This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/EytAFLfPtvcTOd1_vf7gG34nqnY.roa File: EytAFLfPtvcTOd1_vf7gG34nqnY.roa (raw, json) Hash identifier: OUuDIN625yK+1wDnIM653C5qwt6RgJbVBXW0c2PFte4= Subject key identifier: 13:2B:40:14:B7:CF:B6:F7:13:39:DD:7F:BD:FE:E0:1B:7E:27:AA:76 Certificate issuer: /CN=13ec4731f102c30cc13e2fb5a7f9758cea963452 Certificate serial: 019B7834BD0518BC9B476CDA37482FB98F83 Authority key identifier: 13:EC:47:31:F1:02:C3:0C:C1:3E:2F:B5:A7:F9:75:8C:EA:96:34:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-xHMfECwwzBPi-1p_l1jOqWNFI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/EytAFLfPtvcTOd1_vf7gG34nqnY.roa Signing time: Thu 01 Jan 2026 06:18:00 +0000 ROA not before: Thu 01 Jan 2026 06:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44820 IP address blocks: 91.194.40.0/23 maxlen: 23 91.203.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.mft rsync://rpki.ripe.net/repository/DEFAULT/E-xHMfECwwzBPi-1p_l1jOqWNFI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:bd:05:18:bc:9b:47:6c:da:37:48:2f:b9:8f:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13ec4731f102c30cc13e2fb5a7f9758cea963452 Validity Not Before: Jan 1 06:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=132b4014b7cfb6f71339dd7fbdfee01b7e27aa76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:20:8a:1e:bb:36:07:e4:d8:08:3d:31:33:e0: a2:64:30:8a:6a:68:1a:6f:e4:04:52:84:52:be:73: 72:c3:6f:a4:97:4b:4b:e2:55:22:cd:69:52:6c:e0: 09:d7:ca:a5:22:a6:61:f6:db:b0:6a:c6:83:35:bd: 93:fe:17:aa:00:82:8a:68:d8:c9:3d:c8:e5:de:8b: 6f:e8:78:2d:c0:34:3f:0d:ba:5c:fc:03:8c:29:c7: 19:9f:22:a4:e9:e1:92:58:53:7f:88:e0:10:38:50: e9:1b:c5:8f:af:7d:2d:11:cc:b6:db:39:5f:2d:dc: 93:2d:5e:06:ee:3e:61:7a:10:79:b6:64:4f:81:2b: 61:72:5f:51:40:b8:8e:33:7e:ef:7b:a2:b1:b9:5a: 98:f1:aa:8b:6e:66:36:94:ef:a8:1d:ed:b5:ce:7d: bf:bc:8d:b6:4c:37:01:a5:7c:95:2c:9e:45:c9:5e: 7b:e6:95:23:44:ac:b7:1d:54:5c:e5:c8:26:6f:45: 8e:7d:b1:56:fb:88:85:f1:e6:3f:c3:ed:35:95:9d: 93:ad:ba:c3:fe:1b:7b:b9:2c:e9:3f:3d:48:c7:ea: 69:1e:ce:49:f0:61:80:88:33:a3:35:43:78:61:93: 48:8b:c0:38:e9:e7:c0:d5:6e:64:db:46:44:30:38: a0:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:2B:40:14:B7:CF:B6:F7:13:39:DD:7F:BD:FE:E0:1B:7E:27:AA:76 X509v3 Authority Key Identifier: keyid:13:EC:47:31:F1:02:C3:0C:C1:3E:2F:B5:A7:F9:75:8C:EA:96:34:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-xHMfECwwzBPi-1p_l1jOqWNFI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/EytAFLfPtvcTOd1_vf7gG34nqnY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.194.40.0/23 91.203.4.0/22 Signature Algorithm: sha256WithRSAEncryption 0e:2d:90:53:96:5a:58:07:c3:6e:96:1e:e0:71:f9:e3:31:52: c2:de:cc:c3:72:69:96:7b:72:b1:cd:39:7d:eb:f7:2e:eb:f9: 79:6e:8d:21:52:54:1e:4d:97:5e:f3:fa:04:fc:5c:39:80:ad: d4:6b:24:0e:fa:08:e3:2b:b0:d7:93:6c:ac:16:db:f5:34:ca: 7d:33:6d:6a:7a:3d:e2:2c:4f:66:81:70:29:2f:3e:48:fc:aa: 8c:0a:e5:12:5e:69:57:80:79:ec:e2:dc:65:55:83:71:74:e6: dc:fc:7c:5a:95:d9:e7:23:81:75:74:96:e3:1a:ec:09:0a:90: 1a:75:f7:89:6c:f8:5f:33:3e:74:63:c6:be:10:4c:37:0f:97: 16:6a:64:db:32:08:98:d9:42:66:6d:d2:dd:39:44:2a:7a:bd: a6:88:f1:fb:7e:9b:20:d9:75:b2:1d:78:01:c3:26:c7:dd:04: 2d:ae:58:ff:1b:ca:0a:26:74:79:8e:16:de:5d:99:ec:c3:50: 52:03:10:27:99:b0:95:da:64:02:20:b8:ae:3e:55:fc:ea:52: 9f:85:f1:2c:fa:c4:dd:ae:f3:76:7a:4c:22:5f:c9:51:b9:94: f5:b3:06:41:b3:58:4c:31:73:57:9f:51:a8:68:b1:6d:ae:3c: 30:a8:3d:a0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NL0FGLybR2zaN0gvuY+DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzZWM0NzMxZjEwMmMzMGNjMTNlMmZiNWE3Zjk3NThjZWE5 NjM0NTIwHhcNMjYwMTAxMDYxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzJiNDAxNGI3Y2ZiNmY3MTMzOWRkN2ZiZGZlZTAxYjdlMjdhYTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCCKHrs2B+TYCD0xM+CiZDCKamga b+QEUoRSvnNyw2+kl0tL4lUizWlSbOAJ18qlIqZh9tuwasaDNb2T/heqAIKKaNjJ Pcjl3otv6HgtwDQ/Dbpc/AOMKccZnyKk6eGSWFN/iOAQOFDpG8WPr30tEcy22zlf LdyTLV4G7j5hehB5tmRPgSthcl9RQLiOM37ve6KxuVqY8aqLbmY2lO+oHe21zn2/ vI22TDcBpXyVLJ5FyV575pUjRKy3HVRc5cgmb0WOfbFW+4iF8eY/w+01lZ2TrbrD /ht7uSzpPz1Ix+ppHs5J8GGAiDOjNUN4YZNIi8A46efA1W5k20ZEMDigjQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBMrQBS3z7b3Ezndf73+4Bt+J6p2MB8GA1UdIwQY MBaAFBPsRzHxAsMMwT4vtaf5dYzqljRSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRS14SE1mRUN3d3pCUGktMXBfbDFqT3FXTkZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi85ODJmMWQtNDEyMS00NmI1LWFkZDAt ZDQxYmNjOTI4Mzc1LzEvRXl0QUZMZlB0dmNUT2QxX3ZmN2dHMzRucW5ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi85ODJmMWQtNDEyMS00NmI1LWFkZDAtZDQxYmNjOTI4Mzc1 LzEvRS14SE1mRUN3d3pCUGktMXBfbDFqT3FXTkZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW8IoAwQC W8sEMA0GCSqGSIb3DQEBCwUAA4IBAQAOLZBTllpYB8Nulh7gcfnjMVLC3szDcmmW e3KxzTl96/cu6/l5bo0hUlQeTZde8/oE/Fw5gK3UayQO+gjjK7DXk2ysFtv1NMp9 M21qej3iLE9mgXApLz5I/KqMCuUSXmlXgHns4txlVYNxdObc/HxaldnnI4F1dJbj GuwJCpAadfeJbPhfMz50Y8a+EEw3D5cWamTbMgiY2UJmbdLdOUQqer2miPH7fpsg 2XWyHXgBwybH3QQtrlj/G8oKJnR5jhbeXZnsw1BSAxAnmbCV2mQCILiuPlX86lKf hfEs+sTdrvN2ekwiX8lRuZT1swZBs1hMMXNXn1GoaLFtrjwwqD2g -----END CERTIFICATE-----Generated at Mon Jan 26 13:45:46 2026 by rpki-client