This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/rmssw7RMnHd1ZqcXua4Brefm154.roa File: rmssw7RMnHd1ZqcXua4Brefm154.roa (raw, json) Hash identifier: fNpjAb4SqWl1UnQLJ2UF8i8M94XY4XErflTP+LbF0cQ= Subject key identifier: AE:6B:2C:C3:B4:4C:9C:77:75:66:A7:17:B9:AE:01:AD:E7:E6:D7:9E Certificate issuer: /CN=cec3b347a216bc437b0bd4cf0bc8cda65e8c2d3b Certificate serial: 019B7DCA47B12EA48DF6F35A7A9765F3AFC7 Authority key identifier: CE:C3:B3:47:A2:16:BC:43:7B:0B:D4:CF:0B:C8:CD:A6:5E:8C:2D:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsOzR6IWvEN7C9TPC8jNpl6MLTs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/rmssw7RMnHd1ZqcXua4Brefm154.roa Signing time: Fri 02 Jan 2026 08:19:27 +0000 ROA not before: Fri 02 Jan 2026 08:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41963 IP address blocks: 91.102.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.crl rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft rsync://rpki.ripe.net/repository/DEFAULT/zsOzR6IWvEN7C9TPC8jNpl6MLTs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:47:b1:2e:a4:8d:f6:f3:5a:7a:97:65:f3:af:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec3b347a216bc437b0bd4cf0bc8cda65e8c2d3b Validity Not Before: Jan 2 08:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae6b2cc3b44c9c777566a717b9ae01ade7e6d79e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d1:bb:07:61:c7:68:bd:4a:4a:68:6f:0d:54: 0b:8b:60:87:05:b6:6e:ad:98:c7:c8:3d:e6:f7:2e: ff:61:e8:6b:af:07:bd:20:da:03:ea:12:1a:fc:77: 19:73:1b:10:57:ea:a9:8a:cf:4e:db:4e:89:bf:49: 72:71:4e:0b:86:82:35:49:cc:a1:69:8e:9b:3b:9a: af:b0:58:f0:80:da:3d:7d:0c:19:ab:74:3f:30:f3: f8:e2:88:de:60:25:a4:63:2f:d3:b0:ad:38:18:03: 39:51:e2:f2:96:e1:4d:9c:82:58:ae:a7:a8:48:d2: 50:84:85:66:ac:2e:35:72:37:46:66:3d:4c:89:4c: 3c:02:ee:42:f0:70:bc:18:5d:33:f5:74:ce:28:77: 56:a8:6a:aa:dc:59:01:7e:37:d2:eb:86:eb:d2:0c: d8:a9:71:26:9a:f0:d9:e2:94:be:8d:61:f4:e1:af: 55:fb:cd:44:8f:ee:e2:99:f1:37:91:26:49:07:19: 1b:d8:48:14:05:1c:b0:12:d7:aa:27:24:a9:96:c7: 02:cd:7d:03:68:0d:b4:af:8a:27:54:2a:e2:5d:7d: ca:32:78:ae:32:d4:c6:e1:e6:bd:a2:5e:00:b5:b7: 6a:96:c7:a0:7e:44:ec:8b:92:e2:8a:5a:60:ad:9c: 6d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:6B:2C:C3:B4:4C:9C:77:75:66:A7:17:B9:AE:01:AD:E7:E6:D7:9E X509v3 Authority Key Identifier: keyid:CE:C3:B3:47:A2:16:BC:43:7B:0B:D4:CF:0B:C8:CD:A6:5E:8C:2D:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsOzR6IWvEN7C9TPC8jNpl6MLTs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/rmssw7RMnHd1ZqcXua4Brefm154.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.102.184.0/21 Signature Algorithm: sha256WithRSAEncryption 4e:3c:4b:6c:29:32:55:83:ed:b5:b9:83:d0:94:0e:c3:1a:46: 69:da:d0:df:aa:76:6b:b8:f8:fe:d2:63:03:c7:f7:b7:46:7d: 51:80:61:ac:e1:9e:94:1c:50:fc:ad:54:60:b4:d5:4e:b3:4a: f8:c8:1c:ce:3c:8e:2b:9b:ca:4b:fa:c4:42:31:09:d1:34:ec: 1e:c0:1d:3a:ba:27:8a:9c:44:35:32:ab:00:f2:d5:f3:e9:de: eb:91:77:6e:15:f5:1b:cd:72:41:bc:74:1c:33:c1:ec:1e:e3: 96:d6:6d:7b:09:5c:42:ab:5f:60:f1:28:59:2c:a5:bf:d1:e3: 47:19:1e:36:e7:48:38:86:d1:c0:8b:ba:2b:ef:ed:24:7d:f5: 43:c8:f9:d2:db:ee:3a:53:60:56:58:07:0a:ae:0d:35:a9:4c: f2:98:28:0c:01:0b:d1:2c:29:38:fc:5d:07:0f:24:b9:04:6c: df:5f:cb:eb:f1:3b:41:b5:1a:06:4f:97:4f:da:4b:03:67:89: b3:80:07:9d:7f:0f:27:20:3b:88:fe:c7:13:25:be:bc:84:b6: f3:1b:21:a5:31:20:2e:c0:ef:5a:0f:3d:b8:53:70:d1:f5:bf: e2:ef:65:0a:f6:87:87:1c:f6:c6:b8:0b:82:6f:de:23:45:16: 08:56:6a:86 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ykexLqSN9vNaepdl86/HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYzNiMzQ3YTIxNmJjNDM3YjBiZDRjZjBiYzhjZGE2NWU4 YzJkM2IwHhcNMjYwMTAyMDgxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTZiMmNjM2I0NGM5Yzc3NzU2NmE3MTdiOWFlMDFhZGU3ZTZkNzllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NG7B2HHaL1KSmhvDVQLi2CHBbZu rZjHyD3m9y7/Yehrrwe9INoD6hIa/HcZcxsQV+qpis9O206Jv0lycU4LhoI1Scyh aY6bO5qvsFjwgNo9fQwZq3Q/MPP44ojeYCWkYy/TsK04GAM5UeLyluFNnIJYrqeo SNJQhIVmrC41cjdGZj1MiUw8Au5C8HC8GF0z9XTOKHdWqGqq3FkBfjfS64br0gzY qXEmmvDZ4pS+jWH04a9V+81Ej+7imfE3kSZJBxkb2EgUBRywEteqJySplscCzX0D aA20r4onVCriXX3KMniuMtTG4ea9ol4AtbdqlsegfkTsi5LiilpgrZxtXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK5rLMO0TJx3dWanF7muAa3n5teeMB8GA1UdIwQY MBaAFM7Ds0eiFrxDewvUzwvIzaZejC07MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenNPelI2SVd2RU43QzlUUEM4ak5wbDZNTFRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny83YTY4M2ItZmE3OC00MTEyLWI2YjYt MTU1ZmIzZmUyODdlLzEvcm1zc3c3Uk1uSGQxWnFjWHVhNEJyZWZtMTU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny83YTY4M2ItZmE3OC00MTEyLWI2YjYtMTU1ZmIzZmUyODdl LzEvenNPelI2SVd2RU43QzlUUEM4ak5wbDZNTFRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDW2a4MA0G CSqGSIb3DQEBCwUAA4IBAQBOPEtsKTJVg+21uYPQlA7DGkZp2tDfqnZruPj+0mMD x/e3Rn1RgGGs4Z6UHFD8rVRgtNVOs0r4yBzOPI4rm8pL+sRCMQnRNOwewB06uieK nEQ1MqsA8tXz6d7rkXduFfUbzXJBvHQcM8HsHuOW1m17CVxCq19g8ShZLKW/0eNH GR4250g4htHAi7or7+0kffVDyPnS2+46U2BWWAcKrg01qUzymCgMAQvRLCk4/F0H DyS5BGzfX8vr8TtBtRoGT5dP2ksDZ4mzgAedfw8nIDuI/scTJb68hLbzGyGlMSAu wO9aDz24U3DR9b/i72UK9oeHHPbGuAuCb94jRRYIVmqG -----END CERTIFICATE-----Generated at Sun Jan 25 22:49:30 2026 by rpki-client