This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/41FDoFH6M2is1lsICkgfh5ITDqc.roa File: 41FDoFH6M2is1lsICkgfh5ITDqc.roa (raw, json) Hash identifier: EewgyLxSVnO+QoRL7ntY20ccJSFgs1pW1bzWTclj1yE= Subject key identifier: E3:51:43:A0:51:FA:33:68:AC:D6:5B:08:0A:48:1F:87:92:13:0E:A7 Certificate issuer: /CN=90fc2c12ea17021ba8ace0621897f0856dac2559 Certificate serial: 019B7DCB1AF91351F40F481CF3940B7DD81A Authority key identifier: 90:FC:2C:12:EA:17:02:1B:A8:AC:E0:62:18:97:F0:85:6D:AC:25:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPwsEuoXAhuorOBiGJfwhW2sJVk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/41FDoFH6M2is1lsICkgfh5ITDqc.roa Signing time: Fri 02 Jan 2026 08:20:21 +0000 ROA not before: Fri 02 Jan 2026 08:20:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41436 IP address blocks: 2.59.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.crl rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft rsync://rpki.ripe.net/repository/DEFAULT/kPwsEuoXAhuorOBiGJfwhW2sJVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:1a:f9:13:51:f4:0f:48:1c:f3:94:0b:7d:d8:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90fc2c12ea17021ba8ace0621897f0856dac2559 Validity Not Before: Jan 2 08:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e35143a051fa3368acd65b080a481f8792130ea7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:cf:7a:ef:cd:46:bd:bf:55:00:9f:22:73:eb: c8:7e:de:f2:11:35:35:fb:87:4a:bb:4b:c0:3c:59: e0:d2:de:b9:f6:52:a1:e8:57:b4:f4:d0:94:38:58: a5:ac:50:b4:6a:b4:e6:40:44:33:69:f8:12:85:c8: 7d:29:e6:ad:73:12:45:2d:f9:28:bd:54:8d:e5:48: 57:99:c3:32:32:23:7f:7b:15:f8:e7:a7:80:3f:fc: 8d:fd:b7:06:b9:7e:df:36:fc:8e:ac:aa:a6:97:cb: b5:3e:71:d3:f3:67:77:04:eb:97:95:39:85:d3:74: f3:77:ba:b6:25:88:1f:08:5b:8b:77:e3:92:6a:d6: 27:98:10:eb:b6:d8:0c:1a:aa:87:6a:58:28:51:7f: 64:e3:36:69:3d:f3:61:e9:4d:fc:60:be:a0:f8:a5: d9:68:6a:bf:8e:76:d0:bb:15:22:74:e4:44:14:d4: d0:e2:9d:36:a4:11:ff:b3:6b:ad:4a:85:4f:12:a4: e4:3a:a2:85:d6:19:91:ca:ed:42:09:8e:ce:a3:a5: e9:e5:42:a6:64:98:ab:14:be:64:7d:32:b4:16:a9: 2c:58:14:36:46:1d:74:3e:b5:5d:8a:f5:80:2e:d7: ef:b9:87:10:41:b5:d0:17:e6:d0:de:b8:91:87:c8: b6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:51:43:A0:51:FA:33:68:AC:D6:5B:08:0A:48:1F:87:92:13:0E:A7 X509v3 Authority Key Identifier: keyid:90:FC:2C:12:EA:17:02:1B:A8:AC:E0:62:18:97:F0:85:6D:AC:25:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPwsEuoXAhuorOBiGJfwhW2sJVk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/41FDoFH6M2is1lsICkgfh5ITDqc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.118.0/24 Signature Algorithm: sha256WithRSAEncryption 94:fc:f7:96:c9:f9:a2:bd:ef:a0:29:27:ce:b9:52:10:9f:ee: 0b:5d:69:a9:74:8e:a0:33:73:ef:1e:b2:2c:c7:b0:e9:ad:d4: 54:c5:af:48:a9:fb:cc:79:8f:67:da:33:35:2c:0d:b5:2a:f8: 21:11:5e:bb:a2:14:92:42:d3:f5:ac:0c:04:7b:ab:e1:53:e0: 54:fc:ac:69:55:94:8c:c7:45:30:f8:7f:25:1f:8c:ff:1d:1b: db:7b:6b:c2:17:01:01:a8:20:92:e7:8e:7e:72:45:cb:10:1e: ca:9e:12:99:ad:83:12:c6:b6:73:7a:34:9a:6d:b8:20:7b:26: ee:78:cc:9b:a9:f7:ab:6f:c1:e0:ff:16:38:db:06:97:af:af: 91:5e:4d:45:55:05:ac:5c:aa:78:bb:42:00:f0:c5:86:49:1d: 1c:c5:52:2a:4e:d3:18:a2:f8:86:47:43:c6:eb:9b:ef:8e:c7: ff:42:b7:1a:5d:74:2f:eb:30:63:05:29:8f:12:5f:6f:24:1b: ed:32:21:99:2e:8f:34:45:10:83:64:a4:4c:0d:13:b9:4c:07: d7:eb:0c:db:f4:d9:66:16:13:9b:80:29:c9:eb:95:af:09:c0: ea:1f:cb:a8:0a:69:a9:a7:a3:77:6b:a3:1d:d6:4c:91:94:10: b0:51:78:15 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yxr5E1H0D0gc85QLfdgaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwZmMyYzEyZWExNzAyMWJhOGFjZTA2MjE4OTdmMDg1NmRh YzI1NTkwHhcNMjYwMTAyMDgyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzUxNDNhMDUxZmEzMzY4YWNkNjViMDgwYTQ4MWY4NzkyMTMwZWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiM96781Gvb9VAJ8ic+vIft7yETU1 +4dKu0vAPFng0t659lKh6Fe09NCUOFilrFC0arTmQEQzafgShch9KeatcxJFLfko vVSN5UhXmcMyMiN/exX456eAP/yN/bcGuX7fNvyOrKqml8u1PnHT82d3BOuXlTmF 03Tzd7q2JYgfCFuLd+OSatYnmBDrttgMGqqHalgoUX9k4zZpPfNh6U38YL6g+KXZ aGq/jnbQuxUidOREFNTQ4p02pBH/s2utSoVPEqTkOqKF1hmRyu1CCY7Oo6Xp5UKm ZJirFL5kfTK0FqksWBQ2Rh10PrVdivWALtfvuYcQQbXQF+bQ3riRh8i2DwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFONRQ6BR+jNorNZbCApIH4eSEw6nMB8GA1UdIwQY MBaAFJD8LBLqFwIbqKzgYhiX8IVtrCVZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1B3c0V1b1hBaHVvck9CaUdKZndoVzJzSlZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85NTFiY2UtMjg1MC00OTQzLThmMDAt ZGIyYzU3ZjRlZjE2LzEvNDFGRG9GSDZNMmlzMWxzSUNrZ2ZoNUlURHFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi85NTFiY2UtMjg1MC00OTQzLThmMDAtZGIyYzU3ZjRlZjE2 LzEva1B3c0V1b1hBaHVvck9CaUdKZndoVzJzSlZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAjt2MA0G CSqGSIb3DQEBCwUAA4IBAQCU/PeWyfmive+gKSfOuVIQn+4LXWmpdI6gM3PvHrIs x7DprdRUxa9IqfvMeY9n2jM1LA21KvghEV67ohSSQtP1rAwEe6vhU+BU/KxpVZSM x0Uw+H8lH4z/HRvbe2vCFwEBqCCS545+ckXLEB7KnhKZrYMSxrZzejSabbggeybu eMybqferb8Hg/xY42waXr6+RXk1FVQWsXKp4u0IA8MWGSR0cxVIqTtMYoviGR0PG 65vvjsf/QrcaXXQv6zBjBSmPEl9vJBvtMiGZLo80RRCDZKRMDRO5TAfX6wzb9Nlm FhObgCnJ65WvCcDqH8uoCmmpp6N3a6Md1kyRlBCwUXgV -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:04 2026 by rpki-client