This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/no_wDGwfE_WbkKb8o3sJUNrOhEE.roa File: no_wDGwfE_WbkKb8o3sJUNrOhEE.roa (raw, json) Hash identifier: 6CvslUu97p8/apCEYmsvCbAOl3BSUmDUt8aWBZFz6sk= Subject key identifier: 9E:8F:F0:0C:6C:1F:13:F5:9B:90:A6:FC:A3:7B:09:50:DA:CE:84:41 Certificate issuer: /CN=04d3c5de9ff3cce131c8bfcdcce333947d92635e Certificate serial: 019B20DD40B6415FBFB8AA43826A9A600122 Authority key identifier: 04:D3:C5:DE:9F:F3:CC:E1:31:C8:BF:CD:CC:E3:33:94:7D:92:63:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/no_wDGwfE_WbkKb8o3sJUNrOhEE.roa Signing time: Mon 15 Dec 2025 07:15:29 +0000 ROA not before: Mon 15 Dec 2025 07:15:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214824 IP address blocks: 91.226.244.0/24 maxlen: 24 2a14:4e40::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.crl rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:dd:40:b6:41:5f:bf:b8:aa:43:82:6a:9a:60:01:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04d3c5de9ff3cce131c8bfcdcce333947d92635e Validity Not Before: Dec 15 07:15:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9e8ff00c6c1f13f59b90a6fca37b0950dace8441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a0:d0:95:c3:e2:d8:f1:d0:c3:82:8f:48:37: bd:5c:f2:59:a0:55:3c:52:85:11:81:1e:e0:86:d4: 80:ef:15:61:3c:41:7b:ee:b1:db:17:0f:df:2a:07: 89:bc:7f:df:0c:c9:16:51:2e:40:11:97:d2:38:87: 27:f4:d1:69:f2:f6:cf:ea:77:8e:e1:a5:2f:89:4f: c6:79:9f:a8:d2:82:c7:14:7e:a6:7d:fc:87:8f:6d: a5:32:e9:fe:d7:ab:b2:30:2d:ea:6a:8e:75:43:e9: a1:a9:72:a2:0d:f4:ee:a0:a8:7a:88:03:6d:4a:4b: 52:a1:2e:a8:42:70:f8:18:af:e8:9f:a6:a1:8d:e8: 54:ba:79:4c:26:e0:11:36:ca:ed:02:2e:07:54:e5: 5a:5a:94:08:70:89:27:2b:60:0d:0c:1f:f1:3b:f5: 43:59:36:a2:a9:f3:0a:52:c1:85:97:27:d9:c7:42: 44:be:ad:84:1c:89:cf:2b:a4:3f:3a:d0:b8:7c:5f: 24:64:65:a0:f2:f0:9b:93:d9:d7:0d:17:23:ad:fe: 7b:6a:f6:fb:6e:0f:7c:ba:7b:cc:c4:f8:61:5d:bd: f6:c4:a5:37:6e:b2:77:b2:1d:fd:64:c3:7c:1d:4b: 1f:62:a8:7b:76:cb:58:da:95:42:44:33:a0:18:1c: 74:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:8F:F0:0C:6C:1F:13:F5:9B:90:A6:FC:A3:7B:09:50:DA:CE:84:41 X509v3 Authority Key Identifier: keyid:04:D3:C5:DE:9F:F3:CC:E1:31:C8:BF:CD:CC:E3:33:94:7D:92:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/no_wDGwfE_WbkKb8o3sJUNrOhEE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.226.244.0/24 IPv6: 2a14:4e40::/38 Signature Algorithm: sha256WithRSAEncryption 54:f0:7a:38:f7:52:55:fa:01:ec:54:c3:e5:26:49:b5:11:f0: c5:32:71:fa:04:1b:93:bd:80:e3:45:c5:9a:0f:a4:0f:a3:34: ca:c8:d5:1c:d0:94:82:9b:0b:62:9c:c6:5a:0b:b0:25:a0:ea: af:80:6f:13:73:35:44:f4:aa:fd:6f:8c:e9:f5:b4:18:3b:3f: fd:48:84:86:0d:e8:97:2f:96:0c:85:95:69:82:e3:d5:97:bc: 90:4e:d1:7c:63:ab:d9:6a:4d:13:de:ab:36:b3:c5:08:3c:e0: 76:b5:d8:b6:fe:36:3d:4a:dc:e4:8d:1a:7b:78:31:ee:43:a5: c8:63:1b:e6:8c:00:b3:79:3e:c4:64:4c:48:10:1b:d1:84:0c: 7a:ea:91:79:1c:cd:0f:42:57:ee:c2:78:c5:35:02:20:e9:26: 77:19:eb:48:4c:c0:51:16:eb:9b:5d:a2:5b:76:2a:65:92:f6: 78:d0:7c:88:46:ff:8c:79:7c:22:85:d3:9e:a2:1f:a0:d9:5e: e6:73:f6:a7:c4:26:05:01:e0:15:69:cf:b5:ec:5e:9d:85:a4: e2:15:24:74:73:43:48:b1:29:66:86:d2:22:30:b0:16:c9:83: 3f:f5:b8:f0:46:1f:ec:65:1b:ed:f0:26:15:99:86:b1:f2:6b: c5:5f:d7:5d -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZsg3UC2QV+/uKpDgmqaYAEiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0ZDNjNWRlOWZmM2NjZTEzMWM4YmZjZGNjZTMzMzk0N2Q5 MjYzNWUwHhcNMjUxMjE1MDcxNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZThmZjAwYzZjMWYxM2Y1OWI5MGE2ZmNhMzdiMDk1MGRhY2U4NDQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KDQlcPi2PHQw4KPSDe9XPJZoFU8 UoURgR7ghtSA7xVhPEF77rHbFw/fKgeJvH/fDMkWUS5AEZfSOIcn9NFp8vbP6neO 4aUviU/GeZ+o0oLHFH6mffyHj22lMun+16uyMC3qao51Q+mhqXKiDfTuoKh6iANt SktSoS6oQnD4GK/on6ahjehUunlMJuARNsrtAi4HVOVaWpQIcIknK2ANDB/xO/VD WTaiqfMKUsGFlyfZx0JEvq2EHInPK6Q/OtC4fF8kZGWg8vCbk9nXDRcjrf57avb7 bg98unvMxPhhXb32xKU3brJ3sh39ZMN8HUsfYqh7dstY2pVCRDOgGBx0RwIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFJ6P8AxsHxP1m5Cm/KN7CVDazoRBMB8GA1UdIwQY MBaAFATTxd6f88zhMci/zczjM5R9kmNeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQk5QRjNwX3p6T0V4eUxfTnpPTXpsSDJTWTE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8yNjA3ZmItNmI4NC00NTZlLWFhMDkt OWQ4YmM4MTE1ZjY4LzEvbm9fd0RHd2ZFX1dia0tiOG8zc0pVTnJPaEVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS8yNjA3ZmItNmI4NC00NTZlLWFhMDktOWQ4YmM4MTE1ZjY4 LzEvQk5QRjNwX3p6T0V4eUxfTnpPTXpsSDJTWTE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAW+L0MA4E AgACMAgDBgIqFE5AADANBgkqhkiG9w0BAQsFAAOCAQEAVPB6OPdSVfoB7FTD5SZJ tRHwxTJx+gQbk72A40XFmg+kD6M0ysjVHNCUgpsLYpzGWguwJaDqr4BvE3M1RPSq /W+M6fW0GDs//UiEhg3oly+WDIWVaYLj1Ze8kE7RfGOr2WpNE96rNrPFCDzgdrXY tv42PUrc5I0ae3gx7kOlyGMb5owAs3k+xGRMSBAb0YQMeuqReRzND0JX7sJ4xTUC IOkmdxnrSEzAURbrm12iW3YqZZL2eNB8iEb/jHl8IoXTnqIfoNle5nP2p8QmBQHg FWnPtexenYWk4hUkdHNDSLEpZobSIjCwFsmDP/W48EYf7GUb7fAmFZmGsfJrxV/X XQ== -----END CERTIFICATE-----Generated at Thu Dec 18 18:26:25 2025 by rpki-client