This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/0s8tL0Q1QILcjqJD45JZQbwKg78.roa File: 0s8tL0Q1QILcjqJD45JZQbwKg78.roa (raw, json) Hash identifier: 6+vXx/14vnk9op/uvmqp2IT+hITOVzEp+mNjBhNt+UY= Subject key identifier: D2:CF:2D:2F:44:35:40:82:DC:8E:A2:43:E3:92:59:41:BC:0A:83:BF Certificate issuer: /CN=c01399b467c906662de00ec766cc7e000eaec27b Certificate serial: 019B7A5A7EC12D8E3666E09669778A963158 Authority key identifier: C0:13:99:B4:67:C9:06:66:2D:E0:0E:C7:66:CC:7E:00:0E:AE:C2:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBOZtGfJBmYt4A7HZsx-AA6uwns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/0s8tL0Q1QILcjqJD45JZQbwKg78.roa Signing time: Thu 01 Jan 2026 16:18:29 +0000 ROA not before: Thu 01 Jan 2026 16:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30781 IP address blocks: 91.216.22.0/24 maxlen: 24 2001:67c:11c8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.mft rsync://rpki.ripe.net/repository/DEFAULT/wBOZtGfJBmYt4A7HZsx-AA6uwns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:7e:c1:2d:8e:36:66:e0:96:69:77:8a:96:31:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c01399b467c906662de00ec766cc7e000eaec27b Validity Not Before: Jan 1 16:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2cf2d2f44354082dc8ea243e3925941bc0a83bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6c:64:c1:fe:68:30:9c:6d:70:84:bf:1c:ae: 33:ae:1e:9f:68:b3:e3:aa:f2:89:32:c0:9a:30:a0: ab:48:ad:42:d6:58:b7:90:c8:7b:50:e9:d6:8a:31: ca:ce:7b:44:13:d5:83:5b:38:f5:81:1f:04:1c:cc: 79:ac:62:f5:31:b9:ea:4a:8d:50:59:cb:a6:50:11: 8d:d4:27:91:d4:d0:2e:0a:ef:ed:20:4e:56:b2:8d: f6:f0:82:41:c6:93:c8:09:f1:b9:18:32:4a:ad:f5: 20:c1:54:74:ab:10:4d:ec:08:a1:07:02:83:33:2a: ac:c8:f5:9c:ec:01:65:f2:8a:27:a4:7a:93:07:a2: a2:7c:ba:a6:c6:17:93:5e:21:5f:e3:ca:a9:1f:21: 3b:7e:f9:06:ac:14:30:03:b2:cf:40:e6:24:7f:03: 94:86:16:8d:5d:68:34:b4:e5:54:65:68:d1:ed:ea: df:99:5a:17:9e:36:2e:2f:c0:81:14:4d:47:51:94: db:50:74:3f:a7:10:2b:c5:73:29:0e:ba:b4:02:00: 5c:f5:e3:a9:16:fe:24:48:7f:6b:00:11:0c:5e:90: 95:6c:7f:d0:0a:38:e3:60:9f:76:a7:25:87:73:2d: a0:97:ea:c6:92:ca:f2:9e:b9:dc:ed:25:68:44:9b: cb:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:CF:2D:2F:44:35:40:82:DC:8E:A2:43:E3:92:59:41:BC:0A:83:BF X509v3 Authority Key Identifier: keyid:C0:13:99:B4:67:C9:06:66:2D:E0:0E:C7:66:CC:7E:00:0E:AE:C2:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBOZtGfJBmYt4A7HZsx-AA6uwns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/0s8tL0Q1QILcjqJD45JZQbwKg78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.22.0/24 IPv6: 2001:67c:11c8::/48 Signature Algorithm: sha256WithRSAEncryption 1b:df:3a:61:76:73:f8:d5:ff:f6:36:a5:58:d5:51:9e:ae:29: cd:19:14:a3:a6:da:63:84:fa:f8:3b:b3:50:c6:c2:dc:bb:a7: 07:f9:25:7c:8c:df:7c:b8:f5:d0:1b:03:bb:43:45:3a:98:34: 8a:c6:31:97:50:bb:39:04:57:b5:fc:b8:84:bb:53:47:18:40: 5e:48:93:98:c6:b4:80:cd:b4:93:4a:81:b5:f3:9d:af:08:37: db:02:36:76:17:cd:91:de:1f:aa:56:e3:b8:d3:89:66:ae:37: 0a:5e:19:e8:8a:33:9e:97:9c:06:da:8d:66:ed:e8:6e:25:3f: 2b:c6:f6:ae:de:82:a7:65:5f:27:cf:10:48:45:3b:54:c4:a1: 6f:3b:1f:cb:be:c6:52:1d:74:29:1e:c1:b1:81:98:92:51:99: 7c:8b:49:32:6a:25:be:eb:64:fe:62:9a:5d:c6:36:71:be:99: 15:a0:9e:0d:4f:06:c5:79:f1:42:2a:70:8d:f7:14:f2:ae:93: 54:63:2b:80:71:f2:fd:6d:ce:2c:fa:a1:86:77:83:2c:08:27: 13:2a:78:e0:21:19:77:eb:77:00:07:39:62:a1:17:d9:01:e9: 38:d2:c6:56:c8:08:47:ce:bf:50:25:3e:c1:55:93:1b:4c:ed: 85:09:3d:a5 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt6Wn7BLY42ZuCWaXeKljFYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwMTM5OWI0NjdjOTA2NjYyZGUwMGVjNzY2Y2M3ZTAwMGVh ZWMyN2IwHhcNMjYwMTAxMTYxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmNmMmQyZjQ0MzU0MDgyZGM4ZWEyNDNlMzkyNTk0MWJjMGE4M2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2xkwf5oMJxtcIS/HK4zrh6faLPj qvKJMsCaMKCrSK1C1li3kMh7UOnWijHKzntEE9WDWzj1gR8EHMx5rGL1MbnqSo1Q WcumUBGN1CeR1NAuCu/tIE5Wso328IJBxpPICfG5GDJKrfUgwVR0qxBN7AihBwKD MyqsyPWc7AFl8oonpHqTB6KifLqmxheTXiFf48qpHyE7fvkGrBQwA7LPQOYkfwOU hhaNXWg0tOVUZWjR7erfmVoXnjYuL8CBFE1HUZTbUHQ/pxArxXMpDrq0AgBc9eOp Fv4kSH9rABEMXpCVbH/QCjjjYJ92pyWHcy2gl+rGksrynrnc7SVoRJvLnwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFNLPLS9ENUCC3I6iQ+OSWUG8CoO/MB8GA1UdIwQY MBaAFMATmbRnyQZmLeAOx2bMfgAOrsJ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0JPWnRHZkpCbVl0NEE3SFpzeC1BQTZ1d25zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80Yzg0OWYtODY1MC00YTFlLWJlNTkt MWU2M2JiZDcwZDk2LzEvMHM4dEwwUTFRSUxjanFKRDQ1SlpRYndLZzc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS80Yzg0OWYtODY1MC00YTFlLWJlNTktMWU2M2JiZDcwZDk2 LzEvd0JPWnRHZkpCbVl0NEE3SFpzeC1BQTZ1d25zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW9gWMA8E AgACMAkDBwAgAQZ8EcgwDQYJKoZIhvcNAQELBQADggEBABvfOmF2c/jV//Y2pVjV UZ6uKc0ZFKOm2mOE+vg7s1DGwty7pwf5JXyM33y49dAbA7tDRTqYNIrGMZdQuzkE V7X8uIS7U0cYQF5Ik5jGtIDNtJNKgbXzna8IN9sCNnYXzZHeH6pW47jTiWauNwpe GeiKM56XnAbajWbt6G4lPyvG9q7egqdlXyfPEEhFO1TEoW87H8u+xlIddCkewbGB mJJRmXyLSTJqJb7rZP5iml3GNnG+mRWgng1PBsV58UIqcI33FPKuk1RjK4Bx8v1t ziz6oYZ3gywIJxMqeOAhGXfrdwAHOWKhF9kB6TjSxlbICEfOv1AlPsFVkxtM7YUJ PaU= -----END CERTIFICATE-----Generated at Sun Jan 25 22:29:46 2026 by rpki-client