This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/e1B2705bWqnmxFym6Lrtufuuh-c.roa File: e1B2705bWqnmxFym6Lrtufuuh-c.roa (raw, json) Hash identifier: hhYlxCpVJm2mMyzGqhpnxjIOnGS6n6nkCOmx8x2LUb4= Subject key identifier: 7B:50:76:EF:4E:5B:5A:A9:E6:C4:5C:A6:E8:BA:ED:B9:FB:AE:87:E7 Certificate issuer: /CN=0957b23c83795bc35c30bc1365a30fdf3375ac89 Certificate serial: 019B7D5BB0FAE0B5350BFBE120EFA15736F5 Authority key identifier: 09:57:B2:3C:83:79:5B:C3:5C:30:BC:13:65:A3:0F:DF:33:75:AC:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVeyPIN5W8NcMLwTZaMP3zN1rIk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/e1B2705bWqnmxFym6Lrtufuuh-c.roa Signing time: Fri 02 Jan 2026 06:18:39 +0000 ROA not before: Fri 02 Jan 2026 06:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58102 IP address blocks: 91.238.208.0/23 maxlen: 24 2001:67c:1048::/48 maxlen: 48 2001:67c:106c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.crl rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft rsync://rpki.ripe.net/repository/DEFAULT/CVeyPIN5W8NcMLwTZaMP3zN1rIk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:b0:fa:e0:b5:35:0b:fb:e1:20:ef:a1:57:36:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0957b23c83795bc35c30bc1365a30fdf3375ac89 Validity Not Before: Jan 2 06:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7b5076ef4e5b5aa9e6c45ca6e8baedb9fbae87e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1f:98:5f:04:c4:9c:7b:43:74:9b:ee:20:a8: fc:59:ee:64:f9:21:3e:26:93:1a:b1:55:78:db:b3: 49:5c:cd:2b:04:d2:be:5e:5f:7c:a0:17:09:a6:56: 81:ad:23:f6:1c:db:28:31:2e:3a:d0:27:f9:d2:8e: 05:e6:03:d9:99:0f:73:f4:c7:9e:69:41:6c:71:6f: c2:7d:0b:ef:99:75:c2:14:b8:9e:3c:7c:04:2d:5f: 85:3a:48:8a:7d:6d:84:a0:0f:eb:fd:45:7b:df:d7: f5:ea:5f:5d:4e:75:e6:76:35:c2:8c:34:2e:20:ed: 2d:b1:03:1c:b6:45:d1:7a:2d:1b:ea:da:f5:fe:3e: 03:e3:33:ee:d2:45:aa:80:b6:2f:c3:72:96:be:33: e5:a9:da:fa:04:9f:78:f5:e8:81:74:bd:6b:8a:c5: 8a:92:8d:df:0d:b3:da:1f:48:54:72:62:c3:84:71: be:30:25:ba:5b:d1:a5:86:a8:a1:29:ff:dc:e6:c4: b1:b5:27:57:57:8d:f2:42:2f:ed:df:a2:d2:33:12: 6f:01:10:e1:51:b2:8c:fa:8e:11:3e:41:b0:94:44: 00:37:0e:ce:07:a1:0c:f0:ac:83:f1:17:6b:8e:ae: f6:6e:84:1b:f8:d0:0a:65:73:e8:8f:44:2e:da:09: 39:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:50:76:EF:4E:5B:5A:A9:E6:C4:5C:A6:E8:BA:ED:B9:FB:AE:87:E7 X509v3 Authority Key Identifier: keyid:09:57:B2:3C:83:79:5B:C3:5C:30:BC:13:65:A3:0F:DF:33:75:AC:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVeyPIN5W8NcMLwTZaMP3zN1rIk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/e1B2705bWqnmxFym6Lrtufuuh-c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.238.208.0/23 IPv6: 2001:67c:1048::/48 2001:67c:106c::/48 Signature Algorithm: sha256WithRSAEncryption 45:18:8c:9c:48:50:09:d2:3f:d5:91:de:10:49:e7:1f:20:fb: 6e:7d:7d:e7:85:dc:05:c3:d8:13:62:95:1d:ca:e0:8c:54:c6: ac:89:75:1c:64:e5:f8:ea:ed:e2:bf:4e:a5:9d:55:cc:68:3f: cb:96:b0:bb:48:d8:50:22:64:75:52:eb:93:95:dd:d2:0b:16: ea:66:ef:51:a5:ca:44:99:de:73:7b:2c:ed:2e:41:0a:c2:9e: 5c:78:b4:93:06:ae:2c:76:ae:5f:e8:45:6d:8a:17:08:16:41: ad:e7:0a:23:29:09:79:3c:38:a5:f9:72:d0:f3:86:e7:f1:24: 57:6f:c7:04:20:b4:cf:45:65:d1:0d:37:69:d5:c5:92:0a:ee: ca:5c:45:e9:75:74:8e:2f:1c:d7:00:9f:1e:1e:76:7e:5a:5a: 22:1c:ba:f4:f4:a1:74:61:95:91:a7:94:61:ac:cb:98:a4:cd: 68:93:47:a9:9d:99:b0:56:34:62:c1:29:ae:0c:19:a2:5b:bd: 6f:d6:ab:a8:e4:03:38:4b:a1:45:32:dd:55:84:1d:02:a5:99: 48:84:d1:97:6b:9b:da:6b:0a:93:d4:64:1c:74:51:55:a7:9e: fa:7d:f9:cd:02:d0:52:ab:bf:e2:e9:23:db:09:16:99:3d:cf: 3d:11:fd:d0 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt9W7D64LU1C/vhIO+hVzb1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NTdiMjNjODM3OTViYzM1YzMwYmMxMzY1YTMwZmRmMzM3 NWFjODkwHhcNMjYwMTAyMDYxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YjUwNzZlZjRlNWI1YWE5ZTZjNDVjYTZlOGJhZWRiOWZiYWU4N2U3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsB+YXwTEnHtDdJvuIKj8We5k+SE+ JpMasVV427NJXM0rBNK+Xl98oBcJplaBrSP2HNsoMS460Cf50o4F5gPZmQ9z9Mee aUFscW/CfQvvmXXCFLiePHwELV+FOkiKfW2EoA/r/UV739f16l9dTnXmdjXCjDQu IO0tsQMctkXRei0b6tr1/j4D4zPu0kWqgLYvw3KWvjPlqdr6BJ949eiBdL1risWK ko3fDbPaH0hUcmLDhHG+MCW6W9GlhqihKf/c5sSxtSdXV43yQi/t36LSMxJvARDh UbKM+o4RPkGwlEQANw7OB6EM8KyD8Rdrjq72boQb+NAKZXPoj0Qu2gk5+QIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFHtQdu9OW1qp5sRcpui67bn7rofnMB8GA1UdIwQY MBaAFAlXsjyDeVvDXDC8E2WjD98zdayJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ZleVBJTjVXOE5jTUx3VFphTVAzek4xcklrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi82NDk4NGQtYWU4Zi00Y2Y5LWEzYzMt MWU5MmM3YmRjNTgyLzEvZTFCMjcwNWJXcW5teEZ5bTZMcnR1ZnV1aC1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi82NDk4NGQtYWU4Zi00Y2Y5LWEzYzMtMWU5MmM3YmRjNTgy LzEvQ1ZleVBJTjVXOE5jTUx3VFphTVAzek4xcklrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQBW+7QMBgE AgACMBIDBwAgAQZ8EEgDBwAgAQZ8EGwwDQYJKoZIhvcNAQELBQADggEBAEUYjJxI UAnSP9WR3hBJ5x8g+259feeF3AXD2BNilR3K4IxUxqyJdRxk5fjq7eK/TqWdVcxo P8uWsLtI2FAiZHVS65OV3dILFupm71GlykSZ3nN7LO0uQQrCnlx4tJMGrix2rl/o RW2KFwgWQa3nCiMpCXk8OKX5ctDzhufxJFdvxwQgtM9FZdENN2nVxZIK7spcRel1 dI4vHNcAnx4edn5aWiIcuvT0oXRhlZGnlGGsy5ikzWiTR6mdmbBWNGLBKa4MGaJb vW/Wq6jkAzhLoUUy3VWEHQKlmUiE0Zdrm9prCpPUZBx0UVWnnvp9+c0C0FKrv+Lp I9sJFpk9zz0R/dA= -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:39 2026 by rpki-client