This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/a8PSnoMbEUhv4Faq7MVolsfXT_Y.roa File: a8PSnoMbEUhv4Faq7MVolsfXT_Y.roa (raw, json) Hash identifier: BPdIhgn9ulm4J7RgTCmSDSsMLRstDEKHEvI4iWcZR7s= Subject key identifier: 6B:C3:D2:9E:83:1B:11:48:6F:E0:56:AA:EC:C5:68:96:C7:D7:4F:F6 Certificate issuer: /CN=21a00080cd2cb1bb073903b32b25ad660a366486 Certificate serial: 019B77C684D0D749037D43C0ABBA1BD92EBF Authority key identifier: 21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/a8PSnoMbEUhv4Faq7MVolsfXT_Y.roa Signing time: Thu 01 Jan 2026 04:17:37 +0000 ROA not before: Thu 01 Jan 2026 04:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 91.239.43.0/24 maxlen: 24 195.191.65.0/24 maxlen: 24 213.109.76.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:84:d0:d7:49:03:7d:43:c0:ab:ba:1b:d9:2e:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21a00080cd2cb1bb073903b32b25ad660a366486 Validity Not Before: Jan 1 04:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6bc3d29e831b11486fe056aaecc56896c7d74ff6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9b:c1:0f:d2:b6:1a:a7:e9:c6:ff:bf:35:83: bc:49:98:38:32:b2:42:a2:0b:6f:bc:1b:f9:01:2b: b3:5e:fb:74:ab:6f:f0:b3:8a:b3:99:01:df:1c:62: f6:88:a5:d8:17:d5:46:6c:26:df:82:06:c5:12:0e: 9e:f7:7b:a5:dd:86:03:12:9b:bc:d7:b8:f7:8c:7d: 39:25:03:53:43:9b:a5:d8:52:b9:42:0f:b5:21:ca: b7:6e:4b:06:f9:bf:ed:5a:a0:34:20:7b:11:64:44: ae:6e:1a:59:6c:ac:59:59:34:e6:27:45:f8:09:8e: 6b:b5:1e:a7:f4:77:ad:4b:ff:2c:4a:05:4e:fd:99: 45:57:4c:a0:40:1c:73:51:91:1e:f2:f4:a6:32:16: 61:18:85:85:6f:0d:bc:74:1e:f6:5c:ae:5f:a6:4b: 21:a6:29:11:6d:34:42:1c:08:69:ad:91:07:ec:3d: 4a:af:e4:bd:79:3b:3d:fb:d2:08:5c:62:cf:b2:31: b7:d0:70:58:e2:83:eb:f3:50:82:cf:27:7f:6b:6d: ab:ef:ed:51:c6:39:05:63:ad:20:60:8a:9d:5e:9e: c1:29:18:a1:e5:8e:75:21:51:a3:6b:9a:1a:b7:d8: 55:96:e9:e2:43:bf:8f:b8:f6:75:30:b0:93:4a:c3: 23:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:C3:D2:9E:83:1B:11:48:6F:E0:56:AA:EC:C5:68:96:C7:D7:4F:F6 X509v3 Authority Key Identifier: keyid:21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/a8PSnoMbEUhv4Faq7MVolsfXT_Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.239.43.0/24 195.191.65.0/24 213.109.76.0/23 Signature Algorithm: sha256WithRSAEncryption 8b:e8:25:32:6b:fd:51:a3:da:9f:0f:fa:5f:af:e5:57:a2:a4: ad:ae:e9:b0:2a:72:b3:30:eb:43:43:8f:5e:e9:89:3c:68:ca: 2d:ea:25:ae:7a:a4:c4:90:7d:62:94:38:97:ce:13:09:9f:2f: dc:e5:a8:2a:8b:d6:9a:45:4e:14:1c:3b:a8:f8:02:d6:1f:34: c7:81:32:ae:d6:a7:ef:be:99:d8:ef:71:44:22:15:9c:de:31: b8:af:4c:60:c4:71:5f:04:04:5d:a6:ad:f8:b5:bd:09:f2:e6: 83:10:dc:cc:60:b5:76:52:e9:f3:43:bf:8a:7f:7f:06:3f:a8: e8:09:cb:52:c6:24:9b:bf:86:56:50:1e:a6:22:67:28:8a:da: 8e:6d:9c:28:4a:ae:44:a9:fc:03:fe:34:46:1d:81:d5:cf:3f: 13:20:8c:b9:d0:0c:29:bc:71:82:7a:df:0d:14:99:ef:8e:86: 80:bf:48:6d:0b:af:63:7f:4a:27:c0:57:23:d6:9f:1a:b2:14: 3a:a4:1d:c4:a2:f6:82:bd:0d:f9:83:5e:50:a2:9f:1b:e5:42: 72:0f:28:1a:be:51:59:b9:d6:ef:2a:4a:7e:d2:37:69:f2:93: 65:7b:1c:96:7a:4b:7c:87:39:f3:80:38:b7:af:15:a5:be:ad: c0:8f:9f:8e -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3xoTQ10kDfUPAq7ob2S6/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYTAwMDgwY2QyY2IxYmIwNzM5MDNiMzJiMjVhZDY2MGEz NjY0ODYwHhcNMjYwMTAxMDQxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YmMzZDI5ZTgzMWIxMTQ4NmZlMDU2YWFlY2M1Njg5NmM3ZDc0ZmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZvBD9K2Gqfpxv+/NYO8SZg4MrJC ogtvvBv5ASuzXvt0q2/ws4qzmQHfHGL2iKXYF9VGbCbfggbFEg6e93ul3YYDEpu8 17j3jH05JQNTQ5ul2FK5Qg+1Icq3bksG+b/tWqA0IHsRZESubhpZbKxZWTTmJ0X4 CY5rtR6n9HetS/8sSgVO/ZlFV0ygQBxzUZEe8vSmMhZhGIWFbw28dB72XK5fpksh pikRbTRCHAhprZEH7D1Kr+S9eTs9+9IIXGLPsjG30HBY4oPr81CCzyd/a22r7+1R xjkFY60gYIqdXp7BKRih5Y51IVGja5oat9hVluniQ7+PuPZ1MLCTSsMj7QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGvD0p6DGxFIb+BWquzFaJbH10/2MB8GA1UdIwQY MBaAFCGgAIDNLLG7BzkDsyslrWYKNmSGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWFBQWdNMHNzYnNIT1FPekt5V3RaZ28yWklZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82YzNkOWYtOGE0Zi00YTZjLTg1Nzkt ZTkyZWNlNGQzY2IzLzEvYThQU25vTWJFVWh2NEZhcTdNVm9sc2ZYVF9ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy82YzNkOWYtOGE0Zi00YTZjLTg1NzktZTkyZWNlNGQzY2Iz LzEvSWFBQWdNMHNzYnNIT1FPekt5V3RaZ28yWklZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW+8rAwQA w79BAwQB1W1MMA0GCSqGSIb3DQEBCwUAA4IBAQCL6CUya/1Ro9qfD/pfr+VXoqSt rumwKnKzMOtDQ49e6Yk8aMot6iWueqTEkH1ilDiXzhMJny/c5agqi9aaRU4UHDuo +ALWHzTHgTKu1qfvvpnY73FEIhWc3jG4r0xgxHFfBARdpq34tb0J8uaDENzMYLV2 UunzQ7+Kf38GP6joCctSxiSbv4ZWUB6mImcoitqObZwoSq5EqfwD/jRGHYHVzz8T IIy50AwpvHGCet8NFJnvjoaAv0htC69jf0onwFcj1p8ashQ6pB3EovaCvQ35g15Q op8b5UJyDygavlFZudbvKkp+0jdp8pNlexyWekt8hznzgDi3rxWlvq3Aj5+O -----END CERTIFICATE-----Generated at Fri Jan 2 09:30:19 2026 by rpki-client