This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/SEsp20Y0XXvSsNuzjgdPL2liaKA.roa File: SEsp20Y0XXvSsNuzjgdPL2liaKA.roa (raw, json) Hash identifier: 9EBYTUo7KyjxRP8OrlDLn9ulnQLVPYnZMVUIu94H7LM= Subject key identifier: 48:4B:29:DB:46:34:5D:7B:D2:B0:DB:B3:8E:07:4F:2F:69:62:68:A0 Certificate issuer: /CN=9a7edeac0c6c20ea49d492990e4858541d190ff1 Certificate serial: 019B7D5C76D8D38299834EE7B7AA35CE6D05 Authority key identifier: 9A:7E:DE:AC:0C:6C:20:EA:49:D4:92:99:0E:48:58:54:1D:19:0F:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/SEsp20Y0XXvSsNuzjgdPL2liaKA.roa Signing time: Fri 02 Jan 2026 06:19:30 +0000 ROA not before: Fri 02 Jan 2026 06:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56623 IP address blocks: 91.231.54.0/23 maxlen: 23 91.231.54.0/24 maxlen: 24 91.231.55.0/24 maxlen: 24 193.111.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.crl rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:76:d8:d3:82:99:83:4e:e7:b7:aa:35:ce:6d:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a7edeac0c6c20ea49d492990e4858541d190ff1 Validity Not Before: Jan 2 06:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=484b29db46345d7bd2b0dbb38e074f2f696268a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:02:26:d6:27:2f:8c:76:b9:e5:cf:b9:3b:10: 38:96:50:63:c2:9d:37:15:6c:8d:e5:ef:b6:e6:08: 89:43:9f:aa:6f:f2:ef:5a:7f:8b:8b:76:e5:2c:eb: bb:b0:d0:8c:7b:5c:44:9c:5b:eb:22:55:55:a5:68: 6f:73:e6:4b:fd:07:6e:2d:29:e2:85:01:81:2c:93: 77:e0:80:69:94:7c:8f:10:ae:d3:40:65:8f:08:53: 64:8d:1e:ad:66:49:eb:fb:93:54:be:2e:b9:eb:eb: cc:35:9c:91:ca:c8:8a:43:e2:5e:79:90:22:23:86: 2a:ee:47:34:03:fc:da:11:97:cb:09:e0:73:c2:a4: 6b:82:92:fd:ec:f1:fb:e6:88:e7:64:8e:08:30:67: 9a:b9:05:7b:e1:e5:68:46:62:7b:30:94:53:ba:0c: 8f:73:cc:9e:88:da:6a:44:b9:88:9d:04:25:94:53: e6:5d:67:24:e4:29:50:48:cc:e9:b6:10:57:f3:5e: 0d:0d:d5:c6:82:0a:48:41:bd:dc:9c:ac:02:ab:d6: 49:d7:8c:19:93:ef:03:b0:21:1f:33:9a:45:b7:56: d9:1a:47:8e:5b:30:30:54:91:fc:35:7b:ae:7a:8a: 0c:6f:37:bf:63:45:48:b9:b6:4c:4d:ce:f3:4e:a5: 15:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:4B:29:DB:46:34:5D:7B:D2:B0:DB:B3:8E:07:4F:2F:69:62:68:A0 X509v3 Authority Key Identifier: keyid:9A:7E:DE:AC:0C:6C:20:EA:49:D4:92:99:0E:48:58:54:1D:19:0F:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/SEsp20Y0XXvSsNuzjgdPL2liaKA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.231.54.0/23 193.111.83.0/24 Signature Algorithm: sha256WithRSAEncryption 07:c7:9d:55:31:2a:f8:32:ed:3a:cd:53:d7:b0:b8:76:be:24: 48:20:2e:84:be:ed:3d:10:48:6b:c7:be:ee:e8:0d:65:3f:aa: 03:df:36:26:c7:c1:85:8c:29:6e:fc:8e:18:26:76:c2:b7:ad: 4a:6f:00:6b:ba:b7:0c:bf:57:d2:49:91:dc:99:08:cf:cd:b2: dd:ab:09:81:8e:16:ee:c9:91:fc:a5:9c:bd:b8:d8:9a:1f:59: b7:9c:97:36:a4:5f:d4:46:0d:bd:78:58:7e:44:47:3f:3a:7a: 06:f3:e7:38:60:8c:c4:5f:84:9f:a1:97:ba:55:5d:7b:36:28: 05:9b:62:26:96:7b:1b:bd:88:8e:d1:85:af:c8:94:a5:06:20: a4:53:11:56:3c:5e:b9:f3:be:f8:55:69:aa:9f:dd:55:19:e4: 74:12:ba:4c:69:98:15:51:2a:a1:ba:1a:f4:bd:37:1a:98:b2: cd:a0:bd:a2:46:6c:81:47:37:51:eb:97:4b:25:32:c0:84:b4: e9:ef:28:fd:e0:a0:75:71:be:31:e3:f4:12:98:ff:47:0a:92: e1:90:79:64:3a:3a:d8:df:07:1a:ec:a6:e2:3c:97:c9:40:8e: 7f:35:4b:54:73:fe:3a:46:0e:96:f7:dc:c4:55:fb:76:c9:90: 68:8f:ab:45 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XHbY04KZg07nt6o1zm0FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhN2VkZWFjMGM2YzIwZWE0OWQ0OTI5OTBlNDg1ODU0MWQx OTBmZjEwHhcNMjYwMTAyMDYxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ODRiMjlkYjQ2MzQ1ZDdiZDJiMGRiYjM4ZTA3NGYyZjY5NjI2OGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwIm1icvjHa55c+5OxA4llBjwp03 FWyN5e+25giJQ5+qb/LvWn+Li3blLOu7sNCMe1xEnFvrIlVVpWhvc+ZL/QduLSni hQGBLJN34IBplHyPEK7TQGWPCFNkjR6tZknr+5NUvi656+vMNZyRysiKQ+JeeZAi I4Yq7kc0A/zaEZfLCeBzwqRrgpL97PH75ojnZI4IMGeauQV74eVoRmJ7MJRTugyP c8yeiNpqRLmInQQllFPmXWck5ClQSMzpthBX814NDdXGggpIQb3cnKwCq9ZJ14wZ k+8DsCEfM5pFt1bZGkeOWzAwVJH8NXuueooMbze/Y0VIubZMTc7zTqUV2QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEhLKdtGNF170rDbs44HTy9pYmigMB8GA1UdIwQY MBaAFJp+3qwMbCDqSdSSmQ5IWFQdGQ/xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbW43ZXJBeHNJT3BKMUpLWkRraFlWQjBaRF9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My81YThlMDQtZGQwNy00MzVhLWIxYmYt YWRlZGNhYTNkMjZlLzEvU0VzcDIwWTBYWHZTc051empnZFBMMmxpYUtBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My81YThlMDQtZGQwNy00MzVhLWIxYmYtYWRlZGNhYTNkMjZl LzEvbW43ZXJBeHNJT3BKMUpLWkRraFlWQjBaRF9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW+c2AwQA wW9TMA0GCSqGSIb3DQEBCwUAA4IBAQAHx51VMSr4Mu06zVPXsLh2viRIIC6Evu09 EEhrx77u6A1lP6oD3zYmx8GFjClu/I4YJnbCt61KbwBrurcMv1fSSZHcmQjPzbLd qwmBjhbuyZH8pZy9uNiaH1m3nJc2pF/URg29eFh+REc/OnoG8+c4YIzEX4SfoZe6 VV17NigFm2ImlnsbvYiO0YWvyJSlBiCkUxFWPF658774VWmqn91VGeR0ErpMaZgV USqhuhr0vTcamLLNoL2iRmyBRzdR65dLJTLAhLTp7yj94KB1cb4x4/QSmP9HCpLh kHlkOjrY3wca7KbiPJfJQI5/NUtUc/46Rg6W99zEVft2yZBoj6tF -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:56 2026 by rpki-client