This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/Avc3DoG9n8NvJWjUCmVcnkN97O4.roa File: Avc3DoG9n8NvJWjUCmVcnkN97O4.roa (raw, json) Hash identifier: YMjpamajsCA46OT3leu0kluW3gE2qUo5wS/kP9h33r8= Subject key identifier: 02:F7:37:0E:81:BD:9F:C3:6F:25:68:D4:0A:65:5C:9E:43:7D:EC:EE Certificate issuer: /CN=98901c7cffd19a4fea78f79b1004999266dcc224 Certificate serial: 019B7DCAB1FA7A65BD64F8033C34AB97A65E Authority key identifier: 98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/Avc3DoG9n8NvJWjUCmVcnkN97O4.roa Signing time: Fri 02 Jan 2026 08:19:54 +0000 ROA not before: Fri 02 Jan 2026 08:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39122 IP address blocks: 91.210.232.0/22 maxlen: 22 193.36.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:b1:fa:7a:65:bd:64:f8:03:3c:34:ab:97:a6:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98901c7cffd19a4fea78f79b1004999266dcc224 Validity Not Before: Jan 2 08:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=02f7370e81bd9fc36f2568d40a655c9e437decee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1f:6c:d3:e7:73:09:08:24:d2:da:75:7c:19: e6:cb:32:41:1f:53:e9:29:5b:a4:02:97:05:d7:fb: 6e:5f:73:b8:17:0e:42:79:1b:43:13:5f:8f:37:d5: 90:a9:61:65:24:d9:f6:df:76:da:46:54:93:9b:6f: e0:7c:09:6b:72:d3:40:06:37:ee:65:a1:78:35:0f: ff:03:74:de:c1:87:51:84:7a:ec:3a:20:50:da:f7: 7e:f3:bb:a0:63:47:d5:55:b0:06:a4:ac:4d:16:5d: 9f:82:0e:1c:06:7f:b5:60:1d:ad:b0:80:55:e4:f5: 12:7f:3a:1e:97:4e:9f:8c:21:c1:22:b6:ec:f7:a2: f0:9e:b8:12:cb:0a:83:3f:5f:ad:df:67:c2:07:de: d2:17:12:67:df:46:a2:8d:71:02:a0:c1:d4:0f:dc: 1d:8d:73:cc:c9:cd:1d:a4:f0:fa:8e:25:6b:47:ea: fd:ef:7f:c1:73:f8:f7:87:db:3d:9c:62:d0:db:40: f0:c4:68:8f:72:32:36:a1:62:37:d9:4c:86:db:ee: ff:79:2f:f7:1b:f6:f9:45:a3:63:b8:f0:32:4e:e3: 7b:22:62:d0:5c:2d:4e:8d:5a:28:0e:81:7b:3a:12: aa:2b:e5:c1:fa:fd:06:03:be:ad:79:94:ef:35:73: 71:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:F7:37:0E:81:BD:9F:C3:6F:25:68:D4:0A:65:5C:9E:43:7D:EC:EE X509v3 Authority Key Identifier: keyid:98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/Avc3DoG9n8NvJWjUCmVcnkN97O4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.210.232.0/22 193.36.43.0/24 Signature Algorithm: sha256WithRSAEncryption 01:d9:16:09:bc:10:84:6c:95:27:2b:2d:bb:56:e1:21:5a:5d: 94:7e:41:d7:bd:4c:83:57:a1:29:a4:42:a3:0e:c4:ac:16:fc: c0:3a:9d:52:69:1a:85:0e:f4:6c:ae:12:12:6f:8e:95:9e:69: ae:9c:66:25:38:b6:0d:8f:82:53:e2:4f:df:a2:c7:44:41:b7: f2:79:26:dc:0b:1f:b7:79:c1:6f:23:86:81:b5:4a:40:04:eb: 4b:81:8d:e2:28:f7:2e:b9:52:f8:9a:0e:eb:92:72:03:63:ac: 75:1e:9f:de:76:59:7a:c5:b6:bf:a8:1b:49:6e:94:36:fe:1d: 98:d4:75:0b:9c:ab:cc:72:3c:be:16:17:2f:f5:d7:d6:27:84: a6:8f:a5:52:24:04:3d:f2:2e:66:57:14:60:ee:cf:22:0f:22: fb:dd:ae:be:ed:cf:ec:b4:bb:fd:b7:75:5a:1d:ee:f6:a9:b3: 6f:64:ab:0f:6b:e7:2b:a4:3d:5d:85:b9:eb:1a:bb:a2:c8:94: 06:f0:0d:c6:1a:c5:0d:9a:3d:e6:07:29:41:58:a5:ce:93:2c: 43:82:fd:29:79:37:0a:25:2c:ac:89:0d:61:00:d5:fa:7b:0b: 2c:e9:61:1c:89:a0:a4:9b:83:c8:99:28:f6:ce:ed:8d:ef:63: 16:a6:a1:e9 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9yrH6emW9ZPgDPDSrl6ZeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4OTAxYzdjZmZkMTlhNGZlYTc4Zjc5YjEwMDQ5OTkyNjZk Y2MyMjQwHhcNMjYwMTAyMDgxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMmY3MzcwZTgxYmQ5ZmMzNmYyNTY4ZDQwYTY1NWM5ZTQzN2RlY2VlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB9s0+dzCQgk0tp1fBnmyzJBH1Pp KVukApcF1/tuX3O4Fw5CeRtDE1+PN9WQqWFlJNn233baRlSTm2/gfAlrctNABjfu ZaF4NQ//A3TewYdRhHrsOiBQ2vd+87ugY0fVVbAGpKxNFl2fgg4cBn+1YB2tsIBV 5PUSfzoel06fjCHBIrbs96LwnrgSywqDP1+t32fCB97SFxJn30aijXECoMHUD9wd jXPMyc0dpPD6jiVrR+r973/Bc/j3h9s9nGLQ20DwxGiPcjI2oWI32UyG2+7/eS/3 G/b5RaNjuPAyTuN7ImLQXC1OjVooDoF7OhKqK+XB+v0GA76teZTvNXNxWQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAL3Nw6BvZ/DbyVo1AplXJ5DfezuMB8GA1UdIwQY MBaAFJiQHHz/0ZpP6nj3mxAEmZJm3MIkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUpBY2ZQX1Jta19xZVBlYkVBU1prbWJjd2lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9lMjBjOTUtMGY5Mi00NTk4LTk2ZGYt Y2JjMjc5N2MxZDBhLzEvQXZjM0RvRzluOE52SldqVUNtVmNua045N080LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9lMjBjOTUtMGY5Mi00NTk4LTk2ZGYtY2JjMjc5N2MxZDBh LzEvbUpBY2ZQX1Jta19xZVBlYkVBU1prbWJjd2lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW9LoAwQA wSQrMA0GCSqGSIb3DQEBCwUAA4IBAQAB2RYJvBCEbJUnKy27VuEhWl2UfkHXvUyD V6EppEKjDsSsFvzAOp1SaRqFDvRsrhISb46VnmmunGYlOLYNj4JT4k/fosdEQbfy eSbcCx+3ecFvI4aBtUpABOtLgY3iKPcuuVL4mg7rknIDY6x1Hp/edll6xba/qBtJ bpQ2/h2Y1HULnKvMcjy+Fhcv9dfWJ4Smj6VSJAQ98i5mVxRg7s8iDyL73a6+7c/s tLv9t3VaHe72qbNvZKsPa+crpD1dhbnrGruiyJQG8A3GGsUNmj3mBylBWKXOkyxD gv0peTcKJSysiQ1hANX6ewss6WEciaCkm4PImSj2zu2N72MWpqHp -----END CERTIFICATE-----Generated at Mon Jan 26 01:01:41 2026 by rpki-client