This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/DSUUFBeA0ZB_ry8HQx7RaUAofhI.roa File: DSUUFBeA0ZB_ry8HQx7RaUAofhI.roa (raw, json) Hash identifier: WblU2LEBXlZHlgqM8eisTMs9DCuuDvc8/DOwyfHQxh4= Subject key identifier: 0D:25:14:14:17:80:D1:90:7F:AF:2F:07:43:1E:D1:69:40:28:7E:12 Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b Certificate serial: 019B7D5D1EEAB7F4D738093E0B8BE27CE434 Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/DSUUFBeA0ZB_ry8HQx7RaUAofhI.roa Signing time: Fri 02 Jan 2026 06:20:13 +0000 ROA not before: Fri 02 Jan 2026 06:20:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47979 IP address blocks: 91.120.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:1e:ea:b7:f4:d7:38:09:3e:0b:8b:e2:7c:e4:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b Validity Not Before: Jan 2 06:20:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d2514141780d1907faf2f07431ed16940287e12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:42:1b:b4:89:ae:ad:8c:79:1b:f7:5f:de:c1: f1:83:67:fd:fe:bb:19:40:57:2d:a6:9b:4f:93:0f: d7:3f:20:05:1f:85:75:c1:62:6d:2e:ad:ea:13:b5: 8b:63:95:63:09:b9:a9:6c:70:82:88:eb:6b:b7:4c: 69:66:0d:6a:e7:d4:64:35:76:14:29:63:2e:ff:a0: 80:2c:4f:a8:bb:10:6e:6f:df:2e:71:11:d1:cd:45: a9:55:9b:49:8e:e9:ea:12:69:17:08:67:0f:fc:6a: 56:23:5d:d8:4c:52:1a:c5:d2:96:ef:6d:1e:f9:23: bf:49:f7:76:64:bc:04:2b:7f:d8:b9:cc:77:f4:74: e2:87:f2:2d:a5:de:30:9d:f0:e5:85:ee:0b:e7:2f: a9:c2:cc:da:ad:2c:7a:93:d5:65:a1:bb:d7:d1:20: a3:68:73:cc:9d:70:1a:2c:b4:4e:d4:be:07:06:d8: 12:75:90:b9:04:98:b5:96:00:ac:53:93:36:8f:7f: d2:cd:62:e5:ae:e0:e0:7b:36:39:07:ea:b0:d1:6a: 66:82:18:17:e8:50:b3:33:6f:62:17:97:3f:d8:e1: 4a:01:11:73:94:d5:aa:3c:26:2e:81:ec:f5:08:f9: 9b:df:05:c2:7e:1a:d7:b9:0d:2b:17:8d:de:15:06: d9:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:25:14:14:17:80:D1:90:7F:AF:2F:07:43:1E:D1:69:40:28:7E:12 X509v3 Authority Key Identifier: keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/DSUUFBeA0ZB_ry8HQx7RaUAofhI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.120.44.0/24 Signature Algorithm: sha256WithRSAEncryption 69:06:f0:48:0f:22:5a:3b:35:55:38:67:97:1b:f1:d3:c2:6e: 5e:92:58:b0:85:6b:d0:93:8c:48:f5:79:94:33:70:8a:b7:fc: c6:5b:d1:a8:cc:f4:72:3b:17:18:1c:88:c0:53:cc:c2:32:3e: e5:c9:10:b7:a7:72:c9:2d:fc:0c:2d:e9:22:fc:eb:6e:7d:38: 17:36:ad:db:22:69:f5:6f:7a:9c:0b:4e:43:ed:f8:cf:80:ef: 5c:44:60:72:7b:20:b9:8d:fa:df:2c:1f:74:25:42:6d:13:40: c5:89:61:46:e1:df:ff:9b:ee:78:bb:6b:be:98:95:5b:90:68: 9c:f8:8c:65:11:ee:ba:7f:40:31:fa:0c:54:a3:4d:98:cc:18: 65:3b:11:23:27:a3:5a:29:92:a2:55:1a:dc:3b:0b:ae:55:ab: ce:72:93:52:77:14:fb:2a:e0:05:ae:d0:54:06:cc:44:67:85: b1:8f:fa:9c:54:6d:4a:ec:59:42:32:5d:7f:b7:ca:3c:09:69: 47:13:ec:1f:1c:a2:38:b5:60:ee:e1:a4:8f:47:30:db:de:2d: b2:a8:8f:60:b2:32:55:be:20:b1:ba:6b:63:cb:8e:bb:08:19: bd:01:24:42:1e:d5:5d:8c:59:3b:86:f9:cc:2b:49:60:fa:80: 48:1d:df:30 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XR7qt/TXOAk+C4vifOQ0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwMmRhYzYwNWY0NjU5NzE4YzBhMTVlMWY3MzJjYmQ0ZjQ4 YWFlN2IwHhcNMjYwMTAyMDYyMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDI1MTQxNDE3ODBkMTkwN2ZhZjJmMDc0MzFlZDE2OTQwMjg3ZTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUIbtImurYx5G/df3sHxg2f9/rsZ QFctpptPkw/XPyAFH4V1wWJtLq3qE7WLY5VjCbmpbHCCiOtrt0xpZg1q59RkNXYU KWMu/6CALE+ouxBub98ucRHRzUWpVZtJjunqEmkXCGcP/GpWI13YTFIaxdKW720e +SO/Sfd2ZLwEK3/Yucx39HTih/Itpd4wnfDlhe4L5y+pwszarSx6k9VlobvX0SCj aHPMnXAaLLRO1L4HBtgSdZC5BJi1lgCsU5M2j3/SzWLlruDgezY5B+qw0WpmghgX 6FCzM29iF5c/2OFKARFzlNWqPCYugez1CPmb3wXCfhrXuQ0rF43eFQbZ5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA0lFBQXgNGQf68vB0Me0WlAKH4SMB8GA1UdIwQY MBaAFPAtrGBfRllxjAoV4fcyy9T0iq57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYt MjkyYWU0NmU2MzAyLzEvRFNVVUZCZUEwWkJfcnk4SFF4N1JhVUFvZmhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYtMjkyYWU0NmU2MzAy LzEvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW3gsMA0G CSqGSIb3DQEBCwUAA4IBAQBpBvBIDyJaOzVVOGeXG/HTwm5ekliwhWvQk4xI9XmU M3CKt/zGW9GozPRyOxcYHIjAU8zCMj7lyRC3p3LJLfwMLeki/OtufTgXNq3bImn1 b3qcC05D7fjPgO9cRGByeyC5jfrfLB90JUJtE0DFiWFG4d//m+54u2u+mJVbkGic +IxlEe66f0Ax+gxUo02YzBhlOxEjJ6NaKZKiVRrcOwuuVavOcpNSdxT7KuAFrtBU BsxEZ4Wxj/qcVG1K7FlCMl1/t8o8CWlHE+wfHKI4tWDu4aSPRzDb3i2yqI9gsjJV viCxumtjy467CBm9ASRCHtVdjFk7hvnMK0lg+oBIHd8w -----END CERTIFICATE-----Generated at Sun Jan 25 16:54:32 2026 by rpki-client