This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/Ke-GAW7E6yplbOZiIO0l5zT0Fic.roa File: Ke-GAW7E6yplbOZiIO0l5zT0Fic.roa (raw, json) Hash identifier: soIv2LC8f5IdezvuoAAVJw8fZgLBnWGjy9O5qvDQ/+M= Subject key identifier: 29:EF:86:01:6E:C4:EB:2A:65:6C:E6:62:20:ED:25:E7:34:F4:16:27 Certificate issuer: /CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7 Certificate serial: 019B77C6AF4034CB9D118DD2760BCAE9EB03 Authority key identifier: BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/Ke-GAW7E6yplbOZiIO0l5zT0Fic.roa Signing time: Thu 01 Jan 2026 04:17:48 +0000 ROA not before: Thu 01 Jan 2026 04:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49981 IP address blocks: 91.226.31.0/24 maxlen: 24 2a06:d641::/32 maxlen: 32 2a09:9446::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:af:40:34:cb:9d:11:8d:d2:76:0b:ca:e9:eb:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7 Validity Not Before: Jan 1 04:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=29ef86016ec4eb2a656ce66220ed25e734f41627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c8:75:93:13:e9:a2:f8:0d:fd:c4:a3:ce:1e: d5:ce:f2:b5:80:01:be:38:b5:59:7b:48:1d:13:60: df:e3:b1:b3:54:b5:a4:41:97:fc:e2:ab:12:92:74: 8d:ce:eb:04:51:5f:87:bd:88:15:b8:46:63:d5:83: c1:67:e6:25:6b:5e:c1:3b:aa:a6:e1:c4:4c:a4:87: 1d:02:e4:39:eb:37:dd:f5:58:5d:99:aa:bc:6b:20: 9b:1a:a9:e4:59:76:20:b4:89:91:c7:fb:e7:25:43: 08:4b:bb:aa:cf:bf:28:67:a8:ea:c7:ad:9e:40:74: 80:7c:ab:31:1c:23:23:a4:c2:fa:c7:11:0e:e7:93: af:45:d5:c6:ff:ef:aa:ac:16:d0:94:e7:ca:ce:d2: 16:37:65:a7:7c:51:6a:9d:33:0d:1a:22:a6:5a:26: 6b:32:6d:0c:1e:55:4c:24:a8:62:1f:f7:85:a9:7a: c4:34:da:11:15:cc:7b:fa:eb:52:c6:9f:0d:81:31: 8c:9e:26:ee:43:67:b1:a9:7e:ba:5c:69:01:fd:e1: 37:5e:6a:a7:8c:10:03:16:27:0d:48:3b:91:9f:7a: a7:32:7b:d2:b4:a9:31:7f:52:11:50:08:da:90:e4: 9d:e6:7f:85:f8:41:59:22:2b:b4:b5:84:5e:b0:f7: 81:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:EF:86:01:6E:C4:EB:2A:65:6C:E6:62:20:ED:25:E7:34:F4:16:27 X509v3 Authority Key Identifier: keyid:BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/Ke-GAW7E6yplbOZiIO0l5zT0Fic.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.226.31.0/24 IPv6: 2a06:d641::/32 2a09:9446::/32 Signature Algorithm: sha256WithRSAEncryption 0a:19:d3:bc:13:c2:06:be:ff:e4:58:6f:75:eb:2f:bb:c5:d2: 89:88:19:b5:9f:0a:d7:5b:1b:45:5a:5c:62:12:e4:fd:4c:c2: 36:7f:5b:21:01:9e:55:c7:ee:0c:56:14:0f:72:30:94:4c:af: 68:a2:28:8a:89:ce:6e:d7:06:b6:b8:5d:8b:5d:69:c3:63:ae: b7:57:dd:45:10:ce:89:29:14:f1:6b:53:92:10:67:11:d7:99: 8f:4b:f6:e7:79:90:65:49:03:2e:f2:01:77:67:eb:03:a5:4d: 3a:c5:c9:e8:60:0f:d6:ce:fa:2c:bd:a9:11:b5:bf:91:4c:f8: 39:1c:ea:a8:5f:13:9e:75:a6:df:34:f9:e3:a7:c2:fa:a5:df: 0c:bb:50:e7:d0:87:db:3b:c7:43:c6:ce:01:49:ca:ce:6c:ba: 85:f2:d3:ee:60:05:a6:39:0e:66:96:1d:0e:f3:f8:9f:59:5c: 9a:01:20:45:e6:36:4c:b2:af:4e:c5:1b:c3:6a:da:d2:53:21: 16:92:3b:e4:f3:e3:d1:d2:42:8e:4f:38:81:ae:03:f1:bd:94: 70:a5:63:a3:e6:59:2e:5d:9c:90:c7:50:66:f2:68:9a:56:8f: 0a:b2:7b:51:89:7c:47:65:ad:21:db:1e:8c:2d:24:6b:1f:c0: b8:16:e5:bd -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt3xq9ANMudEY3SdgvK6esDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYTBmMjU4ZWVmNGIyYmY0YmJhYTg0MzBjMWU1OGNhOGMx ODhlYTcwHhcNMjYwMTAxMDQxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOWVmODYwMTZlYzRlYjJhNjU2Y2U2NjIyMGVkMjVlNzM0ZjQxNjI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAush1kxPpovgN/cSjzh7VzvK1gAG+ OLVZe0gdE2Df47GzVLWkQZf84qsSknSNzusEUV+HvYgVuEZj1YPBZ+Yla17BO6qm 4cRMpIcdAuQ56zfd9Vhdmaq8ayCbGqnkWXYgtImRx/vnJUMIS7uqz78oZ6jqx62e QHSAfKsxHCMjpML6xxEO55OvRdXG/++qrBbQlOfKztIWN2WnfFFqnTMNGiKmWiZr Mm0MHlVMJKhiH/eFqXrENNoRFcx7+utSxp8NgTGMnibuQ2exqX66XGkB/eE3Xmqn jBADFicNSDuRn3qnMnvStKkxf1IRUAjakOSd5n+F+EFZIiu0tYResPeBWwIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFCnvhgFuxOsqZWzmYiDtJec09BYnMB8GA1UdIwQY MBaAFLqg8lju9LK/S7qoQwweWMqMGI6nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFEeVdPNzBzcjlMdXFoRERCNVl5b3dZanFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS81ZTBlZTEtYzgzMy00MjQxLTk2MGEt ZTU3NjhkNmIxODJjLzEvS2UtR0FXN0U2eXBsYk9aaUlPMGw1elQwRmljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS81ZTBlZTEtYzgzMy00MjQxLTk2MGEtZTU3NjhkNmIxODJj LzEvdXFEeVdPNzBzcjlMdXFoRERCNVl5b3dZanFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAMBAIAATAGAwQAW+IfMBQE AgACMA4DBQAqBtZBAwUAKgmURjANBgkqhkiG9w0BAQsFAAOCAQEAChnTvBPCBr7/ 5Fhvdesvu8XSiYgZtZ8K11sbRVpcYhLk/UzCNn9bIQGeVcfuDFYUD3IwlEyvaKIo ionObtcGtrhdi11pw2Out1fdRRDOiSkU8WtTkhBnEdeZj0v253mQZUkDLvIBd2fr A6VNOsXJ6GAP1s76LL2pEbW/kUz4ORzqqF8TnnWm3zT546fC+qXfDLtQ59CH2zvH Q8bOAUnKzmy6hfLT7mAFpjkOZpYdDvP4n1lcmgEgReY2TLKvTsUbw2ra0lMhFpI7 5PPj0dJCjk84ga4D8b2UcKVjo+ZZLl2ckMdQZvJomlaPCrJ7UYl8R2WtIdsejC0k ax/AuBblvQ== -----END CERTIFICATE-----Generated at Mon Jan 19 17:31:52 2026 by rpki-client