This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/a9JHCjYfw7Z6c79opyhmwTytJDE.roa File: a9JHCjYfw7Z6c79opyhmwTytJDE.roa (raw, json) Hash identifier: YtP+XrFe44fVRI42n0stYBQvN0/zhE07g6u41GgESnY= Subject key identifier: 6B:D2:47:0A:36:1F:C3:B6:7A:73:BF:68:A7:28:66:C1:3C:AD:24:31 Certificate issuer: /CN=5acf902c6280eb5feaf675c98989d05cd1574411 Certificate serial: 019AB8E09910B3B13593228DAC4957685B3F Authority key identifier: 5A:CF:90:2C:62:80:EB:5F:EA:F6:75:C9:89:89:D0:5C:D1:57:44:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/a9JHCjYfw7Z6c79opyhmwTytJDE.roa Signing time: Tue 25 Nov 2025 02:38:38 +0000 ROA not before: Tue 25 Nov 2025 02:38:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 30937 IP address blocks: 91.232.71.0/24 maxlen: 24 185.4.244.0/22 maxlen: 22 188.208.218.0/24 maxlen: 24 193.16.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b8:e0:99:10:b3:b1:35:93:22:8d:ac:49:57:68:5b:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5acf902c6280eb5feaf675c98989d05cd1574411 Validity Not Before: Nov 25 02:38:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6bd2470a361fc3b67a73bf68a72866c13cad2431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2a:d7:fb:84:cd:66:24:f3:d0:d2:e9:c2:d5: c9:0f:70:8e:1e:47:6f:7b:7b:b2:5f:d4:bf:14:31: 9b:63:89:24:d0:6b:cc:11:9c:b6:07:99:a4:98:aa: 13:23:15:4a:2a:28:87:51:8c:51:d8:4a:eb:ee:66: 9b:e4:5c:14:53:97:42:73:7e:36:5f:3d:31:7e:8d: 72:99:7c:b3:7f:23:e3:5f:f1:97:3d:39:b3:69:cc: 16:56:ee:c7:e9:97:97:79:76:6d:3f:db:e8:dc:4b: 4d:1b:67:44:eb:f8:59:0d:01:d6:20:56:b8:da:3a: f0:e4:5c:38:0a:fc:be:29:f3:e1:48:77:40:3b:76: ef:ec:ad:e4:a6:35:40:bc:44:9d:d1:92:2e:d8:bd: c3:e0:7c:bc:6e:ff:7f:16:b6:82:5e:71:cf:d5:49: 4b:80:4d:46:af:e0:4b:8f:9f:4b:0e:14:13:bc:0a: 0e:dd:1f:7e:a9:6d:c6:81:0f:88:68:ad:93:03:e6: 19:8f:d8:88:18:a0:2c:ee:cc:d9:cc:ef:d1:79:cf: 5e:67:57:53:39:86:50:fa:e9:f8:90:d5:e4:23:54: cf:f5:f2:a8:50:1d:11:9c:63:2d:3c:ea:c5:2e:76: 9b:48:e3:94:b1:42:d6:df:18:b0:4a:29:a2:ff:48: 43:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:D2:47:0A:36:1F:C3:B6:7A:73:BF:68:A7:28:66:C1:3C:AD:24:31 X509v3 Authority Key Identifier: keyid:5A:CF:90:2C:62:80:EB:5F:EA:F6:75:C9:89:89:D0:5C:D1:57:44:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/a9JHCjYfw7Z6c79opyhmwTytJDE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.232.71.0/24 185.4.244.0/22 188.208.218.0/24 193.16.216.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:41:80:2b:36:84:83:c3:2b:04:28:ee:6a:af:ee:8e:3e:dd: e5:71:c6:86:7c:39:0a:41:1b:52:b3:a8:32:a1:5a:f6:23:b1: d6:76:51:32:c8:e8:fb:d7:97:8c:cb:4a:fd:cb:39:c0:95:db: d4:ca:b8:a0:27:33:90:62:06:63:c7:9f:cd:22:70:06:c5:37: c9:41:2f:66:de:fd:62:5a:9b:2c:12:1f:52:e3:16:75:2d:e1: f8:04:04:40:a0:bd:0d:1c:12:a6:66:5c:85:dc:30:8f:19:e6: e6:7a:62:e9:e3:04:48:94:d9:ae:45:cf:3d:56:f7:1e:98:a5: c3:07:9d:98:6a:63:48:f3:a4:7e:da:37:c0:6e:f5:62:f3:65: 25:6a:ee:47:a2:b9:48:d8:d1:26:71:9e:dc:fe:51:d4:18:15: b4:cd:f1:be:a9:74:b0:23:df:97:e1:d1:e9:40:60:a9:40:06: 3a:cc:e3:d1:89:31:13:97:84:f4:46:a4:c2:c0:f6:19:14:2d: 2a:61:ad:87:fb:89:27:c1:7f:16:c3:37:a7:0e:63:d7:84:6d: 4d:26:c5:73:62:a3:9d:cf:03:19:6b:34:82:3e:ae:6a:3d:0f: 7f:78:3b:2f:45:0b:d7:da:c8:04:3b:f7:7b:ee:6a:ff:84:6b: 93:50:b5:10 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZq44JkQs7E1kyKNrElXaFs/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhY2Y5MDJjNjI4MGViNWZlYWY2NzVjOTg5ODlkMDVjZDE1 NzQ0MTEwHhcNMjUxMTI1MDIzODM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YmQyNDcwYTM2MWZjM2I2N2E3M2JmNjhhNzI4NjZjMTNjYWQyNDMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSrX+4TNZiTz0NLpwtXJD3COHkdv e3uyX9S/FDGbY4kk0GvMEZy2B5mkmKoTIxVKKiiHUYxR2Err7mab5FwUU5dCc342 Xz0xfo1ymXyzfyPjX/GXPTmzacwWVu7H6ZeXeXZtP9vo3EtNG2dE6/hZDQHWIFa4 2jrw5Fw4Cvy+KfPhSHdAO3bv7K3kpjVAvESd0ZIu2L3D4Hy8bv9/FraCXnHP1UlL gE1Gr+BLj59LDhQTvAoO3R9+qW3GgQ+IaK2TA+YZj9iIGKAs7szZzO/Rec9eZ1dT OYZQ+un4kNXkI1TP9fKoUB0RnGMtPOrFLnabSOOUsULW3xiwSimi/0hDjwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFGvSRwo2H8O2enO/aKcoZsE8rSQxMB8GA1UdIwQY MBaAFFrPkCxigOtf6vZ1yYmJ0FzRV0QRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3MtUUxHS0E2MV9xOW5YSmlZblFYTkZYUkJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iYWNhYzAtNTdkYi00MzQ3LThjODct ODliNWI2N2I3MjM0LzEvYTlKSENqWWZ3N1o2Yzc5b3B5aG13VHl0SkRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9iYWNhYzAtNTdkYi00MzQ3LThjODctODliNWI2N2I3MjM0 LzEvV3MtUUxHS0E2MV9xOW5YSmlZblFYTkZYUkJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAW+hHAwQC uQT0AwQAvNDaAwQAwRDYMA0GCSqGSIb3DQEBCwUAA4IBAQCNQYArNoSDwysEKO5q r+6OPt3lccaGfDkKQRtSs6gyoVr2I7HWdlEyyOj715eMy0r9yznAldvUyrigJzOQ YgZjx5/NInAGxTfJQS9m3v1iWpssEh9S4xZ1LeH4BARAoL0NHBKmZlyF3DCPGebm emLp4wRIlNmuRc89VvcemKXDB52YamNI86R+2jfAbvVi82Ulau5HorlI2NEmcZ7c /lHUGBW0zfG+qXSwI9+X4dHpQGCpQAY6zOPRiTETl4T0RqTCwPYZFC0qYa2H+4kn wX8WwzenDmPXhG1NJsVzYqOdzwMZazSCPq5qPQ9/eDsvRQvX2sgEO/d77mr/hGuT ULUQ -----END CERTIFICATE-----Generated at Sat Dec 6 12:27:10 2025 by rpki-client