This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/8f9bb8-90bc-4958-8f93-8700078552a3/1/AEGyTye3ghOpjnN1FsrGf0gISLw.roa File: AEGyTye3ghOpjnN1FsrGf0gISLw.roa (raw, json) Hash identifier: 8XpO8RAIJAiW0JXf+HM5D7Hzkm+QZoXTh5fUgfJ/vvk= Subject key identifier: 00:41:B2:4F:27:B7:82:13:A9:8E:73:75:16:CA:C6:7F:48:08:48:BC Certificate issuer: /CN=2fbeb5b53809c0ab1e4e017db4bf5078815ae66a Certificate serial: 019B7AC78EA764E43791EC54939DA6DA6C1B Authority key identifier: 2F:BE:B5:B5:38:09:C0:AB:1E:4E:01:7D:B4:BF:50:78:81:5A:E6:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L761tTgJwKseTgF9tL9QeIFa5mo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/8f9bb8-90bc-4958-8f93-8700078552a3/1/AEGyTye3ghOpjnN1FsrGf0gISLw.roa Signing time: Thu 01 Jan 2026 18:17:37 +0000 ROA not before: Thu 01 Jan 2026 18:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47633 IP address blocks: 91.208.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/8f9bb8-90bc-4958-8f93-8700078552a3/1/L761tTgJwKseTgF9tL9QeIFa5mo.crl rsync://rpki.ripe.net/repository/DEFAULT/11/8f9bb8-90bc-4958-8f93-8700078552a3/1/L761tTgJwKseTgF9tL9QeIFa5mo.mft rsync://rpki.ripe.net/repository/DEFAULT/L761tTgJwKseTgF9tL9QeIFa5mo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:8e:a7:64:e4:37:91:ec:54:93:9d:a6:da:6c:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fbeb5b53809c0ab1e4e017db4bf5078815ae66a Validity Not Before: Jan 1 18:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0041b24f27b78213a98e737516cac67f480848bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:38:36:25:53:38:79:4a:1e:98:70:da:31:70: 54:b9:d2:0d:5c:f3:1b:6e:92:9b:7c:c1:94:73:4f: be:c6:61:1d:73:0c:5f:b0:0c:f2:85:98:de:60:e1: 4e:30:70:74:27:43:38:b9:c1:c9:d7:2d:67:34:fe: 17:26:e4:82:ac:93:f5:eb:f2:dc:20:8a:e0:8f:6c: 2f:cb:c8:ac:aa:28:20:a1:2b:f8:01:63:08:e9:d5: 7f:09:15:05:f8:6e:d0:34:20:24:99:18:aa:f8:43: d2:02:4d:ef:7a:01:af:b3:72:59:6c:a0:c5:d5:0f: f4:7e:27:89:68:4d:ef:57:49:3d:87:52:b8:45:32: e0:68:c5:6e:4d:5c:cc:4d:11:85:96:55:c5:08:d4: a1:20:bc:6f:a1:0c:de:ad:54:6f:7f:d1:1b:ac:c7: 39:18:24:69:8d:fa:30:d6:39:52:a2:3a:17:19:ae: 07:16:b7:10:f3:f8:d2:9b:7f:60:1e:29:d2:78:7c: b1:6d:65:dd:97:82:56:06:ce:3f:52:64:31:9d:05: e2:11:49:43:93:9d:e9:f3:6b:25:5e:38:e7:36:d4: c3:47:f3:1c:91:24:a1:ba:af:f6:7f:b6:62:ad:d3: 25:de:f9:f2:fe:91:e4:74:39:a2:4d:cd:05:ce:97: 09:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:41:B2:4F:27:B7:82:13:A9:8E:73:75:16:CA:C6:7F:48:08:48:BC X509v3 Authority Key Identifier: keyid:2F:BE:B5:B5:38:09:C0:AB:1E:4E:01:7D:B4:BF:50:78:81:5A:E6:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L761tTgJwKseTgF9tL9QeIFa5mo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8f9bb8-90bc-4958-8f93-8700078552a3/1/AEGyTye3ghOpjnN1FsrGf0gISLw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8f9bb8-90bc-4958-8f93-8700078552a3/1/L761tTgJwKseTgF9tL9QeIFa5mo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.72.0/24 Signature Algorithm: sha256WithRSAEncryption b5:06:c2:e3:e6:29:77:57:e9:73:ab:ac:5c:a8:50:ad:8e:4a: 38:12:78:28:6d:a1:3e:a6:4c:bc:f7:34:f1:f9:f8:11:99:0e: 90:7d:a2:6c:e2:ff:bf:f5:cf:8d:ae:4b:ea:07:7f:6e:87:59: 1e:a9:f4:e6:84:cc:97:2c:5f:95:09:06:c5:22:8e:61:83:82: 89:69:5a:bc:c8:da:9f:2e:88:d4:69:3e:7e:cf:c1:d3:77:16: fa:cf:51:06:e2:7f:50:fa:bb:2a:40:28:a7:20:d6:f7:cd:fc: 80:6c:01:88:45:f3:08:b5:3a:be:23:63:3b:85:ac:85:8a:71: 88:4f:46:0a:2d:c5:83:a7:d3:ee:68:17:d7:86:4d:46:54:e1: 17:36:1d:96:f8:ec:0e:92:a4:93:05:c0:5a:20:a4:f9:a9:e7: d3:53:eb:0a:8f:5a:f0:2c:e9:83:78:11:66:c4:b0:a5:c2:11: a9:13:94:28:3d:e9:b8:92:64:bb:7b:a7:fb:26:ae:be:1f:01: b5:6e:b9:70:a4:41:df:4a:0d:58:bd:7d:3f:83:3c:dc:38:06: 4c:fc:7e:d5:4b:0c:6a:47:14:c4:5e:23:c7:6e:54:e7:34:52: 37:32:3f:4d:74:64:2a:66:5b:78:33:7b:cf:65:31:bf:07:83: 90:84:3b:f1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x46nZOQ3kexUk52m2mwbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYmViNWI1MzgwOWMwYWIxZTRlMDE3ZGI0YmY1MDc4ODE1 YWU2NmEwHhcNMjYwMTAxMTgxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDQxYjI0ZjI3Yjc4MjEzYTk4ZTczNzUxNmNhYzY3ZjQ4MDg0OGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jg2JVM4eUoemHDaMXBUudINXPMb bpKbfMGUc0++xmEdcwxfsAzyhZjeYOFOMHB0J0M4ucHJ1y1nNP4XJuSCrJP16/Lc IIrgj2wvy8isqiggoSv4AWMI6dV/CRUF+G7QNCAkmRiq+EPSAk3vegGvs3JZbKDF 1Q/0fieJaE3vV0k9h1K4RTLgaMVuTVzMTRGFllXFCNShILxvoQzerVRvf9EbrMc5 GCRpjfow1jlSojoXGa4HFrcQ8/jSm39gHinSeHyxbWXdl4JWBs4/UmQxnQXiEUlD k53p82slXjjnNtTDR/MckSShuq/2f7ZirdMl3vny/pHkdDmiTc0FzpcJewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFABBsk8nt4ITqY5zdRbKxn9ICEi8MB8GA1UdIwQY MBaAFC++tbU4CcCrHk4BfbS/UHiBWuZqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDc2MXRUZ0p3S3NlVGdGOXRMOVFlSUZhNW1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS84ZjliYjgtOTBiYy00OTU4LThmOTMt ODcwMDA3ODU1MmEzLzEvQUVHeVR5ZTNnaE9wam5OMUZzckdmMGdJU0x3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS84ZjliYjgtOTBiYy00OTU4LThmOTMtODcwMDA3ODU1MmEz LzEvTDc2MXRUZ0p3S3NlVGdGOXRMOVFlSUZhNW1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9BIMA0G CSqGSIb3DQEBCwUAA4IBAQC1BsLj5il3V+lzq6xcqFCtjko4EngobaE+pky89zTx +fgRmQ6QfaJs4v+/9c+NrkvqB39uh1keqfTmhMyXLF+VCQbFIo5hg4KJaVq8yNqf LojUaT5+z8HTdxb6z1EG4n9Q+rsqQCinINb3zfyAbAGIRfMItTq+I2M7hayFinGI T0YKLcWDp9PuaBfXhk1GVOEXNh2W+OwOkqSTBcBaIKT5qefTU+sKj1rwLOmDeBFm xLClwhGpE5QoPem4kmS7e6f7Jq6+HwG1brlwpEHfSg1YvX0/gzzcOAZM/H7VSwxq RxTEXiPHblTnNFI3Mj9NdGQqZlt4M3vPZTG/B4OQhDvx -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:43 2026 by rpki-client