This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/N905L8-7YxH2DGuKT4TqyLtH9hg.roa File: N905L8-7YxH2DGuKT4TqyLtH9hg.roa (raw, json) Hash identifier: 8pMSMPosiUUfB8gsw6Yi/Z3lOaNd4MGcuLKeWx/SoOQ= Subject key identifier: 37:DD:39:2F:CF:BB:63:11:F6:0C:6B:8A:4F:84:EA:C8:BB:47:F6:18 Certificate issuer: /CN=dd9c30399f638555f4c02e8d1b55bc927225cb51 Certificate serial: 019B79EC0008571024CB389A5C6259194D97 Authority key identifier: DD:9C:30:39:9F:63:85:55:F4:C0:2E:8D:1B:55:BC:92:72:25:CB:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/N905L8-7YxH2DGuKT4TqyLtH9hg.roa Signing time: Thu 01 Jan 2026 14:17:48 +0000 ROA not before: Thu 01 Jan 2026 14:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49773 IP address blocks: 91.218.80.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:00:08:57:10:24:cb:38:9a:5c:62:59:19:4d:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd9c30399f638555f4c02e8d1b55bc927225cb51 Validity Not Before: Jan 1 14:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=37dd392fcfbb6311f60c6b8a4f84eac8bb47f618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a6:c2:37:55:9d:18:3d:8c:ad:5b:ba:b7:bf: 07:7d:39:6d:c0:d9:c5:df:7e:13:c9:29:c1:40:50: fc:b1:a2:49:f5:58:96:af:1a:d4:d9:91:53:e7:a8: 5d:1c:59:a8:00:73:fa:e3:33:19:88:37:8b:e9:ea: 51:54:02:05:3f:3d:d5:0f:ac:4e:6a:ac:5b:fe:a1: 19:58:37:02:d7:7c:26:ab:02:fb:67:50:02:bb:78: 90:9c:a1:0c:76:67:30:ac:c1:59:ec:17:bd:84:d3: bd:27:dc:98:c5:0c:71:24:d1:05:4e:4e:39:34:00: 7c:a6:dc:4e:ab:bc:dd:2e:6b:4d:fd:7a:7d:de:88: f9:69:17:d0:b9:de:59:af:14:22:d6:fd:2b:f4:a0: 61:13:05:57:be:27:df:5b:cd:a8:0b:82:3a:b9:64: 99:02:be:1d:e5:4d:3f:d5:81:3b:da:63:5e:5e:98: ca:a4:7b:73:30:07:f3:81:4b:d8:47:8f:90:ef:93: b6:03:94:ef:9f:24:fd:f4:eb:5b:8a:34:02:7b:02: a8:f9:f4:16:2d:8e:0f:cc:fd:3a:19:cb:d3:4f:66: aa:57:f1:56:da:d6:09:98:b7:a0:8d:78:33:53:c6: cb:6c:89:36:6a:42:27:37:64:de:06:5f:f8:83:d1: da:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:DD:39:2F:CF:BB:63:11:F6:0C:6B:8A:4F:84:EA:C8:BB:47:F6:18 X509v3 Authority Key Identifier: keyid:DD:9C:30:39:9F:63:85:55:F4:C0:2E:8D:1B:55:BC:92:72:25:CB:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/N905L8-7YxH2DGuKT4TqyLtH9hg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.218.80.0/22 Signature Algorithm: sha256WithRSAEncryption d7:f4:75:bf:01:49:43:bc:bf:e0:9a:fe:4d:0a:cc:f1:34:cf: 1e:37:31:61:b2:62:11:a7:1b:ff:bf:3f:23:b2:30:e8:35:f9: 71:46:c1:98:59:4d:95:43:5a:b0:9b:64:4a:9c:4a:f5:dd:e4: 66:65:01:ee:84:33:c5:90:93:15:2b:58:06:63:d8:42:1c:6c: c5:f3:e5:b4:88:41:6f:9d:79:23:d7:ee:72:c2:f1:34:08:4e: 0f:78:63:ba:e0:9d:2c:69:50:ea:a8:44:bf:30:df:ec:a1:82: aa:a7:91:8b:4e:b3:bd:42:fb:ce:5a:11:63:ee:c2:be:45:54: 31:91:8d:6d:7c:c5:74:06:10:f1:50:07:a5:ea:02:7a:18:0d: f2:fd:db:db:e3:76:31:74:d7:6b:06:02:01:f2:76:76:21:81: 6f:f1:aa:9b:e7:d4:47:b0:d4:12:35:2a:c2:58:a1:73:dd:a0: 63:73:c6:d2:7e:78:f4:57:02:2e:9d:2c:d5:62:ea:5c:27:c8: a9:2f:b4:0d:4d:41:59:a7:d0:8d:79:37:77:32:cb:82:b3:4a: 45:f9:37:4a:27:1c:c3:05:39:61:1e:21:59:cc:76:8b:d8:69: 6c:c2:ff:62:be:4c:5a:12:43:ca:2d:ff:c3:dc:38:b7:6f:7b: 17:a9:51:25 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57AAIVxAkyziaXGJZGU2XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkOWMzMDM5OWY2Mzg1NTVmNGMwMmU4ZDFiNTViYzkyNzIy NWNiNTEwHhcNMjYwMTAxMTQxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzN2RkMzkyZmNmYmI2MzExZjYwYzZiOGE0Zjg0ZWFjOGJiNDdmNjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6bCN1WdGD2MrVu6t78HfTltwNnF 334TySnBQFD8saJJ9ViWrxrU2ZFT56hdHFmoAHP64zMZiDeL6epRVAIFPz3VD6xO aqxb/qEZWDcC13wmqwL7Z1ACu3iQnKEMdmcwrMFZ7Be9hNO9J9yYxQxxJNEFTk45 NAB8ptxOq7zdLmtN/Xp93oj5aRfQud5ZrxQi1v0r9KBhEwVXviffW82oC4I6uWSZ Ar4d5U0/1YE72mNeXpjKpHtzMAfzgUvYR4+Q75O2A5TvnyT99OtbijQCewKo+fQW LY4PzP06GcvTT2aqV/FW2tYJmLegjXgzU8bLbIk2akInN2TeBl/4g9HaUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDfdOS/Pu2MR9gxrik+E6si7R/YYMB8GA1UdIwQY MBaAFN2cMDmfY4VV9MAujRtVvJJyJctRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1p3d09aOWpoVlgwd0M2TkcxVzhrbklseTFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9iZWNhNGQtNzBjYy00Y2E0LWI0NTIt MGU1MTQwNjJjNTkwLzEvTjkwNUw4LTdZeEgyREd1S1Q0VHF5THRIOWhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9iZWNhNGQtNzBjYy00Y2E0LWI0NTItMGU1MTQwNjJjNTkw LzEvM1p3d09aOWpoVlgwd0M2TkcxVzhrbklseTFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW9pQMA0G CSqGSIb3DQEBCwUAA4IBAQDX9HW/AUlDvL/gmv5NCszxNM8eNzFhsmIRpxv/vz8j sjDoNflxRsGYWU2VQ1qwm2RKnEr13eRmZQHuhDPFkJMVK1gGY9hCHGzF8+W0iEFv nXkj1+5ywvE0CE4PeGO64J0saVDqqES/MN/soYKqp5GLTrO9QvvOWhFj7sK+RVQx kY1tfMV0BhDxUAel6gJ6GA3y/dvb43YxdNdrBgIB8nZ2IYFv8aqb59RHsNQSNSrC WKFz3aBjc8bSfnj0VwIunSzVYupcJ8ipL7QNTUFZp9CNeTd3MsuCs0pF+TdKJxzD BTlhHiFZzHaL2Glswv9ivkxaEkPKLf/D3Di3b3sXqVEl -----END CERTIFICATE-----Generated at Fri Jan 2 18:34:12 2026 by rpki-client