This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/EnLcppgM0qNoUcRBoYxYh6maukU.roa File: EnLcppgM0qNoUcRBoYxYh6maukU.roa (raw, json) Hash identifier: Hpf2B2TmnwiylcYCMr2VVCuhMpJu2BxnFwq/SGF1Ly4= Subject key identifier: 12:72:DC:A6:98:0C:D2:A3:68:51:C4:41:A1:8C:58:87:A9:9A:BA:45 Certificate issuer: /CN=9bdffc8bdb844970b8e28b9b4be6f2c06dfd7985 Certificate serial: 019B7BA53026665F59F065CC2267B3EFE2D6 Authority key identifier: 9B:DF:FC:8B:DB:84:49:70:B8:E2:8B:9B:4B:E6:F2:C0:6D:FD:79:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9_8i9uESXC44oubS-bywG39eYU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/EnLcppgM0qNoUcRBoYxYh6maukU.roa Signing time: Thu 01 Jan 2026 22:19:41 +0000 ROA not before: Thu 01 Jan 2026 22:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213138 IP address blocks: 91.218.57.0/24 maxlen: 24 2a07:fec0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.crl rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.mft rsync://rpki.ripe.net/repository/DEFAULT/m9_8i9uESXC44oubS-bywG39eYU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:30:26:66:5f:59:f0:65:cc:22:67:b3:ef:e2:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bdffc8bdb844970b8e28b9b4be6f2c06dfd7985 Validity Not Before: Jan 1 22:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1272dca6980cd2a36851c441a18c5887a99aba45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d3:66:0a:35:08:55:b5:df:11:31:ad:ba:42: e1:5a:8b:ef:98:a2:fd:79:8e:7d:f2:a5:b4:82:f7: e8:22:a1:1c:38:c1:8d:30:04:a6:d6:98:35:83:bd: fe:94:ac:35:51:50:a2:d1:47:de:e2:2a:87:60:ac: ee:25:7f:49:24:38:25:b9:9a:95:70:0f:50:b8:af: 0a:56:ed:bf:ca:fe:75:2d:cc:68:6a:dd:d7:a9:37: 86:8d:fb:be:69:89:de:b2:dc:05:65:54:08:21:a3: 82:10:d7:de:2b:e6:69:4f:94:58:ad:af:22:10:57: 35:e4:47:32:17:b6:7e:c3:f6:f3:93:5f:d3:0b:c1: 93:5b:93:6b:20:ba:08:3a:c5:99:6e:18:60:3c:f9: 1c:c1:cf:13:84:20:3f:ce:26:59:06:5d:11:77:91: d8:0a:f4:4e:3d:59:90:2a:c8:b8:8b:0b:43:9a:02: 67:8a:45:fd:5d:07:2a:e0:b0:73:2c:91:ae:83:b8: da:2d:37:31:05:60:79:82:66:f9:c0:aa:23:4f:ec: 28:6e:6a:6b:47:10:f5:e1:e4:cc:47:1d:90:2d:6b: 17:9d:24:6a:4e:b8:48:7b:68:9b:23:bb:82:cd:03: df:a1:bb:30:5e:c0:d6:02:66:82:0d:b7:09:85:5b: c8:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:72:DC:A6:98:0C:D2:A3:68:51:C4:41:A1:8C:58:87:A9:9A:BA:45 X509v3 Authority Key Identifier: keyid:9B:DF:FC:8B:DB:84:49:70:B8:E2:8B:9B:4B:E6:F2:C0:6D:FD:79:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9_8i9uESXC44oubS-bywG39eYU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/EnLcppgM0qNoUcRBoYxYh6maukU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.218.57.0/24 IPv6: 2a07:fec0::/29 Signature Algorithm: sha256WithRSAEncryption af:3e:b8:1e:b1:d2:1c:a8:46:70:92:e8:af:26:97:66:9a:5c: 1e:e7:b2:47:b8:7a:c3:ea:12:6d:3d:d8:6d:e9:5b:b9:55:1c: 87:4c:96:8e:e4:53:64:13:72:e9:5d:45:43:81:7f:73:bc:2e: 90:ef:b0:23:71:a7:a8:88:0d:48:13:8a:e0:e2:b3:99:1b:91: 17:84:17:41:6d:f4:f7:b5:ec:9d:ca:9a:d0:9f:68:15:26:8e: 86:99:e0:1a:7f:78:b7:1a:67:8c:d9:c2:65:3c:8b:80:ee:01: 2f:75:e3:09:2a:cc:d7:55:54:e1:c0:64:fa:d0:ee:bd:95:b2: 97:33:69:70:e4:16:de:85:9a:44:86:b7:7e:6a:87:34:c6:88: 30:fe:be:47:52:66:46:5e:f8:20:b4:73:b4:93:3c:08:a3:61: 44:12:94:11:7d:e3:0a:b8:8b:02:9e:c2:44:04:a5:38:38:9f: e9:4f:bc:be:96:30:1e:ac:57:77:42:05:e7:33:4a:62:96:26: be:bc:ea:cb:9d:25:be:23:95:43:33:98:6e:7d:99:d9:ae:a0: 46:cb:9d:f0:2c:a5:0e:0b:37:a9:ad:0d:ef:17:90:2c:85:76: 13:c3:55:73:ee:97:9a:6b:0b:21:ff:8b:a5:ad:10:48:e5:e9: 44:63:ab:8f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7pTAmZl9Z8GXMImez7+LWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliZGZmYzhiZGI4NDQ5NzBiOGUyOGI5YjRiZTZmMmMwNmRm ZDc5ODUwHhcNMjYwMTAxMjIxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjcyZGNhNjk4MGNkMmEzNjg1MWM0NDFhMThjNTg4N2E5OWFiYTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstNmCjUIVbXfETGtukLhWovvmKL9 eY598qW0gvfoIqEcOMGNMASm1pg1g73+lKw1UVCi0Ufe4iqHYKzuJX9JJDgluZqV cA9QuK8KVu2/yv51Lcxoat3XqTeGjfu+aYnestwFZVQIIaOCENfeK+ZpT5RYra8i EFc15EcyF7Z+w/bzk1/TC8GTW5NrILoIOsWZbhhgPPkcwc8ThCA/ziZZBl0Rd5HY CvROPVmQKsi4iwtDmgJnikX9XQcq4LBzLJGug7jaLTcxBWB5gmb5wKojT+wobmpr RxD14eTMRx2QLWsXnSRqTrhIe2ibI7uCzQPfobswXsDWAmaCDbcJhVvIXwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBJy3KaYDNKjaFHEQaGMWIepmrpFMB8GA1UdIwQY MBaAFJvf/IvbhElwuOKLm0vm8sBt/XmFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTlfOGk5dUVTWEM0NG91YlMtYnl3RzM5ZVlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8wMTU3YTItOTA3Ni00YTgwLWJlMjMt MDUzZjNkZmMxNTIxLzEvRW5MY3BwZ00wcU5vVWNSQm9ZeFloNm1hdWtVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi8wMTU3YTItOTA3Ni00YTgwLWJlMjMtMDUzZjNkZmMxNTIx LzEvbTlfOGk5dUVTWEM0NG91YlMtYnl3RzM5ZVlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAW9o5MA0E AgACMAcDBQMqB/7AMA0GCSqGSIb3DQEBCwUAA4IBAQCvPrgesdIcqEZwkuivJpdm mlwe57JHuHrD6hJtPdht6Vu5VRyHTJaO5FNkE3LpXUVDgX9zvC6Q77AjcaeoiA1I E4rg4rOZG5EXhBdBbfT3teydyprQn2gVJo6GmeAaf3i3GmeM2cJlPIuA7gEvdeMJ KszXVVThwGT60O69lbKXM2lw5BbehZpEhrd+aoc0xogw/r5HUmZGXvggtHO0kzwI o2FEEpQRfeMKuIsCnsJEBKU4OJ/pT7y+ljAerFd3QgXnM0pilia+vOrLnSW+I5VD M5hufZnZrqBGy53wLKUOCzeprQ3vF5AshXYTw1Vz7peaawsh/4ulrRBI5elEY6uP -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:40 2026 by rpki-client