This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/A406_tfLInjDBVSbBQ7mKFBN-JE.roa File: A406_tfLInjDBVSbBQ7mKFBN-JE.roa (raw, json) Hash identifier: E+hB0yuwu5D4hH5rECO553wANZ9LShkCcSEX/+zvqLQ= Subject key identifier: 03:8D:3A:FE:D7:CB:22:78:C3:05:54:9B:05:0E:E6:28:50:4D:F8:91 Certificate issuer: /CN=08f46bfa2046fbc98e627f403483271123beca0a Certificate serial: 019A9375995913940FCE982DCDA1ED032F1A Authority key identifier: 08:F4:6B:FA:20:46:FB:C9:8E:62:7F:40:34:83:27:11:23:BE:CA:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPRr-iBG-8mOYn9ANIMnESO-ygo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/A406_tfLInjDBVSbBQ7mKFBN-JE.roa Signing time: Mon 17 Nov 2025 20:15:49 +0000 ROA not before: Mon 17 Nov 2025 20:15:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 31477 IP address blocks: 91.196.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.mft rsync://rpki.ripe.net/repository/DEFAULT/CPRr-iBG-8mOYn9ANIMnESO-ygo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:93:75:99:59:13:94:0f:ce:98:2d:cd:a1:ed:03:2f:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08f46bfa2046fbc98e627f403483271123beca0a Validity Not Before: Nov 17 20:15:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=038d3afed7cb2278c305549b050ee628504df891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c1:f9:1a:58:3f:69:5c:5a:91:34:9d:c1:ab: 52:06:15:6a:62:8d:07:91:dd:70:f6:ae:af:c8:9b: 0f:0a:7f:9f:4b:e8:82:67:96:b5:c4:2e:1a:02:08: 5e:a0:c2:4c:a0:6b:db:f4:96:b3:93:40:90:36:09: 95:83:78:84:f0:13:31:57:28:ca:d2:79:96:a6:c7: ad:5f:e6:1f:fb:f3:7f:0d:7d:14:c4:13:79:30:d1: 60:72:1d:a6:8f:84:1b:3e:3c:7b:bf:ae:08:23:ff: 82:a6:28:8d:0b:9c:4b:b6:58:bb:9c:1d:6a:ee:ff: aa:f2:03:6b:cb:25:39:f3:de:bd:6f:1d:2d:a2:8f: 4d:79:a6:dc:a5:c2:f6:8e:5d:68:ec:61:42:f7:8b: 7e:46:66:61:0a:ca:a7:5b:f5:47:f1:d5:a3:f6:29: 12:c3:56:6e:ee:b9:3a:dc:19:a3:14:51:17:fa:39: 80:56:56:41:a6:48:ab:7c:a3:5a:a6:e1:0c:4d:59: 65:40:59:72:4b:de:e1:bd:a8:1c:65:9c:b5:77:2e: 87:b7:8f:82:96:37:3c:a7:b8:61:33:88:35:17:17: 34:c4:66:9e:ae:8a:90:b1:11:a8:06:73:dd:34:cf: 2e:93:b4:f5:ea:74:a0:69:2e:5e:ed:b5:be:3d:61: 3e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:8D:3A:FE:D7:CB:22:78:C3:05:54:9B:05:0E:E6:28:50:4D:F8:91 X509v3 Authority Key Identifier: keyid:08:F4:6B:FA:20:46:FB:C9:8E:62:7F:40:34:83:27:11:23:BE:CA:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPRr-iBG-8mOYn9ANIMnESO-ygo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/A406_tfLInjDBVSbBQ7mKFBN-JE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.196.107.0/24 Signature Algorithm: sha256WithRSAEncryption bc:29:d2:52:bb:40:0f:46:c2:1b:cd:b9:7c:65:ea:87:13:95: 4b:7d:4a:63:d4:d0:be:ab:e2:68:0f:28:60:59:b7:6f:c4:b4: d0:b0:52:b5:d5:bd:f2:c2:21:64:36:56:f2:f9:df:ee:ec:b8: f2:92:f8:4d:56:06:27:3f:af:86:b6:aa:d9:b8:50:e2:cf:27: 66:1e:9b:6b:58:9b:b0:0a:17:fa:5c:ef:73:05:a2:11:40:c6: 71:74:f5:bf:66:c3:ce:38:f9:f3:ef:4e:6f:b8:d8:0c:32:dd: 36:2b:ee:c7:ae:58:8c:3a:93:64:33:23:b2:b4:76:d9:9e:b1: 32:c8:a3:14:16:97:a2:75:99:a8:97:26:1f:ac:a0:f1:38:43: 46:87:4a:f5:4b:05:31:1f:2f:25:14:3b:b9:82:42:4e:60:94: 8b:25:60:4a:4d:ae:69:dd:49:28:89:f0:64:db:f3:80:fa:a5: 67:9b:a3:d2:6a:d6:0b:10:12:96:40:f8:ad:9e:80:93:ad:c6: 42:85:f1:57:39:70:7b:31:f2:3e:ab:77:6f:7a:fb:45:0b:2d: 13:0b:77:e4:46:c0:e5:c2:95:1d:2a:b8:6a:74:82:96:1d:49: e1:03:54:61:36:a0:07:b7:3c:33:12:ea:7a:3a:1d:f5:0b:02: b3:8b:d5:98 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqTdZlZE5QPzpgtzaHtAy8aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZjQ2YmZhMjA0NmZiYzk4ZTYyN2Y0MDM0ODMyNzExMjNi ZWNhMGEwHhcNMjUxMTE3MjAxNTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzhkM2FmZWQ3Y2IyMjc4YzMwNTU0OWIwNTBlZTYyODUwNGRmODkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusH5Glg/aVxakTSdwatSBhVqYo0H kd1w9q6vyJsPCn+fS+iCZ5a1xC4aAgheoMJMoGvb9Jazk0CQNgmVg3iE8BMxVyjK 0nmWpsetX+Yf+/N/DX0UxBN5MNFgch2mj4QbPjx7v64II/+CpiiNC5xLtli7nB1q 7v+q8gNryyU58969bx0too9NeabcpcL2jl1o7GFC94t+RmZhCsqnW/VH8dWj9ikS w1Zu7rk63BmjFFEX+jmAVlZBpkirfKNapuEMTVllQFlyS97hvagcZZy1dy6Ht4+C ljc8p7hhM4g1Fxc0xGaeroqQsRGoBnPdNM8uk7T16nSgaS5e7bW+PWE+LQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAONOv7XyyJ4wwVUmwUO5ihQTfiRMB8GA1UdIwQY MBaAFAj0a/ogRvvJjmJ/QDSDJxEjvsoKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1BSci1pQkctOG1PWW45QU5JTW5FU08teWdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS82ZWUyZjUtOWY2MC00N2RjLThjZDkt Y2Q1MjU1NzMzMzA0LzEvQTQwNl90ZkxJbmpEQlZTYkJRN21LRkJOLUpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS82ZWUyZjUtOWY2MC00N2RjLThjZDktY2Q1MjU1NzMzMzA0 LzEvQ1BSci1pQkctOG1PWW45QU5JTW5FU08teWdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8RrMA0G CSqGSIb3DQEBCwUAA4IBAQC8KdJSu0APRsIbzbl8ZeqHE5VLfUpj1NC+q+JoDyhg WbdvxLTQsFK11b3ywiFkNlby+d/u7LjykvhNVgYnP6+GtqrZuFDizydmHptrWJuw Chf6XO9zBaIRQMZxdPW/ZsPOOPnz705vuNgMMt02K+7HrliMOpNkMyOytHbZnrEy yKMUFpeidZmolyYfrKDxOENGh0r1SwUxHy8lFDu5gkJOYJSLJWBKTa5p3UkoifBk 2/OA+qVnm6PSatYLEBKWQPitnoCTrcZChfFXOXB7MfI+q3dvevtFCy0TC3fkRsDl wpUdKrhqdIKWHUnhA1RhNqAHtzwzEup6Oh31CwKzi9WY -----END CERTIFICATE-----Generated at Sat Dec 6 11:36:29 2025 by rpki-client