This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/dXAskw5YKw-xbAInYF21THIeAbA.roa File: dXAskw5YKw-xbAInYF21THIeAbA.roa (raw, json) Hash identifier: RYSyXnntwOeT7T1iISY+fkgo30onRr6CAjAd0C8Uvbk= Subject key identifier: 75:70:2C:93:0E:58:2B:0F:B1:6C:02:27:60:5D:B5:4C:72:1E:01:B0 Certificate issuer: /CN=d00f0e0a8e00f1a6d8c1c266e3f436d46e71e877 Certificate serial: 019B7910DFCE1E7192B1BBE7093B12082A43 Authority key identifier: D0:0F:0E:0A:8E:00:F1:A6:D8:C1:C2:66:E3:F4:36:D4:6E:71:E8:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/dXAskw5YKw-xbAInYF21THIeAbA.roa Signing time: Thu 01 Jan 2026 10:18:27 +0000 ROA not before: Thu 01 Jan 2026 10:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3320 IP address blocks: 91.221.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:df:ce:1e:71:92:b1:bb:e7:09:3b:12:08:2a:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d00f0e0a8e00f1a6d8c1c266e3f436d46e71e877 Validity Not Before: Jan 1 10:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=75702c930e582b0fb16c0227605db54c721e01b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:da:79:f1:df:d2:f6:50:43:d8:2b:dd:9a:4a: 07:f0:08:40:0d:11:a3:5a:8c:bf:9d:13:0c:af:01: 8b:20:d4:e7:07:f4:d7:6a:fd:36:a5:cc:e4:47:94: 54:d0:81:e9:2c:16:90:80:8d:1a:47:c0:9c:6d:13: 62:1e:0f:75:f6:35:11:b0:41:8d:fe:66:0b:bb:83: 1e:1a:15:d6:89:70:ac:f8:0b:ad:a7:ae:4d:cf:4b: ea:6f:d6:4c:0e:e4:72:17:65:c0:06:f4:55:b0:8d: 0c:cd:c4:fa:92:ab:79:12:4d:71:f5:b7:8c:45:d5: 92:e4:69:6c:b3:a1:47:fb:55:cb:81:5a:b6:c9:71: 2b:29:f9:00:c5:9a:c4:7a:b7:a6:85:f2:f8:4e:25: 6d:17:52:95:46:9b:87:dd:d6:80:03:0d:af:1b:31: 7f:b3:05:f9:99:e4:e2:1c:50:e2:ff:63:14:65:4d: 93:3d:23:21:58:f8:a1:81:bf:4f:f2:7a:49:c6:00: 17:79:2a:be:9c:b3:35:5d:d3:1c:c4:0b:33:1f:02: b8:c6:8f:9f:6b:f3:c8:c8:53:90:1c:ec:e1:aa:eb: 74:13:86:d5:7d:fa:4e:28:57:8a:18:0b:b7:07:88: 0a:cf:dc:c5:0a:94:59:b9:0a:92:55:d8:05:41:b2: b9:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:70:2C:93:0E:58:2B:0F:B1:6C:02:27:60:5D:B5:4C:72:1E:01:B0 X509v3 Authority Key Identifier: keyid:D0:0F:0E:0A:8E:00:F1:A6:D8:C1:C2:66:E3:F4:36:D4:6E:71:E8:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/dXAskw5YKw-xbAInYF21THIeAbA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.221.12.0/23 Signature Algorithm: sha256WithRSAEncryption 3b:e3:e0:cf:e6:06:db:ef:a2:b4:5d:fb:45:8d:b2:b2:eb:36: ff:8f:2b:9a:f7:72:aa:4d:c4:d8:b9:69:5e:b1:b4:2d:1d:f4: 6e:f4:57:02:09:28:1f:43:d7:e0:08:4a:c0:1e:41:08:9a:8c: 7b:4c:e2:7d:e1:2d:7c:00:da:8f:96:85:2a:f3:c3:49:71:51: 5c:9d:ee:2e:a0:dc:c5:66:3a:8a:46:bb:6c:38:80:19:95:92: 03:56:b6:c5:81:e5:b8:69:91:04:61:dc:9e:64:db:9b:1f:af: 4e:e5:b9:21:0a:86:c3:87:0b:e9:6a:a5:0e:f7:06:f0:28:be: 59:af:cd:34:6e:d5:ad:77:bd:f6:88:a6:4d:a3:de:c6:bf:e2: b0:ed:41:d2:b5:3b:3a:1e:21:06:7f:06:0e:f0:77:90:33:9e: 7f:9c:f0:89:d1:49:98:bf:f1:62:3d:e5:35:0b:2c:4c:78:5c: 01:9f:39:10:4f:ca:3b:07:dc:0f:e8:33:2f:fd:88:1b:be:0d: c6:2c:a0:db:20:b8:06:d4:94:97:5b:c4:2d:bc:4a:66:1b:89: 4a:f4:4f:b4:6a:56:ab:6c:db:58:58:d8:82:d8:2d:03:ae:e5: 44:6a:6b:d5:a7:4b:8b:dd:40:b7:13:16:87:78:41:08:0a:c9: 09:d6:53:e4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EN/OHnGSsbvnCTsSCCpDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwMGYwZTBhOGUwMGYxYTZkOGMxYzI2NmUzZjQzNmQ0NmU3 MWU4NzcwHhcNMjYwMTAxMTAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTcwMmM5MzBlNTgyYjBmYjE2YzAyMjc2MDVkYjU0YzcyMWUwMWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Np58d/S9lBD2CvdmkoH8AhADRGj Woy/nRMMrwGLINTnB/TXav02pczkR5RU0IHpLBaQgI0aR8CcbRNiHg919jURsEGN /mYLu4MeGhXWiXCs+Autp65Nz0vqb9ZMDuRyF2XABvRVsI0MzcT6kqt5Ek1x9beM RdWS5Glss6FH+1XLgVq2yXErKfkAxZrEeremhfL4TiVtF1KVRpuH3daAAw2vGzF/ swX5meTiHFDi/2MUZU2TPSMhWPihgb9P8npJxgAXeSq+nLM1XdMcxAszHwK4xo+f a/PIyFOQHOzhqut0E4bVffpOKFeKGAu3B4gKz9zFCpRZuQqSVdgFQbK5bQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHVwLJMOWCsPsWwCJ2BdtUxyHgGwMB8GA1UdIwQY MBaAFNAPDgqOAPGm2MHCZuP0NtRuceh3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEE4T0NvNEE4YWJZd2NKbTRfUTIxRzV4NkhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8zZDRiNDAtY2E3ZS00NDcyLWI3NDAt NjVhYjBkMzUxZjI3LzEvZFhBc2t3NVlLdy14YkFJbllGMjFUSEllQWJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8zZDRiNDAtY2E3ZS00NDcyLWI3NDAtNjVhYjBkMzUxZjI3 LzEvMEE4T0NvNEE4YWJZd2NKbTRfUTIxRzV4NkhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW90MMA0G CSqGSIb3DQEBCwUAA4IBAQA74+DP5gbb76K0XftFjbKy6zb/jyua93KqTcTYuWle sbQtHfRu9FcCCSgfQ9fgCErAHkEImox7TOJ94S18ANqPloUq88NJcVFcne4uoNzF ZjqKRrtsOIAZlZIDVrbFgeW4aZEEYdyeZNubH69O5bkhCobDhwvpaqUO9wbwKL5Z r800btWtd732iKZNo97Gv+Kw7UHStTs6HiEGfwYO8HeQM55/nPCJ0UmYv/FiPeU1 CyxMeFwBnzkQT8o7B9wP6DMv/Ygbvg3GLKDbILgG1JSXW8QtvEpmG4lK9E+0alar bNtYWNiC2C0DruVEamvVp0uL3UC3ExaHeEEICskJ1lPk -----END CERTIFICATE-----Generated at Mon Jan 19 11:48:42 2026 by rpki-client