This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/0ttbnnDkszN5UUqiS_T4IajnBss.roa File: 0ttbnnDkszN5UUqiS_T4IajnBss.roa (raw, json) Hash identifier: rpO8oEL9pD1qVz6CQpISXQ8FDsbjMnEXpxfBE5fz0uQ= Subject key identifier: D2:DB:5B:9E:70:E4:B3:33:79:51:4A:A2:4B:F4:F8:21:A8:E7:06:CB Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Certificate serial: 019AB10C28E3E550735AE1297B9A203F0226 Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/0ttbnnDkszN5UUqiS_T4IajnBss.roa Signing time: Sun 23 Nov 2025 14:09:15 +0000 ROA not before: Sun 23 Nov 2025 14:09:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 47694 IP address blocks: 91.211.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b1:0c:28:e3:e5:50:73:5a:e1:29:7b:9a:20:3f:02:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Validity Not Before: Nov 23 14:09:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d2db5b9e70e4b33379514aa24bf4f821a8e706cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9b:99:b4:eb:9e:90:76:e2:8a:83:a3:21:22: 71:31:fc:d2:02:15:86:ae:d6:2a:cb:a5:42:b3:82: 49:bc:2e:15:12:87:b3:7c:61:bb:0f:c7:ab:cb:52: 62:db:03:8b:c3:8b:24:03:ee:dd:35:5e:90:37:97: 9a:65:3c:b0:72:f1:e3:17:d9:cf:0b:2f:2c:73:4c: ba:c8:45:87:2e:20:e9:0f:46:6a:b5:60:84:0e:dd: bd:4d:ec:67:a1:3b:0c:ab:1c:25:79:a7:e2:9c:79: 7c:04:70:2e:79:08:fb:85:2d:1b:23:86:63:01:33: 2c:ac:e6:cb:dc:89:ed:8a:4f:15:58:ab:3f:15:8f: 25:64:c7:6b:c4:10:e5:75:77:96:37:f3:4c:b3:3b: 6e:66:53:1e:8d:8e:41:14:12:4b:47:82:82:0a:5a: ca:7c:3a:74:3e:1c:06:7f:1e:cd:1b:c7:d4:ac:ad: fb:5b:d0:4c:2b:b3:26:0a:c6:39:2d:4b:33:51:99: 80:f3:de:68:5d:3b:32:d5:a0:a8:49:3b:14:49:01: 07:54:b2:5a:20:59:7b:24:41:74:01:91:12:1b:ec: 2f:17:7d:8a:1c:f7:4a:1b:d0:aa:96:ae:d9:d6:5b: eb:7f:55:1e:79:1e:2e:62:33:da:fc:ba:76:1a:91: 28:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:DB:5B:9E:70:E4:B3:33:79:51:4A:A2:4B:F4:F8:21:A8:E7:06:CB X509v3 Authority Key Identifier: keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/0ttbnnDkszN5UUqiS_T4IajnBss.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.211.16.0/22 Signature Algorithm: sha256WithRSAEncryption 59:7a:bb:a0:41:2c:c3:5c:3d:8d:6e:20:dd:7d:e5:28:54:c1: d6:6a:25:e7:50:50:d8:39:e7:0e:91:60:46:6c:a4:41:e1:0c: 10:1c:04:e3:d8:ec:ba:db:1f:fc:28:a4:87:32:b1:09:65:ca: 4f:f8:03:1e:a7:2b:b8:9d:de:b2:ee:be:0b:b5:47:af:de:a6: 10:b0:1c:7b:37:4f:53:17:3d:5a:69:96:00:25:9c:f0:de:a2: 49:3e:66:cc:42:f5:4e:7d:9b:13:d7:c6:65:db:bf:c6:a8:72: 06:1e:44:25:44:e3:03:81:43:2e:b5:3d:26:89:1b:0b:d5:8e: 35:43:44:a9:3b:f6:55:82:f3:db:d9:54:50:72:aa:30:87:ac: b2:c7:aa:6f:4d:9e:ca:10:86:f5:83:67:44:44:ce:e9:90:f1: b8:66:f2:dc:7f:a6:43:e9:a9:2e:7a:a6:f0:40:f5:ac:d3:c9: 3d:3b:0a:b6:07:75:da:4d:24:18:ec:4a:00:39:ff:31:19:8f: cb:4b:41:22:cc:00:3a:a5:c7:43:ae:16:2a:f9:89:a8:19:28: b3:5c:8e:b1:f6:db:e6:8c:f7:d5:de:a4:33:96:b1:ac:5d:46: dd:dc:9d:7e:63:10:aa:df:c0:97:4a:d8:33:0c:7d:74:4c:0d: 2f:ee:7e:91 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqxDCjj5VBzWuEpe5ogPwImMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNjRmOWQwNGVmZDVhOWZjMmUyM2I0MmQ1YjUxYWVmZDlh NTAyNTAwHhcNMjUxMTIzMTQwOTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmRiNWI5ZTcwZTRiMzMzNzk1MTRhYTI0YmY0ZjgyMWE4ZTcwNmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5uZtOuekHbiioOjISJxMfzSAhWG rtYqy6VCs4JJvC4VEoezfGG7D8ery1Ji2wOLw4skA+7dNV6QN5eaZTywcvHjF9nP Cy8sc0y6yEWHLiDpD0ZqtWCEDt29TexnoTsMqxwleafinHl8BHAueQj7hS0bI4Zj ATMsrObL3Intik8VWKs/FY8lZMdrxBDldXeWN/NMsztuZlMejY5BFBJLR4KCClrK fDp0PhwGfx7NG8fUrK37W9BMK7MmCsY5LUszUZmA895oXTsy1aCoSTsUSQEHVLJa IFl7JEF0AZESG+wvF32KHPdKG9Cqlq7Z1lvrf1UeeR4uYjPa/Lp2GpEoawIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNLbW55w5LMzeVFKokv0+CGo5wbLMB8GA1UdIwQY MBaAFFxk+dBO/VqfwuI7QtW1Gu/ZpQJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUt YjY2ZmE0ZjQ3NjNhLzEvMHR0Ym5uRGtzek41VVVxaVNfVDRJYWpuQnNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUtYjY2ZmE0ZjQ3NjNh LzEvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW9MQMA0G CSqGSIb3DQEBCwUAA4IBAQBZerugQSzDXD2NbiDdfeUoVMHWaiXnUFDYOecOkWBG bKRB4QwQHATj2Oy62x/8KKSHMrEJZcpP+AMepyu4nd6y7r4LtUev3qYQsBx7N09T Fz1aaZYAJZzw3qJJPmbMQvVOfZsT18Zl27/GqHIGHkQlROMDgUMutT0miRsL1Y41 Q0SpO/ZVgvPb2VRQcqowh6yyx6pvTZ7KEIb1g2dERM7pkPG4ZvLcf6ZD6akueqbw QPWs08k9Owq2B3XaTSQY7EoAOf8xGY/LS0EizAA6pcdDrhYq+YmoGSizXI6x9tvm jPfV3qQzlrGsXUbd3J1+YxCq38CXStgzDH10TA0v7n6R -----END CERTIFICATE-----Generated at Sat Dec 6 05:45:03 2025 by rpki-client