This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/3X72ts_u8UdAU2Nlgp4DF8Gg6a8.roa File: 3X72ts_u8UdAU2Nlgp4DF8Gg6a8.roa (raw, json) Hash identifier: Ge4PsKYMryByO0OYDYTZfYZO1YJ9pHjF9aOWXLR3eBQ= Subject key identifier: DD:7E:F6:B6:CF:EE:F1:47:40:53:63:65:82:9E:03:17:C1:A0:E9:AF Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e Certificate serial: 019B7C12C072293A5C0C1BBD67A00EF704E6 Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/3X72ts_u8UdAU2Nlgp4DF8Gg6a8.roa Signing time: Fri 02 Jan 2026 00:19:22 +0000 ROA not before: Fri 02 Jan 2026 00:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199062 IP address blocks: 91.103.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:c0:72:29:3a:5c:0c:1b:bd:67:a0:0e:f7:04:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e Validity Not Before: Jan 2 00:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd7ef6b6cfeef14740536365829e0317c1a0e9af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:7f:e0:42:a7:83:cd:9b:8d:1f:54:af:3d:4f: 16:d2:1b:43:13:1f:73:87:44:24:56:38:fb:2a:c3: 45:54:21:b4:6b:a5:92:26:8f:25:30:81:e2:11:2c: 1b:ea:d4:83:df:67:2e:2c:34:4e:3c:03:a4:fd:5d: 42:b5:d9:aa:3a:68:d6:e0:f8:6c:58:2b:22:be:f6: 80:e9:4a:80:35:c4:4b:1b:d7:fb:0b:c4:45:22:6c: 9f:c2:a7:e9:b7:64:24:20:20:fb:d5:f9:0d:00:ce: 75:89:d3:92:e6:73:01:c4:35:1b:ea:66:6d:25:f6: a2:65:c5:2b:fe:95:4e:de:c7:a5:31:5c:c9:67:41: b7:37:c9:90:92:d7:62:c9:5a:c6:ab:8d:77:79:78: 49:20:be:ac:31:1d:3a:b5:df:45:ac:fe:d2:30:af: 61:8a:fc:9c:9d:fe:5c:7f:27:a0:f8:74:7c:90:98: 5e:b8:88:ff:36:57:da:30:d0:22:ea:5a:c7:ec:2e: 7b:b9:f6:a4:c1:e7:b6:1f:56:d1:48:ba:93:b5:f1: 25:89:7d:fa:de:63:85:d6:9e:3b:f8:23:16:59:49: c7:51:cd:1f:ce:b6:e5:8f:f7:ab:47:40:2a:66:90: df:70:f4:d0:38:a0:06:ac:7a:41:de:90:6c:ac:34: 51:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:7E:F6:B6:CF:EE:F1:47:40:53:63:65:82:9E:03:17:C1:A0:E9:AF X509v3 Authority Key Identifier: keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/3X72ts_u8UdAU2Nlgp4DF8Gg6a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.103.58.0/24 Signature Algorithm: sha256WithRSAEncryption a7:ac:82:da:6d:07:27:e6:b2:44:9f:f2:1d:c5:9e:c6:77:02: ac:d3:c0:33:fe:d4:5b:be:25:db:2d:0e:21:d6:da:19:2f:5d: 83:fe:a3:fe:b0:5b:d9:25:f0:a4:d4:b7:bc:fd:11:22:0d:7e: 72:b4:e9:a4:70:7c:2a:29:22:da:f0:45:34:a5:a2:ae:ad:d3: 55:1c:65:61:e9:e9:6e:4a:fb:7b:ac:03:f2:b5:50:5b:63:8f: 6e:3f:69:47:50:a1:65:33:11:2f:9c:f6:fe:e7:a2:6c:eb:e5: 34:d8:43:95:8c:14:47:31:87:a8:1e:18:68:7c:0c:1e:24:9d: a6:d6:b4:d7:ad:f4:49:b4:fe:89:9d:7d:d3:c7:74:79:49:50: 8d:42:87:fb:6e:f7:90:55:5d:a5:b8:ed:c2:02:54:95:01:a2: 67:90:d9:ba:a3:c3:98:d6:65:4d:86:49:39:9d:ab:59:19:7b: a7:a0:26:99:d4:e4:90:71:ed:e5:99:13:c1:e3:76:c7:ae:19: 9a:b7:4e:1e:89:e1:c1:c4:34:94:4a:90:09:98:db:86:a2:6d: b5:f9:e6:81:77:4c:97:2f:fe:f9:28:62:7e:1f:e5:55:05:ef: 8b:df:57:32:5d:67:50:ff:b5:9f:50:48:c4:ef:aa:d0:8a:e3: 5b:71:a3:b2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EsByKTpcDBu9Z6AO9wTmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNzVmYjRmNTJhODI5ZDEzNmUyOWE5YTAyNWM2MzZkMTlh ZTMyOGUwHhcNMjYwMTAyMDAxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDdlZjZiNmNmZWVmMTQ3NDA1MzYzNjU4MjllMDMxN2MxYTBlOWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7H/gQqeDzZuNH1SvPU8W0htDEx9z h0QkVjj7KsNFVCG0a6WSJo8lMIHiESwb6tSD32cuLDROPAOk/V1CtdmqOmjW4Phs WCsivvaA6UqANcRLG9f7C8RFImyfwqfpt2QkICD71fkNAM51idOS5nMBxDUb6mZt JfaiZcUr/pVO3selMVzJZ0G3N8mQktdiyVrGq413eXhJIL6sMR06td9FrP7SMK9h ivycnf5cfyeg+HR8kJheuIj/NlfaMNAi6lrH7C57ufakwee2H1bRSLqTtfEliX36 3mOF1p47+CMWWUnHUc0fzrblj/erR0AqZpDfcPTQOKAGrHpB3pBsrDRRPQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN1+9rbP7vFHQFNjZYKeAxfBoOmvMB8GA1UdIwQY MBaAFA51+09SqCnRNuKamgJcY20ZrjKOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYt MzViYTI2N2RlZDNiLzEvM1g3MnRzX3U4VWRBVTJObGdwNERGOEdnNmE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYtMzViYTI2N2RlZDNi LzEvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW2c6MA0G CSqGSIb3DQEBCwUAA4IBAQCnrILabQcn5rJEn/IdxZ7GdwKs08Az/tRbviXbLQ4h 1toZL12D/qP+sFvZJfCk1Le8/REiDX5ytOmkcHwqKSLa8EU0paKurdNVHGVh6elu Svt7rAPytVBbY49uP2lHUKFlMxEvnPb+56Js6+U02EOVjBRHMYeoHhhofAweJJ2m 1rTXrfRJtP6JnX3Tx3R5SVCNQof7bveQVV2luO3CAlSVAaJnkNm6o8OY1mVNhkk5 natZGXunoCaZ1OSQce3lmRPB43bHrhmat04eieHBxDSUSpAJmNuGom21+eaBd0yX L/75KGJ+H+VVBe+L31cyXWdQ/7WfUEjE76rQiuNbcaOy -----END CERTIFICATE-----Generated at Sun Jan 25 15:28:44 2026 by rpki-client