This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/Ph0J2YLOlU7YjgB24Ww0ogtAJDo.roa File: Ph0J2YLOlU7YjgB24Ww0ogtAJDo.roa (raw, json) Hash identifier: itSFIEdCoDExFok/Ab/usil828dE//sP90iU8HWvoSU= Subject key identifier: 3E:1D:09:D9:82:CE:95:4E:D8:8E:00:76:E1:6C:34:A2:0B:40:24:3A Certificate issuer: /CN=9a60ae4bdd9d6efba6ea11c60737cba02dcf1e60 Certificate serial: 019B77C7394FDA0FC7CC3390528CF5767895 Authority key identifier: 9A:60:AE:4B:DD:9D:6E:FB:A6:EA:11:C6:07:37:CB:A0:2D:CF:1E:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmCuS92dbvum6hHGBzfLoC3PHmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/Ph0J2YLOlU7YjgB24Ww0ogtAJDo.roa Signing time: Thu 01 Jan 2026 04:18:23 +0000 ROA not before: Thu 01 Jan 2026 04:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57850 IP address blocks: 91.209.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft rsync://rpki.ripe.net/repository/DEFAULT/mmCuS92dbvum6hHGBzfLoC3PHmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 22:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:39:4f:da:0f:c7:cc:33:90:52:8c:f5:76:78:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a60ae4bdd9d6efba6ea11c60737cba02dcf1e60 Validity Not Before: Jan 1 04:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e1d09d982ce954ed88e0076e16c34a20b40243a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:06:40:9d:12:bc:72:b6:0f:46:94:19:e7:41: fc:de:4d:25:cc:71:07:5d:1e:31:30:33:83:fa:1c: fc:24:d2:3f:09:36:71:bd:5b:9b:ce:9e:bf:b2:0c: d1:ff:16:ba:62:e4:a0:4a:c3:3c:5a:44:b5:de:76: 53:7f:43:c4:e8:b6:4c:99:46:b4:da:74:7e:11:42: 98:c7:a4:7b:32:70:c7:9d:28:d0:7e:72:ed:d3:5d: 16:27:4a:0a:7f:22:68:83:e0:5b:29:30:90:3c:27: 9e:d0:a4:f8:f9:fb:04:02:2d:c5:a7:16:99:9b:7f: 5a:74:1f:27:7c:d3:2f:ce:a7:10:82:e4:d9:56:02: fb:c3:fc:40:27:20:96:0d:ed:8b:fb:99:b3:bb:4e: dd:d8:25:b0:43:97:1e:fe:00:23:bf:8f:13:47:13: 33:ce:5f:06:20:9c:4a:6c:d5:7b:41:80:5e:19:c1: b7:85:92:5f:49:90:b2:08:34:76:aa:bb:b1:4a:e3: a6:61:89:15:09:99:19:6e:7c:33:68:49:a9:87:43: 0a:37:23:de:a9:13:ed:68:50:a3:a3:8a:b0:a3:e2: 76:0c:28:34:09:07:83:2e:92:b1:d9:10:07:9e:7a: 69:23:4d:63:a6:90:13:14:e8:e8:ae:a1:19:69:72: 1c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:1D:09:D9:82:CE:95:4E:D8:8E:00:76:E1:6C:34:A2:0B:40:24:3A X509v3 Authority Key Identifier: keyid:9A:60:AE:4B:DD:9D:6E:FB:A6:EA:11:C6:07:37:CB:A0:2D:CF:1E:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmCuS92dbvum6hHGBzfLoC3PHmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/Ph0J2YLOlU7YjgB24Ww0ogtAJDo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.60.0/24 Signature Algorithm: sha256WithRSAEncryption b8:39:32:d3:33:af:41:81:df:51:b3:aa:b2:5c:76:a7:dc:b5: 8e:6f:55:ab:c7:13:3e:5a:be:e6:68:6c:f7:cf:08:c7:4a:43: 91:21:1a:3c:86:60:ab:b0:92:bc:31:21:22:1d:0c:93:d5:7d: a4:22:3c:f9:39:31:a5:e4:d4:f5:2a:fb:65:65:ce:1b:80:59: ec:73:21:89:76:7a:59:08:6d:6c:f9:25:38:b5:cb:c6:d9:4a: 91:44:4c:29:9f:15:d9:45:49:c6:5a:8e:e6:0b:8d:b1:00:29: 70:09:32:80:86:eb:a9:d8:01:b3:09:5e:3c:d1:1c:64:a0:b3: 27:35:7c:bd:58:17:4f:cc:a4:9a:24:36:12:94:80:47:85:ce: 7e:6b:a6:09:88:6f:e9:cc:f1:64:34:59:03:65:df:2d:ae:82: 92:e6:a8:d6:1c:53:d4:c8:4b:a8:87:55:83:94:6b:92:53:ff: a7:88:5e:46:be:70:a4:b3:b2:c2:f9:d9:6f:10:3c:3a:9a:d2: b4:fd:15:a2:de:fb:c9:71:a1:af:45:9c:ef:38:39:9c:17:41: 99:55:da:18:0d:b4:b6:7d:39:3b:39:c3:86:76:f6:c8:e0:0c: d4:02:09:6f:df:d0:9c:d4:d3:8a:03:40:8c:9f:ba:19:5b:71: 1e:d8:3b:c6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xzlP2g/HzDOQUoz1dniVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNjBhZTRiZGQ5ZDZlZmJhNmVhMTFjNjA3MzdjYmEwMmRj ZjFlNjAwHhcNMjYwMTAxMDQxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTFkMDlkOTgyY2U5NTRlZDg4ZTAwNzZlMTZjMzRhMjBiNDAyNDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgZAnRK8crYPRpQZ50H83k0lzHEH XR4xMDOD+hz8JNI/CTZxvVubzp6/sgzR/xa6YuSgSsM8WkS13nZTf0PE6LZMmUa0 2nR+EUKYx6R7MnDHnSjQfnLt010WJ0oKfyJog+BbKTCQPCee0KT4+fsEAi3FpxaZ m39adB8nfNMvzqcQguTZVgL7w/xAJyCWDe2L+5mzu07d2CWwQ5ce/gAjv48TRxMz zl8GIJxKbNV7QYBeGcG3hZJfSZCyCDR2qruxSuOmYYkVCZkZbnwzaEmph0MKNyPe qRPtaFCjo4qwo+J2DCg0CQeDLpKx2RAHnnppI01jppATFOjorqEZaXIc6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD4dCdmCzpVO2I4AduFsNKILQCQ6MB8GA1UdIwQY MBaAFJpgrkvdnW77puoRxgc3y6Atzx5gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbW1DdVM5MmRidnVtNmhIR0J6ZkxvQzNQSG1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8wNjE2ZTAtOWNiYi00MzBhLTgyNDQt ZWRjYzUyZTE3YTk0LzEvUGgwSjJZTE9sVTdZamdCMjRXdzBvZ3RBSkRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8wNjE2ZTAtOWNiYi00MzBhLTgyNDQtZWRjYzUyZTE3YTk0 LzEvbW1DdVM5MmRidnVtNmhIR0J6ZkxvQzNQSG1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9E8MA0G CSqGSIb3DQEBCwUAA4IBAQC4OTLTM69Bgd9Rs6qyXHan3LWOb1WrxxM+Wr7maGz3 zwjHSkORIRo8hmCrsJK8MSEiHQyT1X2kIjz5OTGl5NT1KvtlZc4bgFnscyGJdnpZ CG1s+SU4tcvG2UqRREwpnxXZRUnGWo7mC42xAClwCTKAhuup2AGzCV480RxkoLMn NXy9WBdPzKSaJDYSlIBHhc5+a6YJiG/pzPFkNFkDZd8troKS5qjWHFPUyEuoh1WD lGuSU/+niF5GvnCks7LC+dlvEDw6mtK0/RWi3vvJcaGvRZzvODmcF0GZVdoYDbS2 fTk7OcOGdvbI4AzUAglv39Cc1NOKA0CMn7oZW3Ee2DvG -----END CERTIFICATE-----Generated at Tue Feb 10 08:38:23 2026 by rpki-client