This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/EsSyiXnC44Xl8fO-3wz0FTDHjxQ.roa File: EsSyiXnC44Xl8fO-3wz0FTDHjxQ.roa (raw, json) Hash identifier: RCqvNh4i3hyPp+Oe+ChUyeaHuVCxT8Wqs4E9vLq+3Wo= Subject key identifier: 12:C4:B2:89:79:C2:E3:85:E5:F1:F3:BE:DF:0C:F4:15:30:C7:8F:14 Certificate issuer: /CN=808e238e30dcb759759fb8a394d9e211a28b9d87 Certificate serial: 019B77588E77F7CD4A7288E8B695E13139A7 Authority key identifier: 80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/EsSyiXnC44Xl8fO-3wz0FTDHjxQ.roa Signing time: Thu 01 Jan 2026 02:17:30 +0000 ROA not before: Thu 01 Jan 2026 02:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200467 IP address blocks: 91.235.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:8e:77:f7:cd:4a:72:88:e8:b6:95:e1:31:39:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=808e238e30dcb759759fb8a394d9e211a28b9d87 Validity Not Before: Jan 1 02:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=12c4b28979c2e385e5f1f3bedf0cf41530c78f14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f2:c9:bb:39:fc:a5:0e:39:7c:96:89:6d:0f: 6d:58:41:f5:e9:a1:80:39:cd:b0:8d:a2:d6:27:3b: 3b:03:f6:df:58:d6:c9:2a:8f:ae:19:26:d1:c2:13: b7:fd:2a:b0:58:c1:c2:25:0c:59:30:ad:08:fc:c6: 78:ce:ec:f4:f2:21:9c:29:30:cc:8c:60:2c:59:cb: 42:bd:2a:08:fa:f1:4a:d2:9e:65:92:44:e2:74:9d: a2:31:8a:07:8f:dc:6b:13:8e:4f:79:92:03:e4:20: f5:9b:9c:d9:42:54:68:27:28:e2:83:cd:35:09:a5: 04:9c:98:f6:a9:18:c2:21:17:3c:25:b8:70:a0:38: b6:9b:26:b6:1d:da:4c:eb:ce:10:fa:f0:a5:f5:c9: b1:e2:21:f2:54:bb:46:d4:17:4b:a1:c4:97:ed:ea: b9:b3:79:ed:93:a4:4c:28:65:85:15:87:8e:f7:16: 73:18:3d:fd:c1:a7:46:28:69:60:31:7d:e5:4b:55: 99:9e:10:62:0c:8d:d4:e8:a5:ca:4f:12:81:ed:3e: 75:f6:53:79:21:cb:74:de:80:4f:08:61:3d:b2:d4: 9d:bb:92:eb:15:76:07:fd:ff:ae:16:8e:67:7a:01: 80:5b:3d:ef:a9:32:b5:6f:88:96:bd:dc:00:83:00: e6:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:C4:B2:89:79:C2:E3:85:E5:F1:F3:BE:DF:0C:F4:15:30:C7:8F:14 X509v3 Authority Key Identifier: keyid:80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/EsSyiXnC44Xl8fO-3wz0FTDHjxQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.235.14.0/24 Signature Algorithm: sha256WithRSAEncryption af:0e:ea:02:3f:b6:12:0d:ef:16:00:94:61:14:17:b9:92:4f: 30:0a:97:60:fe:7b:6c:ef:0b:a1:c3:13:e2:bc:95:59:46:88: 01:73:62:a8:d1:98:20:4f:08:45:bd:fd:61:5e:97:6e:c8:89: 6c:05:08:26:20:2f:ea:e5:ca:69:1d:ec:7b:1c:d5:f2:93:5e: 95:b5:71:f4:cf:e2:8f:75:8c:65:1d:c2:c6:9b:7c:74:a8:a6: 17:f1:a2:25:8f:95:4b:80:87:5f:8f:8d:a9:8d:90:9d:a1:d4: 78:f7:26:7a:87:46:8d:96:76:4b:22:ee:7a:a0:50:41:1f:3e: 90:a7:e1:77:57:86:73:e6:d5:c3:32:3e:ff:47:dd:1f:c0:50: 4d:b4:53:f0:cc:e9:78:d4:40:79:a1:af:8a:82:54:b0:89:c0: ba:a5:d3:3d:5a:62:96:4d:6b:fb:c9:a0:e3:d6:eb:57:6f:46: c7:5c:44:2e:c3:d9:51:95:7b:43:2d:b5:a5:29:2d:6b:5a:be: 75:17:df:a0:16:37:a0:ec:01:30:01:ae:81:79:57:c9:d8:a6: dc:e5:8f:9b:20:19:fa:4f:90:10:3a:c1:62:52:81:70:a1:82: 4c:a9:fc:78:d4:0c:05:fe:18:21:6a:5c:0b:a8:9d:f4:a6:42: a4:db:61:b7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WI53981KcojotpXhMTmnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwOGUyMzhlMzBkY2I3NTk3NTlmYjhhMzk0ZDllMjExYTI4 YjlkODcwHhcNMjYwMTAxMDIxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMmM0YjI4OTc5YzJlMzg1ZTVmMWYzYmVkZjBjZjQxNTMwYzc4ZjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufLJuzn8pQ45fJaJbQ9tWEH16aGA Oc2wjaLWJzs7A/bfWNbJKo+uGSbRwhO3/SqwWMHCJQxZMK0I/MZ4zuz08iGcKTDM jGAsWctCvSoI+vFK0p5lkkTidJ2iMYoHj9xrE45PeZID5CD1m5zZQlRoJyjig801 CaUEnJj2qRjCIRc8JbhwoDi2mya2HdpM684Q+vCl9cmx4iHyVLtG1BdLocSX7eq5 s3ntk6RMKGWFFYeO9xZzGD39wadGKGlgMX3lS1WZnhBiDI3U6KXKTxKB7T519lN5 Ict03oBPCGE9stSdu5LrFXYH/f+uFo5negGAWz3vqTK1b4iWvdwAgwDmLQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBLEsol5wuOF5fHzvt8M9BUwx48UMB8GA1UdIwQY MBaAFICOI44w3LdZdZ+4o5TZ4hGii52HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0k0ampqRGN0MWwxbjdpamxObmlFYUtMblljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi83YjJjZDYtYjFmMy00M2ZjLTlmMDkt Y2Q5NzQwNDI2NDlmLzEvRXNTeWlYbkM0NFhsOGZPLTN3ejBGVERIanhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi83YjJjZDYtYjFmMy00M2ZjLTlmMDktY2Q5NzQwNDI2NDlm LzEvZ0k0ampqRGN0MWwxbjdpamxObmlFYUtMblljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+sOMA0G CSqGSIb3DQEBCwUAA4IBAQCvDuoCP7YSDe8WAJRhFBe5kk8wCpdg/nts7wuhwxPi vJVZRogBc2Ko0ZggTwhFvf1hXpduyIlsBQgmIC/q5cppHex7HNXyk16VtXH0z+KP dYxlHcLGm3x0qKYX8aIlj5VLgIdfj42pjZCdodR49yZ6h0aNlnZLIu56oFBBHz6Q p+F3V4Zz5tXDMj7/R90fwFBNtFPwzOl41EB5oa+KglSwicC6pdM9WmKWTWv7yaDj 1utXb0bHXEQuw9lRlXtDLbWlKS1rWr51F9+gFjeg7AEwAa6BeVfJ2Kbc5Y+bIBn6 T5AQOsFiUoFwoYJMqfx41AwF/hghalwLqJ30pkKk22G3 -----END CERTIFICATE-----Generated at Mon Jan 26 04:55:04 2026 by rpki-client