This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/D4KKAq0ahmeZ20BwgX9kW7RnziE.roa File: D4KKAq0ahmeZ20BwgX9kW7RnziE.roa (raw, json) Hash identifier: ZoGSRKDSzROcjYhMYpND74w5OQoC/iSALsUjVAn5Y+U= Subject key identifier: 0F:82:8A:02:AD:1A:86:67:99:DB:40:70:81:7F:64:5B:B4:67:CE:21 Certificate issuer: /CN=9b7a62e75e0ec92bb1def1e1955f749ffd455072 Certificate serial: 019B7D5BFD35ED5E63284C740A97A4FC795D Authority key identifier: 9B:7A:62:E7:5E:0E:C9:2B:B1:DE:F1:E1:95:5F:74:9F:FD:45:50:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m3pi514OySux3vHhlV90n_1FUHI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/D4KKAq0ahmeZ20BwgX9kW7RnziE.roa Signing time: Fri 02 Jan 2026 06:18:58 +0000 ROA not before: Fri 02 Jan 2026 06:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197033 IP address blocks: 91.220.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.crl rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft rsync://rpki.ripe.net/repository/DEFAULT/m3pi514OySux3vHhlV90n_1FUHI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:fd:35:ed:5e:63:28:4c:74:0a:97:a4:fc:79:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b7a62e75e0ec92bb1def1e1955f749ffd455072 Validity Not Before: Jan 2 06:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f828a02ad1a866799db4070817f645bb467ce21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e0:64:37:f5:90:ee:0a:51:5d:5f:6b:91:0c: 67:9f:25:dc:96:6a:5c:22:32:71:35:6a:cb:90:e9: 3a:28:3a:9a:e1:db:73:60:5a:68:1c:1d:55:b8:6b: b0:9b:80:9f:ff:f7:04:5e:82:96:6f:d3:d7:26:62: 4c:e9:5e:eb:e0:cd:de:fd:42:51:a4:ab:d3:65:ba: c0:61:a1:d5:88:8d:b0:9b:99:97:ee:7d:4d:6b:42: d2:58:74:41:1a:b9:fc:e8:a8:33:7a:f1:4d:88:c8: 04:09:b9:e0:ca:8a:49:db:5e:1a:a5:60:5e:a6:67: 99:66:98:b3:7b:66:43:8b:7d:b9:d1:38:11:a3:63: c2:1e:5c:e6:ef:a3:fb:bb:0a:26:36:c8:83:2a:2c: 85:b5:c8:94:94:3a:b5:7b:60:5a:88:24:be:e5:d4: c6:cb:fb:b0:51:60:16:f9:5b:53:b6:d3:aa:11:fe: 07:db:ed:ae:65:1e:17:b7:e2:4b:e5:9a:7f:3a:45: 45:dd:4a:fc:e4:95:9d:c7:13:e6:d6:97:00:1a:79: 0d:78:94:87:ae:d4:6b:86:8d:de:63:43:ce:5a:5c: c3:d2:9e:e9:0d:6e:a3:b0:1c:40:82:81:68:e9:d8: 66:38:23:7d:1d:44:dc:db:c1:c2:50:a2:b6:51:98: e3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:82:8A:02:AD:1A:86:67:99:DB:40:70:81:7F:64:5B:B4:67:CE:21 X509v3 Authority Key Identifier: keyid:9B:7A:62:E7:5E:0E:C9:2B:B1:DE:F1:E1:95:5F:74:9F:FD:45:50:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m3pi514OySux3vHhlV90n_1FUHI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/D4KKAq0ahmeZ20BwgX9kW7RnziE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.220.51.0/24 Signature Algorithm: sha256WithRSAEncryption 02:d7:91:3a:ed:b9:47:24:02:a4:00:eb:a4:5a:d2:6a:cf:97: 49:40:00:51:1d:a9:46:90:0f:fc:d9:07:03:c1:79:a2:df:e4: ac:3f:8a:66:dd:3e:cd:d8:b0:e3:35:e8:37:23:03:ef:52:4f: 99:2a:19:fa:bb:15:8a:16:5a:fe:2f:b6:ea:3f:9f:c1:0d:dd: 31:e8:7d:0c:31:3e:7b:f6:f3:87:64:06:f6:34:cd:a8:f0:ba: d1:43:e4:6f:c1:8e:9f:17:76:74:11:47:0f:62:5e:78:00:ac: ff:9d:9a:38:36:66:55:ba:d6:3d:f2:a5:d5:0c:13:6e:40:f9: ef:0b:7d:fd:3f:db:ce:9d:68:cf:c3:71:bc:a7:e8:35:5d:0c: 49:ae:e3:5e:83:54:ee:be:96:b2:36:09:9f:57:b0:9c:93:97: 10:87:e7:75:b2:02:0b:2f:8d:92:e3:54:32:48:da:30:68:17: 02:80:a3:d8:8c:88:88:04:f7:4f:a0:62:94:7e:f3:eb:26:5c: 6d:2d:cb:5f:49:49:69:a8:33:d6:fd:f9:ea:a5:ef:83:1d:ee: 21:48:1e:6a:df:a9:28:5f:0e:58:5a:91:5b:5d:23:d5:61:b4: 09:ca:57:e7:fd:d1:68:ac:e3:c2:72:74:ac:bc:27:e1:b1:06: dc:e5:ce:cd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W/017V5jKEx0Cpek/HldMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliN2E2MmU3NWUwZWM5MmJiMWRlZjFlMTk1NWY3NDlmZmQ0 NTUwNzIwHhcNMjYwMTAyMDYxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjgyOGEwMmFkMWE4NjY3OTlkYjQwNzA4MTdmNjQ1YmI0NjdjZTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneBkN/WQ7gpRXV9rkQxnnyXclmpc IjJxNWrLkOk6KDqa4dtzYFpoHB1VuGuwm4Cf//cEXoKWb9PXJmJM6V7r4M3e/UJR pKvTZbrAYaHViI2wm5mX7n1Na0LSWHRBGrn86KgzevFNiMgECbngyopJ214apWBe pmeZZpize2ZDi3250TgRo2PCHlzm76P7uwomNsiDKiyFtciUlDq1e2BaiCS+5dTG y/uwUWAW+VtTttOqEf4H2+2uZR4Xt+JL5Zp/OkVF3Ur85JWdxxPm1pcAGnkNeJSH rtRrho3eY0POWlzD0p7pDW6jsBxAgoFo6dhmOCN9HUTc28HCUKK2UZjjdQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA+CigKtGoZnmdtAcIF/ZFu0Z84hMB8GA1UdIwQY MBaAFJt6YudeDskrsd7x4ZVfdJ/9RVByMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTNwaTUxNE95U3V4M3ZIaGxWOTBuXzFGVUhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iZTFjYzEtODI4Ni00NGY3LTk4YTIt MDIwZmM2ODEzMTIxLzEvRDRLS0FxMGFobWVaMjBCd2dYOWtXN1JuemlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9iZTFjYzEtODI4Ni00NGY3LTk4YTItMDIwZmM2ODEzMTIx LzEvbTNwaTUxNE95U3V4M3ZIaGxWOTBuXzFGVUhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9wzMA0G CSqGSIb3DQEBCwUAA4IBAQAC15E67blHJAKkAOukWtJqz5dJQABRHalGkA/82QcD wXmi3+SsP4pm3T7N2LDjNeg3IwPvUk+ZKhn6uxWKFlr+L7bqP5/BDd0x6H0MMT57 9vOHZAb2NM2o8LrRQ+RvwY6fF3Z0EUcPYl54AKz/nZo4NmZVutY98qXVDBNuQPnv C339P9vOnWjPw3G8p+g1XQxJruNeg1TuvpayNgmfV7Cck5cQh+d1sgILL42S41Qy SNowaBcCgKPYjIiIBPdPoGKUfvPrJlxtLctfSUlpqDPW/fnqpe+DHe4hSB5q36ko Xw5YWpFbXSPVYbQJylfn/dForOPCcnSsvCfhsQbc5c7N -----END CERTIFICATE-----Generated at Sun Jan 25 23:33:20 2026 by rpki-client