This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/0Lwj5i1c4Zxo9S7reLT043tZQto.roa File: 0Lwj5i1c4Zxo9S7reLT043tZQto.roa (raw, json) Hash identifier: YQ43Pzm8kIwiUn3utvGc8HdrkEgRWVgYKvbGV3IgZ04= Subject key identifier: D0:BC:23:E6:2D:5C:E1:9C:68:F5:2E:EB:78:B4:F4:E3:7B:59:42:DA Certificate issuer: /CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59 Certificate serial: 019B79ECE685F2CFE877DAAFDE056ED0D1A7 Authority key identifier: C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/0Lwj5i1c4Zxo9S7reLT043tZQto.roa Signing time: Thu 01 Jan 2026 14:18:47 +0000 ROA not before: Thu 01 Jan 2026 14:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 91.213.126.0/24 maxlen: 24 2a12:7280::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:e6:85:f2:cf:e8:77:da:af:de:05:6e:d0:d1:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59 Validity Not Before: Jan 1 14:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d0bc23e62d5ce19c68f52eeb78b4f4e37b5942da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e4:b5:58:ce:68:28:4f:25:ec:d6:f7:4e:e9: 99:f8:ea:50:e4:15:cd:a7:f0:c2:f7:23:0e:6a:02: a8:e4:d1:97:d3:4b:14:3a:4b:ae:e1:85:af:c4:3b: 17:9c:cc:3d:2f:54:5d:3a:f9:d1:cb:ba:ab:07:23: a1:9e:29:5f:40:c6:ab:0e:f7:1a:9f:05:e7:e3:32: fb:87:71:cb:83:55:a6:b8:93:93:d6:9f:c5:db:f8: 89:1e:2b:6b:93:de:83:02:35:f9:b1:94:72:78:0c: 9f:ff:72:d1:ec:ab:36:71:e5:0e:cf:b7:1a:d3:40: b9:19:a3:98:69:db:4f:13:af:8a:ec:d4:aa:88:03: 17:b9:ae:d4:44:e9:2b:67:3b:09:3d:6c:76:73:a8: ca:61:61:3f:b2:5f:54:3b:be:2b:cf:2f:96:bc:58: 06:67:10:7a:ce:23:f9:6f:fe:45:eb:dd:14:80:15: d3:7a:c1:14:f9:f2:a3:ed:dd:d9:85:70:e1:0d:ad: f6:da:fa:c3:f1:b0:40:8b:df:c1:2f:76:16:30:93: 5c:8f:c8:cf:42:f2:cf:05:ae:f4:85:3f:bd:be:6b: 0a:cf:a4:c4:83:7f:0f:c5:9a:11:45:fd:69:14:9f: a7:67:34:87:35:72:ba:50:81:77:ec:c7:9e:06:20: 19:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:BC:23:E6:2D:5C:E1:9C:68:F5:2E:EB:78:B4:F4:E3:7B:59:42:DA X509v3 Authority Key Identifier: keyid:C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/0Lwj5i1c4Zxo9S7reLT043tZQto.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.213.126.0/24 IPv6: 2a12:7280::/29 Signature Algorithm: sha256WithRSAEncryption 1f:be:9e:db:4e:26:2e:a5:b9:40:9e:f6:9b:4a:2c:1f:cb:63: 6b:0e:5d:6c:d2:fc:54:75:38:f8:89:3e:cc:2b:79:5e:6a:04: f6:7b:a6:08:9b:b9:6d:90:29:c9:8d:e3:69:52:39:57:69:77: 95:7a:92:bb:05:2a:25:74:c8:fd:6a:38:da:af:99:f8:0d:f2: cd:61:47:f5:44:c0:eb:f8:49:65:90:81:98:19:74:a3:28:fa: 81:12:fd:71:3b:52:d3:40:a8:94:93:36:59:73:e6:17:5b:9e: 87:9c:ca:e3:a6:4e:71:73:bf:d7:40:0f:41:81:84:f1:2b:eb: 88:90:7e:a7:cb:9f:28:ea:23:80:02:cb:3e:d9:4a:23:00:61: fc:8e:43:46:cc:42:86:6c:24:12:43:63:c9:0e:a8:a2:6e:f0: 81:26:1e:83:d3:d2:58:6c:e0:40:79:2f:0e:a3:10:3d:2d:f5: 0f:3c:79:da:cf:04:ac:a9:6f:32:56:80:fc:77:d1:38:14:1e: 4b:11:36:06:09:fb:ee:03:61:bf:60:0b:ea:54:e1:2f:14:17: 53:74:78:5d:1e:d0:59:14:6f:60:91:10:48:b8:69:05:ce:99: b8:f2:67:37:f5:86:59:07:bc:43:dd:51:54:42:29:97:a5:d3: cc:0c:c5:4a -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt57OaF8s/od9qv3gVu0NGnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZTBlNGM5YWNiZjcwMWY5MzAxNDliMzI1Y2UwNDJjZjlm OTJhNTkwHhcNMjYwMTAxMTQxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMGJjMjNlNjJkNWNlMTljNjhmNTJlZWI3OGI0ZjRlMzdiNTk0MmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeS1WM5oKE8l7Nb3TumZ+OpQ5BXN p/DC9yMOagKo5NGX00sUOkuu4YWvxDsXnMw9L1RdOvnRy7qrByOhnilfQMarDvca nwXn4zL7h3HLg1WmuJOT1p/F2/iJHitrk96DAjX5sZRyeAyf/3LR7Ks2ceUOz7ca 00C5GaOYadtPE6+K7NSqiAMXua7UROkrZzsJPWx2c6jKYWE/sl9UO74rzy+WvFgG ZxB6ziP5b/5F690UgBXTesEU+fKj7d3ZhXDhDa322vrD8bBAi9/BL3YWMJNcj8jP QvLPBa70hT+9vmsKz6TEg38PxZoRRf1pFJ+nZzSHNXK6UIF37MeeBiAZiwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFNC8I+YtXOGcaPUu63i09ON7WULaMB8GA1UdIwQY MBaAFMng5Mmsv3AfkwFJsyXOBCz5+SpZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWVEa3lheV9jQi1UQVVtekpjNEVMUG41S2xrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9mZGI2NDEtZDFhMy00ZGRhLWJmOTEt YmU3YzgyOGMzNjkzLzEvMEx3ajVpMWM0WnhvOVM3cmVMVDA0M3RaUXRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9mZGI2NDEtZDFhMy00ZGRhLWJmOTEtYmU3YzgyOGMzNjkz LzEveWVEa3lheV9jQi1UQVVtekpjNEVMUG41S2xrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAW9V+MA0E AgACMAcDBQMqEnKAMA0GCSqGSIb3DQEBCwUAA4IBAQAfvp7bTiYupblAnvabSiwf y2NrDl1s0vxUdTj4iT7MK3leagT2e6YIm7ltkCnJjeNpUjlXaXeVepK7BSoldMj9 ajjar5n4DfLNYUf1RMDr+EllkIGYGXSjKPqBEv1xO1LTQKiUkzZZc+YXW56HnMrj pk5xc7/XQA9BgYTxK+uIkH6ny58o6iOAAss+2UojAGH8jkNGzEKGbCQSQ2PJDqii bvCBJh6D09JYbOBAeS8OoxA9LfUPPHnazwSsqW8yVoD8d9E4FB5LETYGCfvuA2G/ YAvqVOEvFBdTdHhdHtBZFG9gkRBIuGkFzpm48mc39YZZB7xD3VFUQimXpdPMDMVK -----END CERTIFICATE-----Generated at Fri Jan 9 06:25:48 2026 by rpki-client