This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/P-p2NxW9TFmZAwW03gw6xGVVFZc.roa File: P-p2NxW9TFmZAwW03gw6xGVVFZc.roa (raw, json) Hash identifier: VYJ/qjVSy2HmGtgmvHoLOPXTUBBAf8syxAzQSjcRmvI= Subject key identifier: 3F:EA:76:37:15:BD:4C:59:99:03:05:B4:DE:0C:3A:C4:65:55:15:97 Certificate issuer: /CN=0f7dd32779c1a9b297e28cb035fd679abb1916d1 Certificate serial: 019B7995790013FE81B1629AF40F96CC2C86 Authority key identifier: 0F:7D:D3:27:79:C1:A9:B2:97:E2:8C:B0:35:FD:67:9A:BB:19:16:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/P-p2NxW9TFmZAwW03gw6xGVVFZc.roa Signing time: Thu 01 Jan 2026 12:43:17 +0000 ROA not before: Thu 01 Jan 2026 12:43:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60631 IP address blocks: 91.234.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:95:79:00:13:fe:81:b1:62:9a:f4:0f:96:cc:2c:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f7dd32779c1a9b297e28cb035fd679abb1916d1 Validity Not Before: Jan 1 12:43:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3fea763715bd4c59990305b4de0c3ac465551597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:61:d2:ba:fb:9a:ab:64:24:f2:2f:f6:3b:60: e4:9c:5f:1a:15:24:7e:ac:b0:e5:4a:ca:8e:eb:f4: 8b:43:fd:c5:bd:2f:5d:ae:ce:6f:ba:11:32:ad:5d: cf:0a:cb:50:34:c9:c8:a9:03:eb:82:12:be:a4:17: 7e:eb:b9:0c:ef:5e:b3:e7:a2:2b:b5:51:09:d4:48: d2:bc:d9:e3:12:da:b4:28:b1:16:e7:b4:0b:da:10: 70:07:10:db:39:71:bd:77:a7:95:e6:f9:72:d6:c8: 4d:f6:19:4a:39:ac:e9:a4:f3:b9:f0:2d:22:bc:a2: be:20:42:d5:35:4a:ab:52:91:db:82:b1:53:d6:97: b8:9c:c4:bf:95:79:99:f6:ca:70:b6:ea:63:ab:41: 56:71:90:f4:7d:4b:69:3a:52:45:35:d3:f2:fa:bc: ad:25:6f:c7:87:f0:96:87:d0:44:e8:70:58:eb:37: ad:14:aa:83:9c:7e:cd:6c:74:f7:01:f7:8a:c3:26: 72:36:e9:27:fe:bd:0e:07:12:aa:d4:bf:94:19:60: 87:25:c0:67:2d:aa:ee:e5:db:39:37:f9:63:f0:59: ca:82:cf:7e:76:5a:51:14:05:68:f1:fe:e7:96:97: 47:37:80:47:c1:6c:00:63:cf:44:75:ba:bd:aa:6c: 04:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:EA:76:37:15:BD:4C:59:99:03:05:B4:DE:0C:3A:C4:65:55:15:97 X509v3 Authority Key Identifier: keyid:0F:7D:D3:27:79:C1:A9:B2:97:E2:8C:B0:35:FD:67:9A:BB:19:16:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/P-p2NxW9TFmZAwW03gw6xGVVFZc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.234.39.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:07:47:68:6c:f7:8a:22:7c:74:89:2e:fb:e0:25:fa:91:bd: 71:f7:98:c4:a6:28:7e:4c:39:86:b7:ae:e7:c7:67:a4:f5:50: 9d:f9:93:6e:43:bc:51:29:0e:37:17:d6:0f:71:a2:f7:eb:d3: 91:76:3a:47:b6:0d:06:e0:36:c0:43:86:9a:c7:30:1e:86:74: 63:4e:69:22:1d:7f:80:9e:31:1b:7e:01:0b:0e:6e:86:b4:f9: 5f:01:7e:98:2c:c0:fe:49:c1:c3:12:11:f2:b2:e2:92:89:78: 5b:6e:12:07:bc:57:b3:8a:a2:b2:f6:ab:9f:de:68:ce:31:55: 16:54:11:d0:b2:f3:1c:23:74:a5:1b:4d:c9:89:7a:e8:c6:91: ab:24:41:08:75:3b:0d:d5:39:c9:f7:e5:ec:16:93:36:13:92: b6:de:23:20:3f:ed:fc:b1:aa:fe:c1:be:2a:ae:fb:30:f3:29: 0f:76:a3:4f:70:b5:3a:f8:8f:a6:e8:24:7d:96:b2:53:a9:77: db:21:b3:e0:81:89:be:64:fd:97:0d:eb:32:02:29:6c:7e:20: b2:e5:3a:8d:f1:da:0b:16:19:bc:14:4d:66:b1:95:4e:c6:90: 6b:63:3d:8b:10:7e:32:bf:ea:94:21:6e:45:8e:42:e9:bc:76: 8f:09:4b:73 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5lXkAE/6BsWKa9A+WzCyGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmN2RkMzI3NzljMWE5YjI5N2UyOGNiMDM1ZmQ2NzlhYmIx OTE2ZDEwHhcNMjYwMTAxMTI0MzE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZmVhNzYzNzE1YmQ0YzU5OTkwMzA1YjRkZTBjM2FjNDY1NTUxNTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGHSuvuaq2Qk8i/2O2DknF8aFSR+ rLDlSsqO6/SLQ/3FvS9drs5vuhEyrV3PCstQNMnIqQPrghK+pBd+67kM716z56Ir tVEJ1EjSvNnjEtq0KLEW57QL2hBwBxDbOXG9d6eV5vly1shN9hlKOazppPO58C0i vKK+IELVNUqrUpHbgrFT1pe4nMS/lXmZ9spwtupjq0FWcZD0fUtpOlJFNdPy+ryt JW/Hh/CWh9BE6HBY6zetFKqDnH7NbHT3AfeKwyZyNukn/r0OBxKq1L+UGWCHJcBn Laru5ds5N/lj8FnKgs9+dlpRFAVo8f7nlpdHN4BHwWwAY89Edbq9qmwE1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD/qdjcVvUxZmQMFtN4MOsRlVRWXMB8GA1UdIwQY MBaAFA990yd5wamyl+KMsDX9Z5q7GRbRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDMzVEozbkJxYktYNG95d05mMW5tcnNaRnRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi83MjkyMTAtZDcyMC00ZjM4LWI2YmUt YWNmNjZmNzhiMmI3LzEvUC1wMk54VzlURm1aQXdXMDNndzZ4R1ZWRlpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi83MjkyMTAtZDcyMC00ZjM4LWI2YmUtYWNmNjZmNzhiMmI3 LzEvRDMzVEozbkJxYktYNG95d05mMW5tcnNaRnRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+onMA0G CSqGSIb3DQEBCwUAA4IBAQALB0dobPeKInx0iS774CX6kb1x95jEpih+TDmGt67n x2ek9VCd+ZNuQ7xRKQ43F9YPcaL369ORdjpHtg0G4DbAQ4aaxzAehnRjTmkiHX+A njEbfgELDm6GtPlfAX6YLMD+ScHDEhHysuKSiXhbbhIHvFeziqKy9quf3mjOMVUW VBHQsvMcI3SlG03JiXroxpGrJEEIdTsN1TnJ9+XsFpM2E5K23iMgP+38sar+wb4q rvsw8ykPdqNPcLU6+I+m6CR9lrJTqXfbIbPggYm+ZP2XDesyAilsfiCy5TqN8doL Fhm8FE1msZVOxpBrYz2LEH4yv+qUIW5FjkLpvHaPCUtz -----END CERTIFICATE-----Generated at Mon Jan 26 22:58:23 2026 by rpki-client