This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/75-KqODx3w8CvM9m5Nq3kRsXyMo.roa File: 75-KqODx3w8CvM9m5Nq3kRsXyMo.roa (raw, json) Hash identifier: A6bAUCVGwzASuTY5FNYElUtdHA4J3zfHfU7IL2XZWu0= Subject key identifier: EF:9F:8A:A8:E0:F1:DF:0F:02:BC:CF:66:E4:DA:B7:91:1B:17:C8:CA Certificate issuer: /CN=8d892f4ded92257e67ba74f1762c8bc914ebd61c Certificate serial: 019B7834DE2CF0B5E9E053C365D4709889F1 Authority key identifier: 8D:89:2F:4D:ED:92:25:7E:67:BA:74:F1:76:2C:8B:C9:14:EB:D6:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYkvTe2SJX5nunTxdiyLyRTr1hw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/75-KqODx3w8CvM9m5Nq3kRsXyMo.roa Signing time: Thu 01 Jan 2026 06:18:09 +0000 ROA not before: Thu 01 Jan 2026 06:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199121 IP address blocks: 91.244.180.0/24 maxlen: 24 2001:67c:7a4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.mft rsync://rpki.ripe.net/repository/DEFAULT/jYkvTe2SJX5nunTxdiyLyRTr1hw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:de:2c:f0:b5:e9:e0:53:c3:65:d4:70:98:89:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d892f4ded92257e67ba74f1762c8bc914ebd61c Validity Not Before: Jan 1 06:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ef9f8aa8e0f1df0f02bccf66e4dab7911b17c8ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fe:fe:11:aa:86:0a:02:d5:53:60:d8:19:84: 2a:57:c9:91:b8:fd:75:18:4f:6c:0a:16:81:2f:85: 38:fe:02:a3:ae:5f:a8:f5:fd:db:26:d1:c9:bc:c3: 95:bc:04:2f:e8:a7:72:ed:d7:c1:9e:9e:af:13:d9: a4:e0:1e:a8:73:e9:ea:79:92:34:b7:dd:de:d2:f6: c1:b6:01:00:6f:d0:2b:ba:f6:e7:0f:56:89:b0:ac: 0e:0c:51:da:43:48:fd:09:26:bf:a5:7e:b4:c9:e5: bc:f0:a4:83:68:7c:fe:e9:4d:3c:f5:2e:1e:9d:18: fd:c0:79:c6:61:dd:a6:e5:37:59:ed:9c:ca:b5:6d: 33:52:06:96:ef:9c:9d:36:cd:83:44:d6:0c:66:a1: 10:dd:d8:f4:06:34:cb:af:81:3d:85:6a:5b:e4:8e: d1:90:62:a1:0f:25:39:dc:02:ef:66:8c:b9:33:9b: 97:24:90:99:19:6c:2a:76:97:c9:b2:ee:48:f0:ad: e8:ea:ec:83:18:e4:bb:45:29:df:5d:1f:40:73:8c: 11:10:01:6b:a7:98:6e:1f:1f:38:fb:b3:fe:93:0a: 36:1a:f2:2c:33:ea:19:34:f9:e5:9e:a8:f3:bf:ed: 71:3b:01:fd:ad:7a:7e:48:e3:90:6d:36:6d:cd:0c: 95:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:9F:8A:A8:E0:F1:DF:0F:02:BC:CF:66:E4:DA:B7:91:1B:17:C8:CA X509v3 Authority Key Identifier: keyid:8D:89:2F:4D:ED:92:25:7E:67:BA:74:F1:76:2C:8B:C9:14:EB:D6:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYkvTe2SJX5nunTxdiyLyRTr1hw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/75-KqODx3w8CvM9m5Nq3kRsXyMo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.244.180.0/24 IPv6: 2001:67c:7a4::/48 Signature Algorithm: sha256WithRSAEncryption 8d:26:f9:74:6e:61:9e:a7:e7:a4:c7:56:e1:3c:b3:d6:2c:de: d2:96:ff:d1:61:79:68:b4:98:49:51:70:ae:7b:f2:5e:25:d9: 05:bc:a0:73:c6:eb:65:bd:bd:b2:6d:49:47:ac:9b:4e:07:5a: 22:b8:66:7b:a4:fc:3b:71:94:16:4a:0a:39:61:24:b2:ea:68: a6:83:49:14:c1:f5:b8:ff:b4:41:05:6c:15:47:a4:bf:83:2c: 67:50:ea:e1:02:ed:74:a9:de:70:a3:96:42:e7:58:ba:f4:3d: bf:6e:01:67:75:85:2f:c1:4f:25:dc:ed:a8:c5:d0:fa:a1:72: 1c:1d:21:65:6d:29:86:88:7f:ce:ba:4b:40:40:d8:89:89:b4: 12:4b:98:95:26:09:a3:50:98:05:62:03:00:f2:33:bc:37:92: fe:3d:c7:cf:be:0a:a2:b3:77:2a:8a:c3:fc:21:80:42:65:9f: e6:28:93:35:43:c9:1b:b3:50:33:12:30:51:1a:e8:7d:be:1f: 2a:02:45:b0:48:b6:25:36:d1:35:bd:7f:54:de:e4:cc:6a:9a: 71:15:67:52:51:1f:91:b3:0d:ab:9e:0c:90:87:f0:b8:a5:6e: a1:f2:87:b4:4e:d1:8e:04:61:f1:3f:04:2c:e3:47:61:a3:0c: 97:53:d2:af -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt4NN4s8LXp4FPDZdRwmInxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkODkyZjRkZWQ5MjI1N2U2N2JhNzRmMTc2MmM4YmM5MTRl YmQ2MWMwHhcNMjYwMTAxMDYxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjlmOGFhOGUwZjFkZjBmMDJiY2NmNjZlNGRhYjc5MTFiMTdjOGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsP7+EaqGCgLVU2DYGYQqV8mRuP11 GE9sChaBL4U4/gKjrl+o9f3bJtHJvMOVvAQv6Kdy7dfBnp6vE9mk4B6oc+nqeZI0 t93e0vbBtgEAb9AruvbnD1aJsKwODFHaQ0j9CSa/pX60yeW88KSDaHz+6U089S4e nRj9wHnGYd2m5TdZ7ZzKtW0zUgaW75ydNs2DRNYMZqEQ3dj0BjTLr4E9hWpb5I7R kGKhDyU53ALvZoy5M5uXJJCZGWwqdpfJsu5I8K3o6uyDGOS7RSnfXR9Ac4wREAFr p5huHx84+7P+kwo2GvIsM+oZNPnlnqjzv+1xOwH9rXp+SOOQbTZtzQyVlwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFO+fiqjg8d8PArzPZuTat5EbF8jKMB8GA1UdIwQY MBaAFI2JL03tkiV+Z7p08XYsi8kU69YcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvallrdlRlMlNKWDVudW5UeGRpeUx5UlRyMWh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9kMWE3MTctNGNmMy00YWU1LWIwZmMt MGJkOWRkZjM5NzBlLzEvNzUtS3FPRHgzdzhDdk05bTVOcTNrUnNYeU1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9kMWE3MTctNGNmMy00YWU1LWIwZmMtMGJkOWRkZjM5NzBl LzEvallrdlRlMlNKWDVudW5UeGRpeUx5UlRyMWh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW/S0MA8E AgACMAkDBwAgAQZ8B6QwDQYJKoZIhvcNAQELBQADggEBAI0m+XRuYZ6n56THVuE8 s9Ys3tKW/9FheWi0mElRcK578l4l2QW8oHPG62W9vbJtSUesm04HWiK4Znuk/Dtx lBZKCjlhJLLqaKaDSRTB9bj/tEEFbBVHpL+DLGdQ6uEC7XSp3nCjlkLnWLr0Pb9u AWd1hS/BTyXc7ajF0PqhchwdIWVtKYaIf866S0BA2ImJtBJLmJUmCaNQmAViAwDy M7w3kv49x8++CqKzdyqKw/whgEJln+YokzVDyRuzUDMSMFEa6H2+HyoCRbBItiU2 0TW9f1Te5MxqmnEVZ1JRH5GzDaueDJCH8LilbqHyh7RO0Y4EYfE/BCzjR2GjDJdT 0q8= -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:53 2026 by rpki-client