This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/E02kulG3cuFET7qCfIGELuqcrIw.roa File: E02kulG3cuFET7qCfIGELuqcrIw.roa (raw, json) Hash identifier: PQPtlTXvYqFKCXRfSmjkrshxIArKKipQAXnmpgfBnic= Subject key identifier: 13:4D:A4:BA:51:B7:72:E1:44:4F:BA:82:7C:81:84:2E:EA:9C:AC:8C Certificate issuer: /CN=643daf122e3a87acaa6fdb62c35a252a199a58d9 Certificate serial: 019B7CEDB20DD83F24F2B15891A982C9C13B Authority key identifier: 64:3D:AF:12:2E:3A:87:AC:AA:6F:DB:62:C3:5A:25:2A:19:9A:58:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZD2vEi46h6yqb9tiw1olKhmaWNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/E02kulG3cuFET7qCfIGELuqcrIw.roa Signing time: Fri 02 Jan 2026 04:18:30 +0000 ROA not before: Fri 02 Jan 2026 04:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57956 IP address blocks: 91.237.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.crl rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZD2vEi46h6yqb9tiw1olKhmaWNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:b2:0d:d8:3f:24:f2:b1:58:91:a9:82:c9:c1:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=643daf122e3a87acaa6fdb62c35a252a199a58d9 Validity Not Before: Jan 2 04:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=134da4ba51b772e1444fba827c81842eea9cac8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:81:56:b5:e5:bb:eb:3c:34:99:8b:b6:23:77: 70:40:47:7e:2e:76:7f:de:a5:51:5f:eb:7b:2a:02: 5c:76:20:d4:96:31:12:4b:ad:6e:f1:9e:01:d3:34: 44:4b:16:5c:5c:88:f3:86:c2:05:92:1b:3a:21:d7: 32:5f:4a:20:79:aa:e6:be:5b:79:5d:ad:52:fe:10: 66:8d:b8:78:d2:2e:ac:b5:5b:44:57:88:8d:27:c5: 05:06:85:92:70:2a:a1:ef:6d:cd:97:b1:5d:1b:16: 39:f9:6b:8e:11:4c:c7:2f:a7:2e:31:44:d8:bf:ab: 80:7b:cf:2a:20:ab:21:af:d0:5d:d1:d6:48:7a:5f: c9:92:7e:47:72:d3:91:89:36:0e:df:ec:f7:96:97: d3:68:5b:6f:e8:9c:ed:81:f9:25:72:ad:e4:92:2f: d9:d0:e6:37:04:bc:16:1c:72:08:90:b1:5c:e8:0f: b1:f8:e6:51:fc:62:7d:05:87:67:e4:17:8f:6d:c8: 7f:6b:36:88:cc:fc:a5:cf:1c:7f:6e:af:e9:f5:52: 90:07:bd:41:a8:c2:1e:9c:2a:ba:69:ce:48:a8:24: 26:27:52:cc:95:45:6a:40:70:9c:13:c8:8f:3a:73: a0:ed:e6:1e:fa:cc:4c:84:89:57:b9:97:d5:5d:55: 75:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:4D:A4:BA:51:B7:72:E1:44:4F:BA:82:7C:81:84:2E:EA:9C:AC:8C X509v3 Authority Key Identifier: keyid:64:3D:AF:12:2E:3A:87:AC:AA:6F:DB:62:C3:5A:25:2A:19:9A:58:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZD2vEi46h6yqb9tiw1olKhmaWNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/E02kulG3cuFET7qCfIGELuqcrIw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.237.42.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:92:6b:83:cc:da:49:78:04:8a:1d:1f:20:af:92:56:41:73: dd:ac:05:ad:76:dd:ac:7f:cd:53:c0:bc:b1:66:86:d9:f0:58: 67:a1:57:8b:21:17:68:6f:33:72:89:e3:33:3a:46:a4:c9:f0: 89:ac:4f:2d:85:fd:09:02:d7:df:42:f9:dc:b6:09:02:2e:ea: bb:2c:97:3d:bf:b2:34:13:33:0f:65:4b:31:7e:47:32:f8:fa: a6:3e:1b:ac:77:8b:be:e0:65:da:cd:4b:fa:5f:6d:45:9d:fc: 2b:38:cf:ba:82:83:24:d0:4e:a0:fb:41:8f:4c:b8:b2:79:5f: da:dc:aa:2f:63:b6:03:7f:f5:b3:f6:e4:07:b5:1b:2e:e5:f5: 7b:40:46:5c:7c:03:e6:50:4f:38:ce:02:15:1d:cb:84:6b:15: dd:e0:c3:a9:74:7f:5d:3e:a0:61:2d:dd:5a:a0:1b:bd:67:78: a4:5b:60:b8:a2:18:5c:eb:9d:32:36:f3:ea:52:4c:e4:1f:32: 39:ba:a5:4e:78:a7:25:4e:45:6e:b0:20:ee:80:eb:9f:54:b4: a1:9d:0d:fa:00:55:bd:66:f8:96:30:e5:b6:d0:9c:ce:55:29: 30:35:01:42:e6:33:d0:a4:34:93:9d:b8:ea:89:7e:d7:71:0b: fe:9f:8c:a5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87bIN2D8k8rFYkamCycE7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0M2RhZjEyMmUzYTg3YWNhYTZmZGI2MmMzNWEyNTJhMTk5 YTU4ZDkwHhcNMjYwMTAyMDQxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzRkYTRiYTUxYjc3MmUxNDQ0ZmJhODI3YzgxODQyZWVhOWNhYzhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7YFWteW76zw0mYu2I3dwQEd+LnZ/ 3qVRX+t7KgJcdiDUljESS61u8Z4B0zRESxZcXIjzhsIFkhs6IdcyX0ogearmvlt5 Xa1S/hBmjbh40i6stVtEV4iNJ8UFBoWScCqh723Nl7FdGxY5+WuOEUzHL6cuMUTY v6uAe88qIKshr9Bd0dZIel/Jkn5HctORiTYO3+z3lpfTaFtv6Jztgfklcq3kki/Z 0OY3BLwWHHIIkLFc6A+x+OZR/GJ9BYdn5BePbch/azaIzPylzxx/bq/p9VKQB71B qMIenCq6ac5IqCQmJ1LMlUVqQHCcE8iPOnOg7eYe+sxMhIlXuZfVXVV1swIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBNNpLpRt3LhRE+6gnyBhC7qnKyMMB8GA1UdIwQY MBaAFGQ9rxIuOoesqm/bYsNaJSoZmljZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkQydkVpNDZoNnlxYjl0aXcxb2xLaG1hV05rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9lZDNkNGEtNzA0Zi00YWE0LTgyMWYt ZGNkNWU5NDc4MDg0LzEvRTAya3VsRzNjdUZFVDdxQ2ZJR0VMdXFjckl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9lZDNkNGEtNzA0Zi00YWE0LTgyMWYtZGNkNWU5NDc4MDg0 LzEvWkQydkVpNDZoNnlxYjl0aXcxb2xLaG1hV05rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+0qMA0G CSqGSIb3DQEBCwUAA4IBAQANkmuDzNpJeASKHR8gr5JWQXPdrAWtdt2sf81TwLyx ZobZ8FhnoVeLIRdobzNyieMzOkakyfCJrE8thf0JAtffQvnctgkCLuq7LJc9v7I0 EzMPZUsxfkcy+PqmPhusd4u+4GXazUv6X21FnfwrOM+6goMk0E6g+0GPTLiyeV/a 3KovY7YDf/Wz9uQHtRsu5fV7QEZcfAPmUE84zgIVHcuEaxXd4MOpdH9dPqBhLd1a oBu9Z3ikW2C4ohhc650yNvPqUkzkHzI5uqVOeKclTkVusCDugOufVLShnQ36AFW9 ZviWMOW20JzOVSkwNQFC5jPQpDSTnbjqiX7XcQv+n4yl -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:31 2026 by rpki-client