This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/E53XM9bwcUdhNes8XtMe3ZWybN8.roa File: E53XM9bwcUdhNes8XtMe3ZWybN8.roa (raw, json) Hash identifier: MGupxfszh7a8rx7tMG0y7Bj5FjeIlETaabShTOh0AgM= Subject key identifier: 13:9D:D7:33:D6:F0:71:47:61:35:EB:3C:5E:D3:1E:DD:95:B2:6C:DF Certificate issuer: /CN=d4d86e7d073a9e4d69ec715c3623176805894d5a Certificate serial: 019B7DCB11E23E47BB8AD5C38F5A9DEB7382 Authority key identifier: D4:D8:6E:7D:07:3A:9E:4D:69:EC:71:5C:36:23:17:68:05:89:4D:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NhufQc6nk1p7HFcNiMXaAWJTVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/E53XM9bwcUdhNes8XtMe3ZWybN8.roa Signing time: Fri 02 Jan 2026 08:20:18 +0000 ROA not before: Fri 02 Jan 2026 08:20:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62350 IP address blocks: 91.240.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft rsync://rpki.ripe.net/repository/DEFAULT/1NhufQc6nk1p7HFcNiMXaAWJTVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:11:e2:3e:47:bb:8a:d5:c3:8f:5a:9d:eb:73:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4d86e7d073a9e4d69ec715c3623176805894d5a Validity Not Before: Jan 2 08:20:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=139dd733d6f071476135eb3c5ed31edd95b26cdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:fc:66:1f:71:e1:13:24:68:34:2d:7d:fe:db: e9:f3:25:5e:95:5d:cc:74:09:bb:f2:ae:73:b2:76: 63:28:dc:12:e1:9f:aa:d5:17:3b:d7:a4:f7:d2:11: 5a:1d:a8:2d:0b:7f:25:56:17:ce:92:af:f3:59:ce: 01:9e:42:2d:60:92:f4:54:c0:64:4a:13:57:d1:b0: c2:25:84:a8:8d:40:ea:c4:d9:12:2d:4f:d1:f9:3f: 77:bd:ad:5b:d0:d1:53:32:5d:71:1f:05:ab:f9:be: df:f4:32:1d:ba:42:d5:df:58:a2:ca:52:f4:c7:d5: 4a:bc:89:e6:38:20:63:56:e0:a4:9a:33:4f:df:7c: 24:34:34:f8:4a:7a:30:00:61:34:17:48:12:df:01: 6c:5e:fa:1e:64:c8:00:7f:ae:dc:1f:f9:0e:1d:e3: 28:f1:f6:c2:bb:11:d2:0e:25:7b:dc:26:22:20:66: 03:eb:79:aa:98:4c:b0:9c:d9:b3:72:4e:7d:83:77: 3c:99:b1:93:6f:0c:cb:ac:3b:6f:9f:7d:b1:20:c7: 6b:6b:1f:c7:23:20:17:8f:75:15:56:b9:0b:3f:18: d6:14:b1:e8:8b:cf:21:f6:a8:9c:10:d9:ac:4a:d0: 11:b2:f2:f8:55:75:c8:16:68:50:89:c6:ce:35:04: bd:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:9D:D7:33:D6:F0:71:47:61:35:EB:3C:5E:D3:1E:DD:95:B2:6C:DF X509v3 Authority Key Identifier: keyid:D4:D8:6E:7D:07:3A:9E:4D:69:EC:71:5C:36:23:17:68:05:89:4D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NhufQc6nk1p7HFcNiMXaAWJTVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/E53XM9bwcUdhNes8XtMe3ZWybN8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.240.236.0/23 Signature Algorithm: sha256WithRSAEncryption 41:d8:aa:b3:fa:c4:f7:53:41:d9:87:c8:d4:83:d0:7a:02:2b: 0f:97:f4:d4:71:e2:0e:0d:aa:18:ec:93:3e:2f:65:2d:fe:74: 9a:a9:f5:d1:5d:99:ee:78:1e:6c:2e:f0:97:4c:a8:40:1b:14: 83:ef:b8:6e:35:4e:1b:c6:b6:49:e3:a3:70:79:62:ae:c8:4b: b4:56:3f:46:ae:00:4f:97:15:1c:47:e9:19:d0:06:d0:33:ca: 57:59:d8:71:c4:b6:42:8c:3f:4a:ac:4b:c3:b2:30:8a:f5:f8: bc:0a:ff:5d:5d:49:e7:73:64:99:33:e1:5e:26:59:a8:20:8e: d9:fd:80:f4:54:b2:58:e7:17:fc:b9:58:03:c5:48:31:9b:b1: 1c:b2:ab:3b:73:c7:6d:d4:85:f5:50:a7:52:4e:b9:da:df:27: 1b:33:d4:55:26:bd:07:2a:43:a5:38:09:7c:02:81:a9:d9:e9: 14:8c:50:e6:f1:40:58:51:34:8a:31:b0:f4:51:fa:67:b9:18: 4d:7a:74:32:99:6e:c0:df:6e:1b:fd:41:97:f6:3e:e4:f2:a8: 45:f1:1c:1f:bd:f4:01:07:3c:79:e6:91:ac:a0:f1:85:13:1c: 33:8e:14:5c:48:9e:d9:c5:b1:99:17:f9:7b:ad:f0:bd:d0:8f: 2b:70:17:05 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yxHiPke7itXDj1qd63OCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ZDg2ZTdkMDczYTllNGQ2OWVjNzE1YzM2MjMxNzY4MDU4 OTRkNWEwHhcNMjYwMTAyMDgyMDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzlkZDczM2Q2ZjA3MTQ3NjEzNWViM2M1ZWQzMWVkZDk1YjI2Y2RmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vxmH3HhEyRoNC19/tvp8yVelV3M dAm78q5zsnZjKNwS4Z+q1Rc716T30hFaHagtC38lVhfOkq/zWc4BnkItYJL0VMBk ShNX0bDCJYSojUDqxNkSLU/R+T93va1b0NFTMl1xHwWr+b7f9DIdukLV31iiylL0 x9VKvInmOCBjVuCkmjNP33wkNDT4SnowAGE0F0gS3wFsXvoeZMgAf67cH/kOHeMo 8fbCuxHSDiV73CYiIGYD63mqmEywnNmzck59g3c8mbGTbwzLrDtvn32xIMdrax/H IyAXj3UVVrkLPxjWFLHoi88h9qicENmsStARsvL4VXXIFmhQicbONQS9MQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBOd1zPW8HFHYTXrPF7THt2VsmzfMB8GA1UdIwQY MBaAFNTYbn0HOp5NaexxXDYjF2gFiU1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU5odWZRYzZuazFwN0hGY05pTVhhQVdKVFZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC84MmQ2NWEtNDVlMi00ZWZiLWIyM2Mt OTU1YWQ3OGJjYjA3LzEvRTUzWE05YndjVWRoTmVzOFh0TWUzWld5Yk44LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC84MmQ2NWEtNDVlMi00ZWZiLWIyM2MtOTU1YWQ3OGJjYjA3 LzEvMU5odWZRYzZuazFwN0hGY05pTVhhQVdKVFZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW/DsMA0G CSqGSIb3DQEBCwUAA4IBAQBB2Kqz+sT3U0HZh8jUg9B6AisPl/TUceIODaoY7JM+ L2Ut/nSaqfXRXZnueB5sLvCXTKhAGxSD77huNU4bxrZJ46NweWKuyEu0Vj9GrgBP lxUcR+kZ0AbQM8pXWdhxxLZCjD9KrEvDsjCK9fi8Cv9dXUnnc2SZM+FeJlmoII7Z /YD0VLJY5xf8uVgDxUgxm7Ecsqs7c8dt1IX1UKdSTrna3ycbM9RVJr0HKkOlOAl8 AoGp2ekUjFDm8UBYUTSKMbD0UfpnuRhNenQymW7A324b/UGX9j7k8qhF8RwfvfQB Bzx55pGsoPGFExwzjhRcSJ7ZxbGZF/l7rfC90I8rcBcF -----END CERTIFICATE-----Generated at Mon Jan 26 04:20:21 2026 by rpki-client