D0:6B:66:E9:B3:A7 Certificate issuer: /CN=b1df8e0037f1ae82f7be2235ae612c4010f6fe91 Certificate serial: 019B79ECBE6121643239CCFEEE25044493D6 Authority key identifier: B1:DF:8E:00:37:F1:AE:82:F7:BE:22:35:AE:61:2C:40:10:F6:FE:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sd-OADfxroL3viI1rmEsQBD2_pE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/6b4a18-07bc-4353-b7ea-19ca50cf34ab/1/9TrF8CvIENAUqcixyxTQa2bps6c.roa Signing time: Thu 01 Jan 2026 14:18:36 +0000 ROA not before: Thu 01 Jan 2026 14:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56798 IP address blocks: 91.108.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/6b4a18-07bc-4353-b7ea-19ca50cf34ab/1/sd-OADfxroL3viI1rmEsQBD2_pE.crl rsync://rpki.ripe.net/repository/DEFAULT/53/6b4a18-07bc-4353-b7ea-19ca50cf34ab/1/sd-OADfxroL3viI1rmEsQBD2_pE.mft rsync://rpki.ripe.net/repository/DEFAULT/sd-OADfxroL3viI1rmEsQBD2_pE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:be:61:21:64:32:39:cc:fe:ee:25:04:44:93:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1df8e0037f1ae82f7be2235ae612c4010f6fe91 Validity Not Before: Jan 1 14:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f53ac5f02bc810d014a9c8b1cb14d06b66e9b3a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d8:58:81:a3:2c:8c:0a:3f:40:b5:5d:9c:01: 4a:1f:e0:29:5f:2a:23:fa:c9:ac:da:25:ba:26:3a: 99:9d:aa:aa:c0:24:49:4d:4b:bb:2b:65:40:fe:59: b9:ce:d9:67:7f:89:8b:0f:91:e1:d8:81:10:b1:e1: a0:2c:1a:82:98:93:ef:ae:e1:9a:a9:4f:6d:6b:2f: 73:73:cb:05:ed:c5:29:96:f2:0e:95:0b:69:4d:21: 5b:c6:6f:ed:d3:e0:17:06:20:27:53:e5:ab:48:0f: e2:d6:ed:72:08:09:c5:e7:ed:1f:b2:ee:13:98:f4: 26:f9:09:3e:33:af:d7:46:7c:64:bf:3a:4f:ec:a6: 32:42:5b:a8:bb:c4:1f:ea:7b:e0:9a:56:47:1c:91: ee:c5:3f:b8:c3:0f:47:27:46:f9:e6:5b:5e:c5:36: d9:98:1a:72:39:72:76:1f:07:56:d6:6a:6a:c3:a6: f8:d9:ff:21:41:b8:7d:5e:f0:5d:04:90:5f:0f:ec: 67:48:9f:55:31:3a:58:ed:7b:1b:87:4d:46:f3:79: 7a:06:a6:39:f8:91:46:c7:b6:87:19:ce:66:70:bc: 8d:b0:93:87:21:a4:31:18:c2:58:cf:01:62:0d:09: 07:0c:4a:3e:ca:ab:fd:90:35:13:80:eb:9d:5d:75: 6a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:3A:C5:F0:2B:C8:10:D0:14:A9:C8:B1:CB:14:D0:6B:66:E9:B3:A7 X509v3 Authority Key Identifier: keyid:B1:DF:8E:00:37:F1:AE:82:F7:BE:22:35:AE:61:2C:40:10:F6:FE:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sd-OADfxroL3viI1rmEsQBD2_pE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6b4a18-07bc-4353-b7ea-19ca50cf34ab/1/9TrF8CvIENAUqcixyxTQa2bps6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6b4a18-07bc-4353-b7ea-19ca50cf34ab/1/sd-OADfxroL3viI1rmEsQBD2_pE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.108.184.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:02:85:8d:c2:95:46:9c:0a:a9:5d:7c:ed:0c:8d:91:07:91: 1d:52:8b:a1:c1:8a:cd:87:63:ea:0a:a2:bf:d7:c7:17:ce:70: 47:81:b3:9b:db:cc:c4:10:51:62:db:9c:f5:b1:b6:ae:18:d8: 2f:36:3c:83:44:c3:29:12:d7:51:61:42:90:a7:39:26:fe:a6: 15:08:b7:d2:38:d9:31:50:1c:63:6f:3b:1d:58:ca:35:bf:1e: 8f:05:86:b2:9f:97:ad:51:1c:1e:95:3d:d3:f1:0e:b7:da:9c: 96:af:3a:d3:0d:1a:e7:ac:81:36:33:f0:e2:59:f4:63:ae:29: ba:90:07:f8:96:1c:32:08:a7:ef:45:ce:51:cf:cf:d8:3c:82: 5e:01:9c:8f:1a:95:f7:58:08:00:55:6a:50:99:5f:3e:91:11: 89:71:de:14:7c:3a:9f:62:cc:f6:4c:c4:5c:66:63:b1:77:2c: e7:46:25:17:46:54:aa:ea:b3:40:19:2e:a3:22:2b:96:d9:a3: 65:b9:59:fe:f8:3b:ec:86:dc:4a:d6:9d:47:06:19:78:64:24: 6c:d1:bf:e7:b3:e0:7e:72:07:c9:06:a6:0b:d6:e7:4d:ea:88: b0:2f:5f:da:56:02:12:87:92:ad:ce:bb:f5:e3:5a:29:12:d2: 35:35:2c:6e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57L5hIWQyOcz+7iUERJPWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxZGY4ZTAwMzdmMWFlODJmN2JlMjIzNWFlNjEyYzQwMTBm NmZlOTEwHhcNMjYwMTAxMTQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTNhYzVmMDJiYzgxMGQwMTRhOWM4YjFjYjE0ZDA2YjY2ZTliM2E3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9hYgaMsjAo/QLVdnAFKH+ApXyoj +sms2iW6JjqZnaqqwCRJTUu7K2VA/lm5ztlnf4mLD5Hh2IEQseGgLBqCmJPvruGa qU9tay9zc8sF7cUplvIOlQtpTSFbxm/t0+AXBiAnU+WrSA/i1u1yCAnF5+0fsu4T mPQm+Qk+M6/XRnxkvzpP7KYyQluou8Qf6nvgmlZHHJHuxT+4ww9HJ0b55ltexTbZ mBpyOXJ2HwdW1mpqw6b42f8hQbh9XvBdBJBfD+xnSJ9VMTpY7Xsbh01G83l6BqY5 +JFGx7aHGc5mcLyNsJOHIaQxGMJYzwFiDQkHDEo+yqv9kDUTgOudXXVq1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPU6xfAryBDQFKnIscsU0Gtm6bOnMB8GA1UdIwQY MBaAFLHfjgA38a6C974iNa5hLEAQ9v6RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2QtT0FEZnhyb0wzdmlJMXJtRXNRQkQyX3BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My82YjRhMTgtMDdiYy00MzUzLWI3ZWEt MTljYTUwY2YzNGFiLzEvOVRyRjhDdklFTkFVcWNpeHl4VFFhMmJwczZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My82YjRhMTgtMDdiYy00MzUzLWI3ZWEtMTljYTUwY2YzNGFi LzEvc2QtT0FEZnhyb0wzdmlJMXJtRXNRQkQyX3BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW2y4MA0G CSqGSIb3DQEBCwUAA4IBAQCfAoWNwpVGnAqpXXztDI2RB5EdUouhwYrNh2PqCqK/ 18cXznBHgbOb28zEEFFi25z1sbauGNgvNjyDRMMpEtdRYUKQpzkm/qYVCLfSONkx UBxjbzsdWMo1vx6PBYayn5etURwelT3T8Q632pyWrzrTDRrnrIE2M/DiWfRjrim6 kAf4lhwyCKfvRc5Rz8/YPIJeAZyPGpX3WAgAVWpQmV8+kRGJcd4UfDqfYsz2TMRc ZmOxdyznRiUXRlSq6rNAGS6jIiuW2aNluVn++DvshtxK1p1HBhl4ZCRs0b/ns+B+ cgfJBqYL1udN6oiwL1/aVgISh5Ktzrv141opEtI1NSxu -----END CERTIFICATE-----Generated at Sun Jan 11 16:13:04 2026 by rpki-client