This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/E907k5QYJtLiwC_jK3iFvXI9RdI.roa File: E907k5QYJtLiwC_jK3iFvXI9RdI.roa (raw, json) Hash identifier: snQqBx0r+DlkIlsrsM46ddsGDow3XlKtABIHB2rzqdc= Subject key identifier: 13:DD:3B:93:94:18:26:D2:E2:C0:2F:E3:2B:78:85:BD:72:3D:45:D2 Certificate issuer: /CN=aebc33d5ba585234cccef8a57ad86ca1eafc4aa2 Certificate serial: 019B7A5B50F69B9BCEBEFB6540D0A0FF1EC2 Authority key identifier: AE:BC:33:D5:BA:58:52:34:CC:CE:F8:A5:7A:D8:6C:A1:EA:FC:4A:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/E907k5QYJtLiwC_jK3iFvXI9RdI.roa Signing time: Thu 01 Jan 2026 16:19:23 +0000 ROA not before: Thu 01 Jan 2026 16:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198333 IP address blocks: 91.217.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:50:f6:9b:9b:ce:be:fb:65:40:d0:a0:ff:1e:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aebc33d5ba585234cccef8a57ad86ca1eafc4aa2 Validity Not Before: Jan 1 16:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=13dd3b93941826d2e2c02fe32b7885bd723d45d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c5:91:3c:ca:af:64:7f:3a:04:92:d5:f2:96: f2:c7:40:c4:59:5f:dc:5d:ab:9e:c1:f4:5d:22:9b: fa:1c:68:9f:79:c6:c4:ae:05:58:56:fe:ab:38:24: ac:9a:75:89:1c:e4:ca:d2:64:d0:14:28:46:19:1b: 9e:02:f8:e8:9a:ba:2d:91:53:04:9c:b1:ad:4b:0e: 37:4c:1c:3c:f7:68:e5:c9:dd:2c:92:2e:d7:2e:c3: 8a:4a:7f:f8:66:7e:57:eb:2b:77:94:54:48:6a:4b: 78:29:4f:fa:4d:27:b0:16:50:79:88:bd:af:4a:ff: db:55:1d:ad:cc:1d:54:98:78:e7:21:b3:79:8c:52: 9e:94:27:4f:35:9d:74:d7:88:de:e1:5e:f6:bc:63: 47:e3:64:af:b8:8d:16:34:dd:ee:4e:a9:cd:25:62: 82:7c:fc:a2:4e:be:12:7b:b6:0e:c9:cc:17:d2:b8: cd:d4:85:2c:4b:8a:1b:b6:63:03:4b:34:33:85:f9: 92:94:70:17:69:78:93:01:92:5b:d3:d8:8d:da:4d: ab:9b:fa:4a:04:43:bd:52:5d:c5:73:ae:57:e6:80: d5:83:af:75:52:62:a2:36:17:06:cf:de:e6:7c:da: 8d:80:ff:4a:dc:24:2f:d8:61:6b:a0:47:93:55:87: 08:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:DD:3B:93:94:18:26:D2:E2:C0:2F:E3:2B:78:85:BD:72:3D:45:D2 X509v3 Authority Key Identifier: keyid:AE:BC:33:D5:BA:58:52:34:CC:CE:F8:A5:7A:D8:6C:A1:EA:FC:4A:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/E907k5QYJtLiwC_jK3iFvXI9RdI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.217.141.0/24 Signature Algorithm: sha256WithRSAEncryption 97:ef:54:2c:78:16:42:5e:f9:12:ce:b0:65:53:9d:43:67:ed: e6:98:d3:09:9f:fd:d0:55:b5:71:64:3a:b0:7d:0d:0e:e1:ef: 03:49:8f:0f:1c:0b:6d:e2:cc:d3:ff:88:ea:d2:3b:00:cd:6d: 27:2e:50:63:30:49:e5:c2:bf:4f:6c:cb:77:d3:1c:8a:67:f7: 31:0c:70:0a:84:bf:7b:99:fb:ad:c8:64:6b:ba:10:74:7c:0e: 41:b6:78:f4:9a:0f:6f:c8:06:7d:db:84:d5:22:e7:d2:d7:78: 4c:03:d6:ee:1a:b3:2c:26:27:00:c7:77:55:ab:6a:26:fb:02: 63:67:9d:e2:14:27:7b:e2:29:2f:bc:3d:b5:6a:94:a3:ff:84: bd:8c:cc:5c:3a:5f:82:ed:bd:ea:1d:d3:c0:4d:9e:5d:d7:4e: 9b:48:b4:ce:87:87:20:3b:7a:bb:2f:3a:c4:0e:40:ff:d1:5f: 55:5e:5e:f6:92:39:b1:94:86:19:6f:ab:f1:18:39:54:7c:0b: 1f:5b:38:55:85:3c:12:a9:c8:7d:a6:06:3c:58:6e:38:a6:19: 9b:de:76:2c:88:d7:97:26:6c:fd:c3:fd:7e:36:25:0f:80:71: 21:dd:8a:fb:c9:f7:70:0e:38:e3:92:ac:8b:4a:4c:4d:23:94: 77:7d:09:e0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W1D2m5vOvvtlQNCg/x7CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYmMzM2Q1YmE1ODUyMzRjY2NlZjhhNTdhZDg2Y2ExZWFm YzRhYTIwHhcNMjYwMTAxMTYxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxM2RkM2I5Mzk0MTgyNmQyZTJjMDJmZTMyYjc4ODViZDcyM2Q0NWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcWRPMqvZH86BJLV8pbyx0DEWV/c XauewfRdIpv6HGifecbErgVYVv6rOCSsmnWJHOTK0mTQFChGGRueAvjomrotkVME nLGtSw43TBw892jlyd0ski7XLsOKSn/4Zn5X6yt3lFRIakt4KU/6TSewFlB5iL2v Sv/bVR2tzB1UmHjnIbN5jFKelCdPNZ1014je4V72vGNH42SvuI0WNN3uTqnNJWKC fPyiTr4Se7YOycwX0rjN1IUsS4obtmMDSzQzhfmSlHAXaXiTAZJb09iN2k2rm/pK BEO9Ul3Fc65X5oDVg691UmKiNhcGz97mfNqNgP9K3CQv2GFroEeTVYcIFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBPdO5OUGCbS4sAv4yt4hb1yPUXSMB8GA1UdIwQY MBaAFK68M9W6WFI0zM74pXrYbKHq/EqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnJ3ejFicFlValRNenZpbGV0aHNvZXI4U3FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9iNjc1NTEtMzVlMy00MmYxLTkxMmIt OTZhNWI1ZGFkNjcxLzEvRTkwN2s1UVlKdExpd0NfakszaUZ2WEk5UmRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9iNjc1NTEtMzVlMy00MmYxLTkxMmItOTZhNWI1ZGFkNjcx LzEvcnJ3ejFicFlValRNenZpbGV0aHNvZXI4U3FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9mNMA0G CSqGSIb3DQEBCwUAA4IBAQCX71QseBZCXvkSzrBlU51DZ+3mmNMJn/3QVbVxZDqw fQ0O4e8DSY8PHAtt4szT/4jq0jsAzW0nLlBjMEnlwr9PbMt30xyKZ/cxDHAKhL97 mfutyGRruhB0fA5Btnj0mg9vyAZ924TVIufS13hMA9buGrMsJicAx3dVq2om+wJj Z53iFCd74ikvvD21apSj/4S9jMxcOl+C7b3qHdPATZ5d106bSLTOh4cgO3q7LzrE DkD/0V9VXl72kjmxlIYZb6vxGDlUfAsfWzhVhTwSqch9pgY8WG44phmb3nYsiNeX Jmz9w/1+NiUPgHEh3Yr7yfdwDjjjkqyLSkxNI5R3fQng -----END CERTIFICATE-----Generated at Mon Jan 26 04:43:04 2026 by rpki-client