This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/seVR3O1dae1fOLAeXT1ZaF261rk.roa File: seVR3O1dae1fOLAeXT1ZaF261rk.roa (raw, json) Hash identifier: JmrPbibwTZTU1bBXfvUDUkidxKjk9p3hVn5swMWj1a4= Subject key identifier: B1:E5:51:DC:ED:5D:69:ED:5F:38:B0:1E:5D:3D:59:68:5D:BA:D6:B9 Certificate issuer: /CN=cf9cc33182e44d897f4eacf14213467ef88711d4 Certificate serial: 019B7BA4BC2211E5CE73E5D45FE63BB6BE99 Authority key identifier: CF:9C:C3:31:82:E4:4D:89:7F:4E:AC:F1:42:13:46:7E:F8:87:11:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/seVR3O1dae1fOLAeXT1ZaF261rk.roa Signing time: Thu 01 Jan 2026 22:19:12 +0000 ROA not before: Thu 01 Jan 2026 22:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34177 IP address blocks: 91.209.245.0/24 maxlen: 24 193.200.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.crl rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:bc:22:11:e5:ce:73:e5:d4:5f:e6:3b:b6:be:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf9cc33182e44d897f4eacf14213467ef88711d4 Validity Not Before: Jan 1 22:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b1e551dced5d69ed5f38b01e5d3d59685dbad6b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6f:bf:fa:c7:a3:03:1c:4e:fa:89:92:25:a9: c1:e8:90:1e:77:27:47:b7:58:84:bc:39:31:d6:bc: 3b:ce:9a:83:32:10:8d:fd:32:6e:f1:05:28:97:5c: e5:97:d8:ab:61:a6:7d:1b:93:a3:c6:6c:cb:b6:17: b7:52:c5:36:65:25:f7:e1:b5:d7:6f:69:ed:5d:ed: 61:1c:6f:65:1d:3a:81:b1:de:00:86:ad:d0:5c:43: 05:9e:9a:6d:5b:3c:59:23:bc:63:bb:ce:ec:ed:51: de:d9:ae:d5:34:eb:ce:06:5d:29:c9:b0:35:9a:8e: 3b:79:92:22:81:3e:65:cb:a1:18:10:58:5e:b8:13: f1:25:f7:6a:e4:c7:0b:85:d6:50:3a:a4:32:f3:99: 7e:72:a2:be:92:c4:f9:ea:9e:f0:08:d8:20:f4:a1: bd:d5:22:be:a9:f7:11:2d:78:9b:c9:0d:a6:69:f7: 75:8f:1c:93:2a:24:e3:29:b8:2f:4c:58:90:ac:dd: 40:34:1d:fb:51:af:60:17:35:0f:59:19:30:20:3c: fb:63:b3:b4:f4:60:d2:18:2d:f5:b4:88:97:c9:ee: 51:28:7d:22:f7:93:51:82:95:77:42:0e:dd:74:f5: 45:f7:47:f8:e3:b4:48:18:59:a5:97:57:ae:42:ca: 0b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:E5:51:DC:ED:5D:69:ED:5F:38:B0:1E:5D:3D:59:68:5D:BA:D6:B9 X509v3 Authority Key Identifier: keyid:CF:9C:C3:31:82:E4:4D:89:7F:4E:AC:F1:42:13:46:7E:F8:87:11:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/seVR3O1dae1fOLAeXT1ZaF261rk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.245.0/24 193.200.171.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:56:e8:92:8d:51:b4:14:13:8a:4e:0f:e4:ab:42:9f:97:4b: 7c:88:0c:f3:bc:bd:28:f5:95:86:04:5a:f9:49:29:1d:d5:e6: 53:e9:18:ce:6c:76:6a:4c:06:67:dd:b8:2d:ec:33:5e:c4:80: 91:8f:ff:62:48:80:12:9b:ae:f5:2c:7d:ef:88:d7:64:0b:01: 9d:28:26:0e:58:73:cf:74:d6:d8:81:8a:c5:a6:0b:71:5c:6f: 5f:fc:0a:be:15:93:0c:5a:a6:92:0f:33:1b:b9:db:25:7d:95: 01:18:85:2a:2a:90:3a:9d:8d:50:e1:ac:d2:d4:25:6a:a4:4c: 44:97:f9:d0:ed:42:58:fe:b7:64:47:24:47:a4:0c:71:08:1e: 8b:2a:46:d6:b3:f5:74:1d:65:e5:4f:9b:9e:5d:a8:75:3a:2e: 71:18:ab:ef:98:9a:65:47:f7:5b:0a:f2:3f:30:27:0b:e2:c6: a1:04:f6:bf:c1:bd:83:16:95:39:de:5b:88:18:b6:58:1c:5b: 4c:b0:eb:82:fc:1e:92:b2:4d:0b:2f:72:a2:29:7b:9d:8e:08: fa:9c:5b:3f:16:07:34:82:aa:74:b2:30:6f:49:41:2a:6d:4b: 79:e9:ef:45:28:9f:a9:19:83:43:80:d4:61:49:08:16:1f:e3: 16:f6:99:01 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7pLwiEeXOc+XUX+Y7tr6ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmOWNjMzMxODJlNDRkODk3ZjRlYWNmMTQyMTM0NjdlZjg4 NzExZDQwHhcNMjYwMTAxMjIxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMWU1NTFkY2VkNWQ2OWVkNWYzOGIwMWU1ZDNkNTk2ODVkYmFkNmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtm+/+sejAxxO+omSJanB6JAedydH t1iEvDkx1rw7zpqDMhCN/TJu8QUol1zll9irYaZ9G5OjxmzLthe3UsU2ZSX34bXX b2ntXe1hHG9lHTqBsd4Ahq3QXEMFnpptWzxZI7xju87s7VHe2a7VNOvOBl0pybA1 mo47eZIigT5ly6EYEFheuBPxJfdq5McLhdZQOqQy85l+cqK+ksT56p7wCNgg9KG9 1SK+qfcRLXibyQ2mafd1jxyTKiTjKbgvTFiQrN1ANB37Ua9gFzUPWRkwIDz7Y7O0 9GDSGC31tIiXye5RKH0i95NRgpV3Qg7ddPVF90f447RIGFmll1euQsoLnQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLHlUdztXWntXziwHl09WWhduta5MB8GA1UdIwQY MBaAFM+cwzGC5E2Jf06s8UITRn74hxHUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejV6RE1ZTGtUWWxfVHF6eFFoTkdmdmlIRWRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC85MjgzMWUtYjBmZC00MzEyLWE0NmIt MjRhMGQ4MmNlYTllLzEvc2VWUjNPMWRhZTFmT0xBZVhUMVphRjI2MXJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC85MjgzMWUtYjBmZC00MzEyLWE0NmItMjRhMGQ4MmNlYTll LzEvejV6RE1ZTGtUWWxfVHF6eFFoTkdmdmlIRWRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9H1AwQA wcirMA0GCSqGSIb3DQEBCwUAA4IBAQAcVuiSjVG0FBOKTg/kq0Kfl0t8iAzzvL0o 9ZWGBFr5SSkd1eZT6RjObHZqTAZn3bgt7DNexICRj/9iSIASm671LH3viNdkCwGd KCYOWHPPdNbYgYrFpgtxXG9f/Aq+FZMMWqaSDzMbudslfZUBGIUqKpA6nY1Q4azS 1CVqpExEl/nQ7UJY/rdkRyRHpAxxCB6LKkbWs/V0HWXlT5ueXah1Oi5xGKvvmJpl R/dbCvI/MCcL4sahBPa/wb2DFpU53luIGLZYHFtMsOuC/B6Ssk0LL3KiKXudjgj6 nFs/Fgc0gqp0sjBvSUEqbUt56e9FKJ+pGYNDgNRhSQgWH+MW9pkB -----END CERTIFICATE-----Generated at Mon Jan 26 09:22:54 2026 by rpki-client