This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/mFW4zADWbotzoU0wzEidrSWH-UQ.roa File: mFW4zADWbotzoU0wzEidrSWH-UQ.roa (raw, json) Hash identifier: v8M/uk7P0Ux+9wY32sSP1YJp6v/XbIvApRLKBpQlUaU= Subject key identifier: 98:55:B8:CC:00:D6:6E:8B:73:A1:4D:30:CC:48:9D:AD:25:87:F9:44 Certificate issuer: /CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba Certificate serial: 019B79ED541493EBF8A6E6F0F5EA33ED35D1 Authority key identifier: E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/mFW4zADWbotzoU0wzEidrSWH-UQ.roa Signing time: Thu 01 Jan 2026 14:19:15 +0000 ROA not before: Thu 01 Jan 2026 14:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216029 IP address blocks: 91.210.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:54:14:93:eb:f8:a6:e6:f0:f5:ea:33:ed:35:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba Validity Not Before: Jan 1 14:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9855b8cc00d66e8b73a14d30cc489dad2587f944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:04:e9:8d:f5:2e:39:b4:ab:d0:ed:58:24:4b: d8:b9:a6:9e:59:55:04:4c:9e:32:c3:c1:2b:76:43: 28:0f:fa:4d:de:9b:8d:59:e2:92:44:79:b1:8c:96: 49:ac:58:34:b4:39:95:85:0a:e6:7a:4c:4a:5c:9f: 94:85:73:e0:c0:fa:9c:ff:de:20:12:ed:17:c8:ff: 31:ef:18:b8:4b:0f:3c:b5:33:0d:56:a5:de:1b:ef: 24:8b:2d:0e:1b:9f:65:68:6e:0c:3e:bd:03:ed:8f: 75:aa:8d:5a:97:98:d6:c9:4c:ab:0c:57:17:56:f7: 89:6d:35:21:94:61:2c:41:23:4c:42:74:3a:82:8e: 2b:3d:71:57:75:69:22:e2:23:71:d4:09:c2:84:0d: f2:ba:6e:96:37:5a:63:8e:c5:bd:d7:8a:fb:69:5a: 48:d6:bd:a6:d5:fa:e6:40:2e:70:f5:be:7d:b4:2c: 2e:49:8a:4a:b8:d6:70:00:1b:24:89:8c:f6:ce:75: 08:73:7c:ab:a8:d6:c7:46:59:de:70:4a:ff:df:62: a9:6e:5f:3a:9c:8b:98:f2:ce:c1:3e:13:d0:61:b3: 11:e7:00:cb:0f:d9:3c:b3:16:41:99:96:3b:ea:bc: 28:48:e0:51:8d:6f:a2:16:64:a4:e6:39:07:bd:c4: 96:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:55:B8:CC:00:D6:6E:8B:73:A1:4D:30:CC:48:9D:AD:25:87:F9:44 X509v3 Authority Key Identifier: keyid:E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/mFW4zADWbotzoU0wzEidrSWH-UQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.210.236.0/24 Signature Algorithm: sha256WithRSAEncryption a1:81:ae:1d:d7:27:2b:61:c4:ce:9e:f5:81:fc:21:88:02:6b: 84:69:02:8d:82:9e:1d:5a:d4:16:8c:b7:c4:93:cd:f2:c9:9d: 73:3e:7f:7f:38:58:73:9b:f6:fd:17:7c:50:5b:3e:3c:0e:e4: b4:c6:a0:94:2a:ed:8e:2f:77:e0:a1:e8:95:f0:f2:2a:29:35: b5:e7:37:55:06:ae:d6:b2:0e:97:60:36:a8:ea:44:10:fa:3e: d3:f7:ca:1d:de:9d:65:6c:20:14:cc:5b:79:7e:d8:65:1e:3b: 7b:b5:12:78:d0:79:ad:cd:aa:c1:3e:ba:8d:9f:fb:1e:3f:c5: 28:e6:ea:b2:8d:50:2b:69:c9:a5:1f:22:18:af:5e:a8:4a:89: a6:ef:7e:31:25:93:c7:a5:72:a1:aa:e4:d1:5f:7a:66:79:a0: 82:06:b5:c8:da:4c:27:02:e7:d5:cf:d2:a4:31:5b:7d:49:8c: 36:3d:d0:28:84:9b:bf:3e:2f:58:0f:7d:03:42:d6:7b:ef:f9: dd:e3:9c:c2:17:df:96:34:66:b4:8b:0e:d1:78:6b:2f:e1:c3: b2:cc:46:da:6a:50:58:64:70:87:de:68:45:97:43:98:08:31: 44:a4:b8:23:b0:53:bf:ac:00:7d:93:d9:bd:ff:61:71:a0:be: b1:e6:b9:08 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57VQUk+v4pubw9eoz7TXRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YmU4ZWZlYzFmYjAzZDhhZjk3OWFmMWNiYTEzYTA4NDVh N2IwYmEwHhcNMjYwMTAxMTQxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODU1YjhjYzAwZDY2ZThiNzNhMTRkMzBjYzQ4OWRhZDI1ODdmOTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQTpjfUuObSr0O1YJEvYuaaeWVUE TJ4yw8ErdkMoD/pN3puNWeKSRHmxjJZJrFg0tDmVhQrmekxKXJ+UhXPgwPqc/94g Eu0XyP8x7xi4Sw88tTMNVqXeG+8kiy0OG59laG4MPr0D7Y91qo1al5jWyUyrDFcX VveJbTUhlGEsQSNMQnQ6go4rPXFXdWki4iNx1AnChA3yum6WN1pjjsW914r7aVpI 1r2m1frmQC5w9b59tCwuSYpKuNZwABskiYz2znUIc3yrqNbHRlnecEr/32Kpbl86 nIuY8s7BPhPQYbMR5wDLD9k8sxZBmZY76rwoSOBRjW+iFmSk5jkHvcSWjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJhVuMwA1m6Lc6FNMMxIna0lh/lEMB8GA1UdIwQY MBaAFOS+jv7B+wPYr5ea8cuhOghFp7C6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUt ZGZiZmEzZmNmMDIxLzEvbUZXNHpBRFdib3R6b1Uwd3pFaWRyU1dILVVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUtZGZiZmEzZmNmMDIx LzEvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9LsMA0G CSqGSIb3DQEBCwUAA4IBAQChga4d1ycrYcTOnvWB/CGIAmuEaQKNgp4dWtQWjLfE k83yyZ1zPn9/OFhzm/b9F3xQWz48DuS0xqCUKu2OL3fgoeiV8PIqKTW15zdVBq7W sg6XYDao6kQQ+j7T98od3p1lbCAUzFt5fthlHjt7tRJ40HmtzarBPrqNn/seP8Uo 5uqyjVAracmlHyIYr16oSomm734xJZPHpXKhquTRX3pmeaCCBrXI2kwnAufVz9Kk MVt9SYw2PdAohJu/Pi9YD30DQtZ77/nd45zCF9+WNGa0iw7ReGsv4cOyzEbaalBY ZHCH3mhFl0OYCDFEpLgjsFO/rAB9k9m9/2FxoL6x5rkI -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:54 2026 by rpki-client