This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/e6632b-1fbf-496f-b355-1536fc78385d/1/0d0jGfKX-gxJysHLosjRpYlTW5Q.roa File: 0d0jGfKX-gxJysHLosjRpYlTW5Q.roa (raw, json) Hash identifier: CvfYQwzjI8vLt2H1NJc+s052pBAhojbFkOv6NxHUB/E= Subject key identifier: D1:DD:23:19:F2:97:FA:0C:49:CA:C1:CB:A2:C8:D1:A5:89:53:5B:94 Certificate issuer: /CN=28cb5f3fb957251aad4ba09d0bab7352b74bb07d Certificate serial: 019B7758C4B3E6A8C0EEDDD51D8C750BCEA0 Authority key identifier: 28:CB:5F:3F:B9:57:25:1A:AD:4B:A0:9D:0B:AB:73:52:B7:4B:B0:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMtfP7lXJRqtS6CdC6tzUrdLsH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/e6632b-1fbf-496f-b355-1536fc78385d/1/0d0jGfKX-gxJysHLosjRpYlTW5Q.roa Signing time: Thu 01 Jan 2026 02:17:44 +0000 ROA not before: Thu 01 Jan 2026 02:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43911 IP address blocks: 91.195.220.0/23 maxlen: 23 91.195.220.0/24 maxlen: 24 91.195.221.0/24 maxlen: 24 2001:67c:220::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/e6632b-1fbf-496f-b355-1536fc78385d/1/KMtfP7lXJRqtS6CdC6tzUrdLsH0.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/e6632b-1fbf-496f-b355-1536fc78385d/1/KMtfP7lXJRqtS6CdC6tzUrdLsH0.mft rsync://rpki.ripe.net/repository/DEFAULT/KMtfP7lXJRqtS6CdC6tzUrdLsH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:c4:b3:e6:a8:c0:ee:dd:d5:1d:8c:75:0b:ce:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28cb5f3fb957251aad4ba09d0bab7352b74bb07d Validity Not Before: Jan 1 02:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d1dd2319f297fa0c49cac1cba2c8d1a589535b94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:34:58:26:cd:7c:40:da:94:36:ae:61:89:43: 13:0e:e3:a8:7c:6f:58:03:91:f6:2e:c7:f5:54:b3: 6e:d5:5a:8b:08:2c:2d:8c:4d:9c:fe:76:d2:3d:08: 23:aa:9b:e3:e3:05:3f:15:68:25:89:d6:04:20:be: 7c:20:d1:62:5c:ab:89:91:41:7b:5d:54:95:f3:c6: df:db:2a:ee:79:50:4e:37:33:77:60:b7:92:cd:9b: c9:bb:95:bb:dd:87:9f:74:76:18:05:7f:3e:94:61: c2:86:64:67:11:aa:ea:de:64:80:c0:5e:54:95:c3: db:99:e7:5a:9f:3b:ee:48:31:02:07:6e:32:fb:b8: 86:45:ec:7f:d8:c7:45:4b:ad:c1:92:55:c3:c1:d0: 68:c0:dc:85:4a:28:cb:11:9d:30:a1:b6:15:bf:ab: ee:8b:3d:5b:ea:1d:50:3c:e3:64:ad:d2:74:04:f2: fb:40:9d:49:e7:e9:2f:7d:12:31:bb:ca:dc:9d:f3: 26:23:27:ec:8d:06:ea:c8:df:b5:44:39:1f:0c:08: 78:f0:24:f7:51:02:79:49:71:80:b6:01:c4:b5:df: 5b:bd:e1:03:31:64:c9:17:a9:22:26:9b:cd:a8:c8: e6:ab:5f:c4:e8:5f:0c:ab:4b:f6:2f:88:33:80:48: b6:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:DD:23:19:F2:97:FA:0C:49:CA:C1:CB:A2:C8:D1:A5:89:53:5B:94 X509v3 Authority Key Identifier: keyid:28:CB:5F:3F:B9:57:25:1A:AD:4B:A0:9D:0B:AB:73:52:B7:4B:B0:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMtfP7lXJRqtS6CdC6tzUrdLsH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e6632b-1fbf-496f-b355-1536fc78385d/1/0d0jGfKX-gxJysHLosjRpYlTW5Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e6632b-1fbf-496f-b355-1536fc78385d/1/KMtfP7lXJRqtS6CdC6tzUrdLsH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.195.220.0/23 IPv6: 2001:67c:220::/48 Signature Algorithm: sha256WithRSAEncryption 22:c4:59:2a:ee:c6:45:5b:1b:79:50:94:74:ed:91:a7:14:7e: 39:66:31:fb:ae:a3:8b:cf:af:59:0b:b6:d6:5e:6f:0e:90:ca: 9c:80:2f:25:f6:36:bb:a1:0d:2f:92:1f:da:e9:36:71:29:fc: 22:98:de:8b:d6:70:30:0a:a5:30:34:50:89:89:90:fa:b0:51: 47:48:28:b7:de:3c:e1:6d:ca:7c:4f:64:68:5d:01:33:f4:b8: c2:89:8a:b5:60:d6:17:9a:ba:0b:10:e9:39:34:48:d1:50:6c: 44:59:b5:d6:74:b4:70:0a:63:a0:be:2e:c3:22:bd:fd:f5:52: b8:d4:9a:b9:3a:0f:14:97:be:a7:c2:02:ba:7f:1f:eb:25:de: 10:7c:dc:57:2e:76:f7:55:60:03:a5:f3:c9:62:68:d2:e3:45: 43:f4:27:f0:0b:08:57:75:a7:da:73:bf:82:44:a2:ed:e8:7c: 9b:54:3a:68:86:05:18:52:46:f6:66:f9:51:c9:4a:fc:fa:21: a4:48:b8:e9:df:23:8f:a3:cc:d3:f4:04:68:be:62:74:4f:60: 47:ad:2b:84:07:26:c2:07:fd:cb:ab:ac:55:31:4f:88:00:f6: 7e:87:8a:fc:ae:e6:86:f0:6c:4a:da:5a:b0:1e:61:fa:78:e1: d3:ee:dc:42 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt3WMSz5qjA7t3VHYx1C86gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4Y2I1ZjNmYjk1NzI1MWFhZDRiYTA5ZDBiYWI3MzUyYjc0 YmIwN2QwHhcNMjYwMTAxMDIxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMWRkMjMxOWYyOTdmYTBjNDljYWMxY2JhMmM4ZDFhNTg5NTM1Yjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljRYJs18QNqUNq5hiUMTDuOofG9Y A5H2Lsf1VLNu1VqLCCwtjE2c/nbSPQgjqpvj4wU/FWglidYEIL58INFiXKuJkUF7 XVSV88bf2yrueVBONzN3YLeSzZvJu5W73YefdHYYBX8+lGHChmRnEarq3mSAwF5U lcPbmedanzvuSDECB24y+7iGRex/2MdFS63BklXDwdBowNyFSijLEZ0wobYVv6vu iz1b6h1QPONkrdJ0BPL7QJ1J5+kvfRIxu8rcnfMmIyfsjQbqyN+1RDkfDAh48CT3 UQJ5SXGAtgHEtd9bveEDMWTJF6kiJpvNqMjmq1/E6F8Mq0v2L4gzgEi20wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFNHdIxnyl/oMScrBy6LI0aWJU1uUMB8GA1UdIwQY MBaAFCjLXz+5VyUarUugnQurc1K3S7B9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS010ZlA3bFhKUnF0UzZDZEM2dHpVcmRMc0gwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9lNjYzMmItMWZiZi00OTZmLWIzNTUt MTUzNmZjNzgzODVkLzEvMGQwakdmS1gtZ3hKeXNITG9zalJwWWxUVzVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9lNjYzMmItMWZiZi00OTZmLWIzNTUtMTUzNmZjNzgzODVk LzEvS010ZlA3bFhKUnF0UzZDZEM2dHpVcmRMc0gwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBW8PcMA8E AgACMAkDBwAgAQZ8AiAwDQYJKoZIhvcNAQELBQADggEBACLEWSruxkVbG3lQlHTt kacUfjlmMfuuo4vPr1kLttZebw6QypyALyX2NruhDS+SH9rpNnEp/CKY3ovWcDAK pTA0UImJkPqwUUdIKLfePOFtynxPZGhdATP0uMKJirVg1heaugsQ6Tk0SNFQbERZ tdZ0tHAKY6C+LsMivf31UrjUmrk6DxSXvqfCArp/H+sl3hB83FcudvdVYAOl88li aNLjRUP0J/ALCFd1p9pzv4JEou3ofJtUOmiGBRhSRvZm+VHJSvz6IaRIuOnfI4+j zNP0BGi+YnRPYEetK4QHJsIH/currFUxT4gA9n6Hivyu5obwbEraWrAeYfp44dPu 3EI= -----END CERTIFICATE-----Generated at Mon Feb 9 20:46:22 2026 by rpki-client