This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/56PKH7YMrBCc9R8BOdvmQYxeMC8.roa File: 56PKH7YMrBCc9R8BOdvmQYxeMC8.roa (raw, json) Hash identifier: D+8+obK3QpwhAemmlTLP2YO6xby6ajF6Y8nUY7wgtXA= Subject key identifier: E7:A3:CA:1F:B6:0C:AC:10:9C:F5:1F:01:39:DB:E6:41:8C:5E:30:2F Certificate issuer: /CN=8600aaf13d4de9c95b63759ad18636abc8e26376 Certificate serial: 019B79EBB7489FD4D2F5FCC828682E6A0757 Authority key identifier: 86:00:AA:F1:3D:4D:E9:C9:5B:63:75:9A:D1:86:36:AB:C8:E2:63:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/56PKH7YMrBCc9R8BOdvmQYxeMC8.roa Signing time: Thu 01 Jan 2026 14:17:29 +0000 ROA not before: Thu 01 Jan 2026 14:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48740 IP address blocks: 91.212.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.crl rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft rsync://rpki.ripe.net/repository/DEFAULT/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:b7:48:9f:d4:d2:f5:fc:c8:28:68:2e:6a:07:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8600aaf13d4de9c95b63759ad18636abc8e26376 Validity Not Before: Jan 1 14:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e7a3ca1fb60cac109cf51f0139dbe6418c5e302f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3b:7d:fd:47:82:c9:77:d6:39:36:e6:f4:c6: 6e:14:ea:87:8b:5b:03:45:2e:db:0a:5b:d9:68:3b: 7a:55:d5:aa:93:8d:5e:d0:f1:f2:44:e7:a6:1c:e2: 46:9a:05:be:16:02:07:1a:9b:6e:fc:ac:56:b8:66: 13:c9:ff:8a:08:b8:8c:ee:0d:03:ff:67:80:da:27: bc:9a:6d:73:f0:65:7e:bc:f3:8a:de:9b:32:14:5a: 80:02:8c:97:a5:97:f3:77:35:54:11:11:e5:82:4a: 73:57:31:49:1d:f9:9f:4c:68:38:51:39:18:38:ad: ec:7c:1a:8b:64:0e:d1:10:72:34:fb:3f:84:df:d1: 29:4f:6a:fb:7b:2f:8d:7f:11:57:d8:00:89:b4:c8: 02:bb:e8:26:0c:b8:ef:2f:81:82:71:81:88:33:bc: 4b:e3:98:d5:bd:15:9c:26:bf:79:20:9c:04:bb:51: 32:91:6f:22:8e:9f:57:94:ba:ac:b9:10:f0:2d:bc: f0:df:c6:90:90:eb:fc:c7:af:5f:88:d2:7a:8b:d6: d2:86:9b:24:8c:b0:57:1c:e3:a9:51:75:4b:d8:a3: 12:cf:95:63:e0:bb:6b:c4:65:4f:ed:ea:2b:16:2b: 16:5e:91:2c:10:aa:b8:a1:96:22:46:93:b9:b0:59: f6:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:A3:CA:1F:B6:0C:AC:10:9C:F5:1F:01:39:DB:E6:41:8C:5E:30:2F X509v3 Authority Key Identifier: keyid:86:00:AA:F1:3D:4D:E9:C9:5B:63:75:9A:D1:86:36:AB:C8:E2:63:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/56PKH7YMrBCc9R8BOdvmQYxeMC8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.1.0/24 Signature Algorithm: sha256WithRSAEncryption a1:f7:4b:4a:e7:5c:87:80:4a:60:46:f7:4b:b1:55:ca:ab:ad: 41:fb:c7:cb:89:ea:12:7e:e0:5a:14:3c:2e:0e:4e:e6:a2:f4: eb:a6:8c:a9:8e:07:46:8e:f6:7a:bd:76:d5:dc:57:16:1a:1d: 26:57:db:91:2b:4b:76:cd:bb:2f:dd:d8:8b:11:d8:57:09:ec: 54:98:a5:86:e8:50:46:80:f4:d4:c0:14:d8:af:5e:8d:2e:23: 7e:44:48:05:6c:41:0e:19:09:c7:4c:58:ef:29:87:c2:c3:b6: 4a:02:0a:2c:90:8b:66:b4:c6:98:96:a6:07:58:e8:57:cd:6e: 9a:69:71:8a:8c:f5:6a:39:63:cf:8c:57:ab:81:11:ed:e3:ef: 40:c6:ad:77:93:39:54:ce:aa:76:37:bc:40:4b:ab:04:73:ae: 27:ae:5d:26:40:92:4e:1b:1d:e1:f8:fb:c0:65:5b:27:a9:94: 14:31:9b:3b:6d:94:47:72:dc:65:c5:24:80:53:32:f3:e1:ba: c7:98:ae:20:64:7f:01:5b:8f:c5:a1:9f:7b:ad:37:df:2e:54: 0c:63:9e:c7:90:5f:0e:5c:ed:b9:3d:59:17:23:18:fb:ee:2d: ca:70:cb:9d:46:3b:7e:f5:18:59:a3:36:3b:28:db:df:07:ae: c2:36:45:f8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt567dIn9TS9fzIKGguagdXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2MDBhYWYxM2Q0ZGU5Yzk1YjYzNzU5YWQxODYzNmFiYzhl MjYzNzYwHhcNMjYwMTAxMTQxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlN2EzY2ExZmI2MGNhYzEwOWNmNTFmMDEzOWRiZTY0MThjNWUzMDJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDt9/UeCyXfWOTbm9MZuFOqHi1sD RS7bClvZaDt6VdWqk41e0PHyROemHOJGmgW+FgIHGptu/KxWuGYTyf+KCLiM7g0D /2eA2ie8mm1z8GV+vPOK3psyFFqAAoyXpZfzdzVUERHlgkpzVzFJHfmfTGg4UTkY OK3sfBqLZA7REHI0+z+E39EpT2r7ey+NfxFX2ACJtMgCu+gmDLjvL4GCcYGIM7xL 45jVvRWcJr95IJwEu1EykW8ijp9XlLqsuRDwLbzw38aQkOv8x69fiNJ6i9bShpsk jLBXHOOpUXVL2KMSz5Vj4LtrxGVP7eorFisWXpEsEKq4oZYiRpO5sFn26wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOejyh+2DKwQnPUfATnb5kGMXjAvMB8GA1UdIwQY MBaAFIYAqvE9TenJW2N1mtGGNqvI4mN2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGdDcThUMU42Y2xiWTNXYTBZWTJxOGppWTNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9iN2QyMGUtMzNiYy00YjIzLWExOTgt MjI0NGZkNjE4NWQzLzEvNTZQS0g3WU1yQkNjOVI4Qk9kdm1RWXhlTUM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9iN2QyMGUtMzNiYy00YjIzLWExOTgtMjI0NGZkNjE4NWQz LzEvaGdDcThUMU42Y2xiWTNXYTBZWTJxOGppWTNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9QBMA0G CSqGSIb3DQEBCwUAA4IBAQCh90tK51yHgEpgRvdLsVXKq61B+8fLieoSfuBaFDwu Dk7movTrpoypjgdGjvZ6vXbV3FcWGh0mV9uRK0t2zbsv3diLEdhXCexUmKWG6FBG gPTUwBTYr16NLiN+REgFbEEOGQnHTFjvKYfCw7ZKAgoskItmtMaYlqYHWOhXzW6a aXGKjPVqOWPPjFergRHt4+9Axq13kzlUzqp2N7xAS6sEc64nrl0mQJJOGx3h+PvA ZVsnqZQUMZs7bZRHctxlxSSAUzLz4brHmK4gZH8BW4/FoZ97rTffLlQMY57HkF8O XO25PVkXIxj77i3KcMudRjt+9RhZozY7KNvfB67CNkX4 -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:00 2026 by rpki-client