This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/325RzaiD-WW3-TdaxjCytde03ak.roa File: 325RzaiD-WW3-TdaxjCytde03ak.roa (raw, json) Hash identifier: R/JjV4i4hHD1/fvj4o1wHYYq99CJM0edmtkuAKvuJqs= Subject key identifier: DF:6E:51:CD:A8:83:F9:65:B7:F9:37:5A:C6:30:B2:B5:D7:B4:DD:A9 Certificate issuer: /CN=9e1aca341635166f802f98a97e00280ccee64ce2 Certificate serial: 019B7DC96493CC82FAC3E5FE8AA11F9194C2 Authority key identifier: 9E:1A:CA:34:16:35:16:6F:80:2F:98:A9:7E:00:28:0C:CE:E6:4C:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/325RzaiD-WW3-TdaxjCytde03ak.roa Signing time: Fri 02 Jan 2026 08:18:29 +0000 ROA not before: Fri 02 Jan 2026 08:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208006 IP address blocks: 91.216.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.crl rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:64:93:cc:82:fa:c3:e5:fe:8a:a1:1f:91:94:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e1aca341635166f802f98a97e00280ccee64ce2 Validity Not Before: Jan 2 08:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df6e51cda883f965b7f9375ac630b2b5d7b4dda9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:dd:3e:73:0d:01:5f:fc:06:63:7c:08:7a:54: a1:e8:18:63:4d:7a:6d:f8:f6:4d:d9:ca:e9:b5:4d: 8a:0b:59:7c:ac:c9:f1:8d:c8:74:f8:9c:1c:05:b5: ad:fb:21:6e:47:11:7f:e1:3e:a1:3e:08:ef:44:40: f7:30:ae:20:be:a6:bb:d7:9b:0b:15:d3:24:e3:86: c4:7c:42:ca:8f:32:0e:c3:a7:92:cc:9a:b7:4c:da: b2:a4:24:02:fb:ed:9c:72:a8:cf:c3:4e:30:41:a7: a4:6d:63:7f:e0:04:c7:ae:cc:8e:26:bb:3e:ea:31: bf:a0:07:c7:47:c3:e0:75:6d:68:26:d7:54:6d:59: 9f:ee:6d:af:45:35:29:64:f8:d7:a0:01:1f:1b:05: 00:d3:c9:77:7f:71:21:cc:ce:57:7a:2f:5a:66:5b: aa:e5:f1:34:26:ab:8e:47:89:a2:24:7d:9d:8d:49: cd:b6:d2:bc:c0:9b:63:b6:fc:f7:b2:bc:b1:97:0d: 9a:8f:5e:e6:c3:6c:1c:fe:c0:dc:30:19:69:a1:ba: 6d:c7:9d:54:01:80:38:be:ff:3b:c0:4f:67:02:ba: f2:08:5b:8b:c7:25:b6:da:f0:c9:b6:38:c1:5f:df: 3c:cc:7f:76:37:5a:03:61:7c:7c:fb:f5:ea:4f:57: b9:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:6E:51:CD:A8:83:F9:65:B7:F9:37:5A:C6:30:B2:B5:D7:B4:DD:A9 X509v3 Authority Key Identifier: keyid:9E:1A:CA:34:16:35:16:6F:80:2F:98:A9:7E:00:28:0C:CE:E6:4C:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/325RzaiD-WW3-TdaxjCytde03ak.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.13.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:8c:51:58:a7:50:05:4f:ff:1a:e6:b2:94:7f:ac:83:43:31: 5e:25:d9:9f:dd:58:4d:bb:d7:10:f1:ed:88:3e:76:1a:e8:b4: c7:e0:62:32:6c:87:38:9e:e4:31:68:b9:6e:6d:d9:d8:d0:77: 85:d9:6c:44:83:48:c8:27:c0:a3:de:66:a0:e5:04:1e:97:86: 54:39:bf:a8:0a:bf:d9:c0:ee:c0:ce:7e:5e:75:66:01:6f:df: fc:58:36:53:86:ff:83:3e:a7:3b:4b:4b:82:b9:8e:d5:45:e9: f1:0b:39:a0:cd:e5:fd:69:fb:5d:13:9e:9b:3d:a2:14:9b:e2: f6:25:a8:81:2d:16:3a:a6:14:2f:31:3f:23:58:0d:f6:88:5a: e1:cd:23:c8:b0:0f:6f:8d:23:68:ea:62:7e:50:83:25:ec:99: 02:9e:c7:b2:86:6c:61:a1:68:07:3d:5f:70:4e:20:52:e3:42: a6:13:99:b6:32:cd:10:55:30:5e:a9:88:a7:4e:53:91:d7:c7: 97:92:72:8b:1c:2d:95:cf:36:03:9b:01:f9:e4:96:4f:74:75: d1:6c:cb:cc:dc:1e:c7:bc:b7:dc:5f:eb:ee:96:76:4c:77:d2: ca:2c:3f:40:79:d8:44:a7:cb:07:dc:7c:3e:65:1c:62:54:94: 2a:63:9e:99 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yWSTzIL6w+X+iqEfkZTCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllMWFjYTM0MTYzNTE2NmY4MDJmOThhOTdlMDAyODBjY2Vl NjRjZTIwHhcNMjYwMTAyMDgxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjZlNTFjZGE4ODNmOTY1YjdmOTM3NWFjNjMwYjJiNWQ3YjRkZGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAot0+cw0BX/wGY3wIelSh6BhjTXpt +PZN2crptU2KC1l8rMnxjch0+JwcBbWt+yFuRxF/4T6hPgjvRED3MK4gvqa715sL FdMk44bEfELKjzIOw6eSzJq3TNqypCQC++2ccqjPw04wQaekbWN/4ATHrsyOJrs+ 6jG/oAfHR8PgdW1oJtdUbVmf7m2vRTUpZPjXoAEfGwUA08l3f3EhzM5Xei9aZluq 5fE0JquOR4miJH2djUnNttK8wJtjtvz3sryxlw2aj17mw2wc/sDcMBlpobptx51U AYA4vv87wE9nArryCFuLxyW22vDJtjjBX988zH92N1oDYXx8+/XqT1e5OQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN9uUc2og/llt/k3WsYwsrXXtN2pMB8GA1UdIwQY MBaAFJ4ayjQWNRZvgC+YqX4AKAzO5kziMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmhyS05CWTFGbS1BTDVpcGZnQW9ETTdtVE9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS83OWZiYzAtMzM1MS00ZmZmLWI5ZDUt NzU1NjFjYmYxMDRkLzEvMzI1UnphaUQtV1czLVRkYXhqQ3l0ZGUwM2FrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS83OWZiYzAtMzM1MS00ZmZmLWI5ZDUtNzU1NjFjYmYxMDRk LzEvbmhyS05CWTFGbS1BTDVpcGZnQW9ETTdtVE9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9gNMA0G CSqGSIb3DQEBCwUAA4IBAQA8jFFYp1AFT/8a5rKUf6yDQzFeJdmf3VhNu9cQ8e2I PnYa6LTH4GIybIc4nuQxaLlubdnY0HeF2WxEg0jIJ8Cj3mag5QQel4ZUOb+oCr/Z wO7Azn5edWYBb9/8WDZThv+DPqc7S0uCuY7VRenxCzmgzeX9aftdE56bPaIUm+L2 JaiBLRY6phQvMT8jWA32iFrhzSPIsA9vjSNo6mJ+UIMl7JkCnseyhmxhoWgHPV9w TiBS40KmE5m2Ms0QVTBeqYinTlOR18eXknKLHC2VzzYDmwH55JZPdHXRbMvM3B7H vLfcX+vulnZMd9LKLD9AedhEp8sH3Hw+ZRxiVJQqY56Z -----END CERTIFICATE-----Generated at Mon Jan 26 10:23:06 2026 by rpki-client