This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/w0IPFUb0ERimH_LzhNAnc80J85M.roa File: w0IPFUb0ERimH_LzhNAnc80J85M.roa (raw, json) Hash identifier: ac/yT3OsCdAyULf+PshdLJxqWHTzbLiDOdLZMA7tA2w= Subject key identifier: C3:42:0F:15:46:F4:11:18:A6:1F:F2:F3:84:D0:27:73:CD:09:F3:93 Certificate issuer: /CN=2793bde946ae936d3cacc136a5f3239edf2431f4 Certificate serial: 019ACE61D100880F43A7093B73C5BB23E790 Authority key identifier: 27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/w0IPFUb0ERimH_LzhNAnc80J85M.roa Signing time: Sat 29 Nov 2025 06:51:48 +0000 ROA not before: Sat 29 Nov 2025 06:51:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 15440 IP address blocks: 91.188.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 15:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ce:61:d1:00:88:0f:43:a7:09:3b:73:c5:bb:23:e7:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2793bde946ae936d3cacc136a5f3239edf2431f4 Validity Not Before: Nov 29 06:51:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c3420f1546f41118a61ff2f384d02773cd09f393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:73:fa:85:5b:c9:79:f9:33:3b:f9:ae:35:27: 13:04:01:56:df:62:42:48:b2:e9:38:26:11:81:03: e5:71:bf:a4:16:e2:af:0d:34:9b:18:7c:9e:d7:0d: 7f:56:6e:30:46:04:16:5f:85:dd:f1:84:e9:f9:83: f0:d5:47:57:9b:2f:fd:ab:ea:92:7d:15:2b:14:74: 26:d0:56:3e:1a:65:dc:42:6b:35:d9:5b:4c:23:08: b9:77:47:95:87:bf:7d:5c:69:e1:b6:07:94:e4:e9: f7:a5:bf:63:f7:0c:46:a6:c7:3c:8b:f1:fd:d1:9e: 33:0f:27:48:e2:c8:07:04:27:b8:80:0e:97:9a:98: bb:98:56:60:a4:b7:4e:e2:81:d7:9b:52:74:62:cf: a7:13:8c:ca:95:f6:16:4d:2f:8e:bc:02:61:71:79: 98:1b:eb:c9:69:4d:90:27:2a:8e:93:1e:64:ad:bf: ae:84:c7:25:84:6c:ef:b5:d3:87:bc:dd:76:af:d7: 50:b3:c3:b1:a3:d7:b4:81:f4:e5:38:11:b1:ee:5b: 77:67:2d:52:8a:bf:18:9e:06:b8:82:e4:10:64:b2: 0f:ae:92:2e:0a:63:d5:7a:ac:c1:19:e7:d0:ae:5d: 36:f5:e2:85:67:93:bc:af:69:94:f4:6c:42:46:5d: 25:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:42:0F:15:46:F4:11:18:A6:1F:F2:F3:84:D0:27:73:CD:09:F3:93 X509v3 Authority Key Identifier: keyid:27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/w0IPFUb0ERimH_LzhNAnc80J85M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.188.254.0/24 Signature Algorithm: sha256WithRSAEncryption 07:9f:9c:05:9a:32:48:66:6c:74:b8:59:75:05:3a:50:c5:92: 53:c7:0b:c8:7c:33:de:90:55:7f:38:61:ad:ad:9a:94:13:e1: 02:98:8b:96:ba:88:e7:7c:15:50:45:c4:5f:24:a2:c6:12:28: 5c:80:e9:8f:4c:93:5d:c2:d5:74:b1:cc:26:c1:cf:a7:40:f4: c3:76:7a:31:4a:18:5b:74:67:a5:eb:46:96:01:6d:c3:8e:34: ce:1a:26:a8:37:70:b4:38:d5:99:dd:1b:e6:00:a8:7d:99:24: 0b:46:4e:92:18:6f:bd:42:19:6b:81:c3:dc:f3:3b:c7:f5:77: 0d:fe:18:7e:a4:e2:48:40:72:e0:67:10:47:dd:3c:76:ab:25: 36:63:b0:e3:c9:dc:5b:87:1b:af:9e:fb:64:b4:e3:aa:d4:ef: b1:02:54:fe:f6:3d:f0:79:67:ea:9f:22:d5:c6:9f:de:d6:f5: 06:da:04:ec:fc:18:66:83:93:83:87:c6:99:75:c6:1d:52:be: 1c:3b:44:4b:c1:39:e3:31:5e:18:32:fe:4e:ab:ee:fe:b0:54: ad:1f:d4:4f:7b:09:73:50:b9:ee:bd:bd:c4:b0:de:fd:00:8b: 79:49:e1:21:cd:7c:ca:86:f6:80:63:b1:fa:3b:ee:b7:93:3f: ff:f9:4e:9c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrOYdEAiA9Dpwk7c8W7I+eQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OTNiZGU5NDZhZTkzNmQzY2FjYzEzNmE1ZjMyMzllZGYy NDMxZjQwHhcNMjUxMTI5MDY1MTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzQyMGYxNTQ2ZjQxMTE4YTYxZmYyZjM4NGQwMjc3M2NkMDlmMzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13P6hVvJefkzO/muNScTBAFW32JC SLLpOCYRgQPlcb+kFuKvDTSbGHye1w1/Vm4wRgQWX4Xd8YTp+YPw1UdXmy/9q+qS fRUrFHQm0FY+GmXcQms12VtMIwi5d0eVh799XGnhtgeU5On3pb9j9wxGpsc8i/H9 0Z4zDydI4sgHBCe4gA6Xmpi7mFZgpLdO4oHXm1J0Ys+nE4zKlfYWTS+OvAJhcXmY G+vJaU2QJyqOkx5krb+uhMclhGzvtdOHvN12r9dQs8Oxo9e0gfTlOBGx7lt3Zy1S ir8Ynga4guQQZLIPrpIuCmPVeqzBGefQrl029eKFZ5O8r2mU9GxCRl0lqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMNCDxVG9BEYph/y84TQJ3PNCfOTMB8GA1UdIwQY MBaAFCeTvelGrpNtPKzBNqXzI57fJDH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjVPOTZVYXVrMjA4ck1FMnBmTWpudDhrTWZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9iZjU4ZGEtYTlkMi00MjFhLWI0M2Et OTJjM2JmNzRhOTdiLzEvdzBJUEZVYjBFUmltSF9MemhOQW5jODBKODVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9iZjU4ZGEtYTlkMi00MjFhLWI0M2EtOTJjM2JmNzRhOTdi LzEvSjVPOTZVYXVrMjA4ck1FMnBmTWpudDhrTWZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW7z+MA0G CSqGSIb3DQEBCwUAA4IBAQAHn5wFmjJIZmx0uFl1BTpQxZJTxwvIfDPekFV/OGGt rZqUE+ECmIuWuojnfBVQRcRfJKLGEihcgOmPTJNdwtV0scwmwc+nQPTDdnoxShhb dGel60aWAW3DjjTOGiaoN3C0ONWZ3RvmAKh9mSQLRk6SGG+9QhlrgcPc8zvH9XcN /hh+pOJIQHLgZxBH3Tx2qyU2Y7DjydxbhxuvnvtktOOq1O+xAlT+9j3weWfqnyLV xp/e1vUG2gTs/Bhmg5ODh8aZdcYdUr4cO0RLwTnjMV4YMv5Oq+7+sFStH9RPewlz ULnuvb3EsN79AIt5SeEhzXzKhvaAY7H6O+63kz//+U6c -----END CERTIFICATE-----Generated at Fri Dec 5 23:20:01 2025 by rpki-client