This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/jON8jV9Q2GLdoq1oYbTtzWvSeAw.roa File: jON8jV9Q2GLdoq1oYbTtzWvSeAw.roa (raw, json) Hash identifier: CpfaNm7QCE9dRH1Z5uGSs1NzanRsXUOVz00UoK4+1jY= Subject key identifier: 8C:E3:7C:8D:5F:50:D8:62:DD:A2:AD:68:61:B4:ED:CD:6B:D2:78:0C Certificate issuer: /CN=fcfc95f1b88011e6dc33d041b98b3130776c428f Certificate serial: 019B79ED44226710D87C6DE04337D7DD583C Authority key identifier: FC:FC:95:F1:B8:80:11:E6:DC:33:D0:41:B9:8B:31:30:77:6C:42:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_PyV8biAEebcM9BBuYsxMHdsQo8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/jON8jV9Q2GLdoq1oYbTtzWvSeAw.roa Signing time: Thu 01 Jan 2026 14:19:11 +0000 ROA not before: Thu 01 Jan 2026 14:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20676 IP address blocks: 91.208.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft rsync://rpki.ripe.net/repository/DEFAULT/_PyV8biAEebcM9BBuYsxMHdsQo8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:44:22:67:10:d8:7c:6d:e0:43:37:d7:dd:58:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcfc95f1b88011e6dc33d041b98b3130776c428f Validity Not Before: Jan 1 14:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ce37c8d5f50d862dda2ad6861b4edcd6bd2780c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d4:0a:da:68:81:ce:7d:78:ce:31:c7:6b:2d: f6:e7:3f:f7:6d:40:5f:5c:60:fb:73:cd:48:35:db: 1c:ab:23:76:3d:31:a8:6b:c1:22:4e:b5:7d:dc:52: 1e:c1:b8:fe:7d:7b:2c:cf:c9:fe:84:f8:ff:b5:10: aa:b4:8d:b8:58:4d:09:23:83:b4:a3:a1:79:fe:f8: e2:67:49:d6:6c:a4:d8:27:f2:3a:b2:7d:3b:2b:0f: 04:fe:08:b9:94:f5:75:ec:08:42:5c:10:9f:95:c2: 54:64:d9:2c:7e:bf:1b:18:8b:1e:af:74:d4:9d:af: bd:62:23:63:c7:70:e0:0b:8a:11:b8:39:fe:0c:16: 61:a4:5e:d2:ab:fe:ba:de:52:3c:e9:8c:fd:43:58: c0:70:ac:bf:29:f0:95:97:6b:f2:18:90:66:c9:a7: d8:18:f7:01:43:ca:71:74:34:4b:fa:8c:e5:6d:da: 62:03:36:26:67:47:94:55:54:8f:ac:e7:9c:13:28: 4b:9e:70:15:2a:33:b3:1e:01:59:70:86:19:33:4a: 2a:79:b8:ee:7a:62:e6:ca:71:8d:35:26:62:8d:bf: a7:30:33:6b:42:c7:6d:8a:5d:97:3d:c9:aa:35:4f: 70:72:e4:38:f1:08:78:16:6b:53:8d:bf:99:a7:13: 25:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E3:7C:8D:5F:50:D8:62:DD:A2:AD:68:61:B4:ED:CD:6B:D2:78:0C X509v3 Authority Key Identifier: keyid:FC:FC:95:F1:B8:80:11:E6:DC:33:D0:41:B9:8B:31:30:77:6C:42:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PyV8biAEebcM9BBuYsxMHdsQo8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/jON8jV9Q2GLdoq1oYbTtzWvSeAw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.47.0/24 Signature Algorithm: sha256WithRSAEncryption 45:39:2d:5a:d6:bf:cf:6e:84:20:28:95:e8:e4:2a:ed:59:71: f8:ad:68:94:0a:dd:e8:21:c7:a3:6e:af:a8:8c:29:ea:c0:41: a8:7b:0f:4e:cd:6b:f5:d7:10:12:8e:11:56:53:1e:ab:99:e1: 52:88:ad:a6:92:3a:2c:e5:b1:03:ee:d4:ef:0e:ac:32:d1:65: af:b8:d4:16:f8:d4:c6:f3:4a:d3:7e:e1:b6:17:52:ec:5e:f3: 75:eb:b0:bd:81:e2:87:06:db:ae:67:ba:9f:57:87:0c:b3:76: b1:60:ec:44:76:7a:b6:83:c3:7f:07:db:7f:64:92:8e:ff:2c: 51:f4:d5:27:97:13:d8:48:ea:f7:21:0d:84:1d:f4:f7:69:b9: 16:ba:05:2c:1f:56:bd:08:c9:9a:8d:31:96:c5:6c:7e:0b:64: 1c:53:6f:c3:69:6c:b1:eb:bb:ab:7a:bd:26:80:7e:a6:cb:5d: 2a:8f:62:c3:e9:e7:d6:16:62:7e:1e:a3:5e:be:d8:7f:5c:5f: f4:57:15:47:f0:ee:64:9a:6d:13:e8:4c:e6:b7:99:fb:bc:85: 08:b0:a7:b3:b0:5a:85:f0:5c:0e:c7:81:89:c6:5f:a5:72:2d: d6:01:ea:22:ac:e7:74:3a:64:05:97:25:33:83:cd:2c:98:aa: 62:b6:43:fd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57UQiZxDYfG3gQzfX3Vg8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjZmM5NWYxYjg4MDExZTZkYzMzZDA0MWI5OGIzMTMwNzc2 YzQyOGYwHhcNMjYwMTAxMTQxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Y2UzN2M4ZDVmNTBkODYyZGRhMmFkNjg2MWI0ZWRjZDZiZDI3ODBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09QK2miBzn14zjHHay325z/3bUBf XGD7c81INdscqyN2PTGoa8EiTrV93FIewbj+fXssz8n+hPj/tRCqtI24WE0JI4O0 o6F5/vjiZ0nWbKTYJ/I6sn07Kw8E/gi5lPV17AhCXBCflcJUZNksfr8bGIser3TU na+9YiNjx3DgC4oRuDn+DBZhpF7Sq/663lI86Yz9Q1jAcKy/KfCVl2vyGJBmyafY GPcBQ8pxdDRL+ozlbdpiAzYmZ0eUVVSPrOecEyhLnnAVKjOzHgFZcIYZM0oqebju emLmynGNNSZijb+nMDNrQsdtil2XPcmqNU9wcuQ48Qh4FmtTjb+ZpxMlqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIzjfI1fUNhi3aKtaGG07c1r0ngMMB8GA1UdIwQY MBaAFPz8lfG4gBHm3DPQQbmLMTB3bEKPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1B5VjhiaUFFZWJjTTlCQnVZc3hNSGRzUW84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8zNzJkMjktMDc1ZS00N2ZhLTljOGYt OGY0YjA2NDVkNjA0LzEvak9OOGpWOVEyR0xkb3Exb1liVHR6V3ZTZUF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8zNzJkMjktMDc1ZS00N2ZhLTljOGYtOGY0YjA2NDVkNjA0 LzEvX1B5VjhiaUFFZWJjTTlCQnVZc3hNSGRzUW84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9AvMA0G CSqGSIb3DQEBCwUAA4IBAQBFOS1a1r/PboQgKJXo5CrtWXH4rWiUCt3oIcejbq+o jCnqwEGoew9OzWv11xASjhFWUx6rmeFSiK2mkjos5bED7tTvDqwy0WWvuNQW+NTG 80rTfuG2F1LsXvN167C9geKHBtuuZ7qfV4cMs3axYOxEdnq2g8N/B9t/ZJKO/yxR 9NUnlxPYSOr3IQ2EHfT3abkWugUsH1a9CMmajTGWxWx+C2QcU2/DaWyx67urer0m gH6my10qj2LD6efWFmJ+HqNevth/XF/0VxVH8O5kmm0T6Ezmt5n7vIUIsKezsFqF 8FwOx4GJxl+lci3WAeoirOd0OmQFlyUzg80smKpitkP9 -----END CERTIFICATE-----Generated at Mon Jan 26 00:59:19 2026 by rpki-client