This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/4UtpBbuncICgv9efuHvxROM6-RY.roa File: 4UtpBbuncICgv9efuHvxROM6-RY.roa (raw, json) Hash identifier: YRGR60bkJx2AW9aNIbqOxesw3CP4UiCdMcSI2Vcci1o= Subject key identifier: E1:4B:69:05:BB:A7:70:80:A0:BF:D7:9F:B8:7B:F1:44:E3:3A:F9:16 Certificate issuer: /CN=ef0efd5de78f93bcaead15e14c006edbbd1b5955 Certificate serial: 019B76EB689866703A008B6112DB9272F03E Authority key identifier: EF:0E:FD:5D:E7:8F:93:BC:AE:AD:15:E1:4C:00:6E:DB:BD:1B:59:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7w79XeePk7yurRXhTABu270bWVU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/4UtpBbuncICgv9efuHvxROM6-RY.roa Signing time: Thu 01 Jan 2026 00:18:17 +0000 ROA not before: Thu 01 Jan 2026 00:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47421 IP address blocks: 91.147.208.0/22 maxlen: 22 91.147.212.0/23 maxlen: 23 94.248.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/7w79XeePk7yurRXhTABu270bWVU.crl rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/7w79XeePk7yurRXhTABu270bWVU.mft rsync://rpki.ripe.net/repository/DEFAULT/7w79XeePk7yurRXhTABu270bWVU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:68:98:66:70:3a:00:8b:61:12:db:92:72:f0:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef0efd5de78f93bcaead15e14c006edbbd1b5955 Validity Not Before: Jan 1 00:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e14b6905bba77080a0bfd79fb87bf144e33af916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:40:5f:15:98:5b:08:0d:05:ea:4d:95:8f:33: b1:79:92:29:93:7d:f1:9d:b6:56:8e:83:ec:c4:ab: 83:9e:5c:17:cb:83:b2:02:11:a7:a6:ba:97:b5:8a: 1f:ae:e5:2c:9a:25:00:ee:75:a2:75:af:8a:81:56: 97:a8:b3:11:e0:ee:50:93:c5:06:bf:98:1d:54:aa: 2b:25:95:58:9a:68:77:7a:f2:2a:11:a4:f6:21:b2: 6a:ba:a8:51:ed:f8:30:77:f9:1c:1d:c3:9c:15:75: 83:f3:27:a8:d1:d0:93:e4:1f:0a:b0:79:88:53:34: f5:c0:f2:38:27:64:33:f7:83:01:36:85:15:28:05: 2f:c2:4f:9c:4b:78:cd:72:93:bc:06:0c:57:d1:b1: e7:78:99:58:6e:46:5d:e1:b8:9b:07:65:bc:fc:e1: d2:4a:96:3f:00:b8:41:0d:eb:90:15:fe:97:d4:c4: 31:9b:80:e5:33:8c:38:22:de:3a:97:8d:7e:38:a5: 5a:b8:0f:8e:86:0c:44:51:ab:7e:03:f9:b9:72:4b: d6:bc:89:60:50:ed:74:f9:12:0d:da:f7:dc:9a:f3: 15:71:69:7c:46:f0:e7:f4:25:0e:6c:3c:8f:9d:d9: ac:e2:6d:64:e0:57:ac:8e:82:26:84:44:c0:ea:7f: 2d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:4B:69:05:BB:A7:70:80:A0:BF:D7:9F:B8:7B:F1:44:E3:3A:F9:16 X509v3 Authority Key Identifier: keyid:EF:0E:FD:5D:E7:8F:93:BC:AE:AD:15:E1:4C:00:6E:DB:BD:1B:59:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7w79XeePk7yurRXhTABu270bWVU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/4UtpBbuncICgv9efuHvxROM6-RY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/7w79XeePk7yurRXhTABu270bWVU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.147.208.0-91.147.213.255 94.248.168.0/23 Signature Algorithm: sha256WithRSAEncryption 1c:55:ff:a8:ef:21:ca:6d:7d:b7:9e:5d:79:82:71:76:0f:ae: 63:e3:64:75:e0:01:64:1a:f7:1e:6b:ff:99:ca:43:01:c0:e8: 36:04:4b:54:b5:ba:ad:61:e9:10:1c:ca:a6:cf:85:fc:12:6d: 04:01:ab:da:99:36:79:78:17:2b:5a:c4:0e:34:00:a1:03:95: b2:71:26:3f:ea:f9:36:f5:da:a8:63:44:f2:08:c4:23:a2:40: 94:0c:11:ef:90:0e:0f:38:4b:94:8b:28:38:3a:11:9c:a5:bc: 36:2c:22:46:85:ad:27:df:09:12:0a:f3:ee:c5:ee:2f:96:55: 0b:2f:d6:79:9b:df:98:d7:ea:83:24:28:6b:44:e3:ca:fa:8c: c4:50:0d:43:42:2d:10:90:ed:66:21:22:25:bf:05:1d:7e:b2: 8c:59:56:14:82:a8:29:84:d3:ae:4d:4a:b1:a2:c2:8c:e2:08: d6:d3:94:d4:c2:8c:12:e0:54:ed:7d:57:b3:d3:a6:5f:2d:77: 62:31:12:f5:d0:d5:a8:63:e6:63:71:18:04:ee:61:58:88:44: ba:9c:4c:82:d4:85:ff:e2:6d:b7:30:1b:c2:03:6c:fb:f8:6c: d4:4b:fa:6e:cd:27:8d:a4:44:eb:7b:93:24:e2:79:da:2d:dd: 68:2a:69:b5 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt262iYZnA6AIthEtuScvA+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMGVmZDVkZTc4ZjkzYmNhZWFkMTVlMTRjMDA2ZWRiYmQx YjU5NTUwHhcNMjYwMTAxMDAxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTRiNjkwNWJiYTc3MDgwYTBiZmQ3OWZiODdiZjE0NGUzM2FmOTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEBfFZhbCA0F6k2VjzOxeZIpk33x nbZWjoPsxKuDnlwXy4OyAhGnprqXtYofruUsmiUA7nWida+KgVaXqLMR4O5Qk8UG v5gdVKorJZVYmmh3evIqEaT2IbJquqhR7fgwd/kcHcOcFXWD8yeo0dCT5B8KsHmI UzT1wPI4J2Qz94MBNoUVKAUvwk+cS3jNcpO8BgxX0bHneJlYbkZd4bibB2W8/OHS SpY/ALhBDeuQFf6X1MQxm4DlM4w4It46l41+OKVauA+OhgxEUat+A/m5ckvWvIlg UO10+RIN2vfcmvMVcWl8RvDn9CUObDyPndms4m1k4FesjoImhETA6n8taQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFOFLaQW7p3CAoL/Xn7h78UTjOvkWMB8GA1UdIwQY MBaAFO8O/V3nj5O8rq0V4UwAbtu9G1lVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3c3OVhlZVBrN3l1clJYaFRBQnUyNzBiV1ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9lMGY5ZTYtZDY1NS00Mzc3LThkMDkt ZWE4NjUwOWMzYjMwLzEvNFV0cEJidW5jSUNndjllZnVIdnhST002LVJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9lMGY5ZTYtZDY1NS00Mzc3LThkMDktZWE4NjUwOWMzYjMw LzEvN3c3OVhlZVBrN3l1clJYaFRBQnUyNzBiV1ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBARbk9AD BAFbk9QDBAFe+KgwDQYJKoZIhvcNAQELBQADggEBABxV/6jvIcptfbeeXXmCcXYP rmPjZHXgAWQa9x5r/5nKQwHA6DYES1S1uq1h6RAcyqbPhfwSbQQBq9qZNnl4Fyta xA40AKEDlbJxJj/q+Tb12qhjRPIIxCOiQJQMEe+QDg84S5SLKDg6EZylvDYsIkaF rSffCRIK8+7F7i+WVQsv1nmb35jX6oMkKGtE48r6jMRQDUNCLRCQ7WYhIiW/BR1+ soxZVhSCqCmE065NSrGiwoziCNbTlNTCjBLgVO19V7PTpl8td2IxEvXQ1ahj5mNx GATuYViIRLqcTILUhf/ibbcwG8IDbPv4bNRL+m7NJ42kROt7kyTiedot3WgqabU= -----END CERTIFICATE-----Generated at Mon Jan 26 03:57:08 2026 by rpki-client