This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/NdOYrmb6RnvhyXZ1Skocw4HNEj4.roa File: NdOYrmb6RnvhyXZ1Skocw4HNEj4.roa (raw, json) Hash identifier: i19fewp2gqVX7ORfnbVNxiNhHz8sRGSZyn7wRBbQZfc= Subject key identifier: 35:D3:98:AE:66:FA:46:7B:E1:C9:76:75:4A:4A:1C:C3:81:CD:12:3E Certificate issuer: /CN=a20cc67154b403145d139469886127ab629eb928 Certificate serial: 019B7C8027468576C1EB8EA0743ED79186DC Authority key identifier: A2:0C:C6:71:54:B4:03:14:5D:13:94:69:88:61:27:AB:62:9E:B9:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/NdOYrmb6RnvhyXZ1Skocw4HNEj4.roa Signing time: Fri 02 Jan 2026 02:18:52 +0000 ROA not before: Fri 02 Jan 2026 02:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198949 IP address blocks: 91.208.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:27:46:85:76:c1:eb:8e:a0:74:3e:d7:91:86:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a20cc67154b403145d139469886127ab629eb928 Validity Not Before: Jan 2 02:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=35d398ae66fa467be1c976754a4a1cc381cd123e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:73:aa:2f:b5:21:5b:8b:72:4a:44:c3:61:63: b8:d4:a3:9a:17:72:0d:86:83:64:2c:e2:a4:89:00: aa:7d:41:cc:ad:9a:0c:80:0e:cd:87:05:1e:db:d5: 6b:bd:06:8e:18:4f:82:64:9b:27:0e:8f:b3:f1:e0: 8d:47:55:2d:4e:7e:c5:ff:4f:00:73:cb:3a:f1:6d: a3:6d:7c:09:fa:32:d1:80:ba:ec:3d:e2:85:e8:07: 1c:e5:3d:8d:2a:2c:3d:f5:4a:84:b3:db:ac:2e:1d: ef:81:85:37:64:03:c7:66:0c:64:1e:02:98:4f:d3: 54:62:d8:58:1f:66:7f:a8:8a:f9:55:5c:6c:08:ac: d2:41:39:52:b2:5e:0a:62:32:ef:c1:2f:68:ba:fe: e9:8d:92:ab:40:39:35:8e:13:71:10:80:f8:1c:61: eb:b1:37:83:53:35:50:10:6e:fc:f9:f0:9d:7e:82: 17:0b:be:81:50:c9:c4:9b:d1:85:6f:33:76:d1:29: 13:30:3e:a6:f9:d8:52:ec:8b:f8:6b:70:d0:a8:43: c0:90:ea:b3:f7:c9:59:44:de:1e:2d:87:8c:d6:9f: 00:3d:11:c7:cf:67:9b:99:7f:ab:90:4d:ff:6e:20: b3:5b:92:0d:3e:71:c6:77:34:be:64:fa:9f:6b:4e: ff:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:D3:98:AE:66:FA:46:7B:E1:C9:76:75:4A:4A:1C:C3:81:CD:12:3E X509v3 Authority Key Identifier: keyid:A2:0C:C6:71:54:B4:03:14:5D:13:94:69:88:61:27:AB:62:9E:B9:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/NdOYrmb6RnvhyXZ1Skocw4HNEj4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.118.0/24 Signature Algorithm: sha256WithRSAEncryption 85:6a:c7:ce:91:e0:f0:05:62:92:06:dc:f8:21:9f:90:82:0f: 71:81:ea:b8:fe:29:8c:4d:2b:63:f0:ad:00:39:14:b8:e4:d0: 27:80:d6:a8:01:33:8f:dc:58:ac:14:b2:28:e0:03:e7:b5:8e: a5:d5:f5:0a:8d:cb:ce:21:05:7d:b1:72:33:2e:97:50:af:71: 1e:e0:79:ad:41:6a:bd:31:b3:03:86:37:2b:34:93:ca:7f:2f: 02:4b:88:37:05:80:75:09:5c:17:be:8b:11:d5:c9:2c:ba:9b: d6:b3:7c:b9:13:c1:16:7b:49:c6:45:08:cb:29:c4:85:fe:25: 38:2b:5d:09:10:82:c2:be:96:1c:5e:f5:e3:30:1a:1c:01:9f: fc:6b:bb:37:3d:b0:2c:7a:c6:49:b7:45:79:46:08:b9:87:d6: 68:35:42:21:41:b8:03:05:b4:80:54:e5:f1:56:c4:67:ea:5a: 9c:12:54:53:d8:e7:c1:07:f7:88:9e:ff:c5:d8:43:fa:2f:cd: e4:da:c1:5e:2b:b6:06:69:8e:9e:36:30:8d:56:12:44:3f:af: 25:66:1a:6e:9c:e3:2f:e7:af:65:ef:29:00:43:7c:89:bf:a7: 1a:6a:f4:7d:50:82:12:ba:d1:8e:3e:8c:18:6a:b1:03:6d:9d: 84:96:40:5f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gCdGhXbB646gdD7XkYbcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyMGNjNjcxNTRiNDAzMTQ1ZDEzOTQ2OTg4NjEyN2FiNjI5 ZWI5MjgwHhcNMjYwMTAyMDIxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNWQzOThhZTY2ZmE0NjdiZTFjOTc2NzU0YTRhMWNjMzgxY2QxMjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nOqL7UhW4tySkTDYWO41KOaF3IN hoNkLOKkiQCqfUHMrZoMgA7NhwUe29VrvQaOGE+CZJsnDo+z8eCNR1UtTn7F/08A c8s68W2jbXwJ+jLRgLrsPeKF6Acc5T2NKiw99UqEs9usLh3vgYU3ZAPHZgxkHgKY T9NUYthYH2Z/qIr5VVxsCKzSQTlSsl4KYjLvwS9ouv7pjZKrQDk1jhNxEID4HGHr sTeDUzVQEG78+fCdfoIXC76BUMnEm9GFbzN20SkTMD6m+dhS7Iv4a3DQqEPAkOqz 98lZRN4eLYeM1p8APRHHz2ebmX+rkE3/biCzW5INPnHGdzS+ZPqfa07/vwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDXTmK5m+kZ74cl2dUpKHMOBzRI+MB8GA1UdIwQY MBaAFKIMxnFUtAMUXROUaYhhJ6tinrkoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2d6R2NWUzBBeFJkRTVScGlHRW5xMktldVNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9kZDg4NzgtMjk0MS00YzE1LWIyMDQt OGZjMzM3MzdjZWFiLzEvTmRPWXJtYjZSbnZoeVhaMVNrb2N3NEhORWo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9kZDg4NzgtMjk0MS00YzE1LWIyMDQtOGZjMzM3MzdjZWFi LzEvb2d6R2NWUzBBeFJkRTVScGlHRW5xMktldVNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9B2MA0G CSqGSIb3DQEBCwUAA4IBAQCFasfOkeDwBWKSBtz4IZ+Qgg9xgeq4/imMTStj8K0A ORS45NAngNaoATOP3FisFLIo4APntY6l1fUKjcvOIQV9sXIzLpdQr3Ee4HmtQWq9 MbMDhjcrNJPKfy8CS4g3BYB1CVwXvosR1cksupvWs3y5E8EWe0nGRQjLKcSF/iU4 K10JEILCvpYcXvXjMBocAZ/8a7s3PbAsesZJt0V5Rgi5h9ZoNUIhQbgDBbSAVOXx VsRn6lqcElRT2OfBB/eInv/F2EP6L83k2sFeK7YGaY6eNjCNVhJEP68lZhpunOMv 569l7ykAQ3yJv6caavR9UIISutGOPowYarEDbZ2ElkBf -----END CERTIFICATE-----Generated at Wed Jan 7 22:30:25 2026 by rpki-client