This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/aJGaWlz_CFVJ2Nm0gy1yUmZTtS0.roa File: aJGaWlz_CFVJ2Nm0gy1yUmZTtS0.roa (raw, json) Hash identifier: vHZJo0+5vZ38Mb8o++2KXKDyHid1BpZNVh84OdWoQD0= Subject key identifier: 68:91:9A:5A:5C:FF:08:55:49:D8:D9:B4:83:2D:72:52:66:53:B5:2D Certificate issuer: /CN=db7e1770a3804c74b9f12cb9b6fa70396de9329f Certificate serial: 019B7910DAFB32A87F51FC3125E9A98422A5 Authority key identifier: DB:7E:17:70:A3:80:4C:74:B9:F1:2C:B9:B6:FA:70:39:6D:E9:32:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/aJGaWlz_CFVJ2Nm0gy1yUmZTtS0.roa Signing time: Thu 01 Jan 2026 10:18:26 +0000 ROA not before: Thu 01 Jan 2026 10:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48882 IP address blocks: 91.242.208.0/24 maxlen: 24 91.242.209.0/24 maxlen: 24 91.242.210.0/24 maxlen: 24 91.242.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:da:fb:32:a8:7f:51:fc:31:25:e9:a9:84:22:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db7e1770a3804c74b9f12cb9b6fa70396de9329f Validity Not Before: Jan 1 10:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=68919a5a5cff085549d8d9b4832d72526653b52d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c0:ca:84:92:b4:12:46:3f:17:6e:39:de:72: a4:67:15:3d:98:fd:ea:ae:a9:07:98:15:7e:2e:e7: da:3a:89:b9:0b:63:55:1d:34:f9:ba:59:8c:5f:de: 80:d3:20:4b:68:ba:68:f4:69:e0:00:d4:32:80:df: 74:f8:df:bc:a3:6e:e6:1d:02:ee:c3:4e:5e:18:8b: ed:86:11:03:33:a4:58:d7:8d:72:a0:92:38:56:e0: f8:e9:dc:bb:ce:a2:de:43:5b:1d:d0:b7:c8:34:b6: 29:58:8a:a2:8d:a9:03:47:04:24:ba:b9:a3:c9:89: 79:04:80:71:7e:de:84:b0:fd:e7:19:93:2e:af:91: 38:b5:e2:0e:04:b2:6d:1a:31:d7:93:9b:ab:42:b8: 25:69:86:4a:a7:81:89:a2:01:77:4c:cd:d3:37:f2: 20:53:95:10:cb:2e:66:2c:11:c0:12:09:53:f8:4e: a8:2a:0c:24:a8:e8:e2:04:bb:3c:b2:cc:f5:8e:eb: 25:00:a8:51:40:6d:8e:cf:a6:7d:61:cd:0f:56:f7: 74:e4:69:65:d2:81:22:df:dc:07:1f:87:f1:57:9e: 1b:89:ab:81:fd:67:59:5d:04:bb:bc:9c:c0:22:ad: b2:90:c1:1d:d7:75:ae:5e:5c:a7:0d:cd:95:94:b0: a8:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:91:9A:5A:5C:FF:08:55:49:D8:D9:B4:83:2D:72:52:66:53:B5:2D X509v3 Authority Key Identifier: keyid:DB:7E:17:70:A3:80:4C:74:B9:F1:2C:B9:B6:FA:70:39:6D:E9:32:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/aJGaWlz_CFVJ2Nm0gy1yUmZTtS0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.242.208.0/22 Signature Algorithm: sha256WithRSAEncryption 44:23:dd:e0:25:96:88:22:83:b9:d7:cb:bf:87:e7:0b:df:2e: fc:14:1b:34:57:56:cb:6e:05:8e:8e:e1:5c:7e:b2:ee:03:56: 32:ae:26:e3:90:24:f9:17:81:c0:23:cc:0d:7e:4e:33:b9:f9: 17:bc:9b:d0:4e:69:93:4d:ac:df:2f:b2:af:4c:04:cd:34:a2: 44:fe:d5:75:6c:bf:57:f3:a9:e4:a1:0a:42:70:bd:de:bb:8f: a7:7e:20:11:d1:54:53:82:16:67:d9:fb:75:a0:2e:f0:ba:aa: 2a:47:80:d0:cd:92:38:79:81:6d:ee:39:89:d9:d1:75:dd:0c: 55:55:f0:f8:bf:cc:44:50:4d:1f:43:76:88:ae:8a:2d:6c:4b: 49:39:06:70:57:90:cc:b4:11:6c:04:65:99:37:b2:ce:33:95: e8:bf:47:53:08:90:f2:61:bd:ed:54:7f:ab:87:08:38:cd:f1: 13:55:d3:8a:3f:18:e1:54:70:d8:81:9e:27:b9:a3:c0:9b:7c: 97:c9:bc:18:98:0f:9f:f7:b8:4e:d8:80:7a:ae:76:03:62:d1: 89:5b:04:55:3d:92:b4:03:53:77:e1:42:13:c0:b1:ae:20:59: f4:d7:05:9e:35:a1:98:71:2c:78:f0:a6:5b:78:9f:ea:f8:be: b1:49:84:b6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ENr7Mqh/UfwxJemphCKlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiN2UxNzcwYTM4MDRjNzRiOWYxMmNiOWI2ZmE3MDM5NmRl OTMyOWYwHhcNMjYwMTAxMTAxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODkxOWE1YTVjZmYwODU1NDlkOGQ5YjQ4MzJkNzI1MjY2NTNiNTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8DKhJK0EkY/F2453nKkZxU9mP3q rqkHmBV+LufaOom5C2NVHTT5ulmMX96A0yBLaLpo9GngANQygN90+N+8o27mHQLu w05eGIvthhEDM6RY141yoJI4VuD46dy7zqLeQ1sd0LfINLYpWIqijakDRwQkurmj yYl5BIBxft6EsP3nGZMur5E4teIOBLJtGjHXk5urQrglaYZKp4GJogF3TM3TN/Ig U5UQyy5mLBHAEglT+E6oKgwkqOjiBLs8ssz1juslAKhRQG2Oz6Z9Yc0PVvd05Gll 0oEi39wHH4fxV54biauB/WdZXQS7vJzAIq2ykMEd13WuXlynDc2VlLCobQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGiRmlpc/whVSdjZtIMtclJmU7UtMB8GA1UdIwQY MBaAFNt+F3CjgEx0ufEsubb6cDlt6TKfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjM0WGNLT0FUSFM1OFN5NXR2cHdPVzNwTXA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9kMTEzMGUtZTA3Zi00OWJhLWJlZjQt NmM3NjdiOTJjOWE1LzEvYUpHYVdsel9DRlZKMk5tMGd5MXlVbVpUdFMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9kMTEzMGUtZTA3Zi00OWJhLWJlZjQtNmM3NjdiOTJjOWE1 LzEvMjM0WGNLT0FUSFM1OFN5NXR2cHdPVzNwTXA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW/LQMA0G CSqGSIb3DQEBCwUAA4IBAQBEI93gJZaIIoO518u/h+cL3y78FBs0V1bLbgWOjuFc frLuA1YyribjkCT5F4HAI8wNfk4zufkXvJvQTmmTTazfL7KvTATNNKJE/tV1bL9X 86nkoQpCcL3eu4+nfiAR0VRTghZn2ft1oC7wuqoqR4DQzZI4eYFt7jmJ2dF13QxV VfD4v8xEUE0fQ3aIrootbEtJOQZwV5DMtBFsBGWZN7LOM5Xov0dTCJDyYb3tVH+r hwg4zfETVdOKPxjhVHDYgZ4nuaPAm3yXybwYmA+f97hO2IB6rnYDYtGJWwRVPZK0 A1N34UITwLGuIFn01wWeNaGYcSx48KZbeJ/q+L6xSYS2 -----END CERTIFICATE-----Generated at Mon Feb 9 19:38:20 2026 by rpki-client