This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/4oXgZ-1Ye2fC1cFU0rvhklNnNQI.roa File: 4oXgZ-1Ye2fC1cFU0rvhklNnNQI.roa (raw, json) Hash identifier: b9MP0rdkmPkjLsxKnX60/w1PVwahqRg3qlsqfmJHgCk= Subject key identifier: E2:85:E0:67:ED:58:7B:67:C2:D5:C1:54:D2:BB:E1:92:53:67:35:02 Certificate issuer: /CN=400f2ea157bbb53ab026011ace5cd1360ef2f77d Certificate serial: 019B7A59C515DA6BD43CC2E315ECEF0AC51C Authority key identifier: 40:0F:2E:A1:57:BB:B5:3A:B0:26:01:1A:CE:5C:D1:36:0E:F2:F7:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QA8uoVe7tTqwJgEazlzRNg7y930.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/4oXgZ-1Ye2fC1cFU0rvhklNnNQI.roa Signing time: Thu 01 Jan 2026 16:17:42 +0000 ROA not before: Thu 01 Jan 2026 16:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30781 IP address blocks: 91.223.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft rsync://rpki.ripe.net/repository/DEFAULT/QA8uoVe7tTqwJgEazlzRNg7y930.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:59:c5:15:da:6b:d4:3c:c2:e3:15:ec:ef:0a:c5:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=400f2ea157bbb53ab026011ace5cd1360ef2f77d Validity Not Before: Jan 1 16:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e285e067ed587b67c2d5c154d2bbe19253673502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:df:08:5e:8b:c4:fd:7b:cd:ab:8d:bb:0e:a4: 55:de:84:15:b5:55:08:11:45:a1:6e:b9:82:83:9f: 4c:ae:34:92:54:2f:66:ec:a7:b8:00:62:b2:42:0d: 33:48:33:30:a9:5a:a7:66:26:89:18:2b:6e:7e:0e: 95:fd:2c:1f:c9:e6:20:dc:13:22:4d:88:93:cb:6f: 88:93:6c:7e:86:4f:68:f6:d0:02:05:49:f6:db:25: 5b:a8:a7:c2:62:31:3d:b9:e5:33:86:b7:8b:af:52: 91:6e:14:b9:49:e9:2c:3a:72:f6:fa:bc:5d:0a:c0: 54:94:e0:c2:70:11:73:e3:6f:37:21:6c:c4:4b:43: c2:2e:41:bc:ce:87:9f:87:fb:f7:38:fb:6c:75:3b: 85:af:68:57:c3:ac:64:d1:5c:20:57:36:52:f7:3f: 21:a6:fd:3c:4f:41:94:bb:a8:76:c1:85:fe:0d:17: 7d:66:62:3e:3d:09:d0:c2:15:af:87:1f:b9:65:64: ad:b7:53:31:6f:d9:ef:52:3f:e0:ae:05:bf:b5:d4: 2c:4c:cd:a1:b6:6c:f9:0b:fd:d0:63:16:a2:87:5f: a2:93:2d:84:c0:13:b0:7e:12:74:32:2c:4f:5a:3e: 2c:8f:0a:dc:ab:e5:fa:51:96:46:8b:a8:44:d2:ac: ef:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:85:E0:67:ED:58:7B:67:C2:D5:C1:54:D2:BB:E1:92:53:67:35:02 X509v3 Authority Key Identifier: keyid:40:0F:2E:A1:57:BB:B5:3A:B0:26:01:1A:CE:5C:D1:36:0E:F2:F7:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QA8uoVe7tTqwJgEazlzRNg7y930.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/4oXgZ-1Ye2fC1cFU0rvhklNnNQI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.35.0/24 Signature Algorithm: sha256WithRSAEncryption 04:ce:79:85:7a:62:a8:97:d4:47:0d:b1:18:a2:48:b2:5c:7f: 7e:42:39:71:ac:9c:c8:6f:6e:9f:6c:aa:75:60:2e:89:41:c9: 35:df:38:f9:f8:1f:e7:0c:ee:c7:48:0a:e6:e9:5e:1b:30:08: 04:c7:9b:44:f3:a8:10:c9:65:19:57:b9:86:d5:4c:08:03:4e: 8e:50:76:6f:4a:4c:0e:13:7b:cc:dd:24:e7:0b:e9:bf:64:5d: 6b:6b:99:cb:2d:cc:99:66:90:12:20:eb:64:f3:96:e2:93:cf: 12:aa:93:63:d7:4b:61:60:28:a7:96:ed:25:e8:d1:8f:ea:83: 3d:08:5a:13:40:e4:9d:0c:20:e5:0c:10:b0:a3:fa:7e:5e:20: 1d:2e:a8:f2:a6:bb:7d:ca:ff:e8:ac:42:18:36:ed:56:93:b0: b2:0b:22:4b:db:dc:7c:48:8f:fc:4e:91:2e:ad:e0:18:58:33: e5:04:23:f8:f2:20:da:91:3f:30:6b:3b:e9:90:cf:d0:37:2b: f5:ab:1f:86:b2:48:96:ff:aa:06:23:ec:40:77:a1:38:9a:75: 19:7e:b6:16:b4:bd:ca:5d:e6:91:90:19:45:e5:fa:2d:9a:d1: 30:de:b9:45:1a:bb:a0:6a:19:97:41:d4:63:95:4a:6d:4d:2b: 2e:bb:2f:0a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WcUV2mvUPMLjFezvCsUcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwMGYyZWExNTdiYmI1M2FiMDI2MDExYWNlNWNkMTM2MGVm MmY3N2QwHhcNMjYwMTAxMTYxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjg1ZTA2N2VkNTg3YjY3YzJkNWMxNTRkMmJiZTE5MjUzNjczNTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4t8IXovE/XvNq427DqRV3oQVtVUI EUWhbrmCg59MrjSSVC9m7Ke4AGKyQg0zSDMwqVqnZiaJGCtufg6V/SwfyeYg3BMi TYiTy2+Ik2x+hk9o9tACBUn22yVbqKfCYjE9ueUzhreLr1KRbhS5SeksOnL2+rxd CsBUlODCcBFz4283IWzES0PCLkG8zoefh/v3OPtsdTuFr2hXw6xk0VwgVzZS9z8h pv08T0GUu6h2wYX+DRd9ZmI+PQnQwhWvhx+5ZWStt1Mxb9nvUj/grgW/tdQsTM2h tmz5C/3QYxaih1+iky2EwBOwfhJ0MixPWj4sjwrcq+X6UZZGi6hE0qzvmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOKF4GftWHtnwtXBVNK74ZJTZzUCMB8GA1UdIwQY MBaAFEAPLqFXu7U6sCYBGs5c0TYO8vd9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUE4dW9WZTd0VHF3SmdFYXpselJOZzd5OTMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS80YmZkNTYtODgwZC00OTliLTg3MjQt ZDc5NzFmMWU1OTlkLzEvNG9YZ1otMVllMmZDMWNGVTBydmhrbE5uTlFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS80YmZkNTYtODgwZC00OTliLTg3MjQtZDc5NzFmMWU1OTlk LzEvUUE4dW9WZTd0VHF3SmdFYXpselJOZzd5OTMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW98jMA0G CSqGSIb3DQEBCwUAA4IBAQAEznmFemKol9RHDbEYokiyXH9+QjlxrJzIb26fbKp1 YC6JQck13zj5+B/nDO7HSArm6V4bMAgEx5tE86gQyWUZV7mG1UwIA06OUHZvSkwO E3vM3STnC+m/ZF1ra5nLLcyZZpASIOtk85bik88SqpNj10thYCinlu0l6NGP6oM9 CFoTQOSdDCDlDBCwo/p+XiAdLqjyprt9yv/orEIYNu1Wk7CyCyJL29x8SI/8TpEu reAYWDPlBCP48iDakT8wazvpkM/QNyv1qx+GskiW/6oGI+xAd6E4mnUZfrYWtL3K XeaRkBlF5fotmtEw3rlFGrugahmXQdRjlUptTSsuuy8K -----END CERTIFICATE-----Generated at Sun Jan 25 22:32:05 2026 by rpki-client