This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/7uEWRZhuKrrLrbz68WNBnRtyak4.roa File: 7uEWRZhuKrrLrbz68WNBnRtyak4.roa (raw, json) Hash identifier: lE6tlE6mE+L1kYKEpT6B92Zv+jxsgj3WHZA7o8EE7DM= Subject key identifier: EE:E1:16:45:98:6E:2A:BA:CB:AD:BC:FA:F1:63:41:9D:1B:72:6A:4E Certificate issuer: /CN=76d4bc89eeb4a9c89f1005eaad227c1325ed1562 Certificate serial: 019B7DC9F29A231EF2C4AF4070EDCCFB476A Authority key identifier: 76:D4:BC:89:EE:B4:A9:C8:9F:10:05:EA:AD:22:7C:13:25:ED:15:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dtS8ie60qcifEAXqrSJ8EyXtFWI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/7uEWRZhuKrrLrbz68WNBnRtyak4.roa Signing time: Fri 02 Jan 2026 08:19:05 +0000 ROA not before: Fri 02 Jan 2026 08:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3303 IP address blocks: 91.220.99.0/24 maxlen: 24 185.176.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.mft rsync://rpki.ripe.net/repository/DEFAULT/dtS8ie60qcifEAXqrSJ8EyXtFWI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:f2:9a:23:1e:f2:c4:af:40:70:ed:cc:fb:47:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76d4bc89eeb4a9c89f1005eaad227c1325ed1562 Validity Not Before: Jan 2 08:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eee11645986e2abacbadbcfaf163419d1b726a4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:18:ad:5b:34:f5:c9:25:7f:5b:d0:9d:41:9d: e9:40:02:bb:34:bd:fd:93:ff:73:61:5a:0b:f4:6c: ab:37:37:ab:89:20:14:40:e9:57:fa:c7:2e:06:ab: c1:0e:b0:75:20:89:d8:d1:55:be:6a:85:f7:99:31: f0:42:2f:f1:37:d9:4e:ec:97:11:6e:7c:9f:78:86: b5:d5:62:13:82:64:40:bc:25:ed:3d:c4:2c:75:34: a1:5d:bc:9a:06:d3:56:d1:b4:18:a2:a2:ab:c0:4d: 78:2e:90:dd:59:2c:6c:b2:b4:1b:e1:63:32:92:6c: 54:07:75:b7:d4:54:12:ee:57:7d:d1:38:3a:69:43: 68:e2:52:4d:3c:a7:44:10:44:2a:e9:c6:05:7b:1f: 5b:b9:88:d0:77:e3:85:5c:b0:df:6f:3c:e0:30:c2: a8:4d:53:55:56:ed:11:48:ee:35:90:d5:e5:90:32: b6:49:35:76:ca:90:fc:00:fe:e9:b2:53:83:62:f7: fa:be:c7:ea:b5:4a:a6:cd:ef:30:7b:b4:83:83:da: 94:58:8a:4a:13:78:15:c8:0c:c0:bd:8d:7e:ad:4a: e2:d2:c4:dd:44:25:2c:18:12:f5:f6:01:bb:51:c4: 83:56:11:64:bb:5e:e9:6b:9a:db:37:a7:6b:50:39: 4d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:E1:16:45:98:6E:2A:BA:CB:AD:BC:FA:F1:63:41:9D:1B:72:6A:4E X509v3 Authority Key Identifier: keyid:76:D4:BC:89:EE:B4:A9:C8:9F:10:05:EA:AD:22:7C:13:25:ED:15:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dtS8ie60qcifEAXqrSJ8EyXtFWI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/7uEWRZhuKrrLrbz68WNBnRtyak4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.220.99.0/24 185.176.236.0/22 Signature Algorithm: sha256WithRSAEncryption 34:63:14:9d:86:02:8b:4b:7d:38:ae:e6:2c:3d:ff:72:21:df: 48:e7:cb:ab:39:b9:49:8c:18:05:90:51:09:45:a5:df:50:7a: e4:bd:dd:65:8d:51:d7:62:83:a8:b2:e9:e7:ac:f9:3e:7b:46: 66:84:64:3e:3f:09:ac:67:21:26:f2:1a:fa:c8:43:c9:97:12: 65:a3:0a:64:0b:3c:35:d1:06:c3:69:0f:7e:2f:83:1c:26:8b: 4f:ce:d7:27:44:c4:74:b3:e4:a2:cc:8f:ad:9f:ce:5c:81:d2: 71:ea:f5:d8:84:99:10:b4:21:65:e8:a5:2a:98:9e:ce:6d:2e: 00:ed:e6:ff:6d:df:c9:fa:80:eb:9f:9d:8b:09:94:61:3a:d9: ff:72:f7:f0:8f:a8:ae:8e:ea:5b:61:2f:87:97:e3:79:40:fb: 26:93:3d:f6:68:d4:ac:99:fb:db:00:ea:44:30:ef:6f:1b:ec: 1c:62:ba:51:df:04:42:5d:bf:33:86:6c:6a:b6:ec:ae:9b:1d: de:b2:78:56:16:e3:4d:ec:ad:0b:e7:7f:63:9c:81:39:ad:37: 86:84:eb:d0:6d:d8:d7:0b:c2:bb:a1:58:bf:af:af:3f:98:5f: ee:0b:23:25:b9:f4:82:f3:c4:47:cc:46:95:9e:f8:5f:ae:b1: b8:85:84:8c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9yfKaIx7yxK9AcO3M+0dqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2ZDRiYzg5ZWViNGE5Yzg5ZjEwMDVlYWFkMjI3YzEzMjVl ZDE1NjIwHhcNMjYwMTAyMDgxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZWUxMTY0NTk4NmUyYWJhY2JhZGJjZmFmMTYzNDE5ZDFiNzI2YTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBitWzT1ySV/W9CdQZ3pQAK7NL39 k/9zYVoL9GyrNzeriSAUQOlX+scuBqvBDrB1IInY0VW+aoX3mTHwQi/xN9lO7JcR bnyfeIa11WITgmRAvCXtPcQsdTShXbyaBtNW0bQYoqKrwE14LpDdWSxssrQb4WMy kmxUB3W31FQS7ld90Tg6aUNo4lJNPKdEEEQq6cYFex9buYjQd+OFXLDfbzzgMMKo TVNVVu0RSO41kNXlkDK2STV2ypD8AP7pslODYvf6vsfqtUqmze8we7SDg9qUWIpK E3gVyAzAvY1+rUri0sTdRCUsGBL19gG7UcSDVhFku17pa5rbN6drUDlNpwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFO7hFkWYbiq6y628+vFjQZ0bcmpOMB8GA1UdIwQY MBaAFHbUvInutKnInxAF6q0ifBMl7RViMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHRTOGllNjBxY2lmRUFYcXJTSjhFeVh0RldJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mYjM2NzMtNzQxOS00OWQ4LWI2ZjYt MDkxZjdmOWI5NzYxLzEvN3VFV1JaaHVLcnJMcmJ6NjhXTkJuUnR5YWs0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9mYjM2NzMtNzQxOS00OWQ4LWI2ZjYtMDkxZjdmOWI5NzYx LzEvZHRTOGllNjBxY2lmRUFYcXJTSjhFeVh0RldJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9xjAwQC ubDsMA0GCSqGSIb3DQEBCwUAA4IBAQA0YxSdhgKLS304ruYsPf9yId9I58urOblJ jBgFkFEJRaXfUHrkvd1ljVHXYoOosunnrPk+e0ZmhGQ+PwmsZyEm8hr6yEPJlxJl owpkCzw10QbDaQ9+L4McJotPztcnRMR0s+SizI+tn85cgdJx6vXYhJkQtCFl6KUq mJ7ObS4A7eb/bd/J+oDrn52LCZRhOtn/cvfwj6iujupbYS+Hl+N5QPsmkz32aNSs mfvbAOpEMO9vG+wcYrpR3wRCXb8zhmxqtuyumx3esnhWFuNN7K0L539jnIE5rTeG hOvQbdjXC8K7oVi/r68/mF/uCyMlufSC88RHzEaVnvhfrrG4hYSM -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:16 2026 by rpki-client