This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/p1_0AJug8mqffvpMShynMCZsvBw.roa File: p1_0AJug8mqffvpMShynMCZsvBw.roa (raw, json) Hash identifier: IQAUX8GXBrjNLWTqLYxjPro6CdrK8EHV2tRKlMKwFpA= Subject key identifier: A7:5F:F4:00:9B:A0:F2:6A:9F:7E:FA:4C:4A:1C:A7:30:26:6C:BC:1C Certificate issuer: /CN=560d1e89b4e742e69062a95d351deea96b5178fb Certificate serial: 019B45B997FB4C0C5D192D00D21E02AF17C5 Authority key identifier: 56:0D:1E:89:B4:E7:42:E6:90:62:A9:5D:35:1D:EE:A9:6B:51:78:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vg0eibTnQuaQYqldNR3uqWtRePs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/p1_0AJug8mqffvpMShynMCZsvBw.roa Signing time: Mon 22 Dec 2025 11:02:29 +0000 ROA not before: Mon 22 Dec 2025 11:02:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 36680 IP address blocks: 91.231.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.crl rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.mft rsync://rpki.ripe.net/repository/DEFAULT/Vg0eibTnQuaQYqldNR3uqWtRePs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:b9:97:fb:4c:0c:5d:19:2d:00:d2:1e:02:af:17:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=560d1e89b4e742e69062a95d351deea96b5178fb Validity Not Before: Dec 22 11:02:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a75ff4009ba0f26a9f7efa4c4a1ca730266cbc1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:13:aa:78:07:40:89:81:9b:93:f0:08:d5:9e: 3b:fe:03:85:a2:f8:15:f1:01:3a:49:0d:c3:5b:cc: 74:4a:b2:db:7e:98:2e:f4:80:27:98:e6:69:b2:98: 19:58:f9:21:33:d3:03:25:e3:6b:22:5b:5f:e7:fa: de:23:be:9b:6a:8c:90:d6:1f:1c:7b:ef:89:d2:8e: 2b:65:a2:fe:67:e8:9f:ec:d1:7a:b3:19:35:ac:2e: e1:96:c6:31:82:e1:47:56:bb:8e:9f:84:a4:ae:ca: 28:cd:07:81:a7:2b:7b:d1:4d:bd:c7:cb:84:c2:f8: 4e:97:68:c2:56:38:a5:e5:d9:25:c9:cd:09:86:59: 5b:c3:d9:5a:a9:79:e6:af:3d:21:8f:45:2f:c2:50: a5:85:09:fa:c0:b7:24:9c:a1:54:f5:e3:da:d9:94: 48:44:9c:19:00:5d:aa:83:21:56:b0:7f:5c:1c:c4: f9:d7:f4:c8:69:5a:90:5a:ad:b1:af:70:ac:e1:f1: 07:24:aa:45:69:16:8d:36:ab:3e:c3:92:7d:70:5b: 33:7b:1d:38:18:99:5a:d1:15:6e:61:f8:86:7f:86: af:e0:99:fa:53:7f:24:ad:25:2b:cd:23:6f:9d:ea: b5:0d:b1:ea:24:50:48:3d:bb:34:25:b1:a9:e4:d5: a5:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:5F:F4:00:9B:A0:F2:6A:9F:7E:FA:4C:4A:1C:A7:30:26:6C:BC:1C X509v3 Authority Key Identifier: keyid:56:0D:1E:89:B4:E7:42:E6:90:62:A9:5D:35:1D:EE:A9:6B:51:78:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vg0eibTnQuaQYqldNR3uqWtRePs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/p1_0AJug8mqffvpMShynMCZsvBw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.231.222.0/24 Signature Algorithm: sha256WithRSAEncryption 28:c1:04:3b:08:22:a8:99:8f:07:09:42:13:3b:8c:8d:4a:31: 62:9f:b7:7b:3e:e9:54:dd:69:ff:cf:94:e9:5b:35:bb:ce:39: 07:ed:f5:48:a3:d7:da:3b:a5:ba:33:e4:ac:40:c7:97:6a:b9: c2:60:02:78:62:41:2f:3a:53:ef:3a:aa:28:3f:b7:45:b2:3e: c9:ee:eb:86:e7:1a:2c:39:53:93:0f:fa:f9:70:9f:e2:c9:ba: d8:c4:04:3f:2d:72:3b:f6:bb:0a:05:69:c3:3d:bf:04:cc:c3: bb:ce:e4:d3:17:66:bb:33:1a:7f:ec:1a:41:86:16:49:47:6c: 2c:3f:71:8d:a2:d5:76:bf:40:f9:a0:09:f9:a0:ae:35:ff:2b: c8:0e:fe:31:0d:77:c8:f2:4a:a5:07:ee:6e:c1:d2:a0:dc:78: 27:db:c3:d7:18:e9:fa:df:ef:ce:02:2d:0c:7e:83:ab:cc:84: ce:84:f7:a0:69:45:7d:b8:28:1c:51:8b:d0:a0:30:cb:88:fb: 55:1a:4c:4e:2c:62:9a:c5:fd:61:53:eb:ab:82:27:ec:46:e2: c8:2d:36:2b:fa:5b:8a:2b:ad:66:77:f0:5a:3a:6b:88:3b:d7: ca:2d:08:b2:b9:6a:31:47:9e:32:99:6b:37:97:0d:45:e3:7f: ca:0b:6b:ee -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZtFuZf7TAxdGS0A0h4CrxfFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2MGQxZTg5YjRlNzQyZTY5MDYyYTk1ZDM1MWRlZWE5NmI1 MTc4ZmIwHhcNMjUxMjIyMTEwMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzVmZjQwMDliYTBmMjZhOWY3ZWZhNGM0YTFjYTczMDI2NmNiYzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsROqeAdAiYGbk/AI1Z47/gOFovgV 8QE6SQ3DW8x0SrLbfpgu9IAnmOZpspgZWPkhM9MDJeNrIltf5/reI76baoyQ1h8c e++J0o4rZaL+Z+if7NF6sxk1rC7hlsYxguFHVruOn4SkrsoozQeBpyt70U29x8uE wvhOl2jCVjil5dklyc0Jhllbw9laqXnmrz0hj0UvwlClhQn6wLcknKFU9ePa2ZRI RJwZAF2qgyFWsH9cHMT51/TIaVqQWq2xr3Cs4fEHJKpFaRaNNqs+w5J9cFszex04 GJla0RVuYfiGf4av4Jn6U38krSUrzSNvneq1DbHqJFBIPbs0JbGp5NWltwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKdf9ACboPJqn376TEocpzAmbLwcMB8GA1UdIwQY MBaAFFYNHom050LmkGKpXTUd7qlrUXj7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmcwZWliVG5RdWFRWXFsZE5SM3VxV3RSZVBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS84YTczNGEtZDJiOC00MTFlLWE1NTct NTBkNmJhNmFhY2I4LzEvcDFfMEFKdWc4bXFmZnZwTVNoeW5NQ1pzdkJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS84YTczNGEtZDJiOC00MTFlLWE1NTctNTBkNmJhNmFhY2I4 LzEvVmcwZWliVG5RdWFRWXFsZE5SM3VxV3RSZVBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+feMA0G CSqGSIb3DQEBCwUAA4IBAQAowQQ7CCKomY8HCUITO4yNSjFin7d7PulU3Wn/z5Tp WzW7zjkH7fVIo9faO6W6M+SsQMeXarnCYAJ4YkEvOlPvOqooP7dFsj7J7uuG5xos OVOTD/r5cJ/iybrYxAQ/LXI79rsKBWnDPb8EzMO7zuTTF2a7Mxp/7BpBhhZJR2ws P3GNotV2v0D5oAn5oK41/yvIDv4xDXfI8kqlB+5uwdKg3Hgn28PXGOn63+/OAi0M foOrzITOhPegaUV9uCgcUYvQoDDLiPtVGkxOLGKaxf1hU+urgifsRuLILTYr+luK K61md/BaOmuIO9fKLQiyuWoxR54ymWs3lw1F43/KC2vu -----END CERTIFICATE-----Generated at Mon Dec 29 08:43:18 2025 by rpki-client