This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/fJW7EYfD-50gKtZxv7Uhc3IrH24.roa File: fJW7EYfD-50gKtZxv7Uhc3IrH24.roa (raw, json) Hash identifier: w436OnY6qjYWmprn/yHiq2hzXNy8k69Hv/EWXbmw8n0= Subject key identifier: 7C:95:BB:11:87:C3:FB:9D:20:2A:D6:71:BF:B5:21:73:72:2B:1F:6E Certificate issuer: /CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba Certificate serial: 019B79ED52E9845A925CF04CA8A14C585588 Authority key identifier: E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/fJW7EYfD-50gKtZxv7Uhc3IrH24.roa Signing time: Thu 01 Jan 2026 14:19:14 +0000 ROA not before: Thu 01 Jan 2026 14:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210301 IP address blocks: 91.213.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:52:e9:84:5a:92:5c:f0:4c:a8:a1:4c:58:55:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba Validity Not Before: Jan 1 14:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c95bb1187c3fb9d202ad671bfb52173722b1f6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:80:8e:c3:f3:b2:a5:7f:0d:9c:89:b1:a4:cb: 3f:15:6b:e7:64:9a:77:5e:79:ac:60:80:29:b8:a4: cc:25:86:11:41:9b:b4:3e:76:27:e2:33:be:9c:5c: 97:fa:dd:36:80:64:75:f7:ed:13:f4:57:d6:a7:8b: ac:0d:fc:35:9a:9e:ed:54:24:d6:ab:ad:35:9f:61: 70:63:bb:f8:75:3f:22:1c:04:83:9b:91:75:ff:fb: 8d:46:ea:02:81:10:e2:30:87:9c:07:5f:e0:06:85: 02:57:35:32:f7:90:72:6d:f6:50:ba:8e:0a:54:17: 34:50:fb:87:92:e5:24:32:09:da:17:3e:07:de:63: d3:fa:a3:6d:b1:68:22:cd:a4:a2:65:59:0e:37:89: 6d:84:15:80:ac:02:13:7e:cc:d5:71:e1:28:70:ec: ce:d0:da:08:5d:06:4c:7d:01:f8:a7:17:8b:18:51: 0d:7c:e7:a7:4b:a8:da:08:1d:b8:87:10:06:f8:23: 84:38:9a:84:bd:4b:61:d7:d9:4e:a5:ba:b8:39:f6: 8d:b0:d5:fc:06:e6:88:39:b9:28:51:e0:ed:df:d3: 69:dc:f2:a9:0d:cc:4b:00:20:ed:91:86:3a:68:9e: 09:d8:64:8c:fe:05:4b:5f:0f:54:5c:04:21:3d:f4: 97:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:95:BB:11:87:C3:FB:9D:20:2A:D6:71:BF:B5:21:73:72:2B:1F:6E X509v3 Authority Key Identifier: keyid:E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/fJW7EYfD-50gKtZxv7Uhc3IrH24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.213.124.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:6d:72:dd:5d:40:05:71:01:d1:80:6a:0a:70:eb:ff:84:de: e6:c5:5c:bf:5d:27:fb:76:0f:5a:9a:df:a4:01:3c:08:2f:27: 98:55:b2:b8:75:2b:1b:aa:9d:0c:11:7f:df:7b:93:86:b5:0b: 4e:90:17:30:5f:10:d2:bf:52:d2:8f:59:ce:80:5d:e7:86:b2: 1c:c9:b1:a7:90:a5:8d:74:a5:9d:b6:d1:11:bf:4b:ae:af:1d: b7:57:d2:60:52:56:70:d8:fd:33:16:55:e4:49:f0:c4:f7:12: 69:63:6f:37:41:e1:71:a7:5f:1f:f4:b1:5b:1f:7f:f0:99:71: 12:05:79:6d:82:8c:ef:a2:c9:8e:ad:31:71:9a:70:d2:cd:cf: f9:ad:ac:b2:da:8d:2e:99:ef:09:6f:aa:be:6a:dd:69:2e:21: 7f:4f:13:cb:fb:1f:df:e3:10:c5:f0:4a:79:b0:49:18:12:4e: b0:cd:d9:34:ab:80:1b:5e:b8:36:c8:cc:88:64:df:66:06:ad: 4f:1b:6b:ac:bd:68:20:bb:15:70:a3:16:ae:08:da:a5:38:09: 49:86:e1:1b:03:b4:85:62:1f:81:1a:dc:7e:4e:db:24:7a:b8: ea:5b:4a:b6:f4:d8:c3:23:eb:c6:13:a5:b9:c0:f3:34:cf:be: ca:42:1c:32 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57VLphFqSXPBMqKFMWFWIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YmU4ZWZlYzFmYjAzZDhhZjk3OWFmMWNiYTEzYTA4NDVh N2IwYmEwHhcNMjYwMTAxMTQxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Yzk1YmIxMTg3YzNmYjlkMjAyYWQ2NzFiZmI1MjE3MzcyMmIxZjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoCOw/OypX8NnImxpMs/FWvnZJp3 XnmsYIApuKTMJYYRQZu0PnYn4jO+nFyX+t02gGR19+0T9FfWp4usDfw1mp7tVCTW q601n2FwY7v4dT8iHASDm5F1//uNRuoCgRDiMIecB1/gBoUCVzUy95BybfZQuo4K VBc0UPuHkuUkMgnaFz4H3mPT+qNtsWgizaSiZVkON4lthBWArAITfszVceEocOzO 0NoIXQZMfQH4pxeLGFENfOenS6jaCB24hxAG+COEOJqEvUth19lOpbq4OfaNsNX8 BuaIObkoUeDt39Np3PKpDcxLACDtkYY6aJ4J2GSM/gVLXw9UXAQhPfSXHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHyVuxGHw/udICrWcb+1IXNyKx9uMB8GA1UdIwQY MBaAFOS+jv7B+wPYr5ea8cuhOghFp7C6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUt ZGZiZmEzZmNmMDIxLzEvZkpXN0VZZkQtNTBnS3RaeHY3VWhjM0lySDI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUtZGZiZmEzZmNmMDIx LzEvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9V8MA0G CSqGSIb3DQEBCwUAA4IBAQAObXLdXUAFcQHRgGoKcOv/hN7mxVy/XSf7dg9amt+k ATwILyeYVbK4dSsbqp0MEX/fe5OGtQtOkBcwXxDSv1LSj1nOgF3nhrIcybGnkKWN dKWdttERv0uurx23V9JgUlZw2P0zFlXkSfDE9xJpY283QeFxp18f9LFbH3/wmXES BXltgozvosmOrTFxmnDSzc/5rayy2o0ume8Jb6q+at1pLiF/TxPL+x/f4xDF8Ep5 sEkYEk6wzdk0q4AbXrg2yMyIZN9mBq1PG2usvWgguxVwoxauCNqlOAlJhuEbA7SF Yh+BGtx+TtskerjqW0q29NjDI+vGE6W5wPM0z77KQhwy -----END CERTIFICATE-----Generated at Mon Jan 26 03:28:01 2026 by rpki-client