This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/7Rbb3tNTZ9GRALdKOQ7PaSuDEew.roa File: 7Rbb3tNTZ9GRALdKOQ7PaSuDEew.roa (raw, json) Hash identifier: cGD8Pzw/vuzIFBO2R1ey/JIY9XWzKoXjrLInK3mSLuA= Subject key identifier: ED:16:DB:DE:D3:53:67:D1:91:00:B7:4A:39:0E:CF:69:2B:83:11:EC Certificate issuer: /CN=6db30a41a6a6f21a9b2dd7e5856a20d5b5effe1c Certificate serial: 019B4FE72F36D65803D3E6C43F2680A3D907 Authority key identifier: 6D:B3:0A:41:A6:A6:F2:1A:9B:2D:D7:E5:85:6A:20:D5:B5:EF:FE:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bbMKQaam8hqbLdflhWog1bXv_hw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/7Rbb3tNTZ9GRALdKOQ7PaSuDEew.roa Signing time: Wed 24 Dec 2025 10:28:29 +0000 ROA not before: Wed 24 Dec 2025 10:28:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 41304 IP address blocks: 91.209.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/bbMKQaam8hqbLdflhWog1bXv_hw.crl rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/bbMKQaam8hqbLdflhWog1bXv_hw.mft rsync://rpki.ripe.net/repository/DEFAULT/bbMKQaam8hqbLdflhWog1bXv_hw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:e7:2f:36:d6:58:03:d3:e6:c4:3f:26:80:a3:d9:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6db30a41a6a6f21a9b2dd7e5856a20d5b5effe1c Validity Not Before: Dec 24 10:28:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ed16dbded35367d19100b74a390ecf692b8311ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:16:d0:fe:d5:7b:24:a0:83:7c:23:ca:ac:5a: 01:2e:74:05:a4:69:47:2b:4f:94:fd:08:2f:85:78: 5b:ae:a9:5f:dd:88:eb:f2:dd:cf:c5:cf:81:c2:20: 7d:79:74:6a:18:c0:43:6c:6d:a9:fe:e1:ea:e2:86: 5f:ca:d0:72:95:5c:fe:18:7a:b4:3b:c7:76:32:cf: 4e:c0:05:47:46:ab:9a:b5:fa:7d:e6:43:c4:88:bc: 20:a9:ac:5b:4a:04:ab:7f:cd:29:72:74:3f:13:8a: 06:d6:93:c5:9f:79:7a:eb:92:e1:a3:93:7d:de:f9: b8:c4:91:2c:77:78:f5:32:8f:96:af:00:dc:63:08: 39:50:c8:27:f1:7b:ba:44:eb:ff:ab:18:2d:70:6e: 7e:b8:e7:8d:e8:84:91:88:38:b2:70:41:9f:5e:6e: 34:78:a6:80:52:e8:b0:ba:3b:58:52:ee:3c:f3:62: a9:31:87:a0:fb:e9:59:7e:79:62:b8:f9:9a:d3:ed: 22:a8:92:43:cd:e4:89:a0:d3:5a:04:db:c6:7c:fa: 99:cf:c1:a5:10:a9:80:aa:d2:9b:22:40:3a:91:54: 28:83:b9:c3:05:b9:5c:78:69:ca:bf:5d:37:da:f3: 76:32:ab:bd:96:af:f9:89:e5:1e:ce:dc:fe:11:6b: 4e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:16:DB:DE:D3:53:67:D1:91:00:B7:4A:39:0E:CF:69:2B:83:11:EC X509v3 Authority Key Identifier: keyid:6D:B3:0A:41:A6:A6:F2:1A:9B:2D:D7:E5:85:6A:20:D5:B5:EF:FE:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bbMKQaam8hqbLdflhWog1bXv_hw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/7Rbb3tNTZ9GRALdKOQ7PaSuDEew.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/bbMKQaam8hqbLdflhWog1bXv_hw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.238.0/24 Signature Algorithm: sha256WithRSAEncryption 93:e0:3d:d2:d1:f8:61:e6:4b:71:76:e3:23:6a:47:37:61:9b: b0:58:dc:e7:4a:c1:8b:1b:0b:2c:64:a2:05:90:94:a6:62:5c: ec:35:21:1b:2c:72:05:1c:45:91:a0:8d:42:6e:59:f1:93:1f: fa:26:d1:08:ec:3d:b3:9b:5f:ce:af:35:d0:f3:02:4a:eb:da: 88:b7:6b:cb:cb:b5:04:34:fa:3e:99:d0:c8:d3:54:dc:3b:2c: 4b:55:48:80:3f:fb:0b:dc:c5:2a:1a:50:07:c9:eb:7d:de:42: 93:b8:f0:0a:d7:29:3c:67:9e:ec:27:51:14:e0:9f:5c:d3:d7: de:c6:ce:c9:9b:2d:75:d7:77:14:6f:03:44:4e:0f:c2:05:71: 87:c0:7a:12:0b:5e:27:ad:f9:ff:c9:52:4a:a1:72:17:b8:a5: 7a:5e:30:c0:af:17:12:f9:fa:c3:69:d9:e0:76:69:0b:c0:56: e6:ce:ea:65:4e:ea:9f:31:f7:f9:4b:51:e5:f3:01:75:e9:84: d8:dc:41:05:07:bf:03:00:0e:a9:e8:2e:dc:84:18:89:cf:8d: 04:65:aa:b5:d6:d4:38:30:e9:21:0a:a3:d2:8a:a0:00:f9:24: c3:a9:75:22:4f:d6:d0:af:90:87:b1:f5:f0:33:a8:05:11:0f: c4:dd:a2:75 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZtP5y821lgD0+bEPyaAo9kHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkYjMwYTQxYTZhNmYyMWE5YjJkZDdlNTg1NmEyMGQ1YjVl ZmZlMWMwHhcNMjUxMjI0MTAyODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDE2ZGJkZWQzNTM2N2QxOTEwMGI3NGEzOTBlY2Y2OTJiODMxMWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhbQ/tV7JKCDfCPKrFoBLnQFpGlH K0+U/QgvhXhbrqlf3Yjr8t3Pxc+BwiB9eXRqGMBDbG2p/uHq4oZfytBylVz+GHq0 O8d2Ms9OwAVHRquatfp95kPEiLwgqaxbSgSrf80pcnQ/E4oG1pPFn3l665Lho5N9 3vm4xJEsd3j1Mo+WrwDcYwg5UMgn8Xu6ROv/qxgtcG5+uOeN6ISRiDiycEGfXm40 eKaAUuiwujtYUu4882KpMYeg++lZfnliuPma0+0iqJJDzeSJoNNaBNvGfPqZz8Gl EKmAqtKbIkA6kVQog7nDBblceGnKv1032vN2Mqu9lq/5ieUeztz+EWtOIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO0W297TU2fRkQC3SjkOz2krgxHsMB8GA1UdIwQY MBaAFG2zCkGmpvIamy3X5YVqINW17/4cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmJNS1FhYW04aHFiTGRmbGhXb2cxYlh2X2h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8yYjkyOTYtNmJkMS00OWZiLWFlYTAt ZDg5MzIxMWU2NzE5LzEvN1JiYjN0TlRaOUdSQUxkS09RN1BhU3VERWV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi8yYjkyOTYtNmJkMS00OWZiLWFlYTAtZDg5MzIxMWU2NzE5 LzEvYmJNS1FhYW04aHFiTGRmbGhXb2cxYlh2X2h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9HuMA0G CSqGSIb3DQEBCwUAA4IBAQCT4D3S0fhh5ktxduMjakc3YZuwWNznSsGLGwssZKIF kJSmYlzsNSEbLHIFHEWRoI1Cblnxkx/6JtEI7D2zm1/OrzXQ8wJK69qIt2vLy7UE NPo+mdDI01TcOyxLVUiAP/sL3MUqGlAHyet93kKTuPAK1yk8Z57sJ1EU4J9c09fe xs7Jmy1113cUbwNETg/CBXGHwHoSC14nrfn/yVJKoXIXuKV6XjDArxcS+frDadng dmkLwFbmzuplTuqfMff5S1Hl8wF16YTY3EEFB78DAA6p6C7chBiJz40EZaq11tQ4 MOkhCqPSiqAA+STDqXUiT9bQr5CHsfXwM6gFEQ/E3aJ1 -----END CERTIFICATE-----Generated at Fri Dec 26 17:18:16 2025 by rpki-client