This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/dweYmfOa8TTIR4-iBHNV8XmJt9A.roa File: dweYmfOa8TTIR4-iBHNV8XmJt9A.roa (raw, json) Hash identifier: tN8Qt6nqsV9vwt70G/tNoeGlwkK0G3mWlGOVDNyRfzk= Subject key identifier: 77:07:98:99:F3:9A:F1:34:C8:47:8F:A2:04:73:55:F1:79:89:B7:D0 Certificate issuer: /CN=9d0e3080792cfa9f15f03eb3fd76ca68c8cde220 Certificate serial: 019B797E61BB587EF2F5FEB50459152425D1 Authority key identifier: 9D:0E:30:80:79:2C:FA:9F:15:F0:3E:B3:FD:76:CA:68:C8:CD:E2:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQ4wgHks-p8V8D6z_XbKaMjN4iA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/dweYmfOa8TTIR4-iBHNV8XmJt9A.roa Signing time: Thu 01 Jan 2026 12:18:04 +0000 ROA not before: Thu 01 Jan 2026 12:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50599 IP address blocks: 91.244.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft rsync://rpki.ripe.net/repository/DEFAULT/nQ4wgHks-p8V8D6z_XbKaMjN4iA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:61:bb:58:7e:f2:f5:fe:b5:04:59:15:24:25:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d0e3080792cfa9f15f03eb3fd76ca68c8cde220 Validity Not Before: Jan 1 12:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=77079899f39af134c8478fa2047355f17989b7d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:00:8f:76:af:37:1a:8f:4e:1d:08:f7:37:ba: 26:8b:5c:f1:1e:71:fc:b1:ef:7e:5d:9f:83:4f:52: 94:ed:38:2e:90:af:fe:49:fb:6d:b4:8a:16:b8:23: db:40:a9:99:2e:2e:f5:e1:ac:33:62:48:c7:37:42: 4a:ad:ba:17:6a:b5:ae:b4:b9:92:5a:6b:af:a7:25: b4:70:5e:33:47:30:f5:78:78:4b:aa:23:ad:96:b9: 39:d0:17:3a:2d:78:fa:c4:3a:e9:0d:82:84:70:80: 14:df:2e:30:31:17:b8:b7:c9:12:63:c3:83:45:b8: 0e:7d:c7:fb:e1:d4:56:28:bd:74:48:b1:14:77:f6: 25:42:79:56:1d:ea:67:6f:ba:8f:ca:eb:17:97:3e: 05:fd:48:69:74:a2:08:d4:a2:df:09:0e:ba:ae:56: 6d:94:0f:90:be:c2:ac:07:68:47:f7:89:2c:d0:f8: 35:9e:a1:45:32:4b:77:d8:d8:91:d5:5c:0e:87:3e: 86:7b:6b:f2:00:1c:4c:20:49:e4:53:25:8c:d8:5b: 47:7f:14:ce:bd:ce:1d:c2:54:fc:13:d3:0d:29:ef: 25:7a:17:a1:b2:60:c3:61:a5:58:fd:74:60:d9:68: 5e:39:15:e9:b1:b8:5d:49:70:2d:a1:21:35:98:28: be:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:07:98:99:F3:9A:F1:34:C8:47:8F:A2:04:73:55:F1:79:89:B7:D0 X509v3 Authority Key Identifier: keyid:9D:0E:30:80:79:2C:FA:9F:15:F0:3E:B3:FD:76:CA:68:C8:CD:E2:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQ4wgHks-p8V8D6z_XbKaMjN4iA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/dweYmfOa8TTIR4-iBHNV8XmJt9A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.244.225.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:2f:d9:24:19:6c:65:ab:45:ec:5b:e5:1c:d0:7a:fa:24:21: 3d:1f:4b:7e:36:8f:5a:c2:a3:07:68:27:bd:f2:ca:4f:85:55: 5c:7a:32:a4:f3:5a:c1:23:02:60:4a:c0:7a:b8:8c:47:d0:ad: a6:12:f2:48:3c:66:95:33:30:05:85:52:c3:b9:fd:7b:b7:99: 88:45:4c:bb:7e:b1:fc:28:4d:ac:d6:5d:f2:1e:eb:99:33:ac: b2:db:84:e0:1d:de:8e:51:06:a0:6a:a1:7d:6f:36:a7:32:57: 03:a8:bf:a4:ee:02:38:e3:de:80:69:c9:0d:1c:85:41:32:71: 25:9d:53:b6:dc:25:6d:2f:92:b0:2e:f7:50:c1:84:0d:40:1c: 9d:a0:0d:74:96:c9:d0:cc:1b:38:9a:76:5b:15:6a:a4:de:5d: a7:03:2a:6e:c7:d7:5a:1d:42:43:52:cc:44:9a:b4:8b:12:fb: f8:fd:83:78:1d:36:81:96:e1:43:a6:f3:35:b9:72:4c:20:7e: 8a:a1:35:05:3c:f8:8a:86:d6:0b:92:03:68:2e:09:b4:ca:7d: ab:bf:02:b2:c3:f6:91:76:8f:77:10:31:62:06:73:e8:ae:4a: 2b:96:8b:cf:91:23:f3:da:a8:5c:86:47:93:43:2f:b0:d8:72: b2:98:6c:d9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fmG7WH7y9f61BFkVJCXRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMGUzMDgwNzkyY2ZhOWYxNWYwM2ViM2ZkNzZjYTY4Yzhj ZGUyMjAwHhcNMjYwMTAxMTIxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NzA3OTg5OWYzOWFmMTM0Yzg0NzhmYTIwNDczNTVmMTc5ODliN2QwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQCPdq83Go9OHQj3N7omi1zxHnH8 se9+XZ+DT1KU7TgukK/+SftttIoWuCPbQKmZLi714awzYkjHN0JKrboXarWutLmS WmuvpyW0cF4zRzD1eHhLqiOtlrk50Bc6LXj6xDrpDYKEcIAU3y4wMRe4t8kSY8OD RbgOfcf74dRWKL10SLEUd/YlQnlWHepnb7qPyusXlz4F/UhpdKII1KLfCQ66rlZt lA+QvsKsB2hH94ks0Pg1nqFFMkt32NiR1VwOhz6Ge2vyABxMIEnkUyWM2FtHfxTO vc4dwlT8E9MNKe8lehehsmDDYaVY/XRg2WheORXpsbhdSXAtoSE1mCi+zwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHcHmJnzmvE0yEePogRzVfF5ibfQMB8GA1UdIwQY MBaAFJ0OMIB5LPqfFfA+s/12ymjIzeIgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblE0d2dIa3MtcDhWOEQ2el9YYkthTWpONGlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9kOGFjNTgtOWE2MS00ODUyLTlmMmYt MjZmMzkzODQ4NzRmLzEvZHdlWW1mT2E4VFRJUjQtaUJITlY4WG1KdDlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9kOGFjNTgtOWE2MS00ODUyLTlmMmYtMjZmMzkzODQ4NzRm LzEvblE0d2dIa3MtcDhWOEQ2el9YYkthTWpONGlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/ThMA0G CSqGSIb3DQEBCwUAA4IBAQANL9kkGWxlq0XsW+Uc0Hr6JCE9H0t+No9awqMHaCe9 8spPhVVcejKk81rBIwJgSsB6uIxH0K2mEvJIPGaVMzAFhVLDuf17t5mIRUy7frH8 KE2s1l3yHuuZM6yy24TgHd6OUQagaqF9bzanMlcDqL+k7gI4496AackNHIVBMnEl nVO23CVtL5KwLvdQwYQNQBydoA10lsnQzBs4mnZbFWqk3l2nAypux9daHUJDUsxE mrSLEvv4/YN4HTaBluFDpvM1uXJMIH6KoTUFPPiKhtYLkgNoLgm0yn2rvwKyw/aR do93EDFiBnPorkorlovPkSPz2qhchkeTQy+w2HKymGzZ -----END CERTIFICATE-----Generated at Mon Jan 26 06:33:29 2026 by rpki-client