This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/VISbwQPxKE4ZMWN4N2M-Ot4MfO4.roa File: VISbwQPxKE4ZMWN4N2M-Ot4MfO4.roa (raw, json) Hash identifier: 31aRf+y4KMCXXKPf61vmEKuD5SrxcJx1XR4Sfcx1mPk= Subject key identifier: 54:84:9B:C1:03:F1:28:4E:19:31:63:78:37:63:3E:3A:DE:0C:7C:EE Certificate issuer: /CN=74b4cd3edf521df8ec0a151111272d3fb91b99c3 Certificate serial: 019B7B35A10C0D339F46710898518CD66BEC Authority key identifier: 74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/VISbwQPxKE4ZMWN4N2M-Ot4MfO4.roa Signing time: Thu 01 Jan 2026 20:17:50 +0000 ROA not before: Thu 01 Jan 2026 20:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41152 IP address blocks: 91.227.246.0/23 maxlen: 23 91.228.22.0/23 maxlen: 23 193.148.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.mft rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:a1:0c:0d:33:9f:46:71:08:98:51:8c:d6:6b:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74b4cd3edf521df8ec0a151111272d3fb91b99c3 Validity Not Before: Jan 1 20:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=54849bc103f1284e1931637837633e3ade0c7cee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:10:f5:c7:d1:ce:65:34:7e:f5:9a:72:0c:99: 6a:32:50:1d:b6:83:97:db:67:de:d1:4d:d0:c9:20: 44:ab:80:ac:ae:7f:ee:e9:42:95:03:d8:af:42:c4: 6d:d4:45:78:bb:9d:51:b3:47:87:f2:21:3e:a9:13: f0:6f:f8:ec:37:6e:f0:4e:e5:1b:f7:b8:47:e9:ce: ef:0d:e1:46:4a:f6:f0:54:18:88:3f:0b:cb:e8:d9: 80:63:f8:42:12:4a:fc:bc:50:3d:e0:03:f4:36:a8: 74:89:9c:ca:97:a4:cf:80:ed:a9:8e:15:28:79:16: b7:23:f9:1d:e3:2d:27:03:54:c0:a4:f7:3a:3a:ef: 6c:e2:19:be:31:bb:fb:57:18:65:eb:7d:1b:db:cc: 21:2e:3f:62:5b:aa:ba:d1:56:c3:7d:4a:75:eb:d9: 60:48:a0:60:f2:24:b4:36:e4:64:b0:aa:03:54:4f: ce:29:99:85:89:42:51:a8:3c:ac:1d:44:e8:24:52: 95:96:ac:03:66:8a:7d:8b:dd:b6:42:04:5d:e7:05: 8e:64:4b:c4:29:ef:60:fb:83:38:15:cf:73:b0:eb: fc:dc:77:15:ed:cc:b2:6e:9f:73:4a:1c:98:a2:07: 09:1b:ae:4e:b8:35:16:5c:a9:3a:3c:1e:f0:c7:c4: ee:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:84:9B:C1:03:F1:28:4E:19:31:63:78:37:63:3E:3A:DE:0C:7C:EE X509v3 Authority Key Identifier: keyid:74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/VISbwQPxKE4ZMWN4N2M-Ot4MfO4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.227.246.0/23 91.228.22.0/23 193.148.64.0/22 Signature Algorithm: sha256WithRSAEncryption aa:b9:2c:f3:9e:79:80:b4:b6:2c:bf:c4:3a:9b:a1:b5:ff:c8: ec:c2:bd:7d:2e:de:be:25:ed:1b:32:a2:5c:83:4f:6c:19:22: 04:a2:f6:68:78:9f:70:ed:e0:b5:92:6f:29:18:cc:de:62:c4: 8b:d6:80:e9:a1:5e:41:73:4c:ff:80:e5:ab:64:cb:bc:98:bd: 8a:68:22:52:31:62:a6:13:d1:49:0c:cf:b9:78:75:f3:e7:5d: a7:c0:da:9c:0e:f9:8d:fd:a5:d6:ce:92:a4:d0:86:85:43:72: 0a:7b:55:e9:fe:55:48:5e:ff:78:2c:2d:fe:14:c6:35:c9:a6: 4a:53:92:73:24:89:1b:71:3f:1e:f3:0c:db:a5:42:44:8c:f1: 1f:31:26:a7:0d:c7:5d:d7:15:1d:b4:ee:6c:21:2b:8a:e2:12: e1:58:12:ce:53:5f:47:f8:7b:5c:2a:ea:94:e2:35:03:72:8b: 14:55:0e:06:fa:c4:b9:bd:64:69:e3:69:ba:5d:49:71:4a:3f: 35:b1:1e:d0:67:d2:fa:49:57:55:da:16:f1:0e:e5:cd:30:25: cf:92:80:61:cf:75:e7:7c:26:23:a9:b3:04:67:0a:33:a3:d3: 59:89:c3:de:22:b4:0c:01:2b:81:83:51:04:92:92:0b:f9:7a: b6:3d:02:09 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7NaEMDTOfRnEImFGM1mvsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0YjRjZDNlZGY1MjFkZjhlYzBhMTUxMTExMjcyZDNmYjkx Yjk5YzMwHhcNMjYwMTAxMjAxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDg0OWJjMTAzZjEyODRlMTkzMTYzNzgzNzYzM2UzYWRlMGM3Y2VlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBD1x9HOZTR+9ZpyDJlqMlAdtoOX 22fe0U3QySBEq4Csrn/u6UKVA9ivQsRt1EV4u51Rs0eH8iE+qRPwb/jsN27wTuUb 97hH6c7vDeFGSvbwVBiIPwvL6NmAY/hCEkr8vFA94AP0Nqh0iZzKl6TPgO2pjhUo eRa3I/kd4y0nA1TApPc6Ou9s4hm+Mbv7Vxhl630b28whLj9iW6q60VbDfUp169lg SKBg8iS0NuRksKoDVE/OKZmFiUJRqDysHUToJFKVlqwDZop9i922QgRd5wWOZEvE Ke9g+4M4Fc9zsOv83HcV7cyybp9zShyYogcJG65OuDUWXKk6PB7wx8TuWwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFSEm8ED8ShOGTFjeDdjPjreDHzuMB8GA1UdIwQY MBaAFHS0zT7fUh347AoVEREnLT+5G5nDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZExUTlB0OVNIZmpzQ2hVUkVTY3RQN2tibWNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS85ZTQ3ZTktMzI4MS00ZDE3LWE2YmMt ZTJhN2ZiODQ4MzE4LzEvVklTYndRUHhLRTRaTVdONE4yTS1PdDRNZk80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS85ZTQ3ZTktMzI4MS00ZDE3LWE2YmMtZTJhN2ZiODQ4MzE4 LzEvZExUTlB0OVNIZmpzQ2hVUkVTY3RQN2tibWNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBW+P2AwQB W+QWAwQCwZRAMA0GCSqGSIb3DQEBCwUAA4IBAQCquSzznnmAtLYsv8Q6m6G1/8js wr19Lt6+Je0bMqJcg09sGSIEovZoeJ9w7eC1km8pGMzeYsSL1oDpoV5Bc0z/gOWr ZMu8mL2KaCJSMWKmE9FJDM+5eHXz512nwNqcDvmN/aXWzpKk0IaFQ3IKe1Xp/lVI Xv94LC3+FMY1yaZKU5JzJIkbcT8e8wzbpUJEjPEfMSanDcdd1xUdtO5sISuK4hLh WBLOU19H+HtcKuqU4jUDcosUVQ4G+sS5vWRp42m6XUlxSj81sR7QZ9L6SVdV2hbx DuXNMCXPkoBhz3XnfCYjqbMEZwozo9NZicPeIrQMASuBg1EEkpIL+Xq2PQIJ -----END CERTIFICATE-----Generated at Mon Jan 26 13:45:03 2026 by rpki-client