This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/3VroMIGW9a2JttxLS_ZpvUy7Y2o.roa File: 3VroMIGW9a2JttxLS_ZpvUy7Y2o.roa (raw, json) Hash identifier: DC6Ab1c940mU76EK7+5P4BKzGG2d6IkCWGpU20nLY2g= Subject key identifier: DD:5A:E8:30:81:96:F5:AD:89:B6:DC:4B:4B:F6:69:BD:4C:BB:63:6A Certificate issuer: /CN=31d31ecc54b90e9dff2442b9051aa9568f306e78 Certificate serial: 019AFE1041B457D6CB9BA5C0902EA9F1AB2F Authority key identifier: 31:D3:1E:CC:54:B9:0E:9D:FF:24:42:B9:05:1A:A9:56:8F:30:6E:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdMezFS5Dp3_JEK5BRqpVo8wbng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/3VroMIGW9a2JttxLS_ZpvUy7Y2o.roa Signing time: Mon 08 Dec 2025 13:04:29 +0000 ROA not before: Mon 08 Dec 2025 13:04:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 91.213.236.0/24 maxlen: 24 2001:7f8:68::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.mft rsync://rpki.ripe.net/repository/DEFAULT/MdMezFS5Dp3_JEK5BRqpVo8wbng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 07:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fe:10:41:b4:57:d6:cb:9b:a5:c0:90:2e:a9:f1:ab:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31d31ecc54b90e9dff2442b9051aa9568f306e78 Validity Not Before: Dec 8 13:04:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=dd5ae8308196f5ad89b6dc4b4bf669bd4cbb636a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:17:62:85:86:e3:a5:a6:82:71:d1:49:42:1d: f2:74:3e:6a:c2:6c:65:20:1d:2f:33:2c:99:f2:1e: 73:91:37:1c:85:70:db:52:97:d8:8f:12:b6:59:2d: 0e:3c:e4:fa:f6:19:ee:46:02:af:ff:4f:86:82:f7: d8:9d:c8:be:02:6e:69:17:6b:2d:e6:cd:05:2e:8e: 5d:b8:61:fe:22:28:49:3a:2e:49:de:a7:c5:87:43: bf:37:74:35:15:7e:13:0d:c9:e6:10:13:94:42:4b: 0e:90:31:59:72:f3:ae:22:67:76:30:08:a6:1a:6d: 6b:42:12:e8:6e:9b:66:9d:51:49:48:2d:d5:30:9f: 9d:f3:4b:42:aa:27:88:7a:98:d8:fb:4a:a0:12:ca: eb:3c:a7:f4:f6:74:6f:b5:53:a5:e6:16:3c:b4:81: a4:aa:24:fa:20:eb:34:b2:9d:4f:bd:6b:2d:8b:61: 91:e5:a1:6f:be:de:46:88:c8:28:ac:f0:cf:81:81: 42:a0:e6:5a:04:ea:56:3e:3b:91:b7:1b:a7:bf:13: 0c:31:4e:f6:14:e6:4c:3f:45:69:12:92:50:d4:ba: 7e:aa:66:d2:10:9b:91:e6:d0:d8:c0:e1:af:e7:bd: fe:a2:2e:37:43:fd:ae:d8:cc:da:cb:a7:a6:92:8f: ad:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:5A:E8:30:81:96:F5:AD:89:B6:DC:4B:4B:F6:69:BD:4C:BB:63:6A X509v3 Authority Key Identifier: keyid:31:D3:1E:CC:54:B9:0E:9D:FF:24:42:B9:05:1A:A9:56:8F:30:6E:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdMezFS5Dp3_JEK5BRqpVo8wbng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/3VroMIGW9a2JttxLS_ZpvUy7Y2o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.213.236.0/24 IPv6: 2001:7f8:68::/48 Signature Algorithm: sha256WithRSAEncryption 8f:b9:21:b3:f6:1d:f8:a6:62:c2:6d:09:4a:11:81:3b:8b:86: 3e:bd:8f:b6:6f:1d:51:d3:38:b5:9a:95:fb:60:12:90:8e:0c: a6:3d:44:4a:84:18:a8:88:81:88:60:64:03:fd:5d:b5:6e:7d: f9:b6:4a:21:8a:34:a9:bb:e9:05:83:78:7f:e6:de:bc:8d:21: 89:53:a9:60:18:23:d8:f5:c2:e9:35:eb:1b:30:fd:da:c8:0c: 76:ae:e1:c0:63:4a:ce:74:98:fb:6f:e2:40:71:84:3f:46:f0: 0b:e5:9a:e8:65:2a:e1:6b:21:b5:80:0a:c8:dc:ba:be:be:8d: 15:80:e7:83:cb:8e:e4:56:38:f2:12:a0:64:19:fb:6e:61:bd: 5a:0d:da:b1:30:8f:23:f1:ab:a4:86:e1:ef:97:1c:a5:53:aa: 7c:34:a4:93:77:73:9f:41:d3:03:55:e4:a2:76:3e:17:8c:9d: 57:78:a3:c0:0e:ae:6b:b0:41:ca:4d:b5:e4:44:9c:bb:50:94: 9d:f9:49:13:9d:79:ec:7e:54:ff:83:4e:0f:d0:24:d0:8c:55: 54:6f:c1:f4:fa:c6:e8:d9:99:3e:73:34:45:d0:40:ef:40:0c: 22:fc:c1:62:d7:4c:48:96:42:10:28:9f:a9:a0:d8:d9:ce:3d: 3f:9c:a6:1b -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZr+EEG0V9bLm6XAkC6p8asvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxZDMxZWNjNTRiOTBlOWRmZjI0NDJiOTA1MWFhOTU2OGYz MDZlNzgwHhcNMjUxMjA4MTMwNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDVhZTgzMDgxOTZmNWFkODliNmRjNGI0YmY2NjliZDRjYmI2MzZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRdihYbjpaaCcdFJQh3ydD5qwmxl IB0vMyyZ8h5zkTcchXDbUpfYjxK2WS0OPOT69hnuRgKv/0+GgvfYnci+Am5pF2st 5s0FLo5duGH+IihJOi5J3qfFh0O/N3Q1FX4TDcnmEBOUQksOkDFZcvOuImd2MAim Gm1rQhLobptmnVFJSC3VMJ+d80tCqieIepjY+0qgEsrrPKf09nRvtVOl5hY8tIGk qiT6IOs0sp1PvWsti2GR5aFvvt5GiMgorPDPgYFCoOZaBOpWPjuRtxunvxMMMU72 FOZMP0VpEpJQ1Lp+qmbSEJuR5tDYwOGv573+oi43Q/2u2Mzay6emko+thwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFN1a6DCBlvWtibbcS0v2ab1Mu2NqMB8GA1UdIwQY MBaAFDHTHsxUuQ6d/yRCuQUaqVaPMG54MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWRNZXpGUzVEcDNfSkVLNUJScXBWbzh3Ym5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9iN2NkN2MtNTc5NS00MTQ2LTg0Nzct MGRhODdiNTFmZmFjLzEvM1Zyb01JR1c5YTJKdHR4TFNfWnB2VXk3WTJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9iN2NkN2MtNTc5NS00MTQ2LTg0NzctMGRhODdiNTFmZmFj LzEvTWRNZXpGUzVEcDNfSkVLNUJScXBWbzh3Ym5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW9XsMA8E AgACMAkDBwAgAQf4AGgwDQYJKoZIhvcNAQELBQADggEBAI+5IbP2HfimYsJtCUoR gTuLhj69j7ZvHVHTOLWalftgEpCODKY9REqEGKiIgYhgZAP9XbVuffm2SiGKNKm7 6QWDeH/m3ryNIYlTqWAYI9j1wuk16xsw/drIDHau4cBjSs50mPtv4kBxhD9G8Avl muhlKuFrIbWACsjcur6+jRWA54PLjuRWOPISoGQZ+25hvVoN2rEwjyPxq6SG4e+X HKVTqnw0pJN3c59B0wNV5KJ2PheMnVd4o8AOrmuwQcpNteREnLtQlJ35SROdeex+ VP+DTg/QJNCMVVRvwfT6xujZmT5zNEXQQO9ADCL8wWLXTEiWQhAon6mg2NnOPT+c phs= -----END CERTIFICATE-----Generated at Mon Dec 15 17:02:29 2025 by rpki-client