This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/E2vGMfTh0_d3hFyTF_vwxF5KrPA.roa File: E2vGMfTh0_d3hFyTF_vwxF5KrPA.roa (raw, json) Hash identifier: DBcvB5VPooiTXjGKSVqOi+hUE2hv4iu9s06iz8E2+EI= Subject key identifier: 13:6B:C6:31:F4:E1:D3:F7:77:84:5C:93:17:FB:F0:C4:5E:4A:AC:F0 Certificate issuer: /CN=1a7cafde3135a26bdd4179029eebf7414e9643af Certificate serial: 019B7AC8855D462FAADDFBE51381FB5637BA Authority key identifier: 1A:7C:AF:DE:31:35:A2:6B:DD:41:79:02:9E:EB:F7:41:4E:96:43:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gnyv3jE1omvdQXkCnuv3QU6WQ68.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/E2vGMfTh0_d3hFyTF_vwxF5KrPA.roa Signing time: Thu 01 Jan 2026 18:18:40 +0000 ROA not before: Thu 01 Jan 2026 18:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50864 IP address blocks: 91.220.235.0/24 maxlen: 24 195.162.88.0/22 maxlen: 22 195.162.88.0/24 maxlen: 24 195.162.89.0/24 maxlen: 24 195.162.90.0/24 maxlen: 24 195.162.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.crl rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft rsync://rpki.ripe.net/repository/DEFAULT/Gnyv3jE1omvdQXkCnuv3QU6WQ68.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:85:5d:46:2f:aa:dd:fb:e5:13:81:fb:56:37:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a7cafde3135a26bdd4179029eebf7414e9643af Validity Not Before: Jan 1 18:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=136bc631f4e1d3f777845c9317fbf0c45e4aacf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:40:96:26:38:3f:f4:27:e3:b9:e2:f4:7c:11: 13:50:4d:30:7c:17:2a:70:d7:5f:5d:2c:ed:6b:c7: 04:14:b8:40:e6:49:51:f7:ac:af:57:ae:78:ec:3a: db:e0:17:c0:eb:28:9b:08:62:3e:0d:6d:15:e5:d3: 51:5d:27:7f:c0:9e:bc:50:1f:07:bf:ef:d7:b0:0b: ff:5a:4d:2a:fa:ff:11:4a:16:48:4f:7e:da:fb:ac: 7f:7f:27:06:e0:d0:21:b3:5b:b0:76:d0:59:4e:70: 07:e2:09:ce:30:81:8b:7b:19:ab:3e:f3:52:be:b7: c4:49:cd:8f:6f:1e:41:af:fc:c4:a8:a0:c9:e6:10: 39:8a:e0:42:f0:fb:3e:7a:73:4a:af:93:1b:13:21: da:7d:8f:81:15:4d:28:03:e0:40:6b:91:b2:f6:4e: 45:85:42:9b:56:83:51:3f:4b:63:46:ba:58:e6:3b: 64:bc:78:3e:1f:c7:53:cc:9b:97:52:6c:68:52:48: 35:c0:e6:93:77:f3:77:0b:5b:2c:78:7b:21:81:cb: 05:c9:72:de:8f:c9:d5:8e:6d:04:cc:ef:86:83:49: 4a:c7:21:6d:e4:e8:9a:c3:df:37:14:9c:4c:e1:83: c5:95:f6:de:8b:a5:93:a5:46:a1:46:d6:59:79:dc: b9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:6B:C6:31:F4:E1:D3:F7:77:84:5C:93:17:FB:F0:C4:5E:4A:AC:F0 X509v3 Authority Key Identifier: keyid:1A:7C:AF:DE:31:35:A2:6B:DD:41:79:02:9E:EB:F7:41:4E:96:43:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gnyv3jE1omvdQXkCnuv3QU6WQ68.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/E2vGMfTh0_d3hFyTF_vwxF5KrPA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.220.235.0/24 195.162.88.0/22 Signature Algorithm: sha256WithRSAEncryption 59:46:3d:cd:b9:f8:33:cf:76:0d:c4:dc:3d:3c:3c:ea:06:64: 53:e9:db:b2:41:97:6b:52:1c:69:8d:15:3f:aa:f1:ab:78:c1: 28:b9:f2:72:1c:92:5b:b9:f2:2f:54:10:d1:67:fa:4b:1c:e2: c5:a6:2e:50:6c:e3:c6:9d:1f:01:d5:89:cd:2d:1d:59:57:9c: 34:6a:d6:ad:92:14:11:8e:5b:a1:8a:d0:c9:9d:15:b2:7f:16: a5:36:63:9f:e8:6b:55:fa:80:b2:cc:1c:f5:9c:25:ad:d1:26: 7e:8e:37:7c:ea:d9:6f:b1:f3:63:26:4b:be:4d:d7:82:52:37: 3b:09:55:b0:f4:cb:b1:7a:03:ea:6e:1b:b2:07:26:b9:fd:57: a8:90:9d:5e:7a:3f:05:a5:b7:bd:60:56:30:3a:28:50:95:f5: e6:62:96:1c:a7:59:5c:4b:27:02:ca:68:24:d8:7d:89:c0:4d: 11:e8:f9:ed:fc:9e:d3:93:96:99:da:28:ea:2c:b7:10:0a:8a: a1:a6:0e:a7:03:4c:cb:a6:ba:d0:ec:5f:8f:e1:9d:93:cd:da: e9:26:34:ce:ba:7f:4f:6f:a8:33:32:28:7f:24:f2:ee:d7:e6: df:74:81:be:22:d1:2b:c1:8f:00:40:c6:6e:e5:2d:af:09:df: 14:e8:7e:05 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6yIVdRi+q3fvlE4H7Vje6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhN2NhZmRlMzEzNWEyNmJkZDQxNzkwMjllZWJmNzQxNGU5 NjQzYWYwHhcNMjYwMTAxMTgxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzZiYzYzMWY0ZTFkM2Y3Nzc4NDVjOTMxN2ZiZjBjNDVlNGFhY2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0CWJjg/9CfjueL0fBETUE0wfBcq cNdfXSzta8cEFLhA5klR96yvV6547Drb4BfA6yibCGI+DW0V5dNRXSd/wJ68UB8H v+/XsAv/Wk0q+v8RShZIT37a+6x/fycG4NAhs1uwdtBZTnAH4gnOMIGLexmrPvNS vrfESc2Pbx5Br/zEqKDJ5hA5iuBC8Ps+enNKr5MbEyHafY+BFU0oA+BAa5Gy9k5F hUKbVoNRP0tjRrpY5jtkvHg+H8dTzJuXUmxoUkg1wOaTd/N3C1sseHshgcsFyXLe j8nVjm0EzO+Gg0lKxyFt5Oiaw983FJxM4YPFlfbei6WTpUahRtZZedy5fQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBNrxjH04dP3d4Rckxf78MReSqzwMB8GA1UdIwQY MBaAFBp8r94xNaJr3UF5Ap7r90FOlkOvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR255djNqRTFvbXZkUVhrQ251djNRVTZXUTY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My82MmFmYmItYjhmOC00YjEyLTkxOTMt MWM1MTA3Y2FiMzUzLzEvRTJ2R01mVGgwX2QzaEZ5VEZfdnd4RjVLclBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My82MmFmYmItYjhmOC00YjEyLTkxOTMtMWM1MTA3Y2FiMzUz LzEvR255djNqRTFvbXZkUVhrQ251djNRVTZXUTY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9zrAwQC w6JYMA0GCSqGSIb3DQEBCwUAA4IBAQBZRj3Nufgzz3YNxNw9PDzqBmRT6duyQZdr UhxpjRU/qvGreMEoufJyHJJbufIvVBDRZ/pLHOLFpi5QbOPGnR8B1YnNLR1ZV5w0 atatkhQRjluhitDJnRWyfxalNmOf6GtV+oCyzBz1nCWt0SZ+jjd86tlvsfNjJku+ TdeCUjc7CVWw9MuxegPqbhuyBya5/VeokJ1eej8Fpbe9YFYwOihQlfXmYpYcp1lc SycCymgk2H2JwE0R6Pnt/J7Tk5aZ2ijqLLcQCoqhpg6nA0zLprrQ7F+P4Z2Tzdrp JjTOun9Pb6gzMih/JPLu1+bfdIG+ItErwY8AQMZu5S2vCd8U6H4F -----END CERTIFICATE-----Generated at Tue Jan 27 02:33:07 2026 by rpki-client