This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/D0GX8vfI6wVQ2R3ofiGwxGjvfHs.roa File: D0GX8vfI6wVQ2R3ofiGwxGjvfHs.roa (raw, json) Hash identifier: tjw3dTvmZmkhSGo/nTvjDlfnKPPhFeeD7BJ95LJU948= Subject key identifier: 0F:41:97:F2:F7:C8:EB:05:50:D9:1D:E8:7E:21:B0:C4:68:EF:7C:7B Certificate issuer: /CN=6cfd360736f1fa6c9770fcb48be594be609e5b3e Certificate serial: 019B7D5CE93D1FEA71D7DAFD9E548251D1BB Authority key identifier: 6C:FD:36:07:36:F1:FA:6C:97:70:FC:B4:8B:E5:94:BE:60:9E:5B:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bP02Bzbx-myXcPy0i-WUvmCeWz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/D0GX8vfI6wVQ2R3ofiGwxGjvfHs.roa Signing time: Fri 02 Jan 2026 06:19:59 +0000 ROA not before: Fri 02 Jan 2026 06:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43366 IP address blocks: 91.231.184.0/24 maxlen: 24 185.70.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft rsync://rpki.ripe.net/repository/DEFAULT/bP02Bzbx-myXcPy0i-WUvmCeWz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:e9:3d:1f:ea:71:d7:da:fd:9e:54:82:51:d1:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cfd360736f1fa6c9770fcb48be594be609e5b3e Validity Not Before: Jan 2 06:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f4197f2f7c8eb0550d91de87e21b0c468ef7c7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:67:ac:e9:62:41:a0:0f:aa:c6:20:8d:1f:9b: 64:52:12:72:12:16:2a:36:aa:57:69:f8:48:fb:8e: a9:a7:02:e0:f3:21:16:58:10:47:4a:17:67:57:de: ef:40:db:60:22:e9:3a:53:9f:e2:67:d6:26:95:c2: ae:23:d2:cc:f0:14:43:09:ff:5c:f6:4b:ec:9b:b3: 17:95:56:c5:f1:89:b3:f2:24:10:04:9b:c0:c4:f9: 31:93:60:91:bc:0c:9a:50:ee:46:3d:78:42:f1:fc: 13:ae:8b:b5:cb:3f:a6:a1:3f:33:5a:53:19:e4:2a: e5:81:56:9e:9c:d6:33:6f:40:bd:10:b6:51:ce:82: d2:07:b0:50:34:01:8a:e9:c6:d3:d4:f9:38:75:af: 69:1c:8c:d4:d3:94:13:4d:aa:87:7d:c5:97:3b:8c: 22:18:fe:f0:24:f6:63:f2:91:f4:64:ad:f0:57:27: ce:74:7d:62:0c:b3:b1:e5:6b:31:e4:e8:c0:ca:b5: 96:99:ab:50:24:d5:1a:f0:27:7d:2e:fb:b2:49:cd: d1:82:05:5b:a3:a7:67:eb:69:58:84:f3:07:5f:19: 50:c4:a1:71:7d:00:44:43:93:a0:b1:25:ea:6c:b3: 4e:57:2f:63:95:25:45:ad:94:60:4b:91:2c:ff:6c: 8b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:41:97:F2:F7:C8:EB:05:50:D9:1D:E8:7E:21:B0:C4:68:EF:7C:7B X509v3 Authority Key Identifier: keyid:6C:FD:36:07:36:F1:FA:6C:97:70:FC:B4:8B:E5:94:BE:60:9E:5B:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bP02Bzbx-myXcPy0i-WUvmCeWz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/D0GX8vfI6wVQ2R3ofiGwxGjvfHs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.231.184.0/24 185.70.228.0/22 Signature Algorithm: sha256WithRSAEncryption 17:99:80:35:eb:40:3f:37:9a:39:9c:ca:d2:54:e0:9c:dc:de: bd:90:86:42:c5:84:48:7f:d4:e3:78:d8:61:9c:2b:1b:73:fe: 7d:8b:77:cd:6b:58:1e:05:29:ea:80:f3:28:4f:81:25:c7:4c: b1:3f:20:aa:c9:5f:29:39:37:eb:b5:ca:6f:64:3e:1b:3e:ca: 3e:e3:af:25:fe:36:a5:c9:7e:ae:ce:44:51:5a:89:b7:bd:2b: 0d:30:0b:02:86:a6:48:2b:64:57:15:5f:68:6d:b2:33:81:b9: 4c:1f:76:40:2a:20:13:16:3b:06:d7:c5:a1:9c:ee:46:3b:86: 39:36:a2:0a:5d:3b:a9:94:a7:c3:bb:4c:3e:0c:86:70:3e:fa: 08:5c:a0:65:d0:4c:18:01:22:5e:93:6a:41:87:d9:f2:b0:be: df:c8:c2:2b:87:4d:39:31:9a:d3:9a:cb:3d:17:6c:47:6b:a1: 6f:17:d2:3d:b9:87:99:f0:7a:07:20:3e:84:74:31:ae:b9:6a: fb:b4:e7:35:1c:b4:d7:4e:0f:9f:56:e0:60:55:8d:c7:89:36: a1:0d:ee:48:0f:8b:3a:87:be:f4:55:c4:70:18:2b:5a:c6:1b: 7a:5c:90:ac:a7:70:9f:3c:df:fe:de:e3:dd:1d:8c:19:f0:38: 50:f1:3c:ce -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XOk9H+px19r9nlSCUdG7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZmQzNjA3MzZmMWZhNmM5NzcwZmNiNDhiZTU5NGJlNjA5 ZTViM2UwHhcNMjYwMTAyMDYxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjQxOTdmMmY3YzhlYjA1NTBkOTFkZTg3ZTIxYjBjNDY4ZWY3YzdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGes6WJBoA+qxiCNH5tkUhJyEhYq NqpXafhI+46ppwLg8yEWWBBHShdnV97vQNtgIuk6U5/iZ9YmlcKuI9LM8BRDCf9c 9kvsm7MXlVbF8Ymz8iQQBJvAxPkxk2CRvAyaUO5GPXhC8fwTrou1yz+moT8zWlMZ 5CrlgVaenNYzb0C9ELZRzoLSB7BQNAGK6cbT1Pk4da9pHIzU05QTTaqHfcWXO4wi GP7wJPZj8pH0ZK3wVyfOdH1iDLOx5Wsx5OjAyrWWmatQJNUa8Cd9LvuySc3RggVb o6dn62lYhPMHXxlQxKFxfQBEQ5OgsSXqbLNOVy9jlSVFrZRgS5Es/2yLsQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFA9Bl/L3yOsFUNkd6H4hsMRo73x7MB8GA1UdIwQY MBaAFGz9Ngc28fpsl3D8tIvllL5gnls+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlAwMkJ6YngtbXlYY1B5MGktV1V2bUNlV3o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8zNDRlMmMtMWM1Ni00M2FiLTgxMDgt ZWFmNjhiNTllNTk5LzEvRDBHWDh2Zkk2d1ZRMlIzb2ZpR3d4R2p2ZkhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS8zNDRlMmMtMWM1Ni00M2FiLTgxMDgtZWFmNjhiNTllNTk5 LzEvYlAwMkJ6YngtbXlYY1B5MGktV1V2bUNlV3o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW+e4AwQC uUbkMA0GCSqGSIb3DQEBCwUAA4IBAQAXmYA160A/N5o5nMrSVOCc3N69kIZCxYRI f9TjeNhhnCsbc/59i3fNa1geBSnqgPMoT4Elx0yxPyCqyV8pOTfrtcpvZD4bPso+ 468l/jalyX6uzkRRWom3vSsNMAsChqZIK2RXFV9obbIzgblMH3ZAKiATFjsG18Wh nO5GO4Y5NqIKXTuplKfDu0w+DIZwPvoIXKBl0EwYASJek2pBh9nysL7fyMIrh005 MZrTmss9F2xHa6FvF9I9uYeZ8HoHID6EdDGuuWr7tOc1HLTXTg+fVuBgVY3HiTah De5ID4s6h770VcRwGCtaxht6XJCsp3CfPN/+3uPdHYwZ8DhQ8TzO -----END CERTIFICATE-----Generated at Mon Jan 26 19:34:31 2026 by rpki-client