This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/9ap814MMwA7qcSjqgInEewIY80E.roa File: 9ap814MMwA7qcSjqgInEewIY80E.roa (raw, json) Hash identifier: UAFxhjRzQ03RJQdB9doiIqWIdQqot57M+Pq+33ypS6o= Subject key identifier: F5:AA:7C:D7:83:0C:C0:0E:EA:71:28:EA:80:89:C4:7B:02:18:F3:41 Certificate issuer: /CN=bfd76a7458b19d165f32f0ec33d71569e5f4fef9 Certificate serial: 019A936985FFE8DB108A4A5552698BED704B Authority key identifier: BF:D7:6A:74:58:B1:9D:16:5F:32:F0:EC:33:D7:15:69:E5:F4:FE:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9dqdFixnRZfMvDsM9cVaeX0_vk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/9ap814MMwA7qcSjqgInEewIY80E.roa Signing time: Mon 17 Nov 2025 20:02:37 +0000 ROA not before: Mon 17 Nov 2025 20:02:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 91.227.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.mft rsync://rpki.ripe.net/repository/DEFAULT/v9dqdFixnRZfMvDsM9cVaeX0_vk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:93:69:85:ff:e8:db:10:8a:4a:55:52:69:8b:ed:70:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfd76a7458b19d165f32f0ec33d71569e5f4fef9 Validity Not Before: Nov 17 20:02:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f5aa7cd7830cc00eea7128ea8089c47b0218f341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a2:87:05:92:be:93:80:21:19:7b:8a:49:ed: 7b:09:d3:a1:ad:f7:ee:44:a2:f7:4f:23:46:f5:28: f2:aa:eb:07:12:3a:8a:3f:68:4e:bf:e1:59:ec:0e: 04:04:5d:34:35:cb:89:2b:8a:3e:05:64:cd:ac:dc: bc:7d:6b:de:13:13:1b:bb:df:9e:aa:96:80:71:df: 1f:c0:87:13:5f:06:2e:58:ce:84:26:ca:f8:c3:a9: 31:e4:91:d5:6e:7f:b1:6e:be:ae:76:dc:1a:97:ba: d0:a0:12:57:0c:7a:8f:0b:f2:ad:53:42:8f:ce:e2: fe:d8:4d:fc:7d:a0:d1:d4:4c:83:e9:31:87:31:45: 68:3c:9d:01:bd:43:04:a4:21:7a:3b:30:dc:9b:19: f2:2f:f0:d7:45:a4:49:c6:b2:52:93:23:e2:d7:2c: 5a:9b:c0:92:4d:1c:86:a6:5c:ae:12:7e:3c:c5:01: a5:51:b7:10:4e:3e:27:8b:a7:1e:ce:c4:34:91:69: 22:d2:4d:b8:25:22:0a:9a:22:16:d7:60:6b:c1:10: db:84:45:a0:bb:e7:f0:e4:5c:dd:46:f4:50:86:cc: ca:b8:6a:f6:1f:c0:c9:84:f7:85:b6:48:c6:78:97: 78:2d:01:ba:35:47:6a:2c:b4:9c:16:6e:5d:c3:98: 81:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:AA:7C:D7:83:0C:C0:0E:EA:71:28:EA:80:89:C4:7B:02:18:F3:41 X509v3 Authority Key Identifier: keyid:BF:D7:6A:74:58:B1:9D:16:5F:32:F0:EC:33:D7:15:69:E5:F4:FE:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9dqdFixnRZfMvDsM9cVaeX0_vk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/9ap814MMwA7qcSjqgInEewIY80E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.227.186.0/24 Signature Algorithm: sha256WithRSAEncryption 03:e7:fc:54:ff:bb:8a:63:f4:31:a0:c7:bb:e0:a4:f6:64:ca: ed:1b:73:92:c0:8c:50:c2:62:c0:7f:b2:c1:97:ff:69:d3:2e: 9b:a3:f7:fb:0a:92:9b:b9:6a:e1:8d:0a:7d:ff:d7:11:0f:8e: e3:6f:a1:9d:44:52:8e:02:c0:c7:7b:73:c4:d2:aa:d7:ff:0b: df:0c:5e:84:77:e8:e7:0a:34:44:fe:20:3a:ef:e4:d6:e0:26: e6:57:00:d9:0f:41:6c:14:16:a2:0e:71:f2:50:eb:54:e1:bf: a9:0d:8f:6e:d7:1d:b8:dc:5c:fc:9d:40:ae:ee:82:c3:44:49: aa:1d:b6:ec:0c:af:08:a3:e3:87:69:89:38:51:07:66:2d:dc: fa:f9:ff:f9:34:fd:35:4f:17:11:d9:a3:15:04:f1:7a:58:e7: 91:de:af:b1:8d:03:cf:a6:b6:a6:72:af:d8:e3:ff:e6:49:ef: 2b:e6:d0:13:21:e9:a9:47:99:f1:06:f5:16:50:18:98:a9:c3: 41:4d:4f:cb:8c:a7:93:62:02:9a:51:26:e0:77:9c:b1:e6:1c: 56:9c:97:cb:0d:5c:d7:d2:8d:5f:65:68:e9:80:1c:9d:9b:ed: ef:b6:fc:36:36:51:f5:54:f7:40:7c:72:44:14:0a:e8:af:35: ac:80:92:37 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqTaYX/6NsQikpVUmmL7XBLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmZDc2YTc0NThiMTlkMTY1ZjMyZjBlYzMzZDcxNTY5ZTVm NGZlZjkwHhcNMjUxMTE3MjAwMjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNWFhN2NkNzgzMGNjMDBlZWE3MTI4ZWE4MDg5YzQ3YjAyMThmMzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqKHBZK+k4AhGXuKSe17CdOhrffu RKL3TyNG9SjyqusHEjqKP2hOv+FZ7A4EBF00NcuJK4o+BWTNrNy8fWveExMbu9+e qpaAcd8fwIcTXwYuWM6EJsr4w6kx5JHVbn+xbr6udtwal7rQoBJXDHqPC/KtU0KP zuL+2E38faDR1EyD6TGHMUVoPJ0BvUMEpCF6OzDcmxnyL/DXRaRJxrJSkyPi1yxa m8CSTRyGplyuEn48xQGlUbcQTj4ni6cezsQ0kWki0k24JSIKmiIW12BrwRDbhEWg u+fw5FzdRvRQhszKuGr2H8DJhPeFtkjGeJd4LQG6NUdqLLScFm5dw5iBIwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPWqfNeDDMAO6nEo6oCJxHsCGPNBMB8GA1UdIwQY MBaAFL/XanRYsZ0WXzLw7DPXFWnl9P75MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjlkcWRGaXhuUlpmTXZEc005Y1ZhZVgwX3ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9iNWM4MTAtOTEwOS00NzI5LWI0MWQt YjQ5MWY1YjM5ZWYyLzEvOWFwODE0TU13QTdxY1NqcWdJbkVld0lZODBFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi9iNWM4MTAtOTEwOS00NzI5LWI0MWQtYjQ5MWY1YjM5ZWYy LzEvdjlkcWRGaXhuUlpmTXZEc005Y1ZhZVgwX3ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+O6MA0G CSqGSIb3DQEBCwUAA4IBAQAD5/xU/7uKY/QxoMe74KT2ZMrtG3OSwIxQwmLAf7LB l/9p0y6bo/f7CpKbuWrhjQp9/9cRD47jb6GdRFKOAsDHe3PE0qrX/wvfDF6Ed+jn CjRE/iA67+TW4CbmVwDZD0FsFBaiDnHyUOtU4b+pDY9u1x243Fz8nUCu7oLDREmq HbbsDK8Io+OHaYk4UQdmLdz6+f/5NP01TxcR2aMVBPF6WOeR3q+xjQPPpramcq/Y 4//mSe8r5tATIempR5nxBvUWUBiYqcNBTU/LjKeTYgKaUSbgd5yx5hxWnJfLDVzX 0o1fZWjpgBydm+3vtvw2NlH1VPdAfHJEFArorzWsgJI3 -----END CERTIFICATE-----Generated at Sat Nov 22 21:36:51 2025 by rpki-client