This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/gJwxB4WXRmy_Jjbo7KF4Rc3EO64.roa File: gJwxB4WXRmy_Jjbo7KF4Rc3EO64.roa (raw, json) Hash identifier: F0OcSRxgLQl48M74vjHq3+xTxBNsO5EKT9Des3ruvj8= Subject key identifier: 80:9C:31:07:85:97:46:6C:BF:26:36:E8:EC:A1:78:45:CD:C4:3B:AE Certificate issuer: /CN=3df96e7da5498b70e3bb17b6e18a3113712d32b6 Certificate serial: 019AFD05D6B596FFA781BB32C3B5574F2B50 Authority key identifier: 3D:F9:6E:7D:A5:49:8B:70:E3:BB:17:B6:E1:8A:31:13:71:2D:32:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PflufaVJi3Djuxe24YoxE3EtMrY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/gJwxB4WXRmy_Jjbo7KF4Rc3EO64.roa Signing time: Mon 08 Dec 2025 08:13:29 +0000 ROA not before: Mon 08 Dec 2025 08:13:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 57474 IP address blocks: 91.240.60.0/22 maxlen: 22 91.240.60.0/24 maxlen: 24 91.240.61.0/24 maxlen: 24 91.240.62.0/24 maxlen: 24 91.240.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.crl rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.mft rsync://rpki.ripe.net/repository/DEFAULT/PflufaVJi3Djuxe24YoxE3EtMrY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 14:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fd:05:d6:b5:96:ff:a7:81:bb:32:c3:b5:57:4f:2b:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3df96e7da5498b70e3bb17b6e18a3113712d32b6 Validity Not Before: Dec 8 08:13:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=809c31078597466cbf2636e8eca17845cdc43bae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:47:a8:84:a4:2a:2d:c7:f1:d4:a0:69:ad:06: 61:e0:c6:e9:9f:8d:e1:a9:03:3e:a2:31:ad:44:8c: 7e:a4:f6:3f:d9:53:22:a2:83:b7:8f:97:cf:6b:57: d7:91:84:36:82:94:5f:e1:63:dd:f9:46:51:85:3b: b2:34:fe:45:c1:3d:28:be:96:8b:d5:ff:3d:c1:a2: 85:ed:79:00:68:5b:ab:13:ca:de:e6:2c:9a:ff:3a: 26:b4:69:75:e1:3e:56:88:15:bf:6b:c7:8f:5c:3f: 3f:52:00:95:91:bd:6a:d9:dc:a3:ad:59:c2:be:af: cb:fd:33:5b:44:24:74:7a:ab:26:b2:65:e0:91:d2: cb:81:57:a6:14:45:f5:a0:69:98:40:0e:49:fd:e8: c0:2c:8a:4d:30:bc:73:a1:9c:4f:1c:ea:4d:29:9d: f5:de:bf:db:0e:62:72:42:b2:61:b3:1a:ca:49:62: 33:20:d3:81:a4:c9:04:2b:5a:55:34:58:73:28:51: f6:ad:14:43:f6:d1:e9:c3:56:93:b4:07:40:1f:53: 79:5d:74:5e:41:12:52:9d:4c:1f:48:ac:20:be:48: 06:5c:d2:8b:bb:d3:b4:e0:40:4f:a0:43:c8:c6:29: 06:a6:fc:4a:f6:ed:fc:c2:74:6e:5f:53:6c:92:fd: a0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:9C:31:07:85:97:46:6C:BF:26:36:E8:EC:A1:78:45:CD:C4:3B:AE X509v3 Authority Key Identifier: keyid:3D:F9:6E:7D:A5:49:8B:70:E3:BB:17:B6:E1:8A:31:13:71:2D:32:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PflufaVJi3Djuxe24YoxE3EtMrY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/gJwxB4WXRmy_Jjbo7KF4Rc3EO64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.240.60.0/22 Signature Algorithm: sha256WithRSAEncryption 8a:e2:60:83:ed:98:9e:36:91:a2:16:df:fb:3a:dc:2e:0e:1c: 51:28:de:23:80:7e:47:b8:f1:1a:57:45:7b:c6:69:f9:42:fd: e8:ad:ca:19:55:e6:57:fc:91:53:d1:44:be:3e:af:71:16:e2: 98:c7:de:53:1c:84:8b:0f:db:45:7f:ad:f5:b0:8c:ce:c4:a2: 54:c8:a0:56:c5:84:40:fa:4a:3e:52:47:b2:8c:e9:88:4f:15: f2:ce:ba:3a:84:8e:21:14:ea:62:00:f8:e9:e8:18:6a:96:85: d8:97:8e:4a:3b:bf:07:f6:2f:d5:52:37:fc:4e:f8:ad:fc:36: 40:da:6e:8e:8f:e1:a9:40:27:cd:54:14:46:0d:01:f4:6c:52: 1d:29:1b:07:fe:84:fd:3e:90:df:f9:e4:a5:4b:59:82:f5:cf: 27:ce:98:f7:00:cd:e2:b5:32:38:59:ea:03:4f:f5:0f:ba:af: 51:d8:69:24:03:7d:77:3d:fd:f3:c5:80:97:6d:4b:1c:7f:f3: 39:da:bf:d8:81:ea:68:e2:af:1c:60:89:31:8f:dc:8c:65:c5: c2:d8:e4:b7:99:e3:de:3f:9e:d3:0e:b7:18:75:0e:b1:01:af: 55:14:9c:65:45:c6:50:c8:5d:a4:69:c1:c8:34:96:6c:6e:d9: 73:65:b3:09 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZr9Bda1lv+ngbsyw7VXTytQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkZjk2ZTdkYTU0OThiNzBlM2JiMTdiNmUxOGEzMTEzNzEy ZDMyYjYwHhcNMjUxMjA4MDgxMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDljMzEwNzg1OTc0NjZjYmYyNjM2ZThlY2ExNzg0NWNkYzQzYmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7UeohKQqLcfx1KBprQZh4Mbpn43h qQM+ojGtRIx+pPY/2VMiooO3j5fPa1fXkYQ2gpRf4WPd+UZRhTuyNP5FwT0ovpaL 1f89waKF7XkAaFurE8re5iya/zomtGl14T5WiBW/a8ePXD8/UgCVkb1q2dyjrVnC vq/L/TNbRCR0eqsmsmXgkdLLgVemFEX1oGmYQA5J/ejALIpNMLxzoZxPHOpNKZ31 3r/bDmJyQrJhsxrKSWIzINOBpMkEK1pVNFhzKFH2rRRD9tHpw1aTtAdAH1N5XXRe QRJSnUwfSKwgvkgGXNKLu9O04EBPoEPIxikGpvxK9u38wnRuX1Nskv2gqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFICcMQeFl0ZsvyY26OyheEXNxDuuMB8GA1UdIwQY MBaAFD35bn2lSYtw47sXtuGKMRNxLTK2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGZsdWZhVkppM0RqdXhlMjRZb3hFM0V0TXJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC84ODMxZDktMzkzMy00ODNhLWI5YWYt MzZlODg1MDY2ODBlLzEvZ0p3eEI0V1hSbXlfSmpibzdLRjRSYzNFTzY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC84ODMxZDktMzkzMy00ODNhLWI5YWYtMzZlODg1MDY2ODBl LzEvUGZsdWZhVkppM0RqdXhlMjRZb3hFM0V0TXJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW/A8MA0G CSqGSIb3DQEBCwUAA4IBAQCK4mCD7ZieNpGiFt/7OtwuDhxRKN4jgH5HuPEaV0V7 xmn5Qv3orcoZVeZX/JFT0US+Pq9xFuKYx95THISLD9tFf631sIzOxKJUyKBWxYRA +ko+UkeyjOmITxXyzro6hI4hFOpiAPjp6BhqloXYl45KO78H9i/VUjf8Tvit/DZA 2m6Oj+GpQCfNVBRGDQH0bFIdKRsH/oT9PpDf+eSlS1mC9c8nzpj3AM3itTI4WeoD T/UPuq9R2GkkA313Pf3zxYCXbUscf/M52r/Ygepo4q8cYIkxj9yMZcXC2OS3mePe P57TDrcYdQ6xAa9VFJxlRcZQyF2kacHINJZsbtlzZbMJ -----END CERTIFICATE-----Generated at Mon Dec 22 17:44:18 2025 by rpki-client