This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/kEJSnxenHfD3MGsQVg0rWMsU-r4.roa File: kEJSnxenHfD3MGsQVg0rWMsU-r4.roa (raw, json) Hash identifier: CKWwPe7aGHyQIJbjGScWajSnRgDC3Bc7VORq9esiMd8= Subject key identifier: 90:42:52:9F:17:A7:1D:F0:F7:30:6B:10:56:0D:2B:58:CB:14:FA:BE Certificate issuer: /CN=52bf21eeb36414b3280e6c33b0b57296b8f6b675 Certificate serial: 019B7F15ADEE17809C989CFD492B2245F116 Authority key identifier: 52:BF:21:EE:B3:64:14:B3:28:0E:6C:33:B0:B5:72:96:B8:F6:B6:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ur8h7rNkFLMoDmwzsLVylrj2tnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/kEJSnxenHfD3MGsQVg0rWMsU-r4.roa Signing time: Fri 02 Jan 2026 14:21:25 +0000 ROA not before: Fri 02 Jan 2026 14:21:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42563 IP address blocks: 91.197.56.0/24 maxlen: 24 2001:678:41c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft rsync://rpki.ripe.net/repository/DEFAULT/Ur8h7rNkFLMoDmwzsLVylrj2tnU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:ad:ee:17:80:9c:98:9c:fd:49:2b:22:45:f1:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52bf21eeb36414b3280e6c33b0b57296b8f6b675 Validity Not Before: Jan 2 14:21:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9042529f17a71df0f7306b10560d2b58cb14fabe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:27:2e:89:7d:00:e0:09:3e:11:bb:3c:8c:24: ac:f4:03:30:cb:ff:82:ad:24:0e:b7:3f:18:91:6b: 03:06:ff:8e:c8:82:3f:67:86:f3:d5:2e:4d:90:f1: 92:26:39:4a:1a:b5:c5:ab:dc:40:15:88:ae:69:01: cf:b9:28:fe:8a:e9:be:e6:cc:ec:bd:9e:88:1e:e5: 8a:f0:70:34:07:a3:56:0b:f5:ad:3f:df:a6:26:e7: 37:74:57:f1:64:14:e3:81:3b:dd:0b:34:29:08:1f: 09:1a:11:9d:83:0e:99:b0:7c:52:9c:66:6f:e3:49: fb:74:cb:60:82:15:d2:62:3f:cf:98:17:3c:4a:48: 3e:07:5b:fd:97:f2:c8:ac:fd:b3:1f:25:87:fd:6c: 64:59:3f:86:0f:d4:4d:81:77:d9:b1:91:5a:55:96: 56:70:81:97:b1:2b:0d:aa:07:bc:5d:42:d9:9b:07: 27:71:d0:c0:21:b8:ce:9f:ea:3f:27:25:ea:67:57: 38:54:b2:82:c7:e1:0b:de:59:e7:1d:fd:80:6b:28: aa:75:4b:c8:a3:ab:a4:2e:1e:69:10:ef:a2:63:1b: a5:4e:a7:a8:25:cd:a0:8a:33:65:15:68:23:e6:20: 0d:d6:3e:0b:9f:98:50:dd:f9:7f:db:1e:b4:5f:68: 04:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:42:52:9F:17:A7:1D:F0:F7:30:6B:10:56:0D:2B:58:CB:14:FA:BE X509v3 Authority Key Identifier: keyid:52:BF:21:EE:B3:64:14:B3:28:0E:6C:33:B0:B5:72:96:B8:F6:B6:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ur8h7rNkFLMoDmwzsLVylrj2tnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/kEJSnxenHfD3MGsQVg0rWMsU-r4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.197.56.0/24 IPv6: 2001:678:41c::/48 Signature Algorithm: sha256WithRSAEncryption 4c:90:ec:ba:d7:b7:6d:27:98:3f:81:22:51:58:fa:26:65:e6: 89:3a:45:17:ee:3b:44:b5:80:6a:ba:dd:c1:b0:e7:fa:44:83: 47:53:20:fd:6d:69:a9:cd:f9:4c:4d:4d:5e:4b:a2:36:98:cd: 16:a7:02:0d:72:41:eb:72:af:5d:4d:8f:a2:c9:d6:f9:73:cf: 95:9a:80:ca:4e:23:ec:61:c3:fa:a8:a3:57:85:3f:a2:d9:8b: cf:ed:72:9a:bf:a4:da:61:df:b2:67:a0:33:bd:6e:5e:c8:17: 2c:a5:7f:82:fd:05:c3:76:ab:94:f4:07:ac:bc:2c:4b:f2:3c: 04:43:4a:7d:b1:10:39:ed:30:34:87:f3:e1:21:af:ff:0e:2e: a0:f8:71:f5:0a:19:70:ca:ee:11:05:1d:a0:f8:90:d3:49:0e: c4:01:f8:44:cb:72:23:58:90:6a:26:56:6e:42:c8:e7:4b:5b: a5:7d:73:f3:cc:64:22:c6:ec:6f:ff:8f:0b:59:8d:a4:ee:db: ff:64:fd:43:81:3b:15:ee:b3:02:57:40:5d:b4:98:38:c9:4f: ce:b9:48:db:14:76:dd:3a:4e:12:12:f1:28:ff:c1:71:ab:a8: 49:f2:ba:b3:98:1e:aa:56:be:c7:cc:70:0a:f3:05:56:69:4e: 91:50:68:5f -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/Fa3uF4CcmJz9SSsiRfEWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyYmYyMWVlYjM2NDE0YjMyODBlNmMzM2IwYjU3Mjk2Yjhm NmI2NzUwHhcNMjYwMTAyMTQyMTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDQyNTI5ZjE3YTcxZGYwZjczMDZiMTA1NjBkMmI1OGNiMTRmYWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqycuiX0A4Ak+Ebs8jCSs9AMwy/+C rSQOtz8YkWsDBv+OyII/Z4bz1S5NkPGSJjlKGrXFq9xAFYiuaQHPuSj+ium+5szs vZ6IHuWK8HA0B6NWC/WtP9+mJuc3dFfxZBTjgTvdCzQpCB8JGhGdgw6ZsHxSnGZv 40n7dMtgghXSYj/PmBc8Skg+B1v9l/LIrP2zHyWH/WxkWT+GD9RNgXfZsZFaVZZW cIGXsSsNqge8XULZmwcncdDAIbjOn+o/JyXqZ1c4VLKCx+EL3lnnHf2AayiqdUvI o6ukLh5pEO+iYxulTqeoJc2gijNlFWgj5iAN1j4Ln5hQ3fl/2x60X2gEfQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFJBCUp8Xpx3w9zBrEFYNK1jLFPq+MB8GA1UdIwQY MBaAFFK/Ie6zZBSzKA5sM7C1cpa49rZ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXI4aDdyTmtGTE1vRG13enNMVnlscmoydG5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wNTk1NDMtNjllNC00OGY2LWExNzUt YWM5NmY2YWFiNDk0LzEva0VKU254ZW5IZkQzTUdzUVZnMHJXTXNVLXI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8wNTk1NDMtNjllNC00OGY2LWExNzUtYWM5NmY2YWFiNDk0 LzEvVXI4aDdyTmtGTE1vRG13enNMVnlscmoydG5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW8U4MA8E AgACMAkDBwAgAQZ4BBwwDQYJKoZIhvcNAQELBQADggEBAEyQ7LrXt20nmD+BIlFY +iZl5ok6RRfuO0S1gGq63cGw5/pEg0dTIP1taanN+UxNTV5LojaYzRanAg1yQety r11Nj6LJ1vlzz5WagMpOI+xhw/qoo1eFP6LZi8/tcpq/pNph37JnoDO9bl7IFyyl f4L9BcN2q5T0B6y8LEvyPARDSn2xEDntMDSH8+Ehr/8OLqD4cfUKGXDK7hEFHaD4 kNNJDsQB+ETLciNYkGomVm5CyOdLW6V9c/PMZCLG7G//jwtZjaTu2/9k/UOBOxXu swJXQF20mDjJT865SNsUdt06ThIS8Sj/wXGrqEnyurOYHqpWvsfMcArzBVZpTpFQ aF8= -----END CERTIFICATE-----Generated at Mon Feb 9 18:44:14 2026 by rpki-client