This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/HTiPrEB_ddl16rQ6ltRGw4XbaY4.roa File: HTiPrEB_ddl16rQ6ltRGw4XbaY4.roa (raw, json) Hash identifier: 5Elms3noOpNLriRD+IFQ3F+D2wWRU/uDDSPyaot68Sk= Subject key identifier: 1D:38:8F:AC:40:7F:75:D9:75:EA:B4:3A:96:D4:46:C3:85:DB:69:8E Certificate issuer: /CN=58131e8f9a485040d9fcae7167a428b8a12f49ea Certificate serial: 019B7A5A7F592DFAC732460EAEA1496F1711 Authority key identifier: 58:13:1E:8F:9A:48:50:40:D9:FC:AE:71:67:A4:28:B8:A1:2F:49:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WBMej5pIUEDZ_K5xZ6QouKEvSeo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/HTiPrEB_ddl16rQ6ltRGw4XbaY4.roa Signing time: Thu 01 Jan 2026 16:18:29 +0000 ROA not before: Thu 01 Jan 2026 16:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29075 IP address blocks: 91.208.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft rsync://rpki.ripe.net/repository/DEFAULT/WBMej5pIUEDZ_K5xZ6QouKEvSeo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:7f:59:2d:fa:c7:32:46:0e:ae:a1:49:6f:17:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58131e8f9a485040d9fcae7167a428b8a12f49ea Validity Not Before: Jan 1 16:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d388fac407f75d975eab43a96d446c385db698e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:04:a7:10:08:d1:72:12:3b:df:aa:2c:90:18: f0:93:73:01:dc:a5:96:c5:cb:89:eb:d3:07:ed:47: 26:7b:af:1d:68:e9:bc:e2:e7:0d:85:67:ab:b9:4b: ae:7e:ba:c7:16:d6:e0:ae:8a:12:16:73:4f:f9:8a: fc:3d:b8:e7:f6:f2:76:8a:6e:b3:2d:67:7a:7b:fb: 2b:8b:f1:26:8e:0d:10:d8:4e:1a:f0:01:82:fa:3c: 9c:da:d8:97:73:c0:63:81:05:3a:62:98:29:1f:aa: 35:ac:6d:e0:89:2f:5f:0b:dd:97:c6:1e:66:a0:05: 9f:98:a4:51:49:ed:0e:cd:9a:cc:ea:39:49:98:f9: 54:cb:0e:32:cb:d8:79:2b:3f:d3:ec:a3:46:cc:77: d5:fa:8d:c5:d2:e5:cd:9a:6b:27:43:fa:5b:01:f3: 55:3e:0a:a9:76:8f:ce:6a:bc:d4:90:45:d1:e9:c6: 0f:cb:2b:7e:ae:85:50:fe:7f:0c:b1:00:2a:44:ad: 7c:63:14:e3:46:0c:91:9d:df:02:db:9c:b6:a8:33: 3f:e6:a7:20:35:33:ae:7b:f2:4f:63:38:22:73:f3: b8:9f:f8:e5:2d:0a:a3:75:3a:f9:4d:b4:b4:b9:1b: 2c:73:93:8f:d0:7d:de:b5:5d:5a:f4:23:64:dd:c5: c1:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:38:8F:AC:40:7F:75:D9:75:EA:B4:3A:96:D4:46:C3:85:DB:69:8E X509v3 Authority Key Identifier: keyid:58:13:1E:8F:9A:48:50:40:D9:FC:AE:71:67:A4:28:B8:A1:2F:49:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBMej5pIUEDZ_K5xZ6QouKEvSeo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/HTiPrEB_ddl16rQ6ltRGw4XbaY4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.40.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:4f:47:ff:a0:8e:e0:0c:a6:93:3d:65:47:5e:52:72:46:d2: c2:83:99:c8:cb:c8:06:54:60:b4:4d:e0:9c:b6:bc:f7:a3:47: f8:c0:fa:e2:55:e8:b3:fc:76:3c:ba:3e:17:08:f8:90:ee:87: 1b:ef:9d:2c:ee:b8:c2:1b:39:fd:33:9d:e8:7c:c8:2e:0a:2c: 9a:41:b9:ce:68:e2:e8:27:5d:12:8e:77:e3:24:69:ad:67:65: b8:75:e8:0b:cf:c0:8a:ff:57:a7:1b:16:ec:57:ad:69:15:b8: af:59:20:b7:b4:35:80:cf:58:b8:77:6d:89:05:4e:f9:50:b5: 3a:8b:bd:05:2f:8c:61:fb:ea:c9:06:f3:5b:a7:51:78:b4:2f: 10:ea:95:51:e9:ba:39:8a:9b:2c:af:8e:c9:f2:17:53:56:9e: d1:10:ed:26:56:e1:a0:82:4c:bd:23:0a:93:82:40:00:48:20: 8d:34:ee:dc:62:fc:8a:d3:23:c3:19:ab:b4:75:2e:f9:b3:a0: 3a:f0:b6:9f:02:f3:79:58:ca:6a:82:3c:db:fa:f4:58:27:b8: e1:40:e6:2f:e7:73:ef:1e:5e:55:5d:cd:41:22:ea:fc:93:a1: 9b:ff:b7:9c:14:76:9c:86:af:09:44:ed:98:96:99:fb:e7:ae: 32:a7:2b:2d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wn9ZLfrHMkYOrqFJbxcRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4MTMxZThmOWE0ODUwNDBkOWZjYWU3MTY3YTQyOGI4YTEy ZjQ5ZWEwHhcNMjYwMTAxMTYxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDM4OGZhYzQwN2Y3NWQ5NzVlYWI0M2E5NmQ0NDZjMzg1ZGI2OThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyASnEAjRchI736oskBjwk3MB3KWW xcuJ69MH7Ucme68daOm84ucNhWeruUuufrrHFtbgrooSFnNP+Yr8Pbjn9vJ2im6z LWd6e/sri/Emjg0Q2E4a8AGC+jyc2tiXc8BjgQU6YpgpH6o1rG3giS9fC92Xxh5m oAWfmKRRSe0OzZrM6jlJmPlUyw4yy9h5Kz/T7KNGzHfV+o3F0uXNmmsnQ/pbAfNV Pgqpdo/OarzUkEXR6cYPyyt+roVQ/n8MsQAqRK18YxTjRgyRnd8C25y2qDM/5qcg NTOue/JPYzgic/O4n/jlLQqjdTr5TbS0uRssc5OP0H3etV1a9CNk3cXBxwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB04j6xAf3XZdeq0OpbURsOF22mOMB8GA1UdIwQY MBaAFFgTHo+aSFBA2fyucWekKLihL0nqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0JNZWo1cElVRURaX0s1eFo2UW91S0V2U2VvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9kNzQ0MjAtNjQyNS00MjcyLTkzYTIt MzU4NjE2NGE3ZjQ0LzEvSFRpUHJFQl9kZGwxNnJRNmx0Ukd3NFhiYVk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9kNzQ0MjAtNjQyNS00MjcyLTkzYTItMzU4NjE2NGE3ZjQ0 LzEvV0JNZWo1cElVRURaX0s1eFo2UW91S0V2U2VvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9AoMA0G CSqGSIb3DQEBCwUAA4IBAQBrT0f/oI7gDKaTPWVHXlJyRtLCg5nIy8gGVGC0TeCc trz3o0f4wPriVeiz/HY8uj4XCPiQ7ocb750s7rjCGzn9M53ofMguCiyaQbnOaOLo J10SjnfjJGmtZ2W4degLz8CK/1enGxbsV61pFbivWSC3tDWAz1i4d22JBU75ULU6 i70FL4xh++rJBvNbp1F4tC8Q6pVR6bo5ipssr47J8hdTVp7REO0mVuGggky9IwqT gkAASCCNNO7cYvyK0yPDGau0dS75s6A68LafAvN5WMpqgjzb+vRYJ7jhQOYv53Pv Hl5VXc1BIur8k6Gb/7ecFHachq8JRO2Ylpn7564ypyst -----END CERTIFICATE-----Generated at Mon Jan 26 02:22:53 2026 by rpki-client