This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/_c_Ge4KlyXooIVPQ3URHN_DCCOc.roa File: _c_Ge4KlyXooIVPQ3URHN_DCCOc.roa (raw, json) Hash identifier: zZr72d4ktyBj5RLLYIViykO4UzrMMtJKZidkjGHFvsc= Subject key identifier: FD:CF:C6:7B:82:A5:C9:7A:28:21:53:D0:DD:44:47:37:F0:C2:08:E7 Certificate issuer: /CN=ce28340a209b2ba12ae903a74cbb5e2e23aed238 Certificate serial: 019B7AC939BAE67762848AC10367E8179F3A Authority key identifier: CE:28:34:0A:20:9B:2B:A1:2A:E9:03:A7:4C:BB:5E:2E:23:AE:D2:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zig0CiCbK6Eq6QOnTLteLiOu0jg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/_c_Ge4KlyXooIVPQ3URHN_DCCOc.roa Signing time: Thu 01 Jan 2026 18:19:26 +0000 ROA not before: Thu 01 Jan 2026 18:19:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62298 IP address blocks: 91.205.40.0/24 maxlen: 24 2a01:5340::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft rsync://rpki.ripe.net/repository/DEFAULT/zig0CiCbK6Eq6QOnTLteLiOu0jg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:39:ba:e6:77:62:84:8a:c1:03:67:e8:17:9f:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce28340a209b2ba12ae903a74cbb5e2e23aed238 Validity Not Before: Jan 1 18:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fdcfc67b82a5c97a282153d0dd444737f0c208e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:10:f0:2f:4d:06:a6:7f:0e:01:01:72:e5:99: 96:48:ff:2f:f6:f6:18:11:77:64:a3:f8:5b:a3:ec: dd:fd:9d:1f:02:fd:75:f3:40:8a:79:90:71:73:69: 6d:a7:b7:ff:36:3c:49:5b:ab:13:7e:cc:2a:3e:82: 63:d1:18:6e:8d:af:97:1f:ee:7e:a7:7b:fe:88:4a: c3:9f:0b:53:ba:31:71:3e:17:7f:e2:4d:5a:76:a2: 4a:fa:41:70:4b:57:d8:2e:20:c9:f2:15:e5:74:df: 57:70:69:a3:a0:a5:11:7c:b3:29:b9:bb:13:4f:35: 23:59:a3:85:b9:a9:d4:76:f5:a6:e5:fe:e1:cb:f5: 7f:8b:33:9f:1e:e0:44:3c:c0:bd:36:31:08:4a:3c: e4:14:4d:23:e5:e3:2f:7d:d7:f6:de:58:d8:7f:22: a2:7a:c6:eb:d3:a7:b8:e5:8b:97:f0:6b:e7:cb:b5: 60:c0:90:44:fb:49:6e:d4:33:9b:1f:d9:76:92:66: b1:66:ae:2c:1e:5d:2e:05:8b:5d:35:28:fe:94:07: 7c:77:c0:8b:fd:e3:ef:15:de:61:00:cd:bf:b4:d5: a4:72:d0:e4:19:2e:ca:1b:7c:b0:22:cc:c8:e6:6b: d7:54:3a:08:5a:98:85:22:fb:57:82:e0:2f:37:3a: 66:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:CF:C6:7B:82:A5:C9:7A:28:21:53:D0:DD:44:47:37:F0:C2:08:E7 X509v3 Authority Key Identifier: keyid:CE:28:34:0A:20:9B:2B:A1:2A:E9:03:A7:4C:BB:5E:2E:23:AE:D2:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zig0CiCbK6Eq6QOnTLteLiOu0jg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/_c_Ge4KlyXooIVPQ3URHN_DCCOc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.205.40.0/24 IPv6: 2a01:5340::/29 Signature Algorithm: sha256WithRSAEncryption 05:81:0d:66:70:11:e1:54:45:15:79:85:65:3f:cc:fd:92:fd: de:b4:5e:29:6d:7a:7a:20:1a:5e:17:b4:3e:6b:e7:55:70:1d: bd:5e:6b:be:b6:8c:bd:5e:0d:1b:12:c2:67:f1:c3:06:84:9e: e0:84:31:0b:0c:d4:42:a5:90:aa:75:dd:af:df:8e:c5:b1:3b: b9:c7:c5:de:b6:50:90:e3:01:d1:ff:1e:77:84:7d:42:83:65: e4:83:2a:c0:90:36:53:c5:5f:13:e5:6a:aa:e0:db:d8:e5:fd: a4:f5:3f:8c:66:6c:ed:70:61:f3:db:f8:70:fc:83:e7:3e:9e: 68:17:10:fb:2c:cb:de:6c:9c:5a:b7:c8:eb:d5:11:de:d7:c4: cd:64:7e:b0:99:8c:8f:5b:97:65:8b:97:cd:31:ae:6e:c5:3f: 57:5c:26:0e:a1:57:3d:8a:59:a5:66:54:a2:37:e2:87:2c:42: 8e:a3:cb:72:8e:bc:7a:fc:80:ef:6d:03:c8:d8:32:6f:49:d7: 6e:0c:8a:10:6b:32:13:a0:16:3c:d4:f0:09:29:a8:ad:8f:cf: 0e:48:a8:65:aa:c2:c6:6a:af:26:3b:6b:27:31:34:39:48:2f: 62:81:7a:fb:48:86:3c:fa:26:27:e8:f1:95:d8:f2:21:76:e0: fb:31:f6:71 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6yTm65ndihIrBA2foF586MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlMjgzNDBhMjA5YjJiYTEyYWU5MDNhNzRjYmI1ZTJlMjNh ZWQyMzgwHhcNMjYwMTAxMTgxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZGNmYzY3YjgyYTVjOTdhMjgyMTUzZDBkZDQ0NDczN2YwYzIwOGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBDwL00Gpn8OAQFy5ZmWSP8v9vYY EXdko/hbo+zd/Z0fAv1180CKeZBxc2ltp7f/NjxJW6sTfswqPoJj0Rhuja+XH+5+ p3v+iErDnwtTujFxPhd/4k1adqJK+kFwS1fYLiDJ8hXldN9XcGmjoKURfLMpubsT TzUjWaOFuanUdvWm5f7hy/V/izOfHuBEPMC9NjEISjzkFE0j5eMvfdf23ljYfyKi esbr06e45YuX8Gvny7VgwJBE+0lu1DObH9l2kmaxZq4sHl0uBYtdNSj+lAd8d8CL /ePvFd5hAM2/tNWkctDkGS7KG3ywIszI5mvXVDoIWpiFIvtXguAvNzpmAQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFP3PxnuCpcl6KCFT0N1ERzfwwgjnMB8GA1UdIwQY MBaAFM4oNAogmyuhKukDp0y7Xi4jrtI4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemlnMENpQ2JLNkVxNlFPblRMdGVMaU91MGpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80NWM2ODktNzUxZi00NmQ3LTliNmMt YjFmYzU0N2I3MzIyLzEvX2NfR2U0S2x5WG9vSVZQUTNVUkhOX0RDQ09jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS80NWM2ODktNzUxZi00NmQ3LTliNmMtYjFmYzU0N2I3MzIy LzEvemlnMENpQ2JLNkVxNlFPblRMdGVMaU91MGpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAW80oMA0E AgACMAcDBQMqAVNAMA0GCSqGSIb3DQEBCwUAA4IBAQAFgQ1mcBHhVEUVeYVlP8z9 kv3etF4pbXp6IBpeF7Q+a+dVcB29Xmu+toy9Xg0bEsJn8cMGhJ7ghDELDNRCpZCq dd2v347FsTu5x8XetlCQ4wHR/x53hH1Cg2XkgyrAkDZTxV8T5Wqq4NvY5f2k9T+M ZmztcGHz2/hw/IPnPp5oFxD7LMvebJxat8jr1RHe18TNZH6wmYyPW5dli5fNMa5u xT9XXCYOoVc9ilmlZlSiN+KHLEKOo8tyjrx6/IDvbQPI2DJvSdduDIoQazIToBY8 1PAJKaitj88OSKhlqsLGaq8mO2snMTQ5SC9igXr7SIY8+iYn6PGV2PIhduD7MfZx -----END CERTIFICATE-----Generated at Mon Feb 9 18:38:01 2026 by rpki-client