This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/sG7Jxd3j5bPpODxju8fXU3EM93w.roa File: sG7Jxd3j5bPpODxju8fXU3EM93w.roa (raw, json) Hash identifier: bMzMmqgYSEERUbsFyNXWG2WNFtoS/kvz11SCChzG8x8= Subject key identifier: B0:6E:C9:C5:DD:E3:E5:B3:E9:38:3C:63:BB:C7:D7:53:71:0C:F7:7C Certificate issuer: /CN=e8ecf8e4ec9b442a95374c2a3c7e784b076187cc Certificate serial: 019B7BA39CD13E027F8D69A6E913F3A7891D Authority key identifier: E8:EC:F8:E4:EC:9B:44:2A:95:37:4C:2A:3C:7E:78:4B:07:61:87:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Oz45OybRCqVN0wqPH54Swdhh8w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/sG7Jxd3j5bPpODxju8fXU3EM93w.roa Signing time: Thu 01 Jan 2026 22:17:58 +0000 ROA not before: Thu 01 Jan 2026 22:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5610 IP address blocks: 91.232.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft rsync://rpki.ripe.net/repository/DEFAULT/6Oz45OybRCqVN0wqPH54Swdhh8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:9c:d1:3e:02:7f:8d:69:a6:e9:13:f3:a7:89:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8ecf8e4ec9b442a95374c2a3c7e784b076187cc Validity Not Before: Jan 1 22:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b06ec9c5dde3e5b3e9383c63bbc7d753710cf77c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:dc:27:b0:dd:23:71:00:ca:fa:71:1e:e6:9a: 9c:a9:5a:fb:2e:39:ff:f1:1d:66:fe:d3:6c:77:cb: 05:58:dc:77:10:cb:64:69:61:27:4b:d4:e2:fb:20: 60:a5:e0:e7:ef:a2:6c:b5:7c:44:a7:75:01:e9:1d: 9e:04:ac:4c:98:8e:d7:22:d8:e7:ba:5d:37:95:b0: b0:9a:42:83:34:27:b6:a3:59:12:cc:ca:83:c0:a8: 06:24:bc:f7:04:64:05:41:27:42:f8:9b:b8:31:45: fd:52:6b:d5:1b:22:fa:b0:17:92:e1:5c:1c:07:87: d7:b2:1e:d9:a4:29:a4:38:bd:b1:28:80:44:0f:c0: c4:c0:63:5c:f1:7a:22:61:69:94:16:ea:13:9f:9e: e4:9c:29:82:6c:23:fd:5b:d1:55:c1:db:fc:3f:48: cd:7c:ce:8d:a9:43:ee:b9:b3:9d:b4:96:f4:52:a5: da:30:fe:77:5e:7c:e2:83:eb:56:d8:05:fe:7f:b4: c1:ee:51:48:95:9b:40:8c:3f:71:6d:f1:4e:a2:d1: 4a:d6:1f:df:6b:44:6f:b6:05:b3:99:e7:21:80:b2: cc:c2:cc:d5:0e:5c:9f:b4:ff:87:74:0d:7b:ca:2b: cc:69:59:bd:13:ad:2c:b6:62:05:ec:95:88:3f:6e: 18:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:6E:C9:C5:DD:E3:E5:B3:E9:38:3C:63:BB:C7:D7:53:71:0C:F7:7C X509v3 Authority Key Identifier: keyid:E8:EC:F8:E4:EC:9B:44:2A:95:37:4C:2A:3C:7E:78:4B:07:61:87:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Oz45OybRCqVN0wqPH54Swdhh8w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/sG7Jxd3j5bPpODxju8fXU3EM93w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.232.82.0/24 Signature Algorithm: sha256WithRSAEncryption 55:16:f2:f7:40:78:18:6d:ca:de:16:17:f7:de:4e:28:86:df: 26:31:d6:96:c5:e7:72:00:a5:9a:a3:f2:81:ed:81:63:2c:87: 07:9a:09:2a:ba:45:3c:e5:aa:17:e0:9e:85:84:ed:76:b7:61: 5c:8d:5d:fd:b4:05:43:79:94:c8:dc:ca:fa:37:26:71:8e:aa: c5:19:de:54:76:34:81:90:73:b7:e1:ca:1e:3d:0f:3b:f7:84: 8d:92:99:bf:f7:9b:ae:11:1f:f0:f7:ab:37:a9:c3:7e:e2:07: b6:39:2a:7b:7f:f2:d9:39:83:2b:d4:b9:8a:52:b7:ea:31:3a: 50:19:6c:61:4f:d1:4f:77:53:c1:c2:b2:56:34:4a:e9:33:d5: 28:7e:4c:58:c8:d7:9a:0b:22:55:c6:c8:c3:0e:a5:75:83:4f: 92:de:b6:22:3f:99:fe:a4:52:c0:ef:69:6d:d5:e1:02:26:8d: df:95:a5:58:39:70:e4:85:1d:8e:86:80:82:cd:79:ac:5c:76: ae:fb:1c:1d:58:f3:de:34:c2:86:0f:ed:f4:4f:dd:eb:e7:37: 4e:e3:2c:7a:7e:43:de:78:94:c8:8d:1a:d2:52:58:fe:6c:b8: b2:4f:64:75:a3:bf:9b:97:1f:32:05:fb:08:bf:7e:8c:45:45: a1:9b:72:64 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o5zRPgJ/jWmm6RPzp4kdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4ZWNmOGU0ZWM5YjQ0MmE5NTM3NGMyYTNjN2U3ODRiMDc2 MTg3Y2MwHhcNMjYwMTAxMjIxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDZlYzljNWRkZTNlNWIzZTkzODNjNjNiYmM3ZDc1MzcxMGNmNzdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9wnsN0jcQDK+nEe5pqcqVr7Ljn/ 8R1m/tNsd8sFWNx3EMtkaWEnS9Ti+yBgpeDn76JstXxEp3UB6R2eBKxMmI7XItjn ul03lbCwmkKDNCe2o1kSzMqDwKgGJLz3BGQFQSdC+Ju4MUX9UmvVGyL6sBeS4Vwc B4fXsh7ZpCmkOL2xKIBED8DEwGNc8XoiYWmUFuoTn57knCmCbCP9W9FVwdv8P0jN fM6NqUPuubOdtJb0UqXaMP53Xnzig+tW2AX+f7TB7lFIlZtAjD9xbfFOotFK1h/f a0RvtgWzmechgLLMwszVDlyftP+HdA17yivMaVm9E60stmIF7JWIP24Y+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLBuycXd4+Wz6Tg8Y7vH11NxDPd8MB8GA1UdIwQY MBaAFOjs+OTsm0QqlTdMKjx+eEsHYYfMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNk96NDVPeWJSQ3FWTjB3cVBINTRTd2RoaDh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS81ZTgwYjQtY2IxNi00YTM1LWI0Mjkt MjI5YWU5ZjcyOGQ2LzEvc0c3SnhkM2o1YlBwT0R4anU4ZlhVM0VNOTN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS81ZTgwYjQtY2IxNi00YTM1LWI0MjktMjI5YWU5ZjcyOGQ2 LzEvNk96NDVPeWJSQ3FWTjB3cVBINTRTd2RoaDh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+hSMA0G CSqGSIb3DQEBCwUAA4IBAQBVFvL3QHgYbcreFhf33k4oht8mMdaWxedyAKWao/KB 7YFjLIcHmgkqukU85aoX4J6FhO12t2FcjV39tAVDeZTI3Mr6NyZxjqrFGd5UdjSB kHO34coePQ8794SNkpm/95uuER/w96s3qcN+4ge2OSp7f/LZOYMr1LmKUrfqMTpQ GWxhT9FPd1PBwrJWNErpM9UofkxYyNeaCyJVxsjDDqV1g0+S3rYiP5n+pFLA72lt 1eECJo3flaVYOXDkhR2OhoCCzXmsXHau+xwdWPPeNMKGD+30T93r5zdO4yx6fkPe eJTIjRrSUlj+bLiyT2R1o7+blx8yBfsIv36MRUWhm3Jk -----END CERTIFICATE-----Generated at Sun Jan 25 22:15:17 2026 by rpki-client