This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/c1Cr2xQrvIMTkgBoK4JN0C8ZfzY.roa File: c1Cr2xQrvIMTkgBoK4JN0C8ZfzY.roa (raw, json) Hash identifier: hsHSTzuETrl+GiF3BjMkquLySjvu8r7bmMPrgJiHnIw= Subject key identifier: 73:50:AB:DB:14:2B:BC:83:13:92:00:68:2B:82:4D:D0:2F:19:7F:36 Certificate issuer: /CN=53c9a8fb5599bf93b50ffbbcc877884a6d815157 Certificate serial: 019AE4D4E4C42FED5B82B81A42A01C2D32EB Authority key identifier: 53:C9:A8:FB:55:99:BF:93:B5:0F:FB:BC:C8:77:88:4A:6D:81:51:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8mo-1WZv5O1D_u8yHeISm2BUVc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/c1Cr2xQrvIMTkgBoK4JN0C8ZfzY.roa Signing time: Wed 03 Dec 2025 15:29:08 +0000 ROA not before: Wed 03 Dec 2025 15:29:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48955 IP address blocks: 91.211.87.0/24 maxlen: 24 91.217.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft rsync://rpki.ripe.net/repository/DEFAULT/U8mo-1WZv5O1D_u8yHeISm2BUVc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e4:d4:e4:c4:2f:ed:5b:82:b8:1a:42:a0:1c:2d:32:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53c9a8fb5599bf93b50ffbbcc877884a6d815157 Validity Not Before: Dec 3 15:29:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7350abdb142bbc83139200682b824dd02f197f36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a8:fc:64:d8:89:a1:93:01:90:f1:cf:f7:a0: 79:f6:62:a4:67:d3:fc:d6:66:15:6d:b0:05:e8:05: 5c:ae:77:e5:85:1f:b5:62:c7:2e:ce:15:98:4d:3e: 04:06:14:99:fa:8c:7d:1f:4a:9a:f5:29:f7:f5:79: ef:c5:27:75:d7:65:a5:cf:a8:c5:8c:ab:38:d1:39: 7c:07:3c:7c:df:c2:dd:a1:0d:e0:db:55:60:1d:3d: 86:6e:84:35:f5:64:f4:bb:d1:87:7c:c1:b2:ec:8a: 53:82:b6:33:66:f7:a0:d5:33:bf:12:92:81:b9:7b: fa:01:5b:59:37:73:f1:8f:a5:02:79:76:7c:0f:76: c0:39:40:05:c7:02:53:7d:fa:33:0d:a6:2e:62:1d: e7:68:a0:09:09:b5:26:30:84:ef:38:29:18:0d:83: 80:d8:a4:e0:d5:42:46:c9:a4:a8:33:5e:7c:81:b8: 2a:2a:9e:fd:58:f9:3a:74:42:82:c6:83:98:7e:06: 36:17:f6:30:9d:77:f0:20:2f:49:7e:d0:f2:87:b0: 27:a3:15:d1:c5:89:b9:f7:a5:6d:20:07:b3:55:c2: fd:1f:b8:b7:19:3b:12:7b:32:ad:bf:a5:4b:1c:1b: 24:c7:08:75:fa:4d:0a:3c:84:91:ca:05:95:a2:42: dc:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:50:AB:DB:14:2B:BC:83:13:92:00:68:2B:82:4D:D0:2F:19:7F:36 X509v3 Authority Key Identifier: keyid:53:C9:A8:FB:55:99:BF:93:B5:0F:FB:BC:C8:77:88:4A:6D:81:51:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8mo-1WZv5O1D_u8yHeISm2BUVc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/c1Cr2xQrvIMTkgBoK4JN0C8ZfzY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.211.87.0/24 91.217.226.0/24 Signature Algorithm: sha256WithRSAEncryption 12:92:6b:9d:4b:95:13:30:28:53:a2:4a:94:68:b2:ee:85:0c: 30:36:99:8e:74:b9:d1:d9:8d:6a:53:77:95:79:7d:22:dd:5d: 25:3f:cc:df:b2:13:cb:11:33:71:83:cc:e9:aa:ee:b8:4a:70: b3:25:be:97:ff:85:a2:ee:a4:37:1f:1a:0e:05:fa:f9:fb:87: 3a:95:ff:8d:d1:c9:1e:56:91:3a:97:9f:66:5a:12:72:97:d2: 3f:b2:35:69:3e:7e:0c:a7:53:4c:b6:85:5f:df:de:3e:ce:87: 83:8e:5b:73:f5:70:ea:09:8c:3e:13:ce:ed:fb:50:eb:5e:19: 8c:69:14:dc:9c:73:34:c0:96:66:1a:9b:ea:58:67:6f:bf:50: e1:c1:ab:2c:13:fb:76:e2:24:c1:f1:29:7b:36:48:40:ed:e4: 64:8a:92:91:df:ae:6e:76:e8:f7:94:fd:f5:75:62:e3:08:07: dd:c2:a1:9e:9a:88:b5:b0:64:77:8c:58:f9:46:6d:66:05:de: 3f:d2:1c:75:bf:7b:fd:9d:96:01:62:98:13:b4:c5:a1:29:d3: fc:ad:ac:87:f5:55:54:75:9a:26:ff:80:c0:f8:d6:3c:3b:c6: 0b:24:27:34:9b:58:e5:63:40:15:5e:1e:17:c1:82:77:77:87: 8b:22:b9:7f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZrk1OTEL+1bgrgaQqAcLTLrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzYzlhOGZiNTU5OWJmOTNiNTBmZmJiY2M4Nzc4ODRhNmQ4 MTUxNTcwHhcNMjUxMjAzMTUyOTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzUwYWJkYjE0MmJiYzgzMTM5MjAwNjgyYjgyNGRkMDJmMTk3ZjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKj8ZNiJoZMBkPHP96B59mKkZ9P8 1mYVbbAF6AVcrnflhR+1YscuzhWYTT4EBhSZ+ox9H0qa9Sn39XnvxSd112Wlz6jF jKs40Tl8Bzx838LdoQ3g21VgHT2GboQ19WT0u9GHfMGy7IpTgrYzZveg1TO/EpKB uXv6AVtZN3Pxj6UCeXZ8D3bAOUAFxwJTffozDaYuYh3naKAJCbUmMITvOCkYDYOA 2KTg1UJGyaSoM158gbgqKp79WPk6dEKCxoOYfgY2F/YwnXfwIC9JftDyh7AnoxXR xYm596VtIAezVcL9H7i3GTsSezKtv6VLHBskxwh1+k0KPISRygWVokLcEQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHNQq9sUK7yDE5IAaCuCTdAvGX82MB8GA1UdIwQY MBaAFFPJqPtVmb+TtQ/7vMh3iEptgVFXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVThtby0xV1p2NU8xRF91OHlIZUlTbTJCVVZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8yMjllNzktOWJjNC00N2JhLWIxMzYt MzM4ODE0NjdhYzVlLzEvYzFDcjJ4UXJ2SU1Ua2dCb0s0Sk4wQzhaZnpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS8yMjllNzktOWJjNC00N2JhLWIxMzYtMzM4ODE0NjdhYzVl LzEvVThtby0xV1p2NU8xRF91OHlIZUlTbTJCVVZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9NXAwQA W9niMA0GCSqGSIb3DQEBCwUAA4IBAQASkmudS5UTMChTokqUaLLuhQwwNpmOdLnR 2Y1qU3eVeX0i3V0lP8zfshPLETNxg8zpqu64SnCzJb6X/4Wi7qQ3HxoOBfr5+4c6 lf+N0ckeVpE6l59mWhJyl9I/sjVpPn4Mp1NMtoVf394+zoeDjltz9XDqCYw+E87t +1DrXhmMaRTcnHM0wJZmGpvqWGdvv1DhwassE/t24iTB8Sl7NkhA7eRkipKR365u duj3lP31dWLjCAfdwqGemoi1sGR3jFj5Rm1mBd4/0hx1v3v9nZYBYpgTtMWhKdP8 rayH9VVUdZom/4DA+NY8O8YLJCc0m1jlY0AVXh4XwYJ3d4eLIrl/ -----END CERTIFICATE-----Generated at Sat Dec 6 13:10:35 2025 by rpki-client