This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/0Jn8rw6IOKtmo3dh-wHpzJRAjY8.roa File: 0Jn8rw6IOKtmo3dh-wHpzJRAjY8.roa (raw, json) Hash identifier: N7l+NKKsVk4YN5XAlCqWcpG/YCWJkdcD2E3VToSb87g= Subject key identifier: D0:99:FC:AF:0E:88:38:AB:66:A3:77:61:FB:01:E9:CC:94:40:8D:8F Certificate issuer: /CN=bd19d4535c7e62b921e859e6557b821f278e716a Certificate serial: 019AA095FCEAD856686E482D381D801B0106 Authority key identifier: BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/0Jn8rw6IOKtmo3dh-wHpzJRAjY8.roa Signing time: Thu 20 Nov 2025 09:26:15 +0000 ROA not before: Thu 20 Nov 2025 09:26:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 91.239.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a0:95:fc:ea:d8:56:68:6e:48:2d:38:1d:80:1b:01:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd19d4535c7e62b921e859e6557b821f278e716a Validity Not Before: Nov 20 09:26:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d099fcaf0e8838ab66a37761fb01e9cc94408d8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1f:96:0b:20:48:22:1a:1c:e3:e1:0b:41:e7: aa:8c:d1:36:ff:a4:c5:25:11:67:c0:f6:7a:f7:60: ab:5f:84:f9:7d:4f:94:ac:94:5c:01:10:3b:8a:ee: 66:1d:a0:bc:f0:27:c6:3a:31:c6:fa:7a:45:59:aa: 79:17:c4:a6:6b:67:0a:e5:21:11:cc:b5:f4:7b:86: 87:02:38:22:52:98:3e:b9:74:3e:e0:e6:27:9e:13: 2e:27:f4:55:bb:8f:11:0c:db:23:02:54:fd:18:93: 8d:bb:ec:53:7c:3c:6e:dd:9e:a8:8a:c7:1e:94:de: 69:fa:5b:ce:1b:d3:5e:91:0c:79:06:ff:e2:4a:b5: 0a:03:4e:b5:22:05:79:94:c8:60:33:38:d1:6e:e6: 40:8d:24:91:8b:b0:84:e4:d3:b4:5c:33:4a:b5:05: 61:b0:9d:50:ed:43:be:cd:78:b7:ea:29:f8:df:61: 5d:06:be:91:3b:46:88:47:3f:67:22:54:31:43:dc: ac:ce:a8:a4:6a:8d:cf:7d:17:0f:a3:4f:7c:59:46: d6:93:37:bf:8b:bb:df:6d:f7:52:d9:69:e7:09:96: 51:3d:f5:99:c4:c1:1e:95:8a:5e:2e:78:83:1b:a0: 78:78:8d:35:4a:2c:53:71:f5:40:7f:31:4c:6b:8f: 6e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:99:FC:AF:0E:88:38:AB:66:A3:77:61:FB:01:E9:CC:94:40:8D:8F X509v3 Authority Key Identifier: keyid:BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/0Jn8rw6IOKtmo3dh-wHpzJRAjY8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.239.211.0/24 Signature Algorithm: sha256WithRSAEncryption 84:76:eb:9c:64:2b:da:46:bc:6e:57:a2:39:e1:da:07:5d:36: 61:52:e7:ec:fe:65:43:7d:92:4e:6f:16:8c:ff:85:9e:04:c0: 8e:67:53:ef:58:e9:46:97:49:7c:d5:a9:35:55:01:b1:ab:ad: 75:27:e4:78:63:58:d7:df:10:ff:4a:1c:42:60:c5:70:a0:1f: f9:fa:6f:1c:1d:4d:70:a4:3a:e9:07:48:89:ef:53:f7:ce:31: 36:cd:80:f1:f2:1b:00:1c:22:13:20:52:8f:83:29:52:0f:e2: 1f:e5:9e:26:7e:46:67:ac:e5:ca:ab:84:76:f4:08:b4:19:e2: e3:05:e5:18:3f:24:43:a1:71:5e:d5:79:ec:95:7b:a5:95:9b: f4:f5:56:12:76:1f:16:81:d4:b5:3d:c6:01:82:fb:db:30:ec: 15:40:9a:af:ad:de:b4:bf:ee:57:c0:6b:a2:a8:cb:9d:c0:2f: bd:30:3d:be:7f:73:8a:0d:0c:bf:f2:23:39:fc:06:50:3c:e2: b0:0e:f6:2b:96:31:42:14:e6:8b:67:27:38:0d:87:79:16:a9: 09:01:32:6a:0e:6b:b1:03:98:3a:1b:19:89:0d:1f:15:ee:a5: 9d:12:ff:dd:4f:8e:b6:9d:5f:6b:8f:eb:a2:73:f5:14:ab:e0: 4f:c9:1d:c7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqglfzq2FZobkgtOB2AGwEGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkMTlkNDUzNWM3ZTYyYjkyMWU4NTllNjU1N2I4MjFmMjc4 ZTcxNmEwHhcNMjUxMTIwMDkyNjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDk5ZmNhZjBlODgzOGFiNjZhMzc3NjFmYjAxZTljYzk0NDA4ZDhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwx+WCyBIIhoc4+ELQeeqjNE2/6TF JRFnwPZ692CrX4T5fU+UrJRcARA7iu5mHaC88CfGOjHG+npFWap5F8Sma2cK5SER zLX0e4aHAjgiUpg+uXQ+4OYnnhMuJ/RVu48RDNsjAlT9GJONu+xTfDxu3Z6oisce lN5p+lvOG9NekQx5Bv/iSrUKA061IgV5lMhgMzjRbuZAjSSRi7CE5NO0XDNKtQVh sJ1Q7UO+zXi36in432FdBr6RO0aIRz9nIlQxQ9yszqikao3PfRcPo098WUbWkze/ i7vfbfdS2WnnCZZRPfWZxMEelYpeLniDG6B4eI01SixTcfVAfzFMa49uHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNCZ/K8OiDirZqN3YfsB6cyUQI2PMB8GA1UdIwQY MBaAFL0Z1FNcfmK5IehZ5lV7gh8njnFqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlJuVVUxeC1ZcmtoNkZubVZYdUNIeWVPY1dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8yNTk5ZjktNmY3Ni00ZGI2LWJjYTct YzEzMzFmNDlmYzA5LzEvMEpuOHJ3NklPS3RtbzNkaC13SHB6SlJBalk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy8yNTk5ZjktNmY3Ni00ZGI2LWJjYTctYzEzMzFmNDlmYzA5 LzEvdlJuVVUxeC1ZcmtoNkZubVZYdUNIeWVPY1dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+/TMA0G CSqGSIb3DQEBCwUAA4IBAQCEduucZCvaRrxuV6I54doHXTZhUufs/mVDfZJObxaM /4WeBMCOZ1PvWOlGl0l81ak1VQGxq611J+R4Y1jX3xD/ShxCYMVwoB/5+m8cHU1w pDrpB0iJ71P3zjE2zYDx8hsAHCITIFKPgylSD+If5Z4mfkZnrOXKq4R29Ai0GeLj BeUYPyRDoXFe1XnslXullZv09VYSdh8WgdS1PcYBgvvbMOwVQJqvrd60v+5XwGui qMudwC+9MD2+f3OKDQy/8iM5/AZQPOKwDvYrljFCFOaLZyc4DYd5FqkJATJqDmux A5g6GxmJDR8V7qWdEv/dT462nV9rj+uic/UUq+BPyR3H -----END CERTIFICATE-----Generated at Sat Dec 6 16:34:56 2025 by rpki-client