This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/nDnHPolJ7TSeZpO4aoqRkF-x4cs.roa File: nDnHPolJ7TSeZpO4aoqRkF-x4cs.roa (raw, json) Hash identifier: KixiJnL2sI827lC65q66jtsbAXktFeWSXKlsl1bKQkw= Subject key identifier: 9C:39:C7:3E:89:49:ED:34:9E:66:93:B8:6A:8A:91:90:5F:B1:E1:CB Certificate issuer: /CN=8dc69c6bbe89e7c0479b617744a4424f66674944 Certificate serial: 019B78A30E782B0380004ACB0026AE6EABC0 Authority key identifier: 8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/nDnHPolJ7TSeZpO4aoqRkF-x4cs.roa Signing time: Thu 01 Jan 2026 08:18:30 +0000 ROA not before: Thu 01 Jan 2026 08:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59989 IP address blocks: 91.92.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:0e:78:2b:03:80:00:4a:cb:00:26:ae:6e:ab:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8dc69c6bbe89e7c0479b617744a4424f66674944 Validity Not Before: Jan 1 08:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c39c73e8949ed349e6693b86a8a91905fb1e1cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f5:fd:20:23:34:f7:58:11:ed:25:5b:09:08: d4:e2:09:33:4c:7a:3b:c2:3a:6e:a9:00:ca:77:69: 49:8c:5b:46:3c:7b:13:7c:1b:7b:0e:b2:4f:d9:f0: 84:1a:68:26:4c:d9:56:0c:be:ad:54:2a:7a:ec:19: ed:dc:a2:a6:9e:bd:2d:a9:bd:16:c7:c7:11:94:c5: a2:6e:be:be:8b:57:a5:29:e6:69:42:58:f5:ba:f2: e7:c0:df:dd:2b:f0:87:ce:d7:92:0d:b2:6d:0c:93: 84:6e:a5:6c:1e:47:7b:b6:ec:1c:88:66:c5:82:b8: f4:f0:6d:7b:14:26:78:5c:33:77:88:3a:5c:57:4b: 2c:17:e7:fa:a4:aa:31:36:de:40:cf:72:a3:13:7c: 9c:7f:3a:bf:ff:e1:69:df:e1:22:c3:47:1f:33:dc: 60:d3:e2:fd:da:58:8e:2f:59:f6:7d:ba:b9:cd:67: 86:c6:99:d2:c5:63:40:9d:d6:7e:cb:dd:8a:32:9a: 4a:fa:b5:e4:a1:e9:46:13:4a:d3:5d:c8:f2:ee:04: 57:10:33:6f:b6:5d:87:0f:00:40:a4:6b:6b:db:75: 86:fd:3f:75:f6:80:91:c9:67:ad:5f:17:78:5a:47: ad:1b:97:dd:40:82:84:c5:9d:6d:bc:10:50:a5:30: 1a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:39:C7:3E:89:49:ED:34:9E:66:93:B8:6A:8A:91:90:5F:B1:E1:CB X509v3 Authority Key Identifier: keyid:8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/nDnHPolJ7TSeZpO4aoqRkF-x4cs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.92.115.0/24 Signature Algorithm: sha256WithRSAEncryption a6:c9:c6:50:fe:64:f5:77:73:0e:77:27:18:a5:ea:f8:d8:9b: d4:cf:85:22:f2:4f:a1:8b:a8:c0:d7:72:b6:47:44:02:52:c3: b0:72:5d:f8:d2:30:db:0d:af:37:91:6e:c7:c6:65:d9:62:af: cf:57:0f:6a:fc:8b:09:c0:39:d1:ba:f4:e8:f6:39:cb:12:62: f1:12:45:cb:66:1c:61:1f:fd:86:fb:af:f1:1d:79:8c:70:e3: a4:fb:02:2d:ff:fa:2a:04:9b:2c:19:cf:13:6e:11:3e:cf:02: 5d:ac:0f:1d:4d:d4:95:3d:70:b3:ca:7f:cf:04:b7:f2:2f:eb: dc:a9:96:83:a4:27:ec:b3:8d:42:2f:7f:64:db:b3:a6:f1:06: 03:5d:0d:8e:bc:0a:35:20:bb:8c:41:ea:b1:11:d1:3b:fd:73: 58:27:fe:5b:53:3c:eb:aa:86:5b:d5:91:33:59:1b:45:44:a3: ee:e0:e8:06:b0:66:c9:e2:f5:90:0f:19:71:05:da:37:d1:e9: e8:a0:2a:41:fb:f1:25:4f:f6:e5:5a:1a:20:1f:39:67:ae:e6: 69:29:a7:81:74:3d:9d:45:f4:43:c3:9e:1f:d4:58:13:07:3e: 19:06:31:ea:90:62:01:cc:7f:c8:23:dd:30:a5:5d:d1:d3:01: 71:35:0d:72 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ow54KwOAAErLACaubqvAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYzY5YzZiYmU4OWU3YzA0NzliNjE3NzQ0YTQ0MjRmNjY2 NzQ5NDQwHhcNMjYwMTAxMDgxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzM5YzczZTg5NDllZDM0OWU2NjkzYjg2YThhOTE5MDVmYjFlMWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/X9ICM091gR7SVbCQjU4gkzTHo7 wjpuqQDKd2lJjFtGPHsTfBt7DrJP2fCEGmgmTNlWDL6tVCp67Bnt3KKmnr0tqb0W x8cRlMWibr6+i1elKeZpQlj1uvLnwN/dK/CHzteSDbJtDJOEbqVsHkd7tuwciGbF grj08G17FCZ4XDN3iDpcV0ssF+f6pKoxNt5Az3KjE3ycfzq//+Fp3+Eiw0cfM9xg 0+L92liOL1n2fbq5zWeGxpnSxWNAndZ+y92KMppK+rXkoelGE0rTXcjy7gRXEDNv tl2HDwBApGtr23WG/T919oCRyWetXxd4WketG5fdQIKExZ1tvBBQpTAaNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJw5xz6JSe00nmaTuGqKkZBfseHLMB8GA1UdIwQY MBaAFI3GnGu+iefAR5thd0SkQk9mZ0lEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamNhY2E3Nko1OEJIbTJGM1JLUkNUMlpuU1VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8yM2RiNWMtMWExMC00NGM2LTlkNzct YmI1Y2FhYzJlOTAzLzEvbkRuSFBvbEo3VFNlWnBPNGFvcVJrRi14NGNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8yM2RiNWMtMWExMC00NGM2LTlkNzctYmI1Y2FhYzJlOTAz LzEvamNhY2E3Nko1OEJIbTJGM1JLUkNUMlpuU1VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW1xzMA0G CSqGSIb3DQEBCwUAA4IBAQCmycZQ/mT1d3MOdycYper42JvUz4Ui8k+hi6jA13K2 R0QCUsOwcl340jDbDa83kW7HxmXZYq/PVw9q/IsJwDnRuvTo9jnLEmLxEkXLZhxh H/2G+6/xHXmMcOOk+wIt//oqBJssGc8TbhE+zwJdrA8dTdSVPXCzyn/PBLfyL+vc qZaDpCfss41CL39k27Om8QYDXQ2OvAo1ILuMQeqxEdE7/XNYJ/5bUzzrqoZb1ZEz WRtFRKPu4OgGsGbJ4vWQDxlxBdo30enooCpB+/ElT/blWhogHzlnruZpKaeBdD2d RfRDw54f1FgTBz4ZBjHqkGIBzH/II90wpV3R0wFxNQ1y -----END CERTIFICATE-----Generated at Mon Jan 26 01:01:45 2026 by rpki-client