This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/3x25UG1jeSrv28neTIumkmoUEBk.roa File: 3x25UG1jeSrv28neTIumkmoUEBk.roa (raw, json) Hash identifier: u3bicrGhu9OYtfmX/kmGA/DVZrKN7GUP1+zhS7+9WWU= Subject key identifier: DF:1D:B9:50:6D:63:79:2A:EF:DB:C9:DE:4C:8B:A6:92:6A:14:10:19 Certificate issuer: /CN=9e2d7d5b82c8378ba2153943ce9482ce4cd4951b Certificate serial: 019B7F1543CEBC2BCE5F302D33CE0945716F Authority key identifier: 9E:2D:7D:5B:82:C8:37:8B:A2:15:39:43:CE:94:82:CE:4C:D4:95:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ni19W4LIN4uiFTlDzpSCzkzUlRs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/3x25UG1jeSrv28neTIumkmoUEBk.roa Signing time: Fri 02 Jan 2026 14:20:58 +0000 ROA not before: Fri 02 Jan 2026 14:20:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213149 IP address blocks: 91.205.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/ni19W4LIN4uiFTlDzpSCzkzUlRs.crl rsync://rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/ni19W4LIN4uiFTlDzpSCzkzUlRs.mft rsync://rpki.ripe.net/repository/DEFAULT/ni19W4LIN4uiFTlDzpSCzkzUlRs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:43:ce:bc:2b:ce:5f:30:2d:33:ce:09:45:71:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e2d7d5b82c8378ba2153943ce9482ce4cd4951b Validity Not Before: Jan 2 14:20:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df1db9506d63792aefdbc9de4c8ba6926a141019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:21:6d:40:a8:46:4e:a2:eb:f8:2a:e7:bc:d0: 54:c8:dd:da:0f:72:c9:1c:3b:09:1f:ad:fc:1f:11: 0d:40:11:cb:ca:1c:8b:08:01:1e:a9:2b:c2:17:4c: 74:26:f5:29:c1:58:4a:3c:b8:33:16:ed:42:37:b0: c7:c3:9d:8e:58:24:c2:02:13:07:9c:d6:dd:2b:df: 92:30:9c:5a:eb:ba:f4:c7:a6:62:27:a4:82:60:fc: 0a:6b:4d:c8:57:a0:5d:d7:03:58:3c:93:36:91:b4: 8c:e2:1c:cd:cc:e4:a0:c7:f8:f6:bc:f7:e3:14:bc: 46:49:a7:f1:e3:82:72:03:48:e1:db:0b:fb:70:70: d5:f1:ea:13:95:0e:19:a1:15:1d:7c:34:f0:c6:5a: b9:1f:ab:20:a7:44:b4:b6:9f:2a:87:81:da:55:d4: 50:2b:a2:7e:98:77:9a:1e:e8:4c:a9:48:27:04:c5: 4d:fc:b5:75:eb:d5:67:dd:8e:cf:d1:f8:68:f0:cd: dc:a4:da:ba:35:b1:16:b6:6d:6e:d4:a9:1b:44:eb: ba:83:64:7a:7f:0a:d3:a6:61:27:8e:d3:c1:26:48: 30:ff:a4:e6:7d:e9:b2:32:3b:99:eb:a2:0c:e3:54: 16:6d:2b:e1:91:a9:df:40:f9:06:a1:9d:b1:e9:25: 00:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:1D:B9:50:6D:63:79:2A:EF:DB:C9:DE:4C:8B:A6:92:6A:14:10:19 X509v3 Authority Key Identifier: keyid:9E:2D:7D:5B:82:C8:37:8B:A2:15:39:43:CE:94:82:CE:4C:D4:95:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ni19W4LIN4uiFTlDzpSCzkzUlRs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/3x25UG1jeSrv28neTIumkmoUEBk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/ni19W4LIN4uiFTlDzpSCzkzUlRs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.205.229.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:9e:9c:81:51:98:13:40:95:25:60:e4:b0:7a:83:61:70:6c: c1:bc:49:34:9e:87:d5:80:e1:5f:9f:51:13:1e:55:6f:ce:e0: 94:29:b2:7f:15:c6:33:99:2e:80:c2:f8:c9:49:49:cf:21:38: 10:fe:d0:69:86:07:51:2b:11:10:13:38:3e:62:53:d5:f0:3b: f6:ba:e5:11:4e:9c:1a:06:3f:05:68:94:c8:11:07:45:9b:ad: 36:64:b2:79:21:02:02:07:f6:47:e6:e3:d8:7c:0b:1d:21:9f: ee:72:6d:52:b8:1b:86:9c:d7:6b:3c:f3:5e:59:c9:0b:e6:2e: ff:5e:d1:b4:5e:da:16:d6:4c:85:2b:f2:7c:83:7f:48:a8:d8: 6b:c3:03:4f:ce:80:88:ed:84:ef:2f:99:51:8a:62:cf:fb:e1: 1e:07:34:0e:65:37:33:e5:62:89:ab:36:c0:9a:40:7b:95:4b: 59:43:57:ce:09:f0:59:e7:68:fd:c0:cc:bb:4f:ff:4b:f8:b9: 71:d9:1d:08:ad:57:99:d6:2a:91:1b:81:53:ce:5b:37:a3:0d: 33:be:95:dc:36:3d:aa:2f:aa:95:08:50:3a:b3:ea:58:25:db: 70:e2:b7:ff:ea:43:da:3b:15:d2:2c:7a:d8:d2:f0:fb:9e:f5: e0:98:5e:6b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FUPOvCvOXzAtM84JRXFvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllMmQ3ZDViODJjODM3OGJhMjE1Mzk0M2NlOTQ4MmNlNGNk NDk1MWIwHhcNMjYwMTAyMTQyMDU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjFkYjk1MDZkNjM3OTJhZWZkYmM5ZGU0YzhiYTY5MjZhMTQxMDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyFtQKhGTqLr+CrnvNBUyN3aD3LJ HDsJH638HxENQBHLyhyLCAEeqSvCF0x0JvUpwVhKPLgzFu1CN7DHw52OWCTCAhMH nNbdK9+SMJxa67r0x6ZiJ6SCYPwKa03IV6Bd1wNYPJM2kbSM4hzNzOSgx/j2vPfj FLxGSafx44JyA0jh2wv7cHDV8eoTlQ4ZoRUdfDTwxlq5H6sgp0S0tp8qh4HaVdRQ K6J+mHeaHuhMqUgnBMVN/LV169Vn3Y7P0fho8M3cpNq6NbEWtm1u1KkbROu6g2R6 fwrTpmEnjtPBJkgw/6TmfemyMjuZ66IM41QWbSvhkanfQPkGoZ2x6SUAYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN8duVBtY3kq79vJ3kyLppJqFBAZMB8GA1UdIwQY MBaAFJ4tfVuCyDeLohU5Q86Ugs5M1JUbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmkxOVc0TElONHVpRlRsRHpwU0N6a3pVbFJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9jYThkOTgtZTdhNC00YmRjLThjOTAt YjI5NjA2ZDUxZjlkLzEvM3gyNVVHMWplU3J2MjhuZVRJdW1rbW9VRUJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9jYThkOTgtZTdhNC00YmRjLThjOTAtYjI5NjA2ZDUxZjlk LzEvbmkxOVc0TElONHVpRlRsRHpwU0N6a3pVbFJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW83lMA0G CSqGSIb3DQEBCwUAA4IBAQBfnpyBUZgTQJUlYOSweoNhcGzBvEk0nofVgOFfn1ET HlVvzuCUKbJ/FcYzmS6AwvjJSUnPITgQ/tBphgdRKxEQEzg+YlPV8Dv2uuURTpwa Bj8FaJTIEQdFm602ZLJ5IQICB/ZH5uPYfAsdIZ/ucm1SuBuGnNdrPPNeWckL5i7/ XtG0XtoW1kyFK/J8g39IqNhrwwNPzoCI7YTvL5lRimLP++EeBzQOZTcz5WKJqzbA mkB7lUtZQ1fOCfBZ52j9wMy7T/9L+Llx2R0IrVeZ1iqRG4FTzls3ow0zvpXcNj2q L6qVCFA6s+pYJdtw4rf/6kPaOxXSLHrY0vD7nvXgmF5r -----END CERTIFICATE-----Generated at Tue Feb 10 01:29:11 2026 by rpki-client