This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/RgWpzavVVfS1b_1UHTxSsoDVFDI.roa File: RgWpzavVVfS1b_1UHTxSsoDVFDI.roa (raw, json) Hash identifier: eoIqVrp2QP0CPLWKfdOhEUrB73wKmzs7Euo9X382JX8= Subject key identifier: 46:05:A9:CD:AB:D5:55:F4:B5:6F:FD:54:1D:3C:52:B2:80:D5:14:32 Certificate issuer: /CN=ba838f1ca8bdcd81c04b6b678e79be614e51b111 Certificate serial: 019B7C80C03B4DB8C19F5B8E09307D27339F Authority key identifier: BA:83:8F:1C:A8:BD:CD:81:C0:4B:6B:67:8E:79:BE:61:4E:51:B1:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/RgWpzavVVfS1b_1UHTxSsoDVFDI.roa Signing time: Fri 02 Jan 2026 02:19:31 +0000 ROA not before: Fri 02 Jan 2026 02:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60633 IP address blocks: 91.230.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:c0:3b:4d:b8:c1:9f:5b:8e:09:30:7d:27:33:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba838f1ca8bdcd81c04b6b678e79be614e51b111 Validity Not Before: Jan 2 02:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4605a9cdabd555f4b56ffd541d3c52b280d51432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:34:01:3e:05:15:55:2a:b6:a6:89:74:a4:83: 67:c6:6e:c7:0c:f2:8e:90:02:15:da:bb:96:18:51: 56:1e:2f:c1:1f:ce:42:c4:fc:82:ae:90:ed:aa:09: 99:c5:e8:d8:3a:7e:b1:5f:0d:eb:16:e2:0c:10:02: 44:b4:bf:b4:f3:b7:c1:fd:d5:8a:c6:e8:a7:99:a9: 88:71:63:f0:43:3d:b2:29:6f:66:40:ce:76:22:e7: d8:9f:e0:8f:fa:fc:2f:bf:35:1d:28:b8:9b:08:ff: 6a:11:86:20:7f:8a:d4:84:8e:fc:d9:b7:23:16:0c: f4:20:5b:20:e5:1a:0e:dd:ee:63:78:e3:41:de:3a: 96:f1:4d:72:f9:48:eb:bd:15:b2:43:f3:1e:67:7a: 6f:1c:35:4b:8e:96:80:ac:95:c1:15:24:a1:95:4e: aa:5e:cf:b8:7d:c9:02:36:b1:e4:4e:24:92:de:ea: 75:a6:c2:33:b9:f7:cf:d4:53:8f:c6:73:b0:b4:90: 3a:08:f2:4b:f7:53:d9:fb:7c:6a:b9:cf:51:a9:4a: 93:f6:ae:eb:5f:38:4a:41:73:82:dc:2d:83:13:c5: e8:cd:1d:df:83:77:0b:c3:5d:d1:d2:6d:27:f6:a7: 2e:9f:1d:c4:b8:f0:f7:5b:20:c0:b6:7b:3c:b5:04: 36:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:05:A9:CD:AB:D5:55:F4:B5:6F:FD:54:1D:3C:52:B2:80:D5:14:32 X509v3 Authority Key Identifier: keyid:BA:83:8F:1C:A8:BD:CD:81:C0:4B:6B:67:8E:79:BE:61:4E:51:B1:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/RgWpzavVVfS1b_1UHTxSsoDVFDI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.230.249.0/24 Signature Algorithm: sha256WithRSAEncryption aa:18:32:b6:4a:85:07:ff:1d:04:a6:3e:40:3b:45:79:c1:87: df:62:fb:ea:f3:01:e8:c5:1a:d6:bf:f6:6a:1c:29:65:b1:d9: b0:27:53:25:ac:fb:f8:20:df:90:5d:bb:f2:89:27:9f:c6:0c: 90:e3:2a:e2:ad:d2:44:5b:e7:f7:c4:d1:55:20:b3:45:e0:98: 09:41:ca:27:81:2c:c6:21:db:32:5f:83:f1:88:70:ef:0f:f0: 6c:db:cd:da:a8:a1:14:4f:c2:6b:3c:8b:86:61:e8:8f:fe:68: 76:6a:e1:a0:41:4e:44:b6:d6:bb:51:f5:73:7e:25:e5:de:47: c0:53:75:3f:68:30:f6:3e:8f:b2:96:1e:2e:94:48:13:bf:41: 13:a1:69:13:bc:8d:15:4e:78:c6:11:24:b0:a6:3c:68:5f:85: 27:5b:63:4b:80:35:3b:3a:2a:e0:bf:3d:78:e1:4c:dc:75:7e: 35:5b:2f:2e:18:78:a8:68:07:12:d9:b1:c6:5d:2f:49:9b:74: 24:b8:23:4b:ea:fa:04:eb:23:ba:92:d7:a2:be:bc:a9:3c:6a: e1:a7:3e:99:93:8a:d8:8d:5d:87:0e:5f:31:3c:42:68:09:dc: 90:7c:44:01:bd:3c:4e:6a:18:75:6e:24:06:fc:ea:ab:67:a9: 13:67:c7:b2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gMA7TbjBn1uOCTB9JzOfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhODM4ZjFjYThiZGNkODFjMDRiNmI2NzhlNzliZTYxNGU1 MWIxMTEwHhcNMjYwMTAyMDIxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjA1YTljZGFiZDU1NWY0YjU2ZmZkNTQxZDNjNTJiMjgwZDUxNDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzQBPgUVVSq2pol0pINnxm7HDPKO kAIV2ruWGFFWHi/BH85CxPyCrpDtqgmZxejYOn6xXw3rFuIMEAJEtL+087fB/dWK xuinmamIcWPwQz2yKW9mQM52IufYn+CP+vwvvzUdKLibCP9qEYYgf4rUhI782bcj Fgz0IFsg5RoO3e5jeONB3jqW8U1y+UjrvRWyQ/MeZ3pvHDVLjpaArJXBFSShlU6q Xs+4fckCNrHkTiSS3up1psIzuffP1FOPxnOwtJA6CPJL91PZ+3xquc9RqUqT9q7r XzhKQXOC3C2DE8XozR3fg3cLw13R0m0n9qcunx3EuPD3WyDAtns8tQQ2mQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEYFqc2r1VX0tW/9VB08UrKA1RQyMB8GA1UdIwQY MBaAFLqDjxyovc2BwEtrZ455vmFOUbERMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW9PUEhLaTl6WUhBUzJ0bmpubS1ZVTVSc1JFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9kYjRlODgtZTU4ZC00MzQ1LTgwYzct MDkzZWI5YTlhYThiLzEvUmdXcHphdlZWZlMxYl8xVUhUeFNzb0RWRkRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9kYjRlODgtZTU4ZC00MzQ1LTgwYzctMDkzZWI5YTlhYThi LzEvdW9PUEhLaTl6WUhBUzJ0bmpubS1ZVTVSc1JFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+b5MA0G CSqGSIb3DQEBCwUAA4IBAQCqGDK2SoUH/x0Epj5AO0V5wYffYvvq8wHoxRrWv/Zq HCllsdmwJ1MlrPv4IN+QXbvyiSefxgyQ4yrirdJEW+f3xNFVILNF4JgJQcongSzG IdsyX4PxiHDvD/Bs283aqKEUT8JrPIuGYeiP/mh2auGgQU5Etta7UfVzfiXl3kfA U3U/aDD2Po+ylh4ulEgTv0EToWkTvI0VTnjGESSwpjxoX4UnW2NLgDU7Oirgvz14 4UzcdX41Wy8uGHioaAcS2bHGXS9Jm3QkuCNL6voE6yO6kteivrypPGrhpz6Zk4rY jV2HDl8xPEJoCdyQfEQBvTxOahh1biQG/OqrZ6kTZ8ey -----END CERTIFICATE-----Generated at Mon Jan 26 00:59:32 2026 by rpki-client