This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/e4QlHRn4c5ydgsYxtMqMe-cdd4k.roa File: e4QlHRn4c5ydgsYxtMqMe-cdd4k.roa (raw, json) Hash identifier: vt6R5TL9alQtbqgJa/O/JGU+YCZm6nOgD0WFNRyVb9g= Subject key identifier: 7B:84:25:1D:19:F8:73:9C:9D:82:C6:31:B4:CA:8C:7B:E7:1D:77:89 Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d Certificate serial: 019B7A5B1E56ACF5B3C20B583459A4CF3140 Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/e4QlHRn4c5ydgsYxtMqMe-cdd4k.roa Signing time: Thu 01 Jan 2026 16:19:10 +0000 ROA not before: Thu 01 Jan 2026 16:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35631 IP address blocks: 91.215.252.0/23 maxlen: 23 91.215.254.0/24 maxlen: 24 91.215.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:1e:56:ac:f5:b3:c2:0b:58:34:59:a4:cf:31:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d Validity Not Before: Jan 1 16:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7b84251d19f8739c9d82c631b4ca8c7be71d7789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:87:06:ba:f0:8b:0a:a5:61:09:f0:e5:93:98: a1:4d:23:6c:3a:60:5d:ed:3a:08:42:de:9b:56:72: 70:cc:35:c3:17:fa:13:71:fb:89:37:44:f8:bc:4d: ba:bd:2c:62:86:39:1d:42:a3:f6:00:c8:fe:a6:88: d5:9e:eb:58:bf:b4:d3:6b:84:c9:6e:64:8a:77:11: 27:53:c0:43:44:7c:a5:f7:34:b3:49:26:e0:c0:ae: 65:b4:e5:0f:54:a1:14:48:e2:a1:60:71:47:8a:05: 1a:28:1d:5e:b1:66:2f:57:4a:d0:e7:09:10:cd:c5: d9:42:91:06:78:f9:51:a3:45:e6:8b:b3:12:d8:4f: 52:24:34:f0:c2:62:39:d8:db:12:4f:e2:67:20:27: a2:3e:d4:dd:a4:e1:b1:f1:41:c0:3e:0a:c7:9d:d5: 2b:33:81:f4:7d:64:ea:16:b2:c2:72:c2:99:4a:5a: e4:51:4c:29:b1:dc:da:2e:fc:13:d6:05:f8:10:37: 70:dc:40:15:02:60:fe:42:5e:b7:1f:63:56:cc:4b: d3:61:89:94:34:cb:40:43:75:b4:77:82:79:db:74: ca:54:80:da:c3:c7:92:e3:4c:e8:f2:a1:2e:92:e6: a9:e9:b6:bc:5f:77:eb:ea:e2:66:56:f0:ab:7f:3b: 67:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:84:25:1D:19:F8:73:9C:9D:82:C6:31:B4:CA:8C:7B:E7:1D:77:89 X509v3 Authority Key Identifier: keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/e4QlHRn4c5ydgsYxtMqMe-cdd4k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.215.252.0/22 Signature Algorithm: sha256WithRSAEncryption 8b:ea:e7:b3:64:f7:a7:f7:7b:1f:92:d3:1e:d1:0b:a0:b2:c4: f8:1b:bc:70:a0:4c:6d:c0:82:3a:83:e6:3d:4b:c5:0f:5c:fa: eb:e4:a1:bd:47:05:62:36:f2:df:04:96:8d:43:10:3f:f7:c4: 53:37:2f:f2:b6:e6:9f:6f:6b:f0:06:0a:4c:0c:50:9e:3b:57: 7f:27:cf:e3:ef:e5:2b:4c:1e:54:e9:95:60:cb:c9:88:37:58: 94:36:ba:5a:4e:83:a8:7e:d2:8d:d0:ff:ce:a3:c9:f1:79:b5: 1d:96:41:08:48:88:54:0a:de:03:7b:b5:dd:f0:00:3f:75:b8: 4c:15:85:de:31:37:55:40:ee:21:78:10:ce:da:37:e9:ee:8a: d8:c5:da:e1:bc:0e:3c:ac:c0:22:bd:71:5c:47:39:45:23:53: ee:be:72:e0:3f:0e:e1:81:77:82:af:04:d0:96:bc:1d:14:f8: fd:53:40:b3:90:a2:01:11:08:e5:fb:e1:10:2b:a4:39:50:ff: 25:51:d2:43:71:90:f4:51:4c:65:24:9e:ce:a3:95:a1:34:46: d5:94:44:e0:04:90:60:e5:66:d3:5e:40:98:1f:70:ea:7a:9f: 18:cf:f3:71:e1:3b:15:f7:63:a1:6f:7b:6d:89:fa:c3:ab:97: b1:21:72:38 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wx5WrPWzwgtYNFmkzzFAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlYmE0OGM3ZTJjOWUwNWVkYTU0NmQ4OTkxNDZiODlmNzk5 ZGY4NWQwHhcNMjYwMTAxMTYxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Yjg0MjUxZDE5Zjg3MzljOWQ4MmM2MzFiNGNhOGM3YmU3MWQ3Nzg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4cGuvCLCqVhCfDlk5ihTSNsOmBd 7ToIQt6bVnJwzDXDF/oTcfuJN0T4vE26vSxihjkdQqP2AMj+pojVnutYv7TTa4TJ bmSKdxEnU8BDRHyl9zSzSSbgwK5ltOUPVKEUSOKhYHFHigUaKB1esWYvV0rQ5wkQ zcXZQpEGePlRo0Xmi7MS2E9SJDTwwmI52NsST+JnICeiPtTdpOGx8UHAPgrHndUr M4H0fWTqFrLCcsKZSlrkUUwpsdzaLvwT1gX4EDdw3EAVAmD+Ql63H2NWzEvTYYmU NMtAQ3W0d4J523TKVIDaw8eS40zo8qEukuap6ba8X3fr6uJmVvCrfztndQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHuEJR0Z+HOcnYLGMbTKjHvnHXeJMB8GA1UdIwQY MBaAFL66SMfiyeBe2lRtiZFGuJ95nfhdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnJwSXgtTEo0RjdhVkcySmtVYTRuM21kLUYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC83Zjg4MjEtMTU2Ni00M2Y0LWFiMjYt M2Q1MjIxODFhMmM0LzEvZTRRbEhSbjRjNXlkZ3NZeHRNcU1lLWNkZDRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC83Zjg4MjEtMTU2Ni00M2Y0LWFiMjYtM2Q1MjIxODFhMmM0 LzEvdnJwSXgtTEo0RjdhVkcySmtVYTRuM21kLUYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW9f8MA0G CSqGSIb3DQEBCwUAA4IBAQCL6uezZPen93sfktMe0QugssT4G7xwoExtwII6g+Y9 S8UPXPrr5KG9RwViNvLfBJaNQxA/98RTNy/ytuafb2vwBgpMDFCeO1d/J8/j7+Ur TB5U6ZVgy8mIN1iUNrpaToOoftKN0P/Oo8nxebUdlkEISIhUCt4De7Xd8AA/dbhM FYXeMTdVQO4heBDO2jfp7orYxdrhvA48rMAivXFcRzlFI1PuvnLgPw7hgXeCrwTQ lrwdFPj9U0CzkKIBEQjl++EQK6Q5UP8lUdJDcZD0UUxlJJ7Oo5WhNEbVlETgBJBg 5WbTXkCYH3Dqep8Yz/Nx4TsV92Ohb3ttifrDq5exIXI4 -----END CERTIFICATE-----Generated at Mon Jan 26 05:14:48 2026 by rpki-client