This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/yOVUwpawosnLEvEpWeBu0ZksdtE.roa File: yOVUwpawosnLEvEpWeBu0ZksdtE.roa (raw, json) Hash identifier: ecVfRjOLZ9OqmXqMU4m+THLoypH/3fTNLWWn4EOFi9Y= Subject key identifier: C8:E5:54:C2:96:B0:A2:C9:CB:12:F1:29:59:E0:6E:D1:99:2C:76:D1 Certificate issuer: /CN=57b6c9ef13d4acd12abe6d9bb5b3592edf820f29 Certificate serial: 019B7910920C73E11F3FC1A848276B2DA6F5 Authority key identifier: 57:B6:C9:EF:13:D4:AC:D1:2A:BE:6D:9B:B5:B3:59:2E:DF:82:0F:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7bJ7xPUrNEqvm2btbNZLt-CDyk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/yOVUwpawosnLEvEpWeBu0ZksdtE.roa Signing time: Thu 01 Jan 2026 10:18:07 +0000 ROA not before: Thu 01 Jan 2026 10:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31463 IP address blocks: 91.220.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/V7bJ7xPUrNEqvm2btbNZLt-CDyk.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/V7bJ7xPUrNEqvm2btbNZLt-CDyk.mft rsync://rpki.ripe.net/repository/DEFAULT/V7bJ7xPUrNEqvm2btbNZLt-CDyk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:92:0c:73:e1:1f:3f:c1:a8:48:27:6b:2d:a6:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57b6c9ef13d4acd12abe6d9bb5b3592edf820f29 Validity Not Before: Jan 1 10:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8e554c296b0a2c9cb12f12959e06ed1992c76d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9d:47:dd:50:7d:91:52:83:c9:e2:c4:81:1c: 6a:82:ca:33:89:70:46:34:a1:e1:cd:12:f3:56:71: be:e8:44:a9:32:24:f9:d5:7c:53:74:8f:d4:ff:70: 47:29:36:a7:28:56:4b:d0:23:50:38:d5:7c:0b:7d: ca:00:0b:c9:dd:b5:6e:21:ef:01:8a:fe:37:95:18: d4:9f:6c:35:13:88:7d:ae:57:4c:84:ca:ab:c3:25: 25:c7:13:51:4d:cc:53:c8:b4:4e:2c:55:ff:8b:ce: 4a:d4:ba:cf:07:cc:d5:64:9f:a1:78:27:66:13:4f: c8:46:89:2e:4e:3b:f3:9a:40:30:64:54:71:9e:2f: 3a:8c:18:ab:aa:be:4d:25:cb:df:2c:a5:36:7c:bd: 8e:4d:0f:0a:23:28:9a:98:ef:c0:8e:cd:5c:56:be: 35:22:41:70:52:98:dd:74:ed:3c:1b:a2:aa:b1:a3: 7c:01:44:ff:9e:be:82:73:26:c9:ed:c0:08:f8:0a: 01:0b:fe:68:3d:7d:01:16:91:e2:1c:b9:1c:97:16: f0:aa:54:f0:83:b6:9f:1f:65:7f:7a:34:ed:bd:00: 4b:e2:aa:84:18:c3:22:ed:d1:32:f2:ec:94:af:4a: 34:e0:b2:a2:c8:cc:ae:87:1a:be:b7:fa:f2:4e:2f: 0d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:E5:54:C2:96:B0:A2:C9:CB:12:F1:29:59:E0:6E:D1:99:2C:76:D1 X509v3 Authority Key Identifier: keyid:57:B6:C9:EF:13:D4:AC:D1:2A:BE:6D:9B:B5:B3:59:2E:DF:82:0F:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7bJ7xPUrNEqvm2btbNZLt-CDyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/yOVUwpawosnLEvEpWeBu0ZksdtE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/V7bJ7xPUrNEqvm2btbNZLt-CDyk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.220.24.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:3a:34:4b:02:96:ac:4b:ff:28:65:68:09:4c:3b:ec:de:e8: 90:f0:78:27:3a:76:af:07:9e:f5:23:98:51:6a:14:5f:96:cc: da:38:b4:54:c9:a2:69:74:77:c7:d1:f2:43:ee:a3:08:1d:9b: 90:6f:69:d4:11:95:d2:a0:bf:bb:34:5b:be:21:27:85:c5:a4: 25:d0:18:a1:9a:af:28:60:cf:3d:f0:04:35:cf:52:4d:27:75: a3:43:ae:6b:10:80:f1:a1:a2:31:eb:61:50:64:d9:31:c3:1d: 24:40:0a:47:31:0d:fa:21:ea:3d:2f:4d:de:71:6c:05:af:fe: 96:ea:dd:79:08:00:e6:90:ad:5e:e2:e0:b5:f9:ca:34:08:a5: 21:41:6d:f1:3b:7d:b1:0b:4e:e8:d0:5c:83:c5:9a:2f:07:02: 59:1a:a6:f4:66:44:1a:3a:d8:fa:5b:b6:f2:61:69:08:58:f6: a9:68:66:28:d7:15:5e:ab:1c:ef:e9:44:7e:e2:eb:eb:3a:12: 98:9d:f7:e6:b8:37:cf:73:70:29:4a:6f:9c:58:34:ca:46:95: aa:f9:15:3a:25:68:81:8d:68:40:01:59:06:b3:01:0b:28:aa: 63:eb:17:0d:d0:80:16:ca:86:35:dd:7a:ad:2d:84:9f:d2:71: 75:db:84:a8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EJIMc+EfP8GoSCdrLab1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3YjZjOWVmMTNkNGFjZDEyYWJlNmQ5YmI1YjM1OTJlZGY4 MjBmMjkwHhcNMjYwMTAxMTAxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOGU1NTRjMjk2YjBhMmM5Y2IxMmYxMjk1OWUwNmVkMTk5MmM3NmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn51H3VB9kVKDyeLEgRxqgsoziXBG NKHhzRLzVnG+6ESpMiT51XxTdI/U/3BHKTanKFZL0CNQONV8C33KAAvJ3bVuIe8B iv43lRjUn2w1E4h9rldMhMqrwyUlxxNRTcxTyLROLFX/i85K1LrPB8zVZJ+heCdm E0/IRokuTjvzmkAwZFRxni86jBirqr5NJcvfLKU2fL2OTQ8KIyiamO/Ajs1cVr41 IkFwUpjddO08G6KqsaN8AUT/nr6CcybJ7cAI+AoBC/5oPX0BFpHiHLkclxbwqlTw g7afH2V/ejTtvQBL4qqEGMMi7dEy8uyUr0o04LKiyMyuhxq+t/ryTi8NqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMjlVMKWsKLJyxLxKVngbtGZLHbRMB8GA1UdIwQY MBaAFFe2ye8T1KzRKr5tm7WzWS7fgg8pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjdiSjd4UFVyTkVxdm0yYnRiTlpMdC1DRHlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8xOTBjYzAtMjYzNy00MDBiLWFjOTMt NDJlN2UxNWM4MmYyLzEveU9WVXdwYXdvc25MRXZFcFdlQnUwWmtzZHRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS8xOTBjYzAtMjYzNy00MDBiLWFjOTMtNDJlN2UxNWM4MmYy LzEvVjdiSjd4UFVyTkVxdm0yYnRiTlpMdC1DRHlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9wYMA0G CSqGSIb3DQEBCwUAA4IBAQB/OjRLApasS/8oZWgJTDvs3uiQ8HgnOnavB571I5hR ahRflszaOLRUyaJpdHfH0fJD7qMIHZuQb2nUEZXSoL+7NFu+ISeFxaQl0Bihmq8o YM898AQ1z1JNJ3WjQ65rEIDxoaIx62FQZNkxwx0kQApHMQ36Ieo9L03ecWwFr/6W 6t15CADmkK1e4uC1+co0CKUhQW3xO32xC07o0FyDxZovBwJZGqb0ZkQaOtj6W7by YWkIWPapaGYo1xVeqxzv6UR+4uvrOhKYnffmuDfPc3ApSm+cWDTKRpWq+RU6JWiB jWhAAVkGswELKKpj6xcN0IAWyoY13XqtLYSf0nF124So -----END CERTIFICATE-----Generated at Mon Jan 26 07:51:31 2026 by rpki-client