This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/eJRSSJ2okd5UCzM_2-qvK3U4-Vw.roa File: eJRSSJ2okd5UCzM_2-qvK3U4-Vw.roa (raw, json) Hash identifier: kPVh31w2HnqTCOv3mV2mx2QeB0MVVo+s0ob9l5XktM0= Subject key identifier: 78:94:52:48:9D:A8:91:DE:54:0B:33:3F:DB:EA:AF:2B:75:38:F9:5C Certificate issuer: /CN=23051215f6f1bd227db7f40df748d64c106f84a3 Certificate serial: 019B7A5B3931769C03B66395B5DE2EFD2B3B Authority key identifier: 23:05:12:15:F6:F1:BD:22:7D:B7:F4:0D:F7:48:D6:4C:10:6F:84:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/eJRSSJ2okd5UCzM_2-qvK3U4-Vw.roa Signing time: Thu 01 Jan 2026 16:19:17 +0000 ROA not before: Thu 01 Jan 2026 16:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25220 IP address blocks: 91.223.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.crl rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:39:31:76:9c:03:b6:63:95:b5:de:2e:fd:2b:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23051215f6f1bd227db7f40df748d64c106f84a3 Validity Not Before: Jan 1 16:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=789452489da891de540b333fdbeaaf2b7538f95c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5c:66:4c:3e:99:f0:31:3b:37:da:63:a7:f9: 66:99:96:61:b7:09:19:3f:2d:24:ec:b2:a3:1c:95: 2e:63:55:4c:db:df:c3:e5:27:9e:8d:cc:ae:0e:e8: f4:b9:09:bf:8b:70:f4:ba:8f:b4:ad:70:aa:30:93: 26:c2:53:de:da:a3:53:34:87:b9:12:2f:02:8d:91: 88:cb:02:10:42:1a:24:3c:69:d5:1b:a1:53:c6:65: a8:ec:51:ce:ff:91:35:55:c9:a2:0e:e4:01:0d:22: 1d:d1:76:8a:0c:f6:65:b3:ae:ab:45:b6:1c:1b:d8: f6:b9:e8:cf:55:4d:02:e0:a8:46:1e:e0:1c:9b:fd: ba:bd:c8:22:a8:ef:77:23:20:d1:d5:f6:80:c4:d1: 2c:ce:9e:af:da:9f:cc:65:65:9a:7b:af:81:7b:0a: 95:07:5c:f1:1a:7e:7b:e5:11:4f:bf:fd:6b:b1:ce: 02:36:87:8a:8a:9c:91:cc:1c:c0:f8:c6:85:91:d5: 2b:78:ea:0d:ba:f1:b0:89:70:24:54:ca:4f:2c:26: 42:dc:56:33:25:95:af:eb:b8:42:d7:49:80:87:3f: bf:b5:85:c9:3d:a3:8a:a9:38:38:62:8a:57:2d:d2: 7a:b5:69:17:08:3d:bb:7c:ad:20:59:e1:c9:0f:cd: 2e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:94:52:48:9D:A8:91:DE:54:0B:33:3F:DB:EA:AF:2B:75:38:F9:5C X509v3 Authority Key Identifier: keyid:23:05:12:15:F6:F1:BD:22:7D:B7:F4:0D:F7:48:D6:4C:10:6F:84:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/eJRSSJ2okd5UCzM_2-qvK3U4-Vw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.247.0/24 Signature Algorithm: sha256WithRSAEncryption 81:df:94:a7:6d:97:dc:c4:d7:b8:83:bd:6c:7e:92:e8:96:51: 5e:d4:98:04:8e:f2:86:10:db:f6:a0:9d:0e:3f:73:0e:44:bb: 75:db:fe:bd:2f:84:a5:dc:5b:09:62:d3:38:e8:25:35:31:a3: 0c:36:85:9d:cf:f1:af:df:1e:9e:8a:17:27:8b:64:25:42:6f: e7:06:3f:c0:b4:98:bd:14:2b:13:47:f3:74:4a:22:07:69:5e: f9:85:2b:f8:25:c7:e8:21:20:ee:89:ce:e8:4a:62:c4:67:25: b8:2d:f4:b4:3e:9d:df:af:7e:e9:46:25:6e:9b:01:ab:af:ac: 87:49:42:4a:23:cd:84:ad:f4:90:a8:1b:c4:fd:f1:73:bd:bd: 61:43:63:b0:32:95:ee:7f:d4:3b:d1:29:31:60:16:5d:62:06: a8:2a:08:d0:38:5a:3b:f4:7a:f9:9b:69:bf:21:60:f8:8b:c5: 21:91:c6:35:cd:5b:fe:b2:27:33:d9:ee:d2:b4:d3:ca:31:e3: 32:06:b9:23:48:b0:cf:0e:d8:55:ea:b1:45:48:26:10:57:b7: e0:c4:a5:d1:8c:95:87:db:d7:85:13:e7:20:b7:26:f7:21:fe: dd:69:71:26:8a:52:ce:8c:13:30:2a:c8:18:e7:f2:72:7d:42: b5:80:e8:ab -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WzkxdpwDtmOVtd4u/Ss7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMDUxMjE1ZjZmMWJkMjI3ZGI3ZjQwZGY3NDhkNjRjMTA2 Zjg0YTMwHhcNMjYwMTAxMTYxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODk0NTI0ODlkYTg5MWRlNTQwYjMzM2ZkYmVhYWYyYjc1MzhmOTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFxmTD6Z8DE7N9pjp/lmmZZhtwkZ Py0k7LKjHJUuY1VM29/D5SeejcyuDuj0uQm/i3D0uo+0rXCqMJMmwlPe2qNTNIe5 Ei8CjZGIywIQQhokPGnVG6FTxmWo7FHO/5E1VcmiDuQBDSId0XaKDPZls66rRbYc G9j2uejPVU0C4KhGHuAcm/26vcgiqO93IyDR1faAxNEszp6v2p/MZWWae6+BewqV B1zxGn575RFPv/1rsc4CNoeKipyRzBzA+MaFkdUreOoNuvGwiXAkVMpPLCZC3FYz JZWv67hC10mAhz+/tYXJPaOKqTg4YopXLdJ6tWkXCD27fK0gWeHJD80uSQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHiUUkidqJHeVAszP9vqryt1OPlcMB8GA1UdIwQY MBaAFCMFEhX28b0ifbf0DfdI1kwQb4SjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXdVU0ZmYnh2U0o5dF9RTjkwaldUQkJ2aEtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8yZmI0ODYtNzlhMC00Mzk2LTgzM2It NmM2ZjBlMzE5Y2ExLzEvZUpSU1NKMm9rZDVVQ3pNXzItcXZLM1U0LVZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy8yZmI0ODYtNzlhMC00Mzk2LTgzM2ItNmM2ZjBlMzE5Y2Ex LzEvSXdVU0ZmYnh2U0o5dF9RTjkwaldUQkJ2aEtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9/3MA0G CSqGSIb3DQEBCwUAA4IBAQCB35SnbZfcxNe4g71sfpLollFe1JgEjvKGENv2oJ0O P3MORLt12/69L4Sl3FsJYtM46CU1MaMMNoWdz/Gv3x6eihcni2QlQm/nBj/AtJi9 FCsTR/N0SiIHaV75hSv4JcfoISDuic7oSmLEZyW4LfS0Pp3fr37pRiVumwGrr6yH SUJKI82ErfSQqBvE/fFzvb1hQ2OwMpXuf9Q70SkxYBZdYgaoKgjQOFo79Hr5m2m/ IWD4i8UhkcY1zVv+sicz2e7StNPKMeMyBrkjSLDPDthV6rFFSCYQV7fgxKXRjJWH 29eFE+cgtyb3If7daXEmilLOjBMwKsgY5/JyfUK1gOir -----END CERTIFICATE-----Generated at Tue Feb 10 00:29:16 2026 by rpki-client