This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/cvG-jh0yKd3zLB32ubBPh1-7dwo.roa File: cvG-jh0yKd3zLB32ubBPh1-7dwo.roa (raw, json) Hash identifier: V6xzuEneOg5ndhVSUWtzhVClWw0yZUrA/g0C/6rX9iw= Subject key identifier: 72:F1:BE:8E:1D:32:29:DD:F3:2C:1D:F6:B9:B0:4F:87:5F:BB:77:0A Certificate issuer: /CN=b3d66297c5cdbd36d86849ddeae7985979f450ca Certificate serial: 019B7F15ECF9537134EDDA473A675607E713 Authority key identifier: B3:D6:62:97:C5:CD:BD:36:D8:68:49:DD:EA:E7:98:59:79:F4:50:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/cvG-jh0yKd3zLB32ubBPh1-7dwo.roa Signing time: Fri 02 Jan 2026 14:21:41 +0000 ROA not before: Fri 02 Jan 2026 14:21:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216108 IP address blocks: 91.241.15.0/24 maxlen: 24 2a01:9c00:c001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:ec:f9:53:71:34:ed:da:47:3a:67:56:07:e7:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3d66297c5cdbd36d86849ddeae7985979f450ca Validity Not Before: Jan 2 14:21:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=72f1be8e1d3229ddf32c1df6b9b04f875fbb770a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:83:1b:c2:44:b7:b4:24:cb:3c:20:0c:de:b5: 7b:19:04:06:67:33:08:da:b6:18:f3:db:69:bc:bc: 40:94:8d:c3:57:9b:e1:8f:ad:3c:e0:11:4b:82:6a: 24:09:25:77:4d:ee:87:ee:62:2b:be:a6:a1:3e:bc: b0:91:59:b1:7a:af:1e:ff:37:62:19:d4:2d:0a:b1: d5:97:62:98:e8:1c:c4:b8:fe:e9:08:04:f8:32:ed: 04:99:89:64:41:71:c7:a5:66:e3:fc:d6:9c:90:85: c7:67:75:83:92:7f:85:de:52:10:8b:fa:de:91:d1: ba:84:b7:a2:63:df:10:39:19:b6:29:ef:e4:ce:06: 82:00:cc:93:02:43:f9:2b:9d:bf:fd:81:4a:a4:ac: 40:33:d1:4c:84:02:a7:5b:df:a7:31:f0:64:e1:9f: 84:27:94:53:10:46:2d:b6:e3:c1:91:28:e6:d6:bd: 9a:0d:50:46:d4:92:b0:a1:65:6c:0c:fe:1d:4a:8c: ef:97:42:85:fc:63:a0:de:b8:09:5c:54:f4:49:8e: 1d:c9:b6:6b:a8:7e:00:f2:86:7a:84:4f:ee:ff:b2: ec:85:33:5d:47:fa:58:b1:b2:8a:36:9e:19:b3:58: ce:b3:b4:c2:50:72:25:e0:9c:50:6e:75:83:dd:25: 24:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:F1:BE:8E:1D:32:29:DD:F3:2C:1D:F6:B9:B0:4F:87:5F:BB:77:0A X509v3 Authority Key Identifier: keyid:B3:D6:62:97:C5:CD:BD:36:D8:68:49:DD:EA:E7:98:59:79:F4:50:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/cvG-jh0yKd3zLB32ubBPh1-7dwo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.241.15.0/24 IPv6: 2a01:9c00:c001::/48 Signature Algorithm: sha256WithRSAEncryption 9d:54:1c:d5:3e:bf:5d:88:a3:60:0f:ae:8e:2d:3b:fb:93:25: 00:9f:70:e3:12:10:be:7f:af:14:1e:c2:a5:9e:ba:9e:8b:9a: d4:c6:8b:87:bc:ca:6c:fb:85:27:46:ed:4c:e8:57:c4:03:11: 27:3d:f9:ac:91:54:cd:da:4b:ab:af:94:5a:f1:6f:3c:0c:45: a7:48:46:58:32:7e:de:3f:29:31:71:59:32:ee:5d:6b:00:8e: ff:0a:f5:f8:90:be:f9:60:95:3d:a5:d4:c2:9b:2c:94:d1:38: ec:37:da:25:9d:c7:07:d7:5f:7c:3c:57:b2:d5:1e:e5:c9:e5: 8e:92:45:76:b0:73:88:0b:c6:8b:a5:3e:48:8a:ef:0f:78:bd: 0b:d2:2f:46:12:da:10:fa:cc:fe:f5:8a:ac:4b:af:96:b0:a8: 37:07:b6:ef:0c:61:d6:ea:ec:6e:1f:fd:3a:08:7d:01:3d:5d: 71:ac:fc:f0:62:39:1e:d4:f2:de:f8:ab:f0:91:c9:8b:6d:49: 80:8e:dc:9c:98:67:2f:5d:db:ec:fb:2b:11:32:7b:3a:8f:60: 24:a7:d0:f3:d4:0c:11:fa:0a:59:2b:18:af:e3:ca:df:4f:76: 73:ff:63:37:88:04:29:b0:a0:82:eb:f8:39:ef:06:68:2e:f6: 3c:5d:4c:71 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/Fez5U3E07dpHOmdWB+cTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzZDY2Mjk3YzVjZGJkMzZkODY4NDlkZGVhZTc5ODU5Nzlm NDUwY2EwHhcNMjYwMTAyMTQyMTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MmYxYmU4ZTFkMzIyOWRkZjMyYzFkZjZiOWIwNGY4NzVmYmI3NzBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34MbwkS3tCTLPCAM3rV7GQQGZzMI 2rYY89tpvLxAlI3DV5vhj6084BFLgmokCSV3Te6H7mIrvqahPrywkVmxeq8e/zdi GdQtCrHVl2KY6BzEuP7pCAT4Mu0EmYlkQXHHpWbj/NackIXHZ3WDkn+F3lIQi/re kdG6hLeiY98QORm2Ke/kzgaCAMyTAkP5K52//YFKpKxAM9FMhAKnW9+nMfBk4Z+E J5RTEEYttuPBkSjm1r2aDVBG1JKwoWVsDP4dSozvl0KF/GOg3rgJXFT0SY4dybZr qH4A8oZ6hE/u/7LshTNdR/pYsbKKNp4Zs1jOs7TCUHIl4JxQbnWD3SUk0QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFHLxvo4dMind8ywd9rmwT4dfu3cKMB8GA1UdIwQY MBaAFLPWYpfFzb022GhJ3ernmFl59FDKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczlaaWw4WE52VGJZYUVuZDZ1ZVlXWG4wVU1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS85MmMxY2YtNWEyMi00NTNjLTkwN2Yt ZWIxZjg3MTVlZWMwLzEvY3ZHLWpoMHlLZDN6TEIzMnViQlBoMS03ZHdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS85MmMxY2YtNWEyMi00NTNjLTkwN2YtZWIxZjg3MTVlZWMw LzEvczlaaWw4WE52VGJZYUVuZDZ1ZVlXWG4wVU1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW/EPMA8E AgACMAkDBwAqAZwAwAEwDQYJKoZIhvcNAQELBQADggEBAJ1UHNU+v12Io2APro4t O/uTJQCfcOMSEL5/rxQewqWeup6LmtTGi4e8ymz7hSdG7UzoV8QDESc9+ayRVM3a S6uvlFrxbzwMRadIRlgyft4/KTFxWTLuXWsAjv8K9fiQvvlglT2l1MKbLJTROOw3 2iWdxwfXX3w8V7LVHuXJ5Y6SRXawc4gLxoulPkiK7w94vQvSL0YS2hD6zP71iqxL r5awqDcHtu8MYdbq7G4f/ToIfQE9XXGs/PBiOR7U8t74q/CRyYttSYCO3JyYZy9d 2+z7KxEyezqPYCSn0PPUDBH6ClkrGK/jyt9PdnP/YzeIBCmwoILr+DnvBmgu9jxd THE= -----END CERTIFICATE-----Generated at Mon Jan 26 03:07:29 2026 by rpki-client