This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/PrN6TL7TtAeV1Kzfy5uz84FNxCQ.roa File: PrN6TL7TtAeV1Kzfy5uz84FNxCQ.roa (raw, json) Hash identifier: WU2WteFRJR30574R62tbwvUvfmw2wupr5nuVewCjZe8= Subject key identifier: 3E:B3:7A:4C:BE:D3:B4:07:95:D4:AC:DF:CB:9B:B3:F3:81:4D:C4:24 Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362 Certificate serial: 019B7C7F7BA78A26786127D239EABD0F996C Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/PrN6TL7TtAeV1Kzfy5uz84FNxCQ.roa Signing time: Fri 02 Jan 2026 02:18:08 +0000 ROA not before: Fri 02 Jan 2026 02:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211373 IP address blocks: 89.190.151.0/24 maxlen: 24 139.28.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:7b:a7:8a:26:78:61:27:d2:39:ea:bd:0f:99:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362 Validity Not Before: Jan 2 02:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3eb37a4cbed3b40795d4acdfcb9bb3f3814dc424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:da:cb:61:c9:82:54:f4:0f:1e:bc:8a:fd:b9: 1a:72:7d:5f:51:5d:e6:fe:22:f5:0d:76:d2:23:96: 5b:21:b8:a1:bf:15:00:50:c4:30:bd:72:94:0c:3f: 07:1e:df:38:2a:3d:db:c0:6e:a0:1b:f8:3b:73:6a: 89:88:16:71:eb:1d:bc:dc:e1:ed:52:97:35:56:3d: 8b:3c:e2:5c:5f:20:be:00:0d:46:9c:0d:e5:f5:cd: d0:f4:5b:58:71:e0:39:b5:97:55:91:33:6b:4a:2c: 01:e7:b0:10:3d:31:81:f9:2a:44:03:15:4e:20:4a: 65:1d:31:3e:87:bb:df:a8:80:ce:7b:ac:ec:af:7e: 76:be:5b:a0:04:57:1f:87:8a:25:a4:0a:37:b6:59: ac:ca:47:13:bd:49:9a:ad:1e:4f:c1:b4:ba:47:3f: 5c:80:69:db:c7:ba:2c:ae:d4:12:26:33:c7:23:c3: a8:c4:68:fb:23:be:bd:f0:8f:09:55:3e:b4:80:8d: 8a:d6:47:cf:2b:52:50:d4:e5:4b:ca:6b:66:48:fc: 27:dc:ba:c4:21:b8:9e:00:fa:6d:81:fa:ce:1e:20: 2a:69:da:50:f8:8a:88:4e:d5:0d:d7:77:0e:4c:c6: 64:e8:29:ae:68:f9:e0:ac:c0:79:3d:40:34:ea:28: 68:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:B3:7A:4C:BE:D3:B4:07:95:D4:AC:DF:CB:9B:B3:F3:81:4D:C4:24 X509v3 Authority Key Identifier: keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/PrN6TL7TtAeV1Kzfy5uz84FNxCQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.190.151.0/24 139.28.172.0/24 Signature Algorithm: sha256WithRSAEncryption 16:7b:c0:dd:65:69:84:22:c0:88:c8:02:a9:3c:c5:1b:38:ae: bd:4a:3b:aa:81:13:a7:dc:ee:d4:85:12:7b:50:bd:8c:ec:bb: ca:18:4c:5d:3e:ee:45:e8:6d:8e:62:4c:5e:88:a9:f2:52:13: c7:01:76:78:49:64:70:03:77:6c:a2:af:a1:df:38:1d:60:ac: 2b:b5:8a:70:01:e9:3c:89:e5:df:9a:06:d5:e4:ea:84:58:24: 3a:a8:18:f9:86:42:41:5f:7c:fd:b5:fb:2a:fb:0a:e4:ec:17: 82:15:29:c8:09:79:99:b4:29:ca:74:89:e6:1e:a3:99:b5:dd: 02:11:88:9b:b8:e2:63:dc:ee:9e:39:db:9c:76:48:7e:a8:4f: d0:51:92:c0:45:c3:2f:6b:49:9a:78:56:2e:a0:35:84:5e:7f: e8:21:27:27:2e:4f:65:f8:d5:35:50:09:4a:4c:01:31:8b:d0: be:42:63:4e:6f:b8:bd:5d:e7:e2:5a:73:21:a4:40:ae:38:7a: b0:f4:e4:ee:71:30:3e:6c:76:87:12:fe:44:c6:3d:43:69:fa: 33:f8:ad:d2:57:44:d6:b2:ad:c1:99:0a:f3:16:ad:79:83:88: 61:2f:2c:d0:bb:92:67:ae:94:69:29:9c:ff:23:2a:1b:18:37: bc:fa:7b:f6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8f3uniiZ4YSfSOeq9D5lsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNzYwM2E5M2JjYTMxYjAxOGY1MTFmNmQ0YjBiNzU0NmU5 NjMzNjIwHhcNMjYwMTAyMDIxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZWIzN2E0Y2JlZDNiNDA3OTVkNGFjZGZjYjliYjNmMzgxNGRjNDI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttrLYcmCVPQPHryK/bkacn1fUV3m /iL1DXbSI5ZbIbihvxUAUMQwvXKUDD8HHt84Kj3bwG6gG/g7c2qJiBZx6x283OHt Upc1Vj2LPOJcXyC+AA1GnA3l9c3Q9FtYceA5tZdVkTNrSiwB57AQPTGB+SpEAxVO IEplHTE+h7vfqIDOe6zsr352vlugBFcfh4olpAo3tlmsykcTvUmarR5PwbS6Rz9c gGnbx7osrtQSJjPHI8OoxGj7I7698I8JVT60gI2K1kfPK1JQ1OVLymtmSPwn3LrE IbieAPptgfrOHiAqadpQ+IqITtUN13cOTMZk6CmuaPngrMB5PUA06ihoQwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFD6zeky+07QHldSs38ubs/OBTcQkMB8GA1UdIwQY MBaAFIJ2A6k7yjGwGPUR9tSwt1RuljNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYt YjE2Y2I0ZGZhZGQzLzEvUHJONlRMN1R0QWVWMUt6Znk1dXo4NEZOeENRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYtYjE2Y2I0ZGZhZGQz LzEvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWb6XAwQA ixysMA0GCSqGSIb3DQEBCwUAA4IBAQAWe8DdZWmEIsCIyAKpPMUbOK69SjuqgROn 3O7UhRJ7UL2M7LvKGExdPu5F6G2OYkxeiKnyUhPHAXZ4SWRwA3dsoq+h3zgdYKwr tYpwAek8ieXfmgbV5OqEWCQ6qBj5hkJBX3z9tfsq+wrk7BeCFSnICXmZtCnKdInm HqOZtd0CEYibuOJj3O6eOducdkh+qE/QUZLARcMva0maeFYuoDWEXn/oIScnLk9l +NU1UAlKTAExi9C+QmNOb7i9XefiWnMhpECuOHqw9OTucTA+bHaHEv5Exj1Dafoz +K3SV0TWsq3BmQrzFq15g4hhLyzQu5JnrpRpKZz/IyobGDe8+nv2 -----END CERTIFICATE-----Generated at Mon Jan 19 10:57:33 2026 by rpki-client