This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ENuqnzA3ruRTEDO8nV_unXXFG3s.roa File: ENuqnzA3ruRTEDO8nV_unXXFG3s.roa (raw, json) Hash identifier: jqM94Qjxb5BwlTK0O468kBtFYUuLS+gQcO3XoaFwmmI= Subject key identifier: 10:DB:AA:9F:30:37:AE:E4:53:10:33:BC:9D:5F:EE:9D:75:C5:1B:7B Certificate issuer: /CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40 Certificate serial: 019BDE56FE8D5F73BFB967C5819CA77B1668 Authority key identifier: CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ENuqnzA3ruRTEDO8nV_unXXFG3s.roa Signing time: Wed 21 Jan 2026 02:16:41 +0000 ROA not before: Wed 21 Jan 2026 02:16:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 217.149.108.0/24 maxlen: 24 217.149.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.crl rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:de:56:fe:8d:5f:73:bf:b9:67:c5:81:9c:a7:7b:16:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40 Validity Not Before: Jan 21 02:16:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=10dbaa9f3037aee4531033bc9d5fee9d75c51b7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:18:41:17:bc:85:db:25:c9:af:09:b0:d4:05: cd:8d:38:4a:90:eb:31:d5:85:63:6e:c6:1c:82:69: c5:e3:8b:6c:fb:22:4b:23:6f:b8:49:bc:c1:d7:12: b0:3d:a6:a5:62:c7:7a:2d:95:9f:ac:39:44:b1:9d: 02:49:ed:f9:5f:00:22:6f:34:5e:48:27:ab:77:9a: 72:e0:92:ef:dd:87:b5:78:cc:5b:20:42:4d:60:8c: ba:35:79:fc:c9:48:bc:af:d0:a1:3d:5d:ec:48:cb: 1e:72:45:de:03:52:57:28:66:97:28:ce:c1:51:88: fc:46:fa:a4:fc:70:3e:17:05:f6:4f:67:1d:38:db: 7e:78:64:c9:31:a3:2f:8b:6f:23:8b:2c:ee:02:ab: cf:a4:44:4d:bf:e3:98:17:3b:45:d7:5f:6b:41:b6: bd:0f:06:37:c8:02:7e:e8:70:15:a6:74:33:b2:1b: 1f:6f:86:48:2b:d3:7b:88:7a:f3:49:cc:cc:49:36: 91:77:2b:70:e7:05:a1:b6:24:1f:ea:38:18:79:83: 0b:09:53:16:86:66:d9:72:98:bc:ce:76:b9:56:11: 92:33:c7:6f:eb:f9:98:31:8e:d9:83:54:57:d1:1c: 8f:02:34:9a:cc:b5:d7:19:84:83:69:81:22:b3:a6: 4c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:DB:AA:9F:30:37:AE:E4:53:10:33:BC:9D:5F:EE:9D:75:C5:1B:7B X509v3 Authority Key Identifier: keyid:CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ENuqnzA3ruRTEDO8nV_unXXFG3s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.149.108.0/23 Signature Algorithm: sha256WithRSAEncryption 22:46:a6:26:3d:c1:fe:f4:1c:c4:04:c0:d3:b7:5c:9b:6d:86: ab:43:a5:f4:77:35:14:71:c7:c1:cd:d5:13:cc:dd:6a:d1:6a: ee:ce:c3:ac:fd:22:36:8f:2e:cc:d6:98:74:cc:50:72:f0:16: cb:99:90:15:fa:8a:37:a9:18:03:39:c3:43:70:9d:f7:22:38: 8a:0c:cf:81:ef:f7:c8:23:6f:ae:cb:83:db:1c:96:bf:29:61: 8e:84:a3:27:e0:db:53:e7:13:72:2b:bf:de:04:6c:65:21:1a: b7:94:32:67:fa:4b:86:7a:fb:e7:05:36:3f:aa:e5:cc:07:7c: be:54:93:96:1d:81:00:23:7c:f9:6f:6a:d1:0a:4a:f6:2b:19: 4d:a0:67:c8:f5:81:a9:8f:21:15:8b:99:ce:8c:85:f7:73:d8: 03:3f:a3:7f:18:c4:65:d4:db:32:a4:87:19:44:20:5b:90:c9: cc:c0:63:8a:69:3e:ca:53:ff:cb:34:e9:46:de:aa:5f:c9:e0: 12:5b:be:32:e5:84:f1:35:fd:43:2d:69:69:69:c4:e4:51:80: db:b5:c8:2a:30:e1:8c:dc:8b:5e:7b:53:fb:f0:60:41:51:e8: 90:38:96:96:76:ef:07:6f:5d:8b:10:1f:6e:7e:20:e2:4d:8b: c5:88:eb:1b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZveVv6NX3O/uWfFgZynexZoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhOTI2Zjk2MzUxMTg5M2ZhNGQ5ZmJkNWU2NGUwZjhhNDM4 MzdlNDAwHhcNMjYwMTIxMDIxNjQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMGRiYWE5ZjMwMzdhZWU0NTMxMDMzYmM5ZDVmZWU5ZDc1YzUxYjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxhBF7yF2yXJrwmw1AXNjThKkOsx 1YVjbsYcgmnF44ts+yJLI2+4SbzB1xKwPaalYsd6LZWfrDlEsZ0CSe35XwAibzRe SCerd5py4JLv3Ye1eMxbIEJNYIy6NXn8yUi8r9ChPV3sSMseckXeA1JXKGaXKM7B UYj8Rvqk/HA+FwX2T2cdONt+eGTJMaMvi28jiyzuAqvPpERNv+OYFztF119rQba9 DwY3yAJ+6HAVpnQzshsfb4ZIK9N7iHrzSczMSTaRdytw5wWhtiQf6jgYeYMLCVMW hmbZcpi8zna5VhGSM8dv6/mYMY7Zg1RX0RyPAjSazLXXGYSDaYEis6ZMXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBDbqp8wN67kUxAzvJ1f7p11xRt7MB8GA1UdIwQY MBaAFMqSb5Y1EYk/pNn71eZOD4pDg35AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXBKdmxqVVJpVC1rMmZ2VjVrNFBpa09EZmtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy80NGI3YmItMjYwNS00MjViLWIzNDEt MTQ2MDVkYjU0M2QwLzEvRU51cW56QTNydVJURURPOG5WX3VuWFhGRzNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy80NGI3YmItMjYwNS00MjViLWIzNDEtMTQ2MDVkYjU0M2Qw LzEveXBKdmxqVVJpVC1rMmZ2VjVrNFBpa09EZmtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2ZVsMA0G CSqGSIb3DQEBCwUAA4IBAQAiRqYmPcH+9BzEBMDTt1ybbYarQ6X0dzUUccfBzdUT zN1q0WruzsOs/SI2jy7M1ph0zFBy8BbLmZAV+oo3qRgDOcNDcJ33IjiKDM+B7/fI I2+uy4PbHJa/KWGOhKMn4NtT5xNyK7/eBGxlIRq3lDJn+kuGevvnBTY/quXMB3y+ VJOWHYEAI3z5b2rRCkr2KxlNoGfI9YGpjyEVi5nOjIX3c9gDP6N/GMRl1NsypIcZ RCBbkMnMwGOKaT7KU//LNOlG3qpfyeASW74y5YTxNf1DLWlpacTkUYDbtcgqMOGM 3Itee1P78GBBUeiQOJaWdu8Hb12LEB9ufiDiTYvFiOsb -----END CERTIFICATE-----Generated at Sun Jan 25 10:21:12 2026 by rpki-client