This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/D1uepCAmRlFVjKTUqfMxFmzOti0.roa File: D1uepCAmRlFVjKTUqfMxFmzOti0.roa (raw, json) Hash identifier: pf7DS73sBkltlYtAHV2Wkt/8vgHhRENJ2syRZHBzVdQ= Subject key identifier: 0F:5B:9E:A4:20:26:46:51:55:8C:A4:D4:A9:F3:31:16:6C:CE:B6:2D Certificate issuer: /CN=acecf09b85d91cd682b06743cb6c5930e1fc551c Certificate serial: 019B7AC8F83380C512A4A1EF60AE9487E75C Authority key identifier: AC:EC:F0:9B:85:D9:1C:D6:82:B0:67:43:CB:6C:59:30:E1:FC:55:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/D1uepCAmRlFVjKTUqfMxFmzOti0.roa Signing time: Thu 01 Jan 2026 18:19:09 +0000 ROA not before: Thu 01 Jan 2026 18:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49556 IP address blocks: 91.216.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:f8:33:80:c5:12:a4:a1:ef:60:ae:94:87:e7:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acecf09b85d91cd682b06743cb6c5930e1fc551c Validity Not Before: Jan 1 18:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f5b9ea420264651558ca4d4a9f331166cceb62d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b8:d9:c5:b6:d8:01:c5:1b:89:eb:1e:93:18: 6f:9c:cb:bf:d1:6e:6c:0b:9e:1d:a5:43:bb:ef:27: 20:68:25:fd:2b:f8:0a:3c:4b:31:b4:51:45:e4:1a: 55:12:83:df:07:0c:83:8e:83:1a:a7:ef:49:c2:87: ca:ef:b0:bb:00:bd:66:20:7c:c2:39:1a:3a:91:3a: 20:05:92:e7:95:40:da:39:c9:02:2c:03:57:0b:ba: 76:9a:75:9e:3b:13:37:6e:17:86:49:8a:b2:64:90: 3a:82:00:cc:b3:8a:fd:53:10:5a:a6:b5:fb:8d:a8: e1:77:00:e3:d9:f9:eb:dd:e1:26:1b:83:a0:27:93: 16:69:7b:f4:c1:ac:a6:e5:21:e3:49:c6:00:78:2a: c2:16:91:c1:54:e6:1c:6b:b6:ca:a5:e2:de:aa:c1: 81:0d:e7:ca:94:a9:f4:b7:43:c3:57:fd:17:ee:e2: c7:56:93:dc:a9:54:30:06:82:42:50:88:db:ba:39: e0:83:a5:ac:2f:85:45:b0:67:08:d1:56:c4:a1:37: d1:c3:80:df:a4:c2:ab:9d:a0:28:fe:c1:48:1c:88: 56:5a:b4:af:6a:fb:d6:d4:b7:cc:b3:b3:43:0a:f3: eb:71:01:db:c3:4c:82:b7:b4:22:ee:cd:9e:e4:29: b7:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:5B:9E:A4:20:26:46:51:55:8C:A4:D4:A9:F3:31:16:6C:CE:B6:2D X509v3 Authority Key Identifier: keyid:AC:EC:F0:9B:85:D9:1C:D6:82:B0:67:43:CB:6C:59:30:E1:FC:55:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/D1uepCAmRlFVjKTUqfMxFmzOti0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.217.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:0a:e5:2b:4b:64:66:21:e9:f0:95:b2:58:da:0b:8c:69:7a: fe:f7:0c:92:b7:85:33:98:d6:37:59:8f:df:9b:9b:f7:11:10: 35:ef:78:72:ad:47:5a:c0:3d:f6:51:3d:7b:fc:f2:f0:fb:df: 64:05:74:67:d3:d5:71:48:33:c1:48:ab:5d:2c:2d:ca:9d:f7: fa:7e:70:4a:06:87:de:f4:a3:43:9d:7d:bb:14:64:d1:f1:be: db:2e:69:dc:2b:62:ec:76:9b:ab:34:50:0d:b1:d9:31:d4:c2: 3e:e4:c1:60:6b:47:2e:b1:1c:73:c3:f0:65:9f:6d:46:17:33: 08:35:e3:b3:1d:16:33:99:6c:83:b7:32:3c:36:59:40:a4:f8: 20:e5:7c:3d:6d:79:09:70:11:59:90:4a:fb:26:df:1a:a7:e8: d6:b0:ff:ab:89:2b:dd:54:7b:7b:8a:c0:1c:6b:2e:02:69:2d: b0:d9:1c:e5:f1:b2:a8:58:6e:08:07:29:5e:c5:fb:4c:c7:9b: ac:47:3a:c4:da:c8:b2:76:85:fc:c0:4c:9f:14:da:87:bb:3b: ed:04:07:6c:8f:35:91:16:02:47:c4:74:fd:de:7c:18:14:4f: 00:c7:ac:b2:b9:c5:00:ba:13:72:d9:73:e6:cf:63:eb:81:ee: 4c:2c:7d:d6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yPgzgMUSpKHvYK6Uh+dcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjZWNmMDliODVkOTFjZDY4MmIwNjc0M2NiNmM1OTMwZTFm YzU1MWMwHhcNMjYwMTAxMTgxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjViOWVhNDIwMjY0NjUxNTU4Y2E0ZDRhOWYzMzExNjZjY2ViNjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrjZxbbYAcUbiesekxhvnMu/0W5s C54dpUO77ycgaCX9K/gKPEsxtFFF5BpVEoPfBwyDjoMap+9JwofK77C7AL1mIHzC ORo6kTogBZLnlUDaOckCLANXC7p2mnWeOxM3bheGSYqyZJA6ggDMs4r9UxBaprX7 jajhdwDj2fnr3eEmG4OgJ5MWaXv0waym5SHjScYAeCrCFpHBVOYca7bKpeLeqsGB DefKlKn0t0PDV/0X7uLHVpPcqVQwBoJCUIjbujngg6WsL4VFsGcI0VbEoTfRw4Df pMKrnaAo/sFIHIhWWrSvavvW1LfMs7NDCvPrcQHbw0yCt7Qi7s2e5Cm3iQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA9bnqQgJkZRVYyk1KnzMRZszrYtMB8GA1UdIwQY MBaAFKzs8JuF2RzWgrBnQ8tsWTDh/FUcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvck96d200WFpITmFDc0dkRHkyeFpNT0g4VlJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8yNWY0ZjQtYTU0Ny00MjM4LWExZGEt ZjE4ZDc4MThmODRhLzEvRDF1ZXBDQW1SbEZWaktUVXFmTXhGbXpPdGkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8yNWY0ZjQtYTU0Ny00MjM4LWExZGEtZjE4ZDc4MThmODRh LzEvck96d200WFpITmFDc0dkRHkyeFpNT0g4VlJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9jZMA0G CSqGSIb3DQEBCwUAA4IBAQA9CuUrS2RmIenwlbJY2guMaXr+9wySt4UzmNY3WY/f m5v3ERA173hyrUdawD32UT17/PLw+99kBXRn09VxSDPBSKtdLC3Knff6fnBKBofe 9KNDnX27FGTR8b7bLmncK2LsdpurNFANsdkx1MI+5MFga0cusRxzw/Bln21GFzMI NeOzHRYzmWyDtzI8NllApPgg5Xw9bXkJcBFZkEr7Jt8ap+jWsP+riSvdVHt7isAc ay4CaS2w2Rzl8bKoWG4IBylexftMx5usRzrE2siydoX8wEyfFNqHuzvtBAdsjzWR FgJHxHT93nwYFE8Ax6yyucUAuhNy2XPmz2Prge5MLH3W -----END CERTIFICATE-----Generated at Mon Jan 26 23:24:35 2026 by rpki-client