This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/Ea0xhlOm2YvTSj2LUGD3BIPNRR4.roa File: Ea0xhlOm2YvTSj2LUGD3BIPNRR4.roa (raw, json) Hash identifier: xQErZJEOiu3EHRTQnTGckBJupDV77OKBDm1q8oFWOjQ= Subject key identifier: 11:AD:31:86:53:A6:D9:8B:D3:4A:3D:8B:50:60:F7:04:83:CD:45:1E Certificate issuer: /CN=01c2863a6438b3402752a4740e90ce42eb589129 Certificate serial: 019B79EC50A70894A73A2436D9FBAA8B41A9 Authority key identifier: 01:C2:86:3A:64:38:B3:40:27:52:A4:74:0E:90:CE:42:EB:58:91:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/Ea0xhlOm2YvTSj2LUGD3BIPNRR4.roa Signing time: Thu 01 Jan 2026 14:18:08 +0000 ROA not before: Thu 01 Jan 2026 14:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42910 IP address blocks: 91.209.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:50:a7:08:94:a7:3a:24:36:d9:fb:aa:8b:41:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01c2863a6438b3402752a4740e90ce42eb589129 Validity Not Before: Jan 1 14:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=11ad318653a6d98bd34a3d8b5060f70483cd451e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:44:04:b4:0c:89:8e:03:32:7c:81:24:96:d4: cf:90:4a:f0:cb:e6:4a:94:e0:36:b4:e1:85:6a:1e: 8e:60:5b:40:01:b9:6f:5e:c2:45:6b:67:2c:60:40: b6:45:7f:c0:4a:8a:0e:17:c5:8b:4f:ad:dd:cb:c5: 16:b2:76:c1:f6:0a:f0:e1:6f:17:d6:17:5e:03:c2: bc:4c:89:01:61:1c:c8:bf:9a:69:18:9f:69:6b:79: ce:b4:5a:5f:24:27:94:87:6f:34:79:ec:34:80:89: 7b:bf:cb:49:3e:46:44:09:8f:db:50:75:61:5f:95: 68:a0:c0:f1:4b:ea:24:41:90:27:38:f8:be:ff:ab: 68:f9:0b:d8:2b:89:8c:89:89:0b:83:b0:26:98:79: 89:eb:aa:d0:05:cf:9e:3a:54:08:cc:23:62:ad:40: 28:d7:66:93:c5:a2:76:db:08:b6:45:63:24:0d:36: ca:33:d4:2f:87:81:5d:96:1a:92:7b:5f:8f:6c:30: 4f:d9:29:81:f5:70:1a:d4:0e:2d:75:b0:ca:cb:b8: 67:fb:9c:9c:df:b2:27:bd:e0:d6:15:b4:de:e9:42: 81:a4:22:00:cf:a9:f3:c4:5e:5f:1e:c7:f5:f7:28: be:41:f7:8c:9a:89:ec:f7:fa:55:69:96:25:08:48: ba:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:AD:31:86:53:A6:D9:8B:D3:4A:3D:8B:50:60:F7:04:83:CD:45:1E X509v3 Authority Key Identifier: keyid:01:C2:86:3A:64:38:B3:40:27:52:A4:74:0E:90:CE:42:EB:58:91:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/Ea0xhlOm2YvTSj2LUGD3BIPNRR4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.175.0/24 Signature Algorithm: sha256WithRSAEncryption 50:e0:aa:83:8f:1f:8f:a1:e9:83:bc:da:30:b8:e8:ab:5d:bd: ac:eb:cd:15:8a:52:ee:41:35:c1:f3:d7:36:be:c4:e0:e2:e7: c3:1f:db:a5:5c:c5:47:af:a6:53:d7:09:d8:f5:47:f3:fe:19: d3:23:98:c4:e4:e7:30:83:24:95:0d:7d:10:db:83:f2:6a:3a: 6d:85:af:e0:18:57:73:5d:31:39:6e:7d:c0:5f:47:b6:e9:70: c9:59:89:98:4e:43:61:da:be:d0:1d:f8:43:2c:52:db:46:72: 27:13:7a:8b:3d:87:a6:f4:c4:73:bd:09:24:ff:ef:d7:9d:ab: be:13:c3:83:a0:65:cd:94:31:85:52:10:1f:82:98:0b:bb:6a: 68:7a:f9:43:40:c0:40:72:46:7f:79:04:94:3c:3a:c4:94:e2: e2:b1:15:7b:9a:ef:e5:16:03:b5:ee:b2:ee:d7:9d:72:7b:7d: 57:6a:0b:a5:03:cd:b7:2b:05:8e:b8:a2:f3:ad:e5:79:d2:08: 19:5e:31:e4:77:de:66:ae:41:30:7a:39:ed:95:90:99:ba:9d: 0f:f6:18:d5:42:6a:34:15:f6:0e:4d:c4:17:61:f0:d6:44:be: 54:aa:89:4e:22:62:c2:59:6f:96:9d:2f:ea:6f:a7:e1:84:f4: bb:8d:2d:a5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57FCnCJSnOiQ22fuqi0GpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxYzI4NjNhNjQzOGIzNDAyNzUyYTQ3NDBlOTBjZTQyZWI1 ODkxMjkwHhcNMjYwMTAxMTQxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMWFkMzE4NjUzYTZkOThiZDM0YTNkOGI1MDYwZjcwNDgzY2Q0NTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40QEtAyJjgMyfIEkltTPkErwy+ZK lOA2tOGFah6OYFtAAblvXsJFa2csYEC2RX/ASooOF8WLT63dy8UWsnbB9grw4W8X 1hdeA8K8TIkBYRzIv5ppGJ9pa3nOtFpfJCeUh280eew0gIl7v8tJPkZECY/bUHVh X5VooMDxS+okQZAnOPi+/6to+QvYK4mMiYkLg7AmmHmJ66rQBc+eOlQIzCNirUAo 12aTxaJ22wi2RWMkDTbKM9Qvh4FdlhqSe1+PbDBP2SmB9XAa1A4tdbDKy7hn+5yc 37InveDWFbTe6UKBpCIAz6nzxF5fHsf19yi+QfeMmons9/pVaZYlCEi6JQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBGtMYZTptmL00o9i1Bg9wSDzUUeMB8GA1UdIwQY MBaAFAHChjpkOLNAJ1KkdA6QzkLrWJEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWNLR09tUTRzMEFuVXFSMERwRE9RdXRZa1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yNTIzN2UtY2U2YS00MzAyLWI2YTQt YjU0MDU4MzRmMGM1LzEvRWEweGhsT20yWXZUU2oyTFVHRDNCSVBOUlI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8yNTIzN2UtY2U2YS00MzAyLWI2YTQtYjU0MDU4MzRmMGM1 LzEvQWNLR09tUTRzMEFuVXFSMERwRE9RdXRZa1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9GvMA0G CSqGSIb3DQEBCwUAA4IBAQBQ4KqDjx+PoemDvNowuOirXb2s680VilLuQTXB89c2 vsTg4ufDH9ulXMVHr6ZT1wnY9Ufz/hnTI5jE5OcwgySVDX0Q24Pyajptha/gGFdz XTE5bn3AX0e26XDJWYmYTkNh2r7QHfhDLFLbRnInE3qLPYem9MRzvQkk/+/Xnau+ E8ODoGXNlDGFUhAfgpgLu2poevlDQMBAckZ/eQSUPDrElOLisRV7mu/lFgO17rLu 151ye31XagulA823KwWOuKLzreV50ggZXjHkd95mrkEwejntlZCZup0P9hjVQmo0 FfYOTcQXYfDWRL5UqolOImLCWW+WnS/qb6fhhPS7jS2l -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:48 2026 by rpki-client