This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/s-n3Ovf4DLNZiMVmwACfXlwBFQg.roa File: s-n3Ovf4DLNZiMVmwACfXlwBFQg.roa (raw, json) Hash identifier: +v54HWEZgRWIsiIa+lVD9RDFt4kmB458GN/XYvVzPIw= Subject key identifier: B3:E9:F7:3A:F7:F8:0C:B3:59:88:C5:66:C0:00:9F:5E:5C:01:15:08 Certificate issuer: /CN=5e4098f206850488b72cdde8387c3181c63f8cdf Certificate serial: 019AC5550975F99FC4050E4AC0E7F210AD0D Authority key identifier: 5E:40:98:F2:06:85:04:88:B7:2C:DD:E8:38:7C:31:81:C6:3F:8C:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkCY8gaFBIi3LN3oOHwxgcY_jN8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/s-n3Ovf4DLNZiMVmwACfXlwBFQg.roa Signing time: Thu 27 Nov 2025 12:41:15 +0000 ROA not before: Thu 27 Nov 2025 12:41:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215278 IP address blocks: 91.192.162.0/24 maxlen: 24 194.147.72.0/24 maxlen: 24 2001:67c:2d8c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/XkCY8gaFBIi3LN3oOHwxgcY_jN8.crl rsync://rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/XkCY8gaFBIi3LN3oOHwxgcY_jN8.mft rsync://rpki.ripe.net/repository/DEFAULT/XkCY8gaFBIi3LN3oOHwxgcY_jN8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c5:55:09:75:f9:9f:c4:05:0e:4a:c0:e7:f2:10:ad:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e4098f206850488b72cdde8387c3181c63f8cdf Validity Not Before: Nov 27 12:41:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b3e9f73af7f80cb35988c566c0009f5e5c011508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b7:99:cf:03:6d:8c:cc:03:6f:ae:31:33:58: 5c:e4:b7:6b:3a:79:11:ba:ee:73:26:46:ea:43:e4: 13:10:f7:2c:ea:02:5a:eb:35:a8:c3:f7:a2:4e:0b: a2:65:55:40:2c:0a:80:86:19:12:f7:ec:38:a6:7e: 44:6b:b5:08:0a:ff:43:9f:46:01:02:d6:3a:d7:62: da:7a:af:4d:fd:ef:1c:0f:5b:2c:68:4f:3e:a9:28: 38:5a:b7:49:c6:c1:fe:88:82:18:04:f4:5f:bb:86: a4:b3:b0:19:57:4d:7a:89:5a:f4:11:24:84:2b:f3: ed:3a:8c:f3:4d:48:d8:88:fc:f1:6a:c6:8c:63:d8: b6:92:45:f8:bb:c0:45:a9:25:9e:65:3b:07:66:f2: 32:6f:3a:03:0d:16:21:db:95:bd:c0:12:44:00:d3: a8:64:7b:7a:15:93:e9:a6:4b:53:60:15:02:87:f7: a5:77:c7:61:46:1e:7c:27:df:8c:db:59:41:7d:50: 26:dc:cb:05:9e:b2:ce:13:cb:05:08:58:77:95:00: a6:c3:ac:09:1e:5b:ec:59:e7:b7:97:6b:ac:1f:e4: 27:18:4d:0e:01:b7:82:45:c7:61:2d:a9:26:1b:43: 8c:6f:13:1f:0b:7d:fc:10:08:cc:f6:bf:66:6d:fe: 19:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:E9:F7:3A:F7:F8:0C:B3:59:88:C5:66:C0:00:9F:5E:5C:01:15:08 X509v3 Authority Key Identifier: keyid:5E:40:98:F2:06:85:04:88:B7:2C:DD:E8:38:7C:31:81:C6:3F:8C:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkCY8gaFBIi3LN3oOHwxgcY_jN8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/s-n3Ovf4DLNZiMVmwACfXlwBFQg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/XkCY8gaFBIi3LN3oOHwxgcY_jN8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.192.162.0/24 194.147.72.0/24 IPv6: 2001:67c:2d8c::/48 Signature Algorithm: sha256WithRSAEncryption 50:d8:09:86:17:0b:95:fb:86:88:d6:9b:0d:5a:57:2d:19:ed: ef:6f:d8:60:ec:03:b8:b8:50:64:85:36:1f:cf:c2:37:e1:31: cf:cb:26:9a:6d:c1:8d:fc:0b:5f:7f:46:91:90:5b:f5:8b:fe: 3a:4e:0a:82:fa:fa:a4:25:be:2f:12:b3:1b:b1:36:83:96:ad: b4:44:10:af:be:97:33:01:75:e9:ac:66:26:de:95:fd:5f:62: 0b:68:5f:1d:c3:3d:c9:8e:e2:dd:4d:0b:bd:a4:fe:a0:e2:50: 7f:32:ae:75:ed:d2:ba:4b:57:dc:8b:79:79:b4:12:2c:be:9e: be:61:d4:b7:be:8b:58:26:13:5f:7b:4d:01:50:66:c6:64:ff: 49:af:16:6d:d9:3d:78:93:0a:97:97:5e:c4:73:a3:2d:2e:ec: 57:b7:85:b2:7e:25:69:f3:ad:b1:4f:c9:25:16:51:e1:73:3e: cb:bf:8d:04:69:7a:ae:57:f3:20:b4:f0:c8:22:89:12:a0:b6: 16:ca:ef:7e:2f:fb:32:6b:7d:dd:23:ce:65:c3:9f:de:54:55: c6:03:42:25:2f:b3:ab:1e:6d:9b:64:8d:bb:f1:ab:cf:c6:22: b3:17:36:b4:2a:e3:ae:55:80:05:d9:bc:46:f0:60:9a:4e:87: 32:6a:13:3b -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZrFVQl1+Z/EBQ5KwOfyEK0NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNDA5OGYyMDY4NTA0ODhiNzJjZGRlODM4N2MzMTgxYzYz ZjhjZGYwHhcNMjUxMTI3MTI0MTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiM2U5ZjczYWY3ZjgwY2IzNTk4OGM1NjZjMDAwOWY1ZTVjMDExNTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsreZzwNtjMwDb64xM1hc5LdrOnkR uu5zJkbqQ+QTEPcs6gJa6zWow/eiTguiZVVALAqAhhkS9+w4pn5Ea7UICv9Dn0YB AtY612Laeq9N/e8cD1ssaE8+qSg4WrdJxsH+iIIYBPRfu4aks7AZV016iVr0ESSE K/PtOozzTUjYiPzxasaMY9i2kkX4u8BFqSWeZTsHZvIybzoDDRYh25W9wBJEANOo ZHt6FZPppktTYBUCh/eld8dhRh58J9+M21lBfVAm3MsFnrLOE8sFCFh3lQCmw6wJ HlvsWee3l2usH+QnGE0OAbeCRcdhLakmG0OMbxMfC338EAjM9r9mbf4Z6QIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFLPp9zr3+AyzWYjFZsAAn15cARUIMB8GA1UdIwQY MBaAFF5AmPIGhQSItyzd6Dh8MYHGP4zfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGtDWThnYUZCSWkzTE4zb09Id3hnY1lfak44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9jMGIxMDYtNmJmMS00NjYwLThhZmYt OWNmODdmZjFjZTViLzEvcy1uM092ZjRETE5aaU1WbXdBQ2ZYbHdCRlFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9jMGIxMDYtNmJmMS00NjYwLThhZmYtOWNmODdmZjFjZTVi LzEvWGtDWThnYUZCSWkzTE4zb09Id3hnY1lfak44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAW8CiAwQA wpNIMA8EAgACMAkDBwAgAQZ8LYwwDQYJKoZIhvcNAQELBQADggEBAFDYCYYXC5X7 hojWmw1aVy0Z7e9v2GDsA7i4UGSFNh/PwjfhMc/LJpptwY38C19/RpGQW/WL/jpO CoL6+qQlvi8SsxuxNoOWrbREEK++lzMBdemsZibelf1fYgtoXx3DPcmO4t1NC72k /qDiUH8yrnXt0rpLV9yLeXm0Eiy+nr5h1Le+i1gmE197TQFQZsZk/0mvFm3ZPXiT CpeXXsRzoy0u7Fe3hbJ+JWnzrbFPySUWUeFzPsu/jQRpeq5X8yC08MgiiRKgthbK 734v+zJrfd0jzmXDn95UVcYDQiUvs6sebZtkjbvxq8/GIrMXNrQq465VgAXZvEbw YJpOhzJqEzs= -----END CERTIFICATE-----Generated at Wed Dec 10 09:42:31 2025 by rpki-client