This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/uX9RFldD_ZI14WBF0_J3zmXVSmY.roa File: uX9RFldD_ZI14WBF0_J3zmXVSmY.roa (raw, json) Hash identifier: 5VQ5HAdHZFYwUc79OmQg0PEjho46iWIuaIrNO9hQGtU= Subject key identifier: B9:7F:51:16:57:43:FD:92:35:E1:60:45:D3:F2:77:CE:65:D5:4A:66 Certificate issuer: /CN=83ecfb64bda5213708ff67bad4c83950b1ffdc38 Certificate serial: 019B7DC9F6CF0251709D5A546C39AF6D567D Authority key identifier: 83:EC:FB:64:BD:A5:21:37:08:FF:67:BA:D4:C8:39:50:B1:FF:DC:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/uX9RFldD_ZI14WBF0_J3zmXVSmY.roa Signing time: Fri 02 Jan 2026 08:19:06 +0000 ROA not before: Fri 02 Jan 2026 08:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57757 IP address blocks: 91.213.19.0/24 maxlen: 24 2001:67c:fe8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.mft rsync://rpki.ripe.net/repository/DEFAULT/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:f6:cf:02:51:70:9d:5a:54:6c:39:af:6d:56:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83ecfb64bda5213708ff67bad4c83950b1ffdc38 Validity Not Before: Jan 2 08:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b97f51165743fd9235e16045d3f277ce65d54a66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5d:b6:d1:91:b1:2e:3f:e4:04:94:48:49:af: 78:fc:41:fe:a8:9a:95:47:08:0c:05:a7:63:71:96: c8:a7:ce:c0:b5:f9:26:f0:5b:e8:e3:6b:d7:7d:e9: 48:d0:3c:c3:e2:56:cf:4d:c8:62:b6:f8:bb:6c:ab: 18:34:d5:80:1f:01:11:23:81:86:ed:94:02:89:06: 89:f7:89:24:80:f2:c5:49:f2:37:5f:ef:c3:a5:dc: c6:ce:33:99:65:18:94:07:58:68:39:c5:11:ac:d2: 72:d0:40:40:4f:ec:32:cb:ad:85:57:e5:c5:ba:52: 28:72:69:c7:14:6f:3c:40:02:b3:ad:2c:fe:89:80: e4:9a:6f:b3:83:1d:56:3d:54:82:77:d8:6a:f9:a1: 07:43:db:3e:9e:c0:30:95:16:46:a8:a0:d9:26:ca: 62:93:b5:67:03:49:4e:28:8a:fe:89:d3:f5:c1:43: 3d:de:79:d5:25:6a:28:8c:bf:3b:00:22:60:cb:da: ee:09:03:02:b9:ae:07:f8:2a:79:ce:81:bc:76:83: ed:dd:97:ef:6d:27:0b:83:cf:d5:f8:d8:a8:56:9d: 9e:fe:62:cf:6f:b7:4b:b1:94:c4:79:0f:20:79:65: 5a:4c:a4:fc:ca:60:d7:36:33:ed:b7:04:37:09:a5: 02:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:7F:51:16:57:43:FD:92:35:E1:60:45:D3:F2:77:CE:65:D5:4A:66 X509v3 Authority Key Identifier: keyid:83:EC:FB:64:BD:A5:21:37:08:FF:67:BA:D4:C8:39:50:B1:FF:DC:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/uX9RFldD_ZI14WBF0_J3zmXVSmY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.213.19.0/24 IPv6: 2001:67c:fe8::/48 Signature Algorithm: sha256WithRSAEncryption 97:53:75:61:c6:c3:db:c7:76:1d:3d:ac:ff:d3:c0:03:ae:bf: a3:6c:fd:73:e2:3a:8b:40:5c:ec:d2:e7:e7:8d:32:ed:85:8f: 33:ef:93:11:30:df:95:b9:75:1d:5c:30:51:8c:5a:bb:aa:66: f3:ff:45:10:88:e0:7d:2d:bb:45:cb:ee:9a:e5:dd:b4:1d:dd: e7:26:47:9f:11:68:3c:07:52:a8:32:60:9b:10:fc:e4:b8:cc: 1a:e6:ff:1f:2f:9a:7a:27:2c:a0:fa:7b:e1:dc:46:d1:22:57: 72:ed:77:ef:a8:08:83:e6:ae:17:6b:39:57:0a:a7:ad:83:0a: 5a:c1:98:3e:be:58:e0:4c:ef:5e:3e:1f:b4:1f:06:d9:4f:72: d0:a7:11:12:e7:5a:27:d5:b0:bd:c7:b3:bc:b7:71:4a:31:25: c6:58:59:cb:ea:e5:e7:ec:89:f4:9b:cb:f3:0f:b8:57:71:fc: 8b:6c:c5:1f:77:b8:27:0c:d1:cf:d9:98:7f:09:41:e0:e0:cc: cf:6c:13:11:48:a6:98:73:61:01:67:d1:e0:97:65:7f:e2:33: ca:0a:32:90:9d:9b:ab:b9:e6:d9:56:06:b8:95:4f:fc:e0:5b: 71:62:8d:63:24:8f:53:39:19:0e:c6:81:b3:77:b3:4e:dd:c7: 91:73:36:e0 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt9yfbPAlFwnVpUbDmvbVZ9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzZWNmYjY0YmRhNTIxMzcwOGZmNjdiYWQ0YzgzOTUwYjFm ZmRjMzgwHhcNMjYwMTAyMDgxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTdmNTExNjU3NDNmZDkyMzVlMTYwNDVkM2YyNzdjZTY1ZDU0YTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzl220ZGxLj/kBJRISa94/EH+qJqV RwgMBadjcZbIp87Atfkm8Fvo42vXfelI0DzD4lbPTchitvi7bKsYNNWAHwERI4GG 7ZQCiQaJ94kkgPLFSfI3X+/DpdzGzjOZZRiUB1hoOcURrNJy0EBAT+wyy62FV+XF ulIocmnHFG88QAKzrSz+iYDkmm+zgx1WPVSCd9hq+aEHQ9s+nsAwlRZGqKDZJspi k7VnA0lOKIr+idP1wUM93nnVJWoojL87ACJgy9ruCQMCua4H+Cp5zoG8doPt3Zfv bScLg8/V+NioVp2e/mLPb7dLsZTEeQ8geWVaTKT8ymDXNjPttwQ3CaUCTwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFLl/URZXQ/2SNeFgRdPyd85l1UpmMB8GA1UdIwQY MBaAFIPs+2S9pSE3CP9nutTIOVCx/9w4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZy16N1pMMmxJVGNJXzJlNjFNZzVVTEhfM0RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8wMzE0NjMtNThlNi00ZmNiLThjYTEt MWZjZmQwYzhiZGY1LzEvdVg5UkZsZERfWkkxNFdCRjBfSjN6bVhWU21ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC8wMzE0NjMtNThlNi00ZmNiLThjYTEtMWZjZmQwYzhiZGY1 LzEvZy16N1pMMmxJVGNJXzJlNjFNZzVVTEhfM0RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW9UTMA8E AgACMAkDBwAgAQZ8D+gwDQYJKoZIhvcNAQELBQADggEBAJdTdWHGw9vHdh09rP/T wAOuv6Ns/XPiOotAXOzS5+eNMu2FjzPvkxEw35W5dR1cMFGMWruqZvP/RRCI4H0t u0XL7prl3bQd3ecmR58RaDwHUqgyYJsQ/OS4zBrm/x8vmnonLKD6e+HcRtEiV3Lt d++oCIPmrhdrOVcKp62DClrBmD6+WOBM714+H7QfBtlPctCnERLnWifVsL3Hs7y3 cUoxJcZYWcvq5efsifSby/MPuFdx/ItsxR93uCcM0c/ZmH8JQeDgzM9sExFIpphz YQFn0eCXZX/iM8oKMpCdm6u55tlWBriVT/zgW3FijWMkj1M5GQ7GgbN3s07dx5Fz NuA= -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:29 2026 by rpki-client