This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/s30LP9oNn_a9WqmNNhVG8BZsr_E.roa File: s30LP9oNn_a9WqmNNhVG8BZsr_E.roa (raw, json) Hash identifier: niAKqfiybnbnJMKEAdo6F1LKY3RNGfAvckOC23OVwd0= Subject key identifier: B3:7D:0B:3F:DA:0D:9F:F6:BD:5A:A9:8D:36:15:46:F0:16:6C:AF:F1 Certificate issuer: /CN=dc7821e1bcbf6e074ea4814aaa5c63e3ba813c5f Certificate serial: 019B21FDD5946F719672FB78B7AF5D109A51 Authority key identifier: DC:78:21:E1:BC:BF:6E:07:4E:A4:81:4A:AA:5C:63:E3:BA:81:3C:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/s30LP9oNn_a9WqmNNhVG8BZsr_E.roa Signing time: Mon 15 Dec 2025 12:30:41 +0000 ROA not before: Mon 15 Dec 2025 12:30:41 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9204 IP address blocks: 91.197.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.mft rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:fd:d5:94:6f:71:96:72:fb:78:b7:af:5d:10:9a:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc7821e1bcbf6e074ea4814aaa5c63e3ba813c5f Validity Not Before: Dec 15 12:30:41 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b37d0b3fda0d9ff6bd5aa98d361546f0166caff1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9f:53:34:e7:0d:b3:e0:f4:0d:7b:5a:e5:de: d0:4b:1a:04:76:d9:40:03:3a:bd:1d:48:80:4d:da: 6b:9d:1d:e9:98:27:29:bb:c4:3f:51:f3:be:03:b5: df:07:ec:63:ed:53:d0:68:cc:28:4a:72:e2:f2:a7: ff:a2:10:7a:e0:b1:6f:1e:4e:a9:a8:07:aa:8b:e7: 80:0e:71:9c:1d:63:af:3e:22:5d:1e:77:02:53:05: a0:14:88:51:32:ec:79:dc:63:e1:a8:c7:7d:75:1d: 93:88:38:43:af:52:cd:8d:ef:fa:bb:19:92:78:5b: 12:18:1f:5f:4d:18:80:3c:89:19:4c:ff:b2:55:c0: 8e:a2:84:c3:6a:83:46:1e:0e:57:bd:dc:cc:92:b9: a0:d9:35:73:45:3e:1d:20:a0:b6:92:da:2e:0c:9c: 95:61:a6:44:ff:de:21:c8:a3:d8:ea:15:c2:cf:27: 40:84:3b:94:b1:68:86:c6:74:22:e8:6f:77:a6:ac: 36:91:93:2e:5c:4a:92:7e:69:f8:9e:a3:e9:30:95: 46:80:f5:b7:df:83:8f:e1:8c:7b:cf:a2:8c:62:29: 93:56:51:03:61:0c:e7:eb:aa:cb:cc:40:ff:85:46: 24:15:00:e7:f3:86:a9:ef:ba:5f:1d:21:2e:6d:3d: 75:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:7D:0B:3F:DA:0D:9F:F6:BD:5A:A9:8D:36:15:46:F0:16:6C:AF:F1 X509v3 Authority Key Identifier: keyid:DC:78:21:E1:BC:BF:6E:07:4E:A4:81:4A:AA:5C:63:E3:BA:81:3C:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/s30LP9oNn_a9WqmNNhVG8BZsr_E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.197.244.0/24 Signature Algorithm: sha256WithRSAEncryption 06:d7:65:55:1e:75:a1:c6:7c:ca:92:49:2d:79:c7:3b:a0:14: 35:d7:ec:29:91:1a:40:3e:90:4b:d8:ad:7f:f3:37:aa:22:bc: ff:67:66:7a:af:0e:ff:62:a8:db:72:85:82:82:2b:54:2d:ad: 8e:16:5e:e4:74:b7:c1:b1:45:3a:b2:88:60:b7:25:99:b5:41: 86:1d:24:6b:ba:95:b7:6a:6b:0b:a7:a0:71:a0:d2:18:fe:58: 1a:a3:f8:84:23:4c:4f:cb:ca:f2:f6:65:a6:ad:3b:47:5c:0c: 31:a7:b5:fb:ac:a0:7f:5f:14:f3:fb:2a:25:21:0f:61:2d:94: ed:47:82:7c:f6:3a:9c:0f:2b:5e:77:6f:1f:62:d6:74:79:e7: c6:1f:27:ee:99:b0:56:6f:f7:50:9b:2a:19:9a:aa:eb:6e:a0: a2:d1:e5:d2:5c:ca:5e:a2:5b:b5:8c:2d:69:fd:51:73:12:3a: ed:be:03:af:f8:7e:db:f9:99:72:a2:c1:4e:11:e5:d2:23:76: f8:b7:ed:84:7a:f7:e2:b8:11:2d:27:a6:bb:ca:30:ae:e0:ae: 76:36:39:1c:70:13:e8:f0:c0:7e:fa:9e:8e:2b:3d:89:18:97: b6:1b:62:1a:18:0c:9a:48:7c:ae:2f:9c:ea:ec:8b:d3:47:ea: 4e:00:e8:c4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsh/dWUb3GWcvt4t69dEJpRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNzgyMWUxYmNiZjZlMDc0ZWE0ODE0YWFhNWM2M2UzYmE4 MTNjNWYwHhcNMjUxMjE1MTIzMDQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzdkMGIzZmRhMGQ5ZmY2YmQ1YWE5OGQzNjE1NDZmMDE2NmNhZmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw59TNOcNs+D0DXta5d7QSxoEdtlA Azq9HUiATdprnR3pmCcpu8Q/UfO+A7XfB+xj7VPQaMwoSnLi8qf/ohB64LFvHk6p qAeqi+eADnGcHWOvPiJdHncCUwWgFIhRMux53GPhqMd9dR2TiDhDr1LNje/6uxmS eFsSGB9fTRiAPIkZTP+yVcCOooTDaoNGHg5XvdzMkrmg2TVzRT4dIKC2ktouDJyV YaZE/94hyKPY6hXCzydAhDuUsWiGxnQi6G93pqw2kZMuXEqSfmn4nqPpMJVGgPW3 34OP4Yx7z6KMYimTVlEDYQzn66rLzED/hUYkFQDn84ap77pfHSEubT11UwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLN9Cz/aDZ/2vVqpjTYVRvAWbK/xMB8GA1UdIwQY MBaAFNx4IeG8v24HTqSBSqpcY+O6gTxfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0hnaDRieV9iZ2RPcElGS3FseGo0N3FCUEY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC85ZGFmZjQtZjE1OC00ODBmLWI0MWYt ZDQ4YjQyZWYxNTliLzEvczMwTFA5b05uX2E5V3FtTk5oVkc4Qlpzcl9FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC85ZGFmZjQtZjE1OC00ODBmLWI0MWYtZDQ4YjQyZWYxNTli LzEvM0hnaDRieV9iZ2RPcElGS3FseGo0N3FCUEY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8X0MA0G CSqGSIb3DQEBCwUAA4IBAQAG12VVHnWhxnzKkkktecc7oBQ11+wpkRpAPpBL2K1/ 8zeqIrz/Z2Z6rw7/YqjbcoWCgitULa2OFl7kdLfBsUU6sohgtyWZtUGGHSRrupW3 amsLp6BxoNIY/lgao/iEI0xPy8ry9mWmrTtHXAwxp7X7rKB/XxTz+yolIQ9hLZTt R4J89jqcDyted28fYtZ0eefGHyfumbBWb/dQmyoZmqrrbqCi0eXSXMpeolu1jC1p /VFzEjrtvgOv+H7b+ZlyosFOEeXSI3b4t+2EevfiuBEtJ6a7yjCu4K52NjkccBPo 8MB++p6OKz2JGJe2G2IaGAyaSHyuL5zq7IvTR+pOAOjE -----END CERTIFICATE-----Generated at Sun Dec 21 03:47:24 2025 by rpki-client