This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/phGDcnbsUAWKUDua2zfBGnxvvHA.roa File: phGDcnbsUAWKUDua2zfBGnxvvHA.roa (raw, json) Hash identifier: PmqHP8zrCvf2Ikf1cbZi674FwG6W6lFWBsYqFkhhcnA= Subject key identifier: A6:11:83:72:76:EC:50:05:8A:50:3B:9A:DB:37:C1:1A:7C:6F:BC:70 Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674 Certificate serial: 019B7758F1945E377D387C11E1A6A8870505 Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/phGDcnbsUAWKUDua2zfBGnxvvHA.roa Signing time: Thu 01 Jan 2026 02:17:56 +0000 ROA not before: Thu 01 Jan 2026 02:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204267 IP address blocks: 91.205.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:f1:94:5e:37:7d:38:7c:11:e1:a6:a8:87:05:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674 Validity Not Before: Jan 1 02:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a611837276ec50058a503b9adb37c11a7c6fbc70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b6:8e:3b:2c:63:46:e7:e7:7b:23:13:97:47: 22:a1:b5:5e:56:1d:c5:1e:17:99:ed:e4:a2:58:c5: c4:8f:57:58:67:2c:52:6a:8c:fd:8e:ee:cb:6a:a3: 8c:55:dc:d2:98:43:a4:6c:db:f7:83:aa:4f:2f:81: c3:1e:96:88:b7:de:65:f2:7a:d9:0f:4c:3f:1b:a6: 45:2a:f2:33:7b:63:1b:ad:fe:e6:cc:25:24:1c:dc: 42:b3:1c:2c:ae:96:22:f4:37:2f:57:c5:bc:c5:ea: 8e:2c:35:c4:8d:51:81:2e:ea:ad:06:73:5e:71:d2: 4e:09:4f:24:01:4f:be:11:80:74:b9:c5:e9:7d:1e: f6:55:8f:8b:10:08:d9:4e:4f:3f:a8:6e:3e:42:ef: 98:f2:53:ad:91:ae:25:2e:1d:42:e2:94:44:32:92: 61:b1:e6:77:17:af:4a:16:e5:3f:d4:b1:46:4c:25: 5b:7b:36:75:74:9d:ec:0c:8c:82:d5:66:b6:b7:e0: ff:e6:67:8c:c0:6d:9e:ca:46:28:87:68:a8:bc:cb: 46:e7:44:f0:98:18:35:ae:fc:bc:a7:1b:b4:85:41: f5:8e:d4:17:2e:74:bf:45:d6:cd:52:fa:e4:51:81: a8:df:31:e2:3f:4f:fd:34:a0:38:18:5c:8c:c3:e8: 8f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:11:83:72:76:EC:50:05:8A:50:3B:9A:DB:37:C1:1A:7C:6F:BC:70 X509v3 Authority Key Identifier: keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/phGDcnbsUAWKUDua2zfBGnxvvHA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.205.198.0/24 Signature Algorithm: sha256WithRSAEncryption b2:be:94:04:64:6b:18:65:eb:34:07:1b:8d:fc:d0:4f:06:5a: fd:70:e7:6f:f8:ee:53:e1:71:3e:52:2e:f7:b7:a6:00:04:86: 45:5d:db:6c:b9:71:9a:8f:36:e8:c9:2c:68:b0:84:66:6f:2e: 96:9f:1f:43:57:94:5e:01:e6:2d:2e:68:cc:7a:09:ee:5e:59: b5:87:ea:05:18:e5:e1:28:ca:87:7b:d0:e1:88:87:c8:37:e8: 03:4e:46:66:63:e8:57:98:a0:29:c5:c4:8b:b8:18:2e:f4:ad: 75:2b:e6:a9:8b:44:73:66:b9:c2:5d:cb:95:3e:67:11:be:c3: 37:3b:66:f3:62:51:58:55:ff:77:f8:3a:ef:d7:42:43:9e:dd: 6e:25:4e:79:ec:fd:01:8b:3a:ba:79:3f:35:8b:d7:24:6b:8b: 5b:7b:8b:b7:2b:e5:d8:60:5a:12:26:3c:81:0c:cb:97:ea:66: 7d:f4:44:ce:95:4b:ed:6f:8c:a2:66:74:36:41:3d:c5:42:1f: b8:25:52:b3:63:04:2f:bc:aa:76:fb:8e:33:3e:04:b0:c9:d9: df:6b:77:eb:81:aa:32:42:42:92:e9:46:20:80:c1:f7:31:31: 0b:0f:fb:bb:55:48:55:e7:20:14:91:b4:e8:d8:a2:d3:24:b8: 24:d7:62:fa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WPGUXjd9OHwR4aaohwUFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzZThmNGVkNWRkMDYzMDFjNDIzOTg4ZTc4NmRhYmY1MWM1 ZjU2NzQwHhcNMjYwMTAxMDIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjExODM3Mjc2ZWM1MDA1OGE1MDNiOWFkYjM3YzExYTdjNmZiYzcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubaOOyxjRufneyMTl0ciobVeVh3F HheZ7eSiWMXEj1dYZyxSaoz9ju7LaqOMVdzSmEOkbNv3g6pPL4HDHpaIt95l8nrZ D0w/G6ZFKvIze2Mbrf7mzCUkHNxCsxwsrpYi9DcvV8W8xeqOLDXEjVGBLuqtBnNe cdJOCU8kAU++EYB0ucXpfR72VY+LEAjZTk8/qG4+Qu+Y8lOtka4lLh1C4pREMpJh seZ3F69KFuU/1LFGTCVbezZ1dJ3sDIyC1Wa2t+D/5meMwG2eykYoh2iovMtG50Tw mBg1rvy8pxu0hUH1jtQXLnS/RdbNUvrkUYGo3zHiP0/9NKA4GFyMw+iPEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKYRg3J27FAFilA7mts3wRp8b7xwMB8GA1UdIwQY MBaAFJPo9O1d0GMBxCOYjnhtq/UcX1Z0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQt MWZjMTllYTczYTJhLzEvcGhHRGNuYnNVQVdLVUR1YTJ6ZkJHbnh2dkhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQtMWZjMTllYTczYTJh LzEvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW83GMA0G CSqGSIb3DQEBCwUAA4IBAQCyvpQEZGsYZes0BxuN/NBPBlr9cOdv+O5T4XE+Ui73 t6YABIZFXdtsuXGajzboySxosIRmby6Wnx9DV5ReAeYtLmjMegnuXlm1h+oFGOXh KMqHe9DhiIfIN+gDTkZmY+hXmKApxcSLuBgu9K11K+api0RzZrnCXcuVPmcRvsM3 O2bzYlFYVf93+Drv10JDnt1uJU557P0Bizq6eT81i9cka4tbe4u3K+XYYFoSJjyB DMuX6mZ99ETOlUvtb4yiZnQ2QT3FQh+4JVKzYwQvvKp2+44zPgSwydnfa3frgaoy QkKS6UYggMH3MTELD/u7VUhV5yAUkbTo2KLTJLgk12L6 -----END CERTIFICATE-----Generated at Sun Jan 25 17:20:04 2026 by rpki-client