This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/e265eCVZ_zfTOldsmbK9OxkmQeY.roa File: e265eCVZ_zfTOldsmbK9OxkmQeY.roa (raw, json) Hash identifier: YosQ/clAH+U408bmGplqWhphkTjsVjwp5LPxq1REEA8= Subject key identifier: 7B:6E:B9:78:25:59:FF:37:D3:3A:57:6C:99:B2:BD:3B:19:26:41:E6 Certificate issuer: /CN=61b824b85aba7bc3512b1214b385de570fb294bf Certificate serial: 019B7D5C0C72A04DB5E24D0A1F173E452148 Authority key identifier: 61:B8:24:B8:5A:BA:7B:C3:51:2B:12:14:B3:85:DE:57:0F:B2:94:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/e265eCVZ_zfTOldsmbK9OxkmQeY.roa Signing time: Fri 02 Jan 2026 06:19:03 +0000 ROA not before: Fri 02 Jan 2026 06:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51644 IP address blocks: 91.199.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft rsync://rpki.ripe.net/repository/DEFAULT/YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:0c:72:a0:4d:b5:e2:4d:0a:1f:17:3e:45:21:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b824b85aba7bc3512b1214b385de570fb294bf Validity Not Before: Jan 2 06:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7b6eb9782559ff37d33a576c99b2bd3b192641e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3e:6a:40:60:68:c8:35:65:95:54:a4:a5:cd: 30:9b:82:f1:35:30:de:86:8a:06:68:d1:4f:b5:dc: 4c:95:c2:4e:6c:c4:48:9f:95:1f:c5:2c:4f:1e:05: 91:c4:19:cd:be:e6:07:bb:e2:84:5d:5f:e8:2c:93: fe:75:29:e8:79:79:02:09:de:5e:f9:d2:85:96:0f: 1e:ba:1a:ad:0d:c7:18:b7:22:2b:c1:bd:21:d1:08: 79:da:4f:2f:20:3e:5b:54:c7:43:27:77:0b:d7:9e: 78:f8:e1:f9:59:a0:1a:0e:e0:20:af:3d:80:1f:3b: 2a:cd:47:3e:81:9c:5b:69:6d:38:62:56:f5:bf:d2: a0:14:11:36:02:a6:93:de:dd:e3:70:26:49:04:76: 2d:2a:0d:e3:e5:94:c5:06:2e:bc:fa:83:e2:bd:a1: 6b:03:7b:51:48:68:f2:33:4c:a1:db:8e:58:1d:ab: be:03:b3:42:52:04:e9:7b:3f:69:31:07:1b:bc:9c: 15:e2:da:c2:cb:07:84:c1:29:df:07:6b:12:08:59: e6:a3:b0:93:72:00:ce:f7:be:43:20:4e:5c:08:a8: 10:8b:f2:19:79:f6:20:4b:9b:9f:7a:f2:70:bc:ca: f4:f1:6c:94:e0:14:c4:c3:72:54:30:a2:42:64:2f: e6:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:6E:B9:78:25:59:FF:37:D3:3A:57:6C:99:B2:BD:3B:19:26:41:E6 X509v3 Authority Key Identifier: keyid:61:B8:24:B8:5A:BA:7B:C3:51:2B:12:14:B3:85:DE:57:0F:B2:94:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/e265eCVZ_zfTOldsmbK9OxkmQeY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.61.0/24 Signature Algorithm: sha256WithRSAEncryption 96:41:34:a7:22:b7:45:f3:c0:7d:40:c9:eb:11:42:2a:3d:57: f8:42:7a:da:12:03:f4:37:09:ff:53:d9:f2:7d:f0:81:27:ff: f0:00:c7:29:60:a8:b2:dc:65:15:da:2b:59:bb:aa:c9:55:39: 67:48:bf:3d:08:bb:cf:83:95:58:84:19:a2:4d:6a:ef:11:77: e9:6b:2d:ba:8f:a1:aa:40:15:cd:ba:bc:0b:b5:01:6e:69:53: bf:ba:6b:ca:23:3f:ea:c0:28:da:45:14:96:91:8d:48:66:19: 5d:de:c2:04:46:b7:5a:06:f6:3d:96:43:7d:7a:1a:ff:ef:18: 8c:c8:1f:e0:5b:03:e7:bf:98:81:77:9e:b4:50:d7:73:c0:7e: 68:b1:65:be:58:37:52:9b:48:96:cf:3c:04:e4:8a:06:51:50: 5a:60:6d:1e:f6:8a:fd:a2:36:5c:b1:08:29:1a:dc:f8:e7:fd: 20:92:a8:02:f0:59:f9:db:88:ba:b7:9e:74:d1:b3:57:d9:81: 96:51:97:4c:f1:69:3c:15:4a:7f:bd:b2:70:f4:0e:47:b0:b4: 07:1b:1f:0d:78:97:cf:bb:a0:56:ae:07:5e:23:d3:d1:b3:66: fd:26:2d:56:b3:68:a8:f3:ca:68:cd:f3:54:1c:65:3f:73:58: 23:f0:6d:1a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XAxyoE214k0KHxc+RSFIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxYjgyNGI4NWFiYTdiYzM1MTJiMTIxNGIzODVkZTU3MGZi Mjk0YmYwHhcNMjYwMTAyMDYxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YjZlYjk3ODI1NTlmZjM3ZDMzYTU3NmM5OWIyYmQzYjE5MjY0MWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxD5qQGBoyDVllVSkpc0wm4LxNTDe hooGaNFPtdxMlcJObMRIn5UfxSxPHgWRxBnNvuYHu+KEXV/oLJP+dSnoeXkCCd5e +dKFlg8euhqtDccYtyIrwb0h0Qh52k8vID5bVMdDJ3cL1554+OH5WaAaDuAgrz2A HzsqzUc+gZxbaW04Ylb1v9KgFBE2AqaT3t3jcCZJBHYtKg3j5ZTFBi68+oPivaFr A3tRSGjyM0yh245YHau+A7NCUgTpez9pMQcbvJwV4trCyweEwSnfB2sSCFnmo7CT cgDO975DIE5cCKgQi/IZefYgS5ufevJwvMr08WyU4BTEw3JUMKJCZC/mKwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHtuuXglWf830zpXbJmyvTsZJkHmMB8GA1UdIwQY MBaAFGG4JLhaunvDUSsSFLOF3lcPspS/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWJna3VGcTZlOE5SS3hJVXM0WGVWdy15bEw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9jMGU3YTEtMDZmNS00Y2EwLTgyMTAt ZWE2ZWQyOWNhYjVlLzEvZTI2NWVDVlpfemZUT2xkc21iSzlPeGttUWVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9jMGU3YTEtMDZmNS00Y2EwLTgyMTAtZWE2ZWQyOWNhYjVl LzEvWWJna3VGcTZlOE5SS3hJVXM0WGVWdy15bEw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8c9MA0G CSqGSIb3DQEBCwUAA4IBAQCWQTSnIrdF88B9QMnrEUIqPVf4QnraEgP0Nwn/U9ny ffCBJ//wAMcpYKiy3GUV2itZu6rJVTlnSL89CLvPg5VYhBmiTWrvEXfpay26j6Gq QBXNurwLtQFuaVO/umvKIz/qwCjaRRSWkY1IZhld3sIERrdaBvY9lkN9ehr/7xiM yB/gWwPnv5iBd560UNdzwH5osWW+WDdSm0iWzzwE5IoGUVBaYG0e9or9ojZcsQgp Gtz45/0gkqgC8Fn524i6t5500bNX2YGWUZdM8Wk8FUp/vbJw9A5HsLQHGx8NeJfP u6BWrgdeI9PRs2b9Ji1Ws2io88pozfNUHGU/c1gj8G0a -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:37 2026 by rpki-client