This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/8f114b-b11d-4e78-bfe8-04648ec4731e/1/3uRUYhxh2pp22_I97fv2FZVD4Yw.roa File: 3uRUYhxh2pp22_I97fv2FZVD4Yw.roa (raw, json) Hash identifier: GOeSJcMTK2Ax70rbzLrLaqfDkJ9XYf9jSvZdaM9vWpg= Subject key identifier: DE:E4:54:62:1C:61:DA:9A:76:DB:F2:3D:ED:FB:F6:15:95:43:E1:8C Certificate issuer: /CN=7c7c311e8eeebbcda289062d63ac0e2ed61db1df Certificate serial: 019AE99D73F4BB88E77666BCF68B030BDB1B Authority key identifier: 7C:7C:31:1E:8E:EE:BB:CD:A2:89:06:2D:63:AC:0E:2E:D6:1D:B1:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fHwxHo7uu82iiQYtY6wOLtYdsd8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/8f114b-b11d-4e78-bfe8-04648ec4731e/1/3uRUYhxh2pp22_I97fv2FZVD4Yw.roa Signing time: Thu 04 Dec 2025 13:46:41 +0000 ROA not before: Thu 04 Dec 2025 13:46:41 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 28734 IP address blocks: 91.205.224.0/23 maxlen: 23 91.205.226.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/8f114b-b11d-4e78-bfe8-04648ec4731e/1/fHwxHo7uu82iiQYtY6wOLtYdsd8.crl rsync://rpki.ripe.net/repository/DEFAULT/59/8f114b-b11d-4e78-bfe8-04648ec4731e/1/fHwxHo7uu82iiQYtY6wOLtYdsd8.mft rsync://rpki.ripe.net/repository/DEFAULT/fHwxHo7uu82iiQYtY6wOLtYdsd8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e9:9d:73:f4:bb:88:e7:76:66:bc:f6:8b:03:0b:db:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c7c311e8eeebbcda289062d63ac0e2ed61db1df Validity Not Before: Dec 4 13:46:41 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=dee454621c61da9a76dbf23dedfbf6159543e18c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b2:4b:2b:50:35:c6:22:fa:c5:4c:62:c0:cc: 7f:f8:66:41:55:30:16:33:b9:49:21:67:ea:2a:bd: 36:d3:b0:26:bf:c0:2e:19:17:27:c9:b1:ae:46:ed: d9:dd:e9:32:e4:69:5f:67:ae:ad:ec:ee:ad:ca:d2: a0:c6:e7:b1:71:b8:79:3d:0e:cd:c1:e3:ae:f2:48: 5f:a9:1d:9a:21:d7:cd:46:6b:df:e3:eb:d9:18:54: c8:d5:22:27:59:3e:a1:a0:a9:8c:e9:35:fb:3e:03: d2:3b:11:b4:8a:c8:08:29:65:05:5b:55:4a:4e:27: ec:7a:d9:69:bc:5c:0d:01:b8:da:53:92:ee:66:a0: 3e:06:d9:10:f2:c6:c6:d7:24:4b:a8:0f:f4:0d:a1: 84:e4:fb:44:9a:c4:c4:f8:de:ab:9f:ec:e6:9b:6f: a3:27:e4:3e:87:bb:cf:ac:26:d6:f9:48:bf:b5:a7: f9:eb:5c:80:80:c8:da:43:3c:55:86:39:f8:0e:10: 41:19:63:82:e2:05:c9:4e:af:54:3b:fa:ff:b9:52: ce:2a:e6:b3:99:dc:4c:1a:1b:9d:aa:50:1a:a4:c1: 83:b6:03:09:8d:fc:85:ad:47:e0:af:3d:68:b3:8e: d6:0b:b5:b2:91:84:57:ad:a6:30:98:78:c4:0c:0a: 7c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:E4:54:62:1C:61:DA:9A:76:DB:F2:3D:ED:FB:F6:15:95:43:E1:8C X509v3 Authority Key Identifier: keyid:7C:7C:31:1E:8E:EE:BB:CD:A2:89:06:2D:63:AC:0E:2E:D6:1D:B1:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHwxHo7uu82iiQYtY6wOLtYdsd8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/8f114b-b11d-4e78-bfe8-04648ec4731e/1/3uRUYhxh2pp22_I97fv2FZVD4Yw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/8f114b-b11d-4e78-bfe8-04648ec4731e/1/fHwxHo7uu82iiQYtY6wOLtYdsd8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.205.224.0/22 Signature Algorithm: sha256WithRSAEncryption 15:3f:4d:39:45:e2:a7:4b:ef:4c:59:4f:b2:46:aa:2a:61:67: 4f:37:e9:b1:f7:52:93:62:57:5a:a6:26:ea:ec:2f:2c:c9:0d: c4:77:b7:fa:02:9a:32:b6:b0:b3:5b:8a:43:98:4a:33:73:68: 5d:5c:e6:5b:5f:7f:15:76:ce:65:ac:45:a5:09:3b:0e:92:3c: 6f:40:ab:46:33:5f:5b:99:b7:54:91:f7:d3:4d:3f:c1:02:9f: 14:0c:f1:94:9e:e9:44:be:c3:d0:68:cb:bc:1d:c7:2e:c6:a3: 3f:3c:5f:8d:3b:9e:2d:96:fa:c9:36:4f:ab:3b:93:07:16:6b: ee:25:1d:e3:87:89:08:9f:62:33:40:af:63:8f:3a:26:a3:61: 85:a6:1c:c3:8d:e4:99:db:d0:57:aa:ce:d3:4e:e7:70:63:a2: c5:ce:b8:0b:32:78:b4:ed:b1:f0:64:ba:b6:55:76:60:9b:41: 1e:f8:07:b4:28:dd:ca:25:19:47:e0:90:3c:3a:51:a2:08:7e: 09:6c:a9:9e:50:37:d5:05:e4:ff:7c:3c:db:d2:26:f8:79:b6: 4d:51:22:e0:92:93:26:90:bd:bb:2a:71:d9:69:ac:79:3d:f3: b8:7a:67:47:ac:d1:ab:b6:cf:88:f2:2d:8f:e5:a6:74:e4:5a: 49:4c:35:e0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrpnXP0u4jndma89osDC9sbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjN2MzMTFlOGVlZWJiY2RhMjg5MDYyZDYzYWMwZTJlZDYx ZGIxZGYwHhcNMjUxMjA0MTM0NjQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZWU0NTQ2MjFjNjFkYTlhNzZkYmYyM2RlZGZiZjYxNTk1NDNlMThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybJLK1A1xiL6xUxiwMx/+GZBVTAW M7lJIWfqKr0207Amv8AuGRcnybGuRu3Z3eky5GlfZ66t7O6tytKgxuexcbh5PQ7N weOu8khfqR2aIdfNRmvf4+vZGFTI1SInWT6hoKmM6TX7PgPSOxG0isgIKWUFW1VK TifsetlpvFwNAbjaU5LuZqA+BtkQ8sbG1yRLqA/0DaGE5PtEmsTE+N6rn+zmm2+j J+Q+h7vPrCbW+Ui/taf561yAgMjaQzxVhjn4DhBBGWOC4gXJTq9UO/r/uVLOKuaz mdxMGhudqlAapMGDtgMJjfyFrUfgrz1os47WC7WykYRXraYwmHjEDAp8GQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN7kVGIcYdqadtvyPe379hWVQ+GMMB8GA1UdIwQY MBaAFHx8MR6O7rvNookGLWOsDi7WHbHfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkh3eEhvN3V1ODJpaVFZdFk2d09MdFlkc2Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84ZjExNGItYjExZC00ZTc4LWJmZTgt MDQ2NDhlYzQ3MzFlLzEvM3VSVVloeGgycHAyMl9JOTdmdjJGWlZENFl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS84ZjExNGItYjExZC00ZTc4LWJmZTgtMDQ2NDhlYzQ3MzFl LzEvZkh3eEhvN3V1ODJpaVFZdFk2d09MdFlkc2Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW83gMA0G CSqGSIb3DQEBCwUAA4IBAQAVP005ReKnS+9MWU+yRqoqYWdPN+mx91KTYldapibq 7C8syQ3Ed7f6ApoytrCzW4pDmEozc2hdXOZbX38Vds5lrEWlCTsOkjxvQKtGM19b mbdUkffTTT/BAp8UDPGUnulEvsPQaMu8HccuxqM/PF+NO54tlvrJNk+rO5MHFmvu JR3jh4kIn2IzQK9jjzomo2GFphzDjeSZ29BXqs7TTudwY6LFzrgLMni07bHwZLq2 VXZgm0Ee+Ae0KN3KJRlH4JA8OlGiCH4JbKmeUDfVBeT/fDzb0ib4ebZNUSLgkpMm kL27KnHZaax5PfO4emdHrNGrts+I8i2P5aZ05FpJTDXg -----END CERTIFICATE-----Generated at Sat Dec 6 14:05:28 2025 by rpki-client