This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/shE5nirJjfzwtVvRNs6B8132Y90.roa File: shE5nirJjfzwtVvRNs6B8132Y90.roa (raw, json) Hash identifier: bZPp9AYR6VCS07rIaJOgsQumohQ23Ohhw0oW9Q96CQ4= Subject key identifier: B2:11:39:9E:2A:C9:8D:FC:F0:B5:5B:D1:36:CE:81:F3:5D:F6:63:DD Certificate issuer: /CN=33c342c06aacc359d39439ff58defa8ea1875748 Certificate serial: 019B79113617224852C5D7813EB07813F087 Authority key identifier: 33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/shE5nirJjfzwtVvRNs6B8132Y90.roa Signing time: Thu 01 Jan 2026 10:18:49 +0000 ROA not before: Thu 01 Jan 2026 10:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198973 IP address blocks: 109.236.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:36:17:22:48:52:c5:d7:81:3e:b0:78:13:f0:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33c342c06aacc359d39439ff58defa8ea1875748 Validity Not Before: Jan 1 10:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b211399e2ac98dfcf0b55bd136ce81f35df663dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e4:ea:d4:04:19:46:d0:49:8f:a8:95:ed:7a: 8e:22:d2:6e:d9:5d:ef:be:92:00:cf:b7:54:6c:c9: fd:ca:4d:b8:25:d4:5c:11:6c:eb:20:77:77:1b:b7: 92:18:6d:2f:3f:bd:8e:1f:28:1f:e0:e2:be:8c:aa: fa:f4:ee:0f:13:f5:6c:f2:76:ec:67:36:6f:4a:3e: 02:3a:36:f4:f0:e2:90:2c:f1:e3:0f:f1:54:b8:31: 42:be:d2:0f:68:8c:2f:c4:6f:6c:bd:bc:a0:aa:6c: 9b:f5:07:db:40:a6:04:cc:9b:8e:f9:b0:98:3a:8a: 6a:3a:6c:6f:7a:04:7d:a2:d5:a6:73:95:06:6e:f0: e9:86:b2:d5:6e:ad:4e:f3:63:50:f0:d7:d4:c9:0c: bc:f9:5c:c2:67:42:66:13:02:90:9f:ef:78:61:09: c5:db:21:07:4b:14:23:a4:e4:c8:04:7b:45:cd:36: 06:01:4a:c6:78:0d:ff:21:b8:8d:8e:e3:5d:e8:4b: 32:92:6a:dc:36:18:9b:01:30:c5:92:ed:e2:9e:e2: d8:22:f4:10:f1:45:7c:81:1b:f9:1b:e3:a0:45:46: 0a:38:a8:4a:e1:7c:4f:f4:e8:b4:b5:c2:5e:d2:79: cd:ea:8f:58:93:6a:af:f7:6d:d7:07:0b:04:dc:8c: 37:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:11:39:9E:2A:C9:8D:FC:F0:B5:5B:D1:36:CE:81:F3:5D:F6:63:DD X509v3 Authority Key Identifier: keyid:33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/shE5nirJjfzwtVvRNs6B8132Y90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.236.244.0/24 Signature Algorithm: sha256WithRSAEncryption 58:7b:0a:7d:65:1e:fb:c6:d2:e2:1e:c6:3a:1d:0d:4d:84:10: f7:f1:7d:d8:e4:7a:ac:be:bd:70:f1:67:0e:2c:20:5d:f6:01: 45:de:8e:8b:50:7c:e9:64:09:24:30:d3:10:a7:0e:a1:cd:52: 23:3e:6b:eb:fe:3d:ab:64:4c:e3:e0:92:65:fe:c5:eb:fb:24: db:ef:74:10:27:80:cd:f4:22:e2:30:b3:fe:b2:94:bb:be:35: 6d:79:10:f4:9f:0d:1d:e0:a4:c4:14:40:26:de:43:ab:dd:89: 6f:e2:5f:c6:d1:48:c6:6b:8d:1c:92:fb:aa:1a:86:b1:89:81: 2e:40:0e:b2:3e:b3:04:67:9b:79:11:2d:99:93:c9:f1:e7:ba: 1e:2a:88:21:6b:3e:1b:57:63:d9:8d:25:5d:40:81:ad:55:5b: 37:8f:fe:6f:67:96:19:38:2c:55:37:89:32:40:cc:10:4b:45: 6f:d8:fb:8d:30:7a:bf:f5:0b:65:ac:f9:4b:a1:2e:c8:10:b2: 74:d4:b9:f7:23:5f:57:01:d6:03:79:b5:c5:f5:51:44:ad:62: e8:31:d8:fd:50:af:f0:95:bc:d7:9b:1e:92:73:a7:1f:f0:93: dc:1c:aa:44:bb:c7:b1:e1:bc:21:f0:c8:f8:11:ed:98:c9:e3: 23:58:5f:00 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ETYXIkhSxdeBPrB4E/CHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzYzM0MmMwNmFhY2MzNTlkMzk0MzlmZjU4ZGVmYThlYTE4 NzU3NDgwHhcNMjYwMTAxMTAxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjExMzk5ZTJhYzk4ZGZjZjBiNTViZDEzNmNlODFmMzVkZjY2M2RkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOTq1AQZRtBJj6iV7XqOItJu2V3v vpIAz7dUbMn9yk24JdRcEWzrIHd3G7eSGG0vP72OHygf4OK+jKr69O4PE/Vs8nbs ZzZvSj4COjb08OKQLPHjD/FUuDFCvtIPaIwvxG9svbygqmyb9QfbQKYEzJuO+bCY OopqOmxvegR9otWmc5UGbvDphrLVbq1O82NQ8NfUyQy8+VzCZ0JmEwKQn+94YQnF 2yEHSxQjpOTIBHtFzTYGAUrGeA3/IbiNjuNd6EsykmrcNhibATDFku3inuLYIvQQ 8UV8gRv5G+OgRUYKOKhK4XxP9Oi0tcJe0nnN6o9Yk2qv923XBwsE3Iw3LQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLIROZ4qyY388LVb0TbOgfNd9mPdMB8GA1UdIwQY MBaAFDPDQsBqrMNZ05Q5/1je+o6hh1dIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9jNTVmZGYtYTY4YS00YWEwLWI4YzUt N2YyMzMzNjA0OTk3LzEvc2hFNW5pckpqZnp3dFZ2Uk5zNkI4MTMyWTkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9jNTVmZGYtYTY4YS00YWEwLWI4YzUtN2YyMzMzNjA0OTk3 LzEvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbez0MA0G CSqGSIb3DQEBCwUAA4IBAQBYewp9ZR77xtLiHsY6HQ1NhBD38X3Y5Hqsvr1w8WcO LCBd9gFF3o6LUHzpZAkkMNMQpw6hzVIjPmvr/j2rZEzj4JJl/sXr+yTb73QQJ4DN 9CLiMLP+spS7vjVteRD0nw0d4KTEFEAm3kOr3Ylv4l/G0UjGa40ckvuqGoaxiYEu QA6yPrMEZ5t5ES2Zk8nx57oeKoghaz4bV2PZjSVdQIGtVVs3j/5vZ5YZOCxVN4ky QMwQS0Vv2PuNMHq/9QtlrPlLoS7IELJ01Ln3I19XAdYDebXF9VFErWLoMdj9UK/w lbzXmx6Sc6cf8JPcHKpEu8ex4bwh8Mj4Ee2YyeMjWF8A -----END CERTIFICATE-----Generated at Mon Jan 26 07:40:22 2026 by rpki-client