This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/D757pdeWdoida8GHOUdKTXVzQLA.roa File: D757pdeWdoida8GHOUdKTXVzQLA.roa (raw, json) Hash identifier: 9oAemx2TPMquAep4lORrFPAoBV6BakfDEYxe+lt7IJE= Subject key identifier: 0F:BE:7B:A5:D7:96:76:88:9D:6B:C1:87:39:47:4A:4D:75:73:40:B0 Certificate issuer: /CN=a389e7035b08e181a341f37eda7343d23f1cafa4 Certificate serial: 019B783532C332867926D6F169432D46C3BF Authority key identifier: A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/D757pdeWdoida8GHOUdKTXVzQLA.roa Signing time: Thu 01 Jan 2026 06:18:30 +0000 ROA not before: Thu 01 Jan 2026 06:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15830 IP address blocks: 91.240.205.0/24 maxlen: 24 91.240.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:32:c3:32:86:79:26:d6:f1:69:43:2d:46:c3:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a389e7035b08e181a341f37eda7343d23f1cafa4 Validity Not Before: Jan 1 06:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0fbe7ba5d79676889d6bc18739474a4d757340b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:03:51:fc:e5:e4:c4:bc:85:c5:e4:91:e1:eb: e7:f5:d2:ac:6a:f5:9a:90:4f:7e:e9:eb:cd:80:5b: 68:e3:b1:a9:91:d3:f1:28:dd:28:18:dd:37:f8:04: 2a:85:d7:50:18:52:1a:70:c6:81:45:a5:ee:72:0c: db:fa:ff:02:a7:c0:ef:18:08:f2:08:48:5b:98:18: 98:77:80:86:3e:10:bd:a9:8d:d9:ec:a9:f0:bb:77: eb:1a:cc:44:5f:5c:73:10:07:d0:77:2b:24:02:1a: a6:af:2d:0e:34:d2:04:8c:21:64:74:c6:ec:90:51: cc:eb:15:1f:a9:41:11:ea:87:4f:25:d1:47:1b:01: f6:4f:bc:e3:bf:87:3f:5b:a3:f0:e4:b7:d6:e2:b4: e1:e8:56:e3:ba:56:91:66:71:e0:d2:bc:de:2f:0d: 98:f5:77:bb:30:f7:19:18:d0:f4:82:6a:3b:43:e2: ed:d0:be:f4:49:f7:26:e3:4e:30:79:7a:ad:e7:c3: 1f:0d:d9:e6:cb:9e:1d:cb:5a:94:df:8b:41:53:2b: 43:f1:e8:f6:61:b5:c5:1b:82:10:bf:8d:c2:c2:e0: b2:72:48:86:e4:a6:10:fc:8c:f6:b7:f6:8b:8f:29: 3e:6e:69:77:df:60:71:2a:10:b4:81:9e:69:8c:9e: ad:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:BE:7B:A5:D7:96:76:88:9D:6B:C1:87:39:47:4A:4D:75:73:40:B0 X509v3 Authority Key Identifier: keyid:A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/D757pdeWdoida8GHOUdKTXVzQLA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.240.205.0-91.240.206.255 Signature Algorithm: sha256WithRSAEncryption 8a:48:8e:b8:92:49:f1:c9:fa:83:c5:49:a1:2b:37:89:1e:d5: 39:30:49:6a:ec:5e:65:c3:e1:b1:f5:66:c9:66:e3:bc:a9:c8: 6b:22:d2:a7:0a:45:0d:54:6b:22:a0:21:6f:89:21:e0:51:f1: ab:f6:7a:15:16:ff:3a:21:9e:53:1d:8b:f6:a8:46:3e:d9:9a: fd:5e:ea:8d:71:be:73:5b:fe:a4:16:d1:3a:d2:50:21:ae:74: a8:89:4d:47:27:dc:17:a9:94:07:6a:6d:fe:ec:79:46:69:01: d7:18:15:82:34:64:58:25:bf:6f:12:88:73:18:a0:dd:ab:4f: 2c:7f:8d:09:ce:87:f0:69:a1:6d:37:4d:81:c2:73:6e:94:74: e3:c7:61:a0:e2:9a:e5:f8:17:b5:54:bd:b8:8d:ed:ed:67:ac: ce:8f:af:31:6e:1b:7f:10:41:f3:e6:18:7a:66:aa:aa:2b:69: 5c:f7:79:ad:8e:2c:37:eb:24:6b:a5:39:46:71:0f:af:62:d3: f5:e9:86:2f:20:2e:13:61:50:6d:b7:59:e7:5d:5d:2e:e6:1b: 6e:59:69:1c:1b:c6:e7:81:4f:d6:4b:89:4b:1c:f7:d9:90:67: 72:02:db:9d:77:0f:53:1b:c5:13:98:9b:7e:9e:74:83:20:d9: d9:f7:87:9a -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt4NTLDMoZ5JtbxaUMtRsO/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzODllNzAzNWIwOGUxODFhMzQxZjM3ZWRhNzM0M2QyM2Yx Y2FmYTQwHhcNMjYwMTAxMDYxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZmJlN2JhNWQ3OTY3Njg4OWQ2YmMxODczOTQ3NGE0ZDc1NzM0MGIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QNR/OXkxLyFxeSR4evn9dKsavWa kE9+6evNgFto47GpkdPxKN0oGN03+AQqhddQGFIacMaBRaXucgzb+v8Cp8DvGAjy CEhbmBiYd4CGPhC9qY3Z7Knwu3frGsxEX1xzEAfQdyskAhqmry0ONNIEjCFkdMbs kFHM6xUfqUER6odPJdFHGwH2T7zjv4c/W6Pw5LfW4rTh6FbjulaRZnHg0rzeLw2Y 9Xe7MPcZGND0gmo7Q+Lt0L70Sfcm404weXqt58MfDdnmy54dy1qU34tBUytD8ej2 YbXFG4IQv43CwuCyckiG5KYQ/Iz2t/aLjyk+bml332BxKhC0gZ5pjJ6t2wIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFA++e6XXlnaInWvBhzlHSk11c0CwMB8GA1UdIwQY MBaAFKOJ5wNbCOGBo0HzftpzQ9I/HK+kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzRubkExc0k0WUdqUWZOLTJuTkQwajhjcjZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mMDUzY2QtMWQ3OS00M2ExLTlhYWIt MGU3MjQxNmI0ZGM3LzEvRDc1N3BkZVdkb2lkYThHSE9VZEtUWFZ6UUxBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9mMDUzY2QtMWQ3OS00M2ExLTlhYWItMGU3MjQxNmI0ZGM3 LzEvbzRubkExc0k0WUdqUWZOLTJuTkQwajhjcjZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABb8M0D BABb8M4wDQYJKoZIhvcNAQELBQADggEBAIpIjriSSfHJ+oPFSaErN4ke1TkwSWrs XmXD4bH1Zslm47ypyGsi0qcKRQ1UayKgIW+JIeBR8av2ehUW/zohnlMdi/aoRj7Z mv1e6o1xvnNb/qQW0TrSUCGudKiJTUcn3BeplAdqbf7seUZpAdcYFYI0ZFglv28S iHMYoN2rTyx/jQnOh/BpoW03TYHCc26UdOPHYaDimuX4F7VUvbiN7e1nrM6PrzFu G38QQfPmGHpmqqoraVz3ea2OLDfrJGulOUZxD69i0/Xphi8gLhNhUG23WeddXS7m G25ZaRwbxueBT9ZLiUsc99mQZ3IC2513D1MbxROYm36edIMg2dn3h5o= -----END CERTIFICATE-----Generated at Sat Jan 3 04:53:31 2026 by rpki-client