This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/U6fyPIg5ovdf3i2qfPC2WuuXRmU.roa File: U6fyPIg5ovdf3i2qfPC2WuuXRmU.roa (raw, json) Hash identifier: 51JfirD5ph0Mlaqz0ZFat9LDvr0NCB5fGDpKtCYppz0= Subject key identifier: 53:A7:F2:3C:88:39:A2:F7:5F:DE:2D:AA:7C:F0:B6:5A:EB:97:46:65 Certificate issuer: /CN=8e638432586ae602ff0dab67d09b1951524e8205 Certificate serial: 019B7BA431CC96D895392A52C3673FA13083 Authority key identifier: 8E:63:84:32:58:6A:E6:02:FF:0D:AB:67:D0:9B:19:51:52:4E:82:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmOEMlhq5gL_Datn0JsZUVJOggU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/U6fyPIg5ovdf3i2qfPC2WuuXRmU.roa Signing time: Thu 01 Jan 2026 22:18:36 +0000 ROA not before: Thu 01 Jan 2026 22:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39686 IP address blocks: 91.234.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.crl rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.mft rsync://rpki.ripe.net/repository/DEFAULT/jmOEMlhq5gL_Datn0JsZUVJOggU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:31:cc:96:d8:95:39:2a:52:c3:67:3f:a1:30:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e638432586ae602ff0dab67d09b1951524e8205 Validity Not Before: Jan 1 22:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=53a7f23c8839a2f75fde2daa7cf0b65aeb974665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fa:62:41:bb:a7:f9:d7:92:9b:8f:40:4f:ef: d3:75:46:c9:f8:85:5e:ea:13:f0:b1:33:65:e9:25: 3c:2e:9f:ce:08:5b:b4:4e:0c:7e:0e:0f:26:56:31: 52:b8:d8:92:78:2e:7e:f5:fc:78:aa:67:b4:23:8b: e5:1b:63:c6:4c:29:5d:2f:bf:6e:22:66:cd:5e:40: 97:5d:3a:2a:b4:c1:bc:c2:06:a3:b9:87:86:b5:e0: a1:74:fb:92:6b:e5:5b:5b:84:b3:6b:72:d4:a4:99: 80:05:0d:63:6a:a0:5d:31:15:76:8b:2e:71:9f:11: d6:7c:c5:fd:b3:cd:89:0b:f3:ee:ff:b7:06:a2:4f: 71:c1:0a:41:d4:94:4b:73:0c:d2:cb:37:4e:ba:01: ba:8d:27:4d:d0:4a:61:7d:e8:7c:4f:0d:ed:eb:15: 19:1e:e8:d1:58:f7:69:0f:cd:73:c4:31:9e:55:56: 79:ba:ca:eb:88:b7:15:d7:36:4b:f3:f6:f4:e7:c3: b3:e2:44:cd:04:f1:f5:d9:e7:43:f0:b8:03:d3:75: 84:15:9d:8d:2b:0d:3c:f7:54:3c:66:f1:44:21:db: ba:18:59:d5:c7:50:3f:06:b0:b8:41:65:31:d7:43: 72:5d:8b:1f:79:c4:ab:20:ac:56:ab:f6:2e:7b:f5: 8f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:A7:F2:3C:88:39:A2:F7:5F:DE:2D:AA:7C:F0:B6:5A:EB:97:46:65 X509v3 Authority Key Identifier: keyid:8E:63:84:32:58:6A:E6:02:FF:0D:AB:67:D0:9B:19:51:52:4E:82:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmOEMlhq5gL_Datn0JsZUVJOggU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/U6fyPIg5ovdf3i2qfPC2WuuXRmU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.234.145.0/24 Signature Algorithm: sha256WithRSAEncryption 03:71:bb:28:f1:57:ae:a1:1c:18:e4:fc:2e:66:8c:a5:7a:b0: 7b:d3:81:0c:66:71:2e:8a:f2:cf:bd:5b:8b:99:fa:9d:cf:1b: 11:6b:49:be:67:f2:4c:cd:15:ea:b0:77:c7:84:4f:a0:f5:fa: 93:2d:5a:e0:e9:99:c7:f5:b3:b7:8e:5d:c7:28:0d:64:f7:e7: 68:86:b0:e8:eb:90:cb:31:43:2c:2e:2e:58:13:54:7e:66:6b: de:29:6a:cc:94:33:0b:2c:22:79:c8:58:0a:fe:5c:0b:f6:7c: 03:a0:d0:24:45:c5:10:59:88:a7:35:07:d9:b6:1b:c3:85:d3: 36:d2:08:ee:af:1c:9e:79:00:a0:79:94:4e:fe:b0:31:8f:bf: 72:91:c2:5b:8e:aa:68:9a:ee:7f:4a:3a:7c:86:58:46:6a:54: 28:a3:a8:4b:e3:53:ec:c8:f9:8c:54:d5:dc:25:40:63:63:3e: 98:f1:8d:81:9e:a0:33:28:f4:80:5f:ba:38:26:8a:07:87:3b: 07:68:21:74:4c:63:4d:0a:a0:a8:38:7d:0f:82:73:03:3c:5c: 2d:35:52:46:fc:cf:c9:5b:ed:cf:db:b1:03:db:4b:2d:89:c4: 55:b4:06:4b:e3:a8:56:93:42:b8:10:ef:15:a3:22:68:69:27: 08:54:79:4e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pDHMltiVOSpSw2c/oTCDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNjM4NDMyNTg2YWU2MDJmZjBkYWI2N2QwOWIxOTUxNTI0 ZTgyMDUwHhcNMjYwMTAxMjIxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1M2E3ZjIzYzg4MzlhMmY3NWZkZTJkYWE3Y2YwYjY1YWViOTc0NjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvpiQbun+deSm49AT+/TdUbJ+IVe 6hPwsTNl6SU8Lp/OCFu0Tgx+Dg8mVjFSuNiSeC5+9fx4qme0I4vlG2PGTCldL79u ImbNXkCXXToqtMG8wgajuYeGteChdPuSa+VbW4Sza3LUpJmABQ1jaqBdMRV2iy5x nxHWfMX9s82JC/Pu/7cGok9xwQpB1JRLcwzSyzdOugG6jSdN0Ephfeh8Tw3t6xUZ HujRWPdpD81zxDGeVVZ5usrriLcV1zZL8/b058Oz4kTNBPH12edD8LgD03WEFZ2N Kw0891Q8ZvFEIdu6GFnVx1A/BrC4QWUx10NyXYsfecSrIKxWq/Yue/WPLwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFOn8jyIOaL3X94tqnzwtlrrl0ZlMB8GA1UdIwQY MBaAFI5jhDJYauYC/w2rZ9CbGVFSToIFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam1PRU1saHE1Z0xfRGF0bjBKc1pVVkpPZ2dVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8wM2M5OWQtOTNjNS00NTA4LWI1NGEt ZWQzOGM0N2ZiYWM2LzEvVTZmeVBJZzVvdmRmM2kycWZQQzJXdXVYUm1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8wM2M5OWQtOTNjNS00NTA4LWI1NGEtZWQzOGM0N2ZiYWM2 LzEvam1PRU1saHE1Z0xfRGF0bjBKc1pVVkpPZ2dVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+qRMA0G CSqGSIb3DQEBCwUAA4IBAQADcbso8VeuoRwY5PwuZoylerB704EMZnEuivLPvVuL mfqdzxsRa0m+Z/JMzRXqsHfHhE+g9fqTLVrg6ZnH9bO3jl3HKA1k9+dohrDo65DL MUMsLi5YE1R+ZmveKWrMlDMLLCJ5yFgK/lwL9nwDoNAkRcUQWYinNQfZthvDhdM2 0gjurxyeeQCgeZRO/rAxj79ykcJbjqpomu5/Sjp8hlhGalQoo6hL41PsyPmMVNXc JUBjYz6Y8Y2BnqAzKPSAX7o4JooHhzsHaCF0TGNNCqCoOH0PgnMDPFwtNVJG/M/J W+3P27ED20sticRVtAZL46hWk0K4EO8VoyJoaScIVHlO -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:33 2026 by rpki-client