This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/e3qdTpRStcCORxISaYYq3AP8CUc.roa File: e3qdTpRStcCORxISaYYq3AP8CUc.roa (raw, json) Hash identifier: iM5Rmk59sIgr6XSfhwlBdIK7TDwRtWgNhsnVyMMGkCs= Subject key identifier: 7B:7A:9D:4E:94:52:B5:C0:8E:47:12:12:69:86:2A:DC:03:FC:09:47 Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8 Certificate serial: 019B7DC886F6F121D31F74BD8F891EBA5146 Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/e3qdTpRStcCORxISaYYq3AP8CUc.roa Signing time: Fri 02 Jan 2026 08:17:32 +0000 ROA not before: Fri 02 Jan 2026 08:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62014 IP address blocks: 91.108.16.0/22 maxlen: 22 91.108.56.0/23 maxlen: 23 149.154.168.0/22 maxlen: 22 2001:b28:f23f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c8:86:f6:f1:21:d3:1f:74:bd:8f:89:1e:ba:51:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8 Validity Not Before: Jan 2 08:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7b7a9d4e9452b5c08e47121269862adc03fc0947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a7:a0:7b:e1:29:5f:b2:e9:38:29:e4:aa:0c: d3:38:9b:26:cd:a3:48:88:53:f3:b9:d6:8d:bb:df: 86:25:8b:86:b5:d3:67:b2:29:f3:e4:5e:c9:c4:23: ab:78:65:6e:91:e9:2b:d4:92:2e:a4:99:7a:02:50: ee:98:f1:92:c1:53:93:04:a0:ce:6c:10:fa:96:b5: 3b:af:b4:c9:a0:c6:b3:a0:1a:f2:ed:45:a0:f4:bf: a1:80:23:7a:a2:e1:ef:f3:ee:09:27:92:65:28:a6: 5c:ca:24:b6:a5:81:65:79:9d:d4:ab:c8:8b:93:99: 3b:42:fc:92:39:25:43:d8:08:80:89:8c:bf:e5:83: 35:3d:8d:d8:71:8b:d0:72:f6:61:f6:f8:d2:eb:5b: de:c9:99:a4:3f:1a:50:e4:ec:52:62:c9:ae:b1:38: 8d:74:d9:29:96:ad:c4:fd:a7:d1:cf:94:5e:b2:87: 5e:f9:17:29:8f:ee:b2:73:b1:ab:f7:29:be:34:e6: 4d:8b:e5:86:a1:a1:8c:01:f3:ac:97:58:68:29:2e: 13:f3:dc:b2:c5:f2:54:78:8b:b2:bb:a8:02:5f:65: 64:ff:54:fe:10:37:9b:30:7e:12:07:a4:c1:01:63: 99:98:b8:d2:ef:0d:73:cc:3c:c0:be:42:fe:4a:51: 5b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:7A:9D:4E:94:52:B5:C0:8E:47:12:12:69:86:2A:DC:03:FC:09:47 X509v3 Authority Key Identifier: keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/e3qdTpRStcCORxISaYYq3AP8CUc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.108.16.0/22 91.108.56.0/23 149.154.168.0/22 IPv6: 2001:b28:f23f::/48 Signature Algorithm: sha256WithRSAEncryption 0c:78:b3:78:50:46:d7:a8:98:e8:bb:73:6a:1a:d8:12:e3:84: ec:fa:3f:66:72:6b:5d:fa:29:a6:31:6d:53:68:48:e2:58:52: 71:c7:c0:86:55:1b:56:2d:1f:04:c4:c2:34:2a:81:c4:66:99: 47:f3:d7:0a:a7:37:51:18:a5:07:48:2d:ae:86:a9:9e:73:8c: 48:92:22:85:5c:9b:db:4f:19:6f:4a:7c:76:e1:3c:75:58:c4: 40:3b:dd:0f:9d:bf:5e:2b:12:a8:c3:e0:eb:4a:fa:a0:c9:3d: 2d:13:6f:ca:c6:ef:31:4e:5f:92:da:80:96:4a:77:01:e9:98: fe:eb:be:55:87:e0:bc:e2:04:bd:e9:69:87:50:ea:bb:e8:d7: b9:86:3d:68:24:98:47:7d:ea:84:2a:34:68:b4:1a:7e:1f:da: ba:87:7c:37:53:64:42:57:7b:09:97:c2:c1:07:a7:f3:73:34: f3:e9:28:75:20:45:95:d3:1c:81:66:2c:a1:21:9c:9f:b7:07: 9c:a3:30:3d:15:a2:3a:c1:69:ae:1b:2d:16:d4:5c:4b:79:0c: cb:3f:3a:7c:11:15:3a:ec:d9:13:7d:d2:04:61:05:8d:82:b1: 23:f6:6a:ea:97:b3:cc:c7:33:6e:e5:2a:db:5c:7e:a4:1a:a1: 8b:e3:e5:aa -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt9yIb28SHTH3S9j4keulFGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMjhlN2UwMWZhZGE0OWMxYTUyZmExM2YzNjI2YzQxYjQx YTUxYjgwHhcNMjYwMTAyMDgxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YjdhOWQ0ZTk0NTJiNWMwOGU0NzEyMTI2OTg2MmFkYzAzZmMwOTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKege+EpX7LpOCnkqgzTOJsmzaNI iFPzudaNu9+GJYuGtdNnsinz5F7JxCOreGVukekr1JIupJl6AlDumPGSwVOTBKDO bBD6lrU7r7TJoMazoBry7UWg9L+hgCN6ouHv8+4JJ5JlKKZcyiS2pYFleZ3Uq8iL k5k7QvySOSVD2AiAiYy/5YM1PY3YcYvQcvZh9vjS61veyZmkPxpQ5OxSYsmusTiN dNkplq3E/afRz5Resode+Rcpj+6yc7Gr9ym+NOZNi+WGoaGMAfOsl1hoKS4T89yy xfJUeIuyu6gCX2Vk/1T+EDebMH4SB6TBAWOZmLjS7w1zzDzAvkL+SlFbFQIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFHt6nU6UUrXAjkcSEmmGKtwD/AlHMB8GA1UdIwQY MBaAFGIo5+AfraScGlL6E/NibEG0GlG4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iYWFmZjMtYWViNC00NjE2LThmYjUt NzY3NDE2NTI1MTBkLzEvZTNxZFRwUlN0Y0NPUnhJU2FZWXEzQVA4Q1VjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iYWFmZjMtYWViNC00NjE2LThmYjUtNzY3NDE2NTI1MTBk LzEvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQCW2wQAwQB W2w4AwQClZqoMA8EAgACMAkDBwAgAQso8j8wDQYJKoZIhvcNAQELBQADggEBAAx4 s3hQRteomOi7c2oa2BLjhOz6P2Zya136KaYxbVNoSOJYUnHHwIZVG1YtHwTEwjQq gcRmmUfz1wqnN1EYpQdILa6GqZ5zjEiSIoVcm9tPGW9KfHbhPHVYxEA73Q+dv14r EqjD4OtK+qDJPS0Tb8rG7zFOX5LagJZKdwHpmP7rvlWH4LziBL3paYdQ6rvo17mG PWgkmEd96oQqNGi0Gn4f2rqHfDdTZEJXewmXwsEHp/NzNPPpKHUgRZXTHIFmLKEh nJ+3B5yjMD0VojrBaa4bLRbUXEt5DMs/OnwRFTrs2RN90gRhBY2CsSP2auqXs8zH M27lKttcfqQaoYvj5ao= -----END CERTIFICATE-----Generated at Sun Jan 25 16:09:46 2026 by rpki-client