This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/EXA4SpEwX1vQWpFirH7mk4IJU8M.roa File: EXA4SpEwX1vQWpFirH7mk4IJU8M.roa (raw, json) Hash identifier: Lyc+y0k9pCkViy1JNMhW8hiC3bm7cXEkAowTAltTXTA= Subject key identifier: 11:70:38:4A:91:30:5F:5B:D0:5A:91:62:AC:7E:E6:93:82:09:53:C3 Certificate issuer: /CN=27b8abac20a598cca4b12f5d755d8e89321f4ec9 Certificate serial: 019B7F15F2D18E1A5F7B36B3FD4F8E5BE474 Authority key identifier: 27:B8:AB:AC:20:A5:98:CC:A4:B1:2F:5D:75:5D:8E:89:32:1F:4E:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7irrCClmMyksS9ddV2OiTIfTsk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/EXA4SpEwX1vQWpFirH7mk4IJU8M.roa Signing time: Fri 02 Jan 2026 14:21:43 +0000 ROA not before: Fri 02 Jan 2026 14:21:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199015 IP address blocks: 91.217.54.0/23 maxlen: 24 195.20.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft rsync://rpki.ripe.net/repository/DEFAULT/J7irrCClmMyksS9ddV2OiTIfTsk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:f2:d1:8e:1a:5f:7b:36:b3:fd:4f:8e:5b:e4:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27b8abac20a598cca4b12f5d755d8e89321f4ec9 Validity Not Before: Jan 2 14:21:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1170384a91305f5bd05a9162ac7ee693820953c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c4:b4:4f:95:05:02:ea:c6:7b:8a:e1:33:08: 41:87:8d:76:8b:38:8f:28:66:77:66:da:a7:51:98: 2b:f2:70:59:17:4d:6b:93:39:81:ed:ce:9a:38:31: e2:e6:e0:0d:00:0f:e2:f3:3d:25:f5:a9:b5:2a:be: 93:e4:9b:34:09:9f:9e:d0:b2:eb:49:51:fc:18:21: da:cf:08:03:1b:9e:65:3d:83:d4:0d:ef:82:3d:a6: e3:33:0d:51:44:4b:46:ed:63:29:b4:a8:39:7a:3b: 1e:67:b9:a6:fb:30:22:cb:2e:62:3d:0b:76:52:37: e6:3e:99:1f:8e:5e:1c:64:e0:bc:45:75:8b:38:04: a8:d3:ad:e9:0c:e6:fc:7c:76:92:45:1d:ff:91:6f: 1a:cc:6b:fe:df:88:b6:a4:75:32:c5:49:0b:ab:50: dd:1b:16:16:6c:35:f0:5c:9a:e8:9f:f7:a1:ef:8e: 81:b4:7d:95:36:82:47:c1:6e:93:64:20:54:7c:6b: 7f:3c:d5:88:b7:f2:ff:99:da:3e:1a:bf:a8:da:1c: 6b:b4:5f:21:6a:48:35:2a:3d:89:58:10:6a:31:f8: 5c:32:80:c8:22:32:1b:bd:88:ef:ad:37:bc:0a:7d: 68:16:e6:84:d3:f2:b5:03:6b:0b:89:41:c5:16:d9: 7e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:70:38:4A:91:30:5F:5B:D0:5A:91:62:AC:7E:E6:93:82:09:53:C3 X509v3 Authority Key Identifier: keyid:27:B8:AB:AC:20:A5:98:CC:A4:B1:2F:5D:75:5D:8E:89:32:1F:4E:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7irrCClmMyksS9ddV2OiTIfTsk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/EXA4SpEwX1vQWpFirH7mk4IJU8M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.217.54.0/23 195.20.158.0/24 Signature Algorithm: sha256WithRSAEncryption 95:14:0a:3b:a5:a9:2b:79:4f:51:a9:b0:14:5b:ad:79:97:2c: 56:d8:e0:3e:5f:a4:0c:44:33:dc:91:31:66:34:16:83:f8:c9: c4:57:fa:1f:e1:4f:a6:43:c4:58:40:fb:21:3b:b4:eb:15:93: 79:d1:fd:d0:0b:63:bb:d9:8a:8c:bb:08:0e:02:a5:2f:ee:ac: 42:e6:ac:a6:fc:f7:75:03:6d:eb:8c:78:48:d2:5a:00:49:89: 78:a3:49:09:6f:01:0f:ab:bc:2b:c5:e3:3e:2c:5e:b6:be:28: 83:84:de:7a:35:b2:ef:7e:b6:d5:ef:76:a5:83:0a:47:63:4a: b3:5f:44:cf:e0:84:21:e1:60:42:be:f5:63:54:a6:59:e0:85: 08:97:f9:64:3c:6f:da:2b:18:ed:9e:d4:ae:06:e9:27:71:4d: 6e:63:3d:1b:24:6f:29:94:72:31:32:3e:9d:5a:d2:bb:3f:05: e8:2c:ad:a8:e9:1d:ec:e0:70:89:1f:b1:6f:e9:8b:5c:5d:9e: 72:6c:e4:39:80:58:1b:f0:6c:29:cb:22:83:29:29:2d:16:34: 3a:44:55:29:0f:0f:12:6c:7d:d8:69:7d:1d:40:2e:06:44:27: eb:ef:12:5a:c0:84:c7:27:ab:e6:2e:e8:f4:c1:98:15:66:40: bf:4c:6f:a8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FfLRjhpfezaz/U+OW+R0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YjhhYmFjMjBhNTk4Y2NhNGIxMmY1ZDc1NWQ4ZTg5MzIx ZjRlYzkwHhcNMjYwMTAyMTQyMTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTcwMzg0YTkxMzA1ZjViZDA1YTkxNjJhYzdlZTY5MzgyMDk1M2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08S0T5UFAurGe4rhMwhBh412iziP KGZ3ZtqnUZgr8nBZF01rkzmB7c6aODHi5uANAA/i8z0l9am1Kr6T5Js0CZ+e0LLr SVH8GCHazwgDG55lPYPUDe+CPabjMw1RREtG7WMptKg5ejseZ7mm+zAiyy5iPQt2 UjfmPpkfjl4cZOC8RXWLOASo063pDOb8fHaSRR3/kW8azGv+34i2pHUyxUkLq1Dd GxYWbDXwXJron/eh746BtH2VNoJHwW6TZCBUfGt/PNWIt/L/mdo+Gr+o2hxrtF8h akg1Kj2JWBBqMfhcMoDIIjIbvYjvrTe8Cn1oFuaE0/K1A2sLiUHFFtl+1wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBFwOEqRMF9b0FqRYqx+5pOCCVPDMB8GA1UdIwQY MBaAFCe4q6wgpZjMpLEvXXVdjokyH07JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjdpcnJDQ2xtTXlrc1M5ZGRWMk9pVElmVHNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi83MjllMWMtMWNjMC00MjdlLThmMDAt NGI2ZmM3YzA2YWU1LzEvRVhBNFNwRXdYMXZRV3BGaXJIN21rNElKVThNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi83MjllMWMtMWNjMC00MjdlLThmMDAtNGI2ZmM3YzA2YWU1 LzEvSjdpcnJDQ2xtTXlrc1M5ZGRWMk9pVElmVHNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW9k2AwQA wxSeMA0GCSqGSIb3DQEBCwUAA4IBAQCVFAo7pakreU9RqbAUW615lyxW2OA+X6QM RDPckTFmNBaD+MnEV/of4U+mQ8RYQPshO7TrFZN50f3QC2O72YqMuwgOAqUv7qxC 5qym/Pd1A23rjHhI0loASYl4o0kJbwEPq7wrxeM+LF62viiDhN56NbLvfrbV73al gwpHY0qzX0TP4IQh4WBCvvVjVKZZ4IUIl/lkPG/aKxjtntSuBukncU1uYz0bJG8p lHIxMj6dWtK7PwXoLK2o6R3s4HCJH7Fv6YtcXZ5ybOQ5gFgb8GwpyyKDKSktFjQ6 RFUpDw8SbH3YaX0dQC4GRCfr7xJawITHJ6vmLuj0wZgVZkC/TG+o -----END CERTIFICATE-----Generated at Mon Jan 26 10:24:14 2026 by rpki-client