This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/16-o5D08rbE7lTUgb5ajL0G6fa8.roa File: 16-o5D08rbE7lTUgb5ajL0G6fa8.roa (raw, json) Hash identifier: 7ydkWJqy9XQ6IMrJs1nIZDnEpIAWxBiZpC4U/ks/Bqo= Subject key identifier: D7:AF:A8:E4:3D:3C:AD:B1:3B:95:35:20:6F:96:A3:2F:41:BA:7D:AF Certificate issuer: /CN=09fecd7071b727db3d12f09efbb454e04d4f743d Certificate serial: 019B7834E4E044F0B2D07ED3607BE6AEDD33 Authority key identifier: 09:FE:CD:70:71:B7:27:DB:3D:12:F0:9E:FB:B4:54:E0:4D:4F:74:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/16-o5D08rbE7lTUgb5ajL0G6fa8.roa Signing time: Thu 01 Jan 2026 06:18:10 +0000 ROA not before: Thu 01 Jan 2026 06:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207558 IP address blocks: 91.196.228.0/24 maxlen: 24 91.196.229.0/24 maxlen: 24 91.196.230.0/24 maxlen: 24 91.196.231.0/24 maxlen: 24 91.224.171.0/24 maxlen: 24 2a0f:d840::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.mft rsync://rpki.ripe.net/repository/DEFAULT/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:e4:e0:44:f0:b2:d0:7e:d3:60:7b:e6:ae:dd:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09fecd7071b727db3d12f09efbb454e04d4f743d Validity Not Before: Jan 1 06:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7afa8e43d3cadb13b9535206f96a32f41ba7daf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e9:6a:c9:0c:5d:7d:1f:0a:cc:9d:7b:de:09: 6b:05:79:ed:57:9e:25:dc:ba:bb:c5:c5:ec:aa:be: 52:10:a6:bf:4b:ec:7c:71:45:3e:a9:34:7f:ca:4b: af:56:d1:26:4b:50:94:fa:05:ab:86:f3:42:b8:d1: 52:18:e3:0e:dc:df:19:8e:5e:bc:39:d6:06:2e:b6: 9b:a3:54:e7:e3:20:6a:a8:4e:cb:e7:86:d8:9c:cb: 76:23:77:5b:74:7c:89:70:9d:34:c4:cf:e7:3e:39: bb:49:c3:db:c5:39:fe:b3:8b:90:80:ac:c2:77:e3: ae:9c:fb:17:61:cc:8f:b8:53:3c:5f:d8:6b:db:59: 41:a8:59:fc:da:c2:8c:44:2b:65:96:81:8d:70:15: ed:a7:3d:0d:4d:82:7e:2b:d4:98:c9:5a:ab:22:72: 21:41:0e:f8:2a:2d:48:e5:14:39:dd:f9:ba:66:bf: f0:2f:38:af:c6:0d:39:70:39:12:b1:e6:e8:b7:d3: 45:f6:ac:86:34:06:5c:55:15:f8:ed:65:18:e2:02: 06:b8:69:c0:e8:ad:d1:e3:fd:be:7a:77:2a:17:34: e5:a5:55:03:33:72:9e:dd:1a:14:7a:7f:d0:67:65: 95:c3:fe:1c:63:27:49:bd:ff:8d:e4:0a:ab:6f:1c: ea:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:AF:A8:E4:3D:3C:AD:B1:3B:95:35:20:6F:96:A3:2F:41:BA:7D:AF X509v3 Authority Key Identifier: keyid:09:FE:CD:70:71:B7:27:DB:3D:12:F0:9E:FB:B4:54:E0:4D:4F:74:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/16-o5D08rbE7lTUgb5ajL0G6fa8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.196.228.0/22 91.224.171.0/24 IPv6: 2a0f:d840::/29 Signature Algorithm: sha256WithRSAEncryption 08:1d:84:7e:4f:98:14:2c:3d:5c:ff:e9:9b:fc:24:40:eb:a3: 1a:e2:1d:d3:43:f1:5a:3c:8b:50:dc:08:c5:1d:d3:56:dc:0b: b4:64:d7:bc:f3:ae:e3:37:1a:85:52:b8:ba:24:0c:28:27:af: 7d:c5:d0:cd:d9:e1:ec:9c:5e:ca:eb:7d:48:1d:7e:6b:30:40: 8f:02:fc:75:d7:e0:e3:9b:6d:a7:ec:ce:66:a9:00:5b:ba:9a: dd:ec:29:99:20:7e:9f:87:23:56:0f:79:35:09:36:d1:07:2d: d1:61:8b:ad:e6:0f:d7:72:fa:77:e8:b3:58:64:3b:16:fb:28: 43:3f:ac:41:a2:1d:00:9e:c7:d3:f1:66:aa:68:84:a6:e1:57: 86:48:56:ff:c1:f7:c8:40:9a:51:e9:fd:b1:c5:4c:22:ac:00: 1b:20:d5:fb:0a:24:0c:45:75:e2:ee:62:25:ee:95:50:5e:1c: a7:cf:c5:36:d5:90:55:19:c5:45:fb:27:94:fa:95:a0:ef:46: 76:5c:0d:96:c1:c0:1f:58:3c:ec:5d:f4:f2:ac:0e:25:60:93: 81:86:2f:81:7d:91:4f:37:8f:05:6d:ab:01:9b:66:15:bc:ed: c2:37:16:19:37:55:80:95:75:70:fd:eb:96:e1:9e:45:65:ae: 40:78:b4:37 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt4NOTgRPCy0H7TYHvmrt0zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZmVjZDcwNzFiNzI3ZGIzZDEyZjA5ZWZiYjQ1NGUwNGQ0 Zjc0M2QwHhcNMjYwMTAxMDYxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkN2FmYThlNDNkM2NhZGIxM2I5NTM1MjA2Zjk2YTMyZjQxYmE3ZGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwulqyQxdfR8KzJ173glrBXntV54l 3Lq7xcXsqr5SEKa/S+x8cUU+qTR/ykuvVtEmS1CU+gWrhvNCuNFSGOMO3N8Zjl68 OdYGLrabo1Tn4yBqqE7L54bYnMt2I3dbdHyJcJ00xM/nPjm7ScPbxTn+s4uQgKzC d+OunPsXYcyPuFM8X9hr21lBqFn82sKMRCtlloGNcBXtpz0NTYJ+K9SYyVqrInIh QQ74Ki1I5RQ53fm6Zr/wLzivxg05cDkSsebot9NF9qyGNAZcVRX47WUY4gIGuGnA 6K3R4/2+encqFzTlpVUDM3Ke3RoUen/QZ2WVw/4cYydJvf+N5AqrbxzqPQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFNevqOQ9PK2xO5U1IG+Woy9Bun2vMB8GA1UdIwQY MBaAFAn+zXBxtyfbPRLwnvu0VOBNT3Q9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2Y3TmNIRzNKOXM5RXZDZS03UlU0RTFQZEQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS83MmUzYTEtOTA2Yy00NDhiLTk4ZGEt NWEyMDZlOGIxMzY5LzEvMTYtbzVEMDhyYkU3bFRVZ2I1YWpMMEc2ZmE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS83MmUzYTEtOTA2Yy00NDhiLTk4ZGEtNWEyMDZlOGIxMzY5 LzEvQ2Y3TmNIRzNKOXM5RXZDZS03UlU0RTFQZEQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCW8TkAwQA W+CrMA0EAgACMAcDBQMqD9hAMA0GCSqGSIb3DQEBCwUAA4IBAQAIHYR+T5gULD1c /+mb/CRA66Ma4h3TQ/FaPItQ3AjFHdNW3Au0ZNe8867jNxqFUri6JAwoJ699xdDN 2eHsnF7K631IHX5rMECPAvx11+Djm22n7M5mqQBbuprd7CmZIH6fhyNWD3k1CTbR By3RYYut5g/Xcvp36LNYZDsW+yhDP6xBoh0AnsfT8WaqaISm4VeGSFb/wffIQJpR 6f2xxUwirAAbINX7CiQMRXXi7mIl7pVQXhynz8U21ZBVGcVF+yeU+pWg70Z2XA2W wcAfWDzsXfTyrA4lYJOBhi+BfZFPN48FbasBm2YVvO3CNxYZN1WAlXVw/euW4Z5F Za5AeLQ3 -----END CERTIFICATE-----Generated at Mon Jan 26 07:40:29 2026 by rpki-client