This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/jsoEFjjxqQANYzwZkbp4FKNWNvc.roa File: jsoEFjjxqQANYzwZkbp4FKNWNvc.roa (raw, json) Hash identifier: oqsei08QZLwI9OpLYx05MZOPBm5p1aTMIy+k0VyYQTc= Subject key identifier: 8E:CA:04:16:38:F1:A9:00:0D:63:3C:19:91:BA:78:14:A3:56:36:F7 Certificate issuer: /CN=9a7edeac0c6c20ea49d492990e4858541d190ff1 Certificate serial: 019B7D5C75F32B9FEC03A9E413B8FBED5333 Authority key identifier: 9A:7E:DE:AC:0C:6C:20:EA:49:D4:92:99:0E:48:58:54:1D:19:0F:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/jsoEFjjxqQANYzwZkbp4FKNWNvc.roa Signing time: Fri 02 Jan 2026 06:19:30 +0000 ROA not before: Fri 02 Jan 2026 06:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6698 IP address blocks: 91.213.175.0/24 maxlen: 24 91.237.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.crl rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:75:f3:2b:9f:ec:03:a9:e4:13:b8:fb:ed:53:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a7edeac0c6c20ea49d492990e4858541d190ff1 Validity Not Before: Jan 2 06:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8eca041638f1a9000d633c1991ba7814a35636f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:7e:96:8c:7e:28:8b:e8:ff:6b:d5:83:54:fe: 49:10:71:92:53:76:6b:42:89:2e:b2:1d:b3:19:dd: 75:c6:09:38:6f:7a:ad:49:84:56:b6:13:a8:7b:52: 2b:34:66:fb:1f:75:d8:c7:28:8b:0a:13:db:8c:57: 0d:9b:b9:88:98:0b:c3:15:51:f1:2d:dc:9e:6a:8c: 3c:48:33:36:f8:ea:6a:03:0c:e7:a8:7b:02:ab:ce: 52:61:c5:67:a5:b8:87:04:38:68:2f:66:4f:11:c0: c3:d3:5f:8b:b8:58:a4:58:90:64:26:5f:8b:d0:bd: d7:1f:3c:b8:cd:8b:dd:bc:f3:85:46:b2:de:af:b5: 20:5f:c7:39:3a:10:06:5f:a5:ed:57:ac:b9:cc:85: 8d:3d:d6:5c:94:22:35:eb:4c:ba:a3:c6:ab:64:15: 37:9f:1a:d1:cd:06:17:d0:b4:b9:1a:3a:8a:bc:03: e7:66:4e:7b:05:a4:22:63:94:1f:1a:c7:a2:c5:7d: 78:a4:07:ff:ab:c0:74:e4:6e:89:95:b9:cc:f9:1c: 08:97:38:5b:0e:56:8c:39:4c:b7:a6:57:a8:ae:61: 6d:11:34:e4:69:48:94:c7:9c:5a:db:6b:74:ec:3b: 2e:6c:cf:77:16:04:a9:40:25:46:47:25:b8:f1:c3: 05:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:CA:04:16:38:F1:A9:00:0D:63:3C:19:91:BA:78:14:A3:56:36:F7 X509v3 Authority Key Identifier: keyid:9A:7E:DE:AC:0C:6C:20:EA:49:D4:92:99:0E:48:58:54:1D:19:0F:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/jsoEFjjxqQANYzwZkbp4FKNWNvc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.213.175.0/24 91.237.250.0/24 Signature Algorithm: sha256WithRSAEncryption 99:c0:ef:f1:22:bc:5f:aa:ac:b0:c4:18:e6:17:2c:bf:f2:f4: 93:f9:5a:5a:07:aa:b1:46:67:ad:80:51:b0:54:95:73:42:9d: e0:12:ab:d0:14:e0:8c:f6:e2:de:b9:d9:3e:8a:0f:ec:47:0f: e2:b6:98:38:fa:0d:13:28:77:a9:79:68:6d:6a:ef:ea:29:44: c6:85:61:9c:47:96:80:3b:9c:d4:c7:01:df:dc:9c:bd:50:83: e9:da:6b:c1:56:52:ff:cd:b6:2b:95:e6:f6:ed:85:da:64:63: 1b:c4:0b:e8:72:47:26:bc:6a:98:9c:93:af:e5:a9:3c:79:ef: 6f:08:1e:fa:81:d7:9a:9b:b8:37:1a:77:19:f5:5f:70:9b:b8: 02:40:37:c4:ab:5f:9f:a0:f4:5e:83:88:39:6d:3c:ad:56:25: b3:e2:43:64:e0:eb:e2:04:cc:7c:8c:ba:7e:fe:6e:36:53:e3: ac:41:8d:7c:a3:be:b9:6d:b8:84:4c:1e:1f:f2:14:77:2c:5d: 1a:aa:af:10:24:f5:50:ea:31:72:1d:27:17:f8:0a:f0:b4:cc: b7:36:8c:20:a0:f0:c3:28:4f:99:11:9c:46:c1:b4:41:35:92: 7a:92:90:5c:f3:65:12:85:c9:32:cc:fb:a2:53:b5:55:13:87: 06:14:5c:5e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XHXzK5/sA6nkE7j77VMzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhN2VkZWFjMGM2YzIwZWE0OWQ0OTI5OTBlNDg1ODU0MWQx OTBmZjEwHhcNMjYwMTAyMDYxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZWNhMDQxNjM4ZjFhOTAwMGQ2MzNjMTk5MWJhNzgxNGEzNTYzNmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5H6WjH4oi+j/a9WDVP5JEHGSU3Zr Qokush2zGd11xgk4b3qtSYRWthOoe1IrNGb7H3XYxyiLChPbjFcNm7mImAvDFVHx Ldyeaow8SDM2+OpqAwznqHsCq85SYcVnpbiHBDhoL2ZPEcDD01+LuFikWJBkJl+L 0L3XHzy4zYvdvPOFRrLer7UgX8c5OhAGX6XtV6y5zIWNPdZclCI160y6o8arZBU3 nxrRzQYX0LS5GjqKvAPnZk57BaQiY5QfGseixX14pAf/q8B05G6JlbnM+RwIlzhb DlaMOUy3pleormFtETTkaUiUx5xa22t07DsubM93FgSpQCVGRyW48cMF1wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFI7KBBY48akADWM8GZG6eBSjVjb3MB8GA1UdIwQY MBaAFJp+3qwMbCDqSdSSmQ5IWFQdGQ/xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbW43ZXJBeHNJT3BKMUpLWkRraFlWQjBaRF9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My81YThlMDQtZGQwNy00MzVhLWIxYmYt YWRlZGNhYTNkMjZlLzEvanNvRUZqanhxUUFOWXp3WmticDRGS05XTnZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My81YThlMDQtZGQwNy00MzVhLWIxYmYtYWRlZGNhYTNkMjZl LzEvbW43ZXJBeHNJT3BKMUpLWkRraFlWQjBaRF9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9WvAwQA W+36MA0GCSqGSIb3DQEBCwUAA4IBAQCZwO/xIrxfqqywxBjmFyy/8vST+VpaB6qx RmetgFGwVJVzQp3gEqvQFOCM9uLeudk+ig/sRw/itpg4+g0TKHepeWhtau/qKUTG hWGcR5aAO5zUxwHf3Jy9UIPp2mvBVlL/zbYrleb27YXaZGMbxAvockcmvGqYnJOv 5ak8ee9vCB76gdeam7g3GncZ9V9wm7gCQDfEq1+foPReg4g5bTytViWz4kNk4Ovi BMx8jLp+/m42U+OsQY18o765bbiETB4f8hR3LF0aqq8QJPVQ6jFyHScX+ArwtMy3 NowgoPDDKE+ZEZxGwbRBNZJ6kpBc82UShckyzPuiU7VVE4cGFFxe -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:38 2026 by rpki-client