This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/e3szWYnRwcnVrlDIwYxJ3pYMom4.roa File: e3szWYnRwcnVrlDIwYxJ3pYMom4.roa (raw, json) Hash identifier: BKtUpfmwzLTGUQniKBkvPeoFHhYGa5oaDqKuTCxUab8= Subject key identifier: 7B:7B:33:59:89:D1:C1:C9:D5:AE:50:C8:C1:8C:49:DE:96:0C:A2:6E Certificate issuer: /CN=430e0949df5930f6b79efcbd9cba174ca213f569 Certificate serial: 019B7E392812AE2E86548A997C6F0864A18B Authority key identifier: 43:0E:09:49:DF:59:30:F6:B7:9E:FC:BD:9C:BA:17:4C:A2:13:F5:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/e3szWYnRwcnVrlDIwYxJ3pYMom4.roa Signing time: Fri 02 Jan 2026 10:20:33 +0000 ROA not before: Fri 02 Jan 2026 10:20:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49957 IP address blocks: 91.206.184.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.crl rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.mft rsync://rpki.ripe.net/repository/DEFAULT/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:28:12:ae:2e:86:54:8a:99:7c:6f:08:64:a1:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=430e0949df5930f6b79efcbd9cba174ca213f569 Validity Not Before: Jan 2 10:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7b7b335989d1c1c9d5ae50c8c18c49de960ca26e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:df:ff:45:8e:37:9d:25:1d:36:97:85:45:50: 85:63:d2:51:95:09:04:10:9e:cd:03:70:46:48:33: 64:ad:55:da:9b:9b:21:a7:e1:48:52:0e:42:be:e4: d4:ce:92:80:dc:be:6d:31:a2:d7:5c:6f:17:59:e1: 87:cd:5d:9a:1c:07:85:2b:a4:5e:e9:77:74:10:79: 4a:de:9e:6d:f6:db:4f:1a:ff:f0:c5:6c:ac:c1:de: a7:0f:64:ff:c0:f4:f7:b2:cd:c0:80:6d:46:4c:dc: 57:ab:62:6e:fc:73:47:80:88:e4:24:04:62:49:b9: 27:98:62:b7:46:fd:fd:40:65:62:66:95:cc:07:ef: a0:81:d2:66:55:9a:f4:ba:21:3c:b3:3e:c7:45:79: 47:02:eb:83:9e:dd:25:79:1f:91:ab:88:a1:56:3a: 57:49:6a:9e:eb:a7:ec:42:aa:0b:2b:a9:79:98:ff: ce:04:d2:df:03:eb:a8:b5:f6:c7:bd:2b:50:cd:82: 35:69:46:50:45:e8:9f:a3:fa:ce:ba:24:79:98:b2: 18:48:69:04:d2:2c:20:6d:04:fb:e2:45:84:37:02: 63:86:e9:64:ce:ad:b2:68:82:11:6d:b4:c6:7d:ef: 50:80:73:6f:81:5b:f9:b0:fb:3d:96:c0:1a:b0:8a: 38:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:7B:33:59:89:D1:C1:C9:D5:AE:50:C8:C1:8C:49:DE:96:0C:A2:6E X509v3 Authority Key Identifier: keyid:43:0E:09:49:DF:59:30:F6:B7:9E:FC:BD:9C:BA:17:4C:A2:13:F5:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/e3szWYnRwcnVrlDIwYxJ3pYMom4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.206.184.0/23 Signature Algorithm: sha256WithRSAEncryption 7e:b1:e9:ca:df:95:c3:6e:b4:37:6a:d5:27:c4:d3:d9:dc:ba: 8d:50:e1:0c:16:87:80:6e:e1:9b:d5:d3:68:8d:8e:42:5e:c1: 81:b0:33:f7:c5:38:a3:ef:20:1f:3f:30:79:6c:c4:01:5a:0b: b4:73:b6:ca:d9:50:b2:c7:46:5c:38:57:a2:2b:9e:0a:96:0b: 6f:4c:8b:9e:d9:96:c7:03:f9:30:95:8a:d4:29:e2:f1:b4:d1: 9f:ce:08:cb:af:23:14:68:0a:71:71:42:e2:e8:3d:28:db:83: a4:e5:6c:89:46:7b:31:12:01:14:6e:08:e7:7c:e9:12:62:2e: eb:65:a6:f8:d0:51:a8:73:ad:1c:21:ed:9c:e1:92:f5:a8:60: 75:4e:0b:74:33:d5:28:d9:e4:c4:dd:f4:a3:81:5f:cc:f4:11: 94:bc:d5:5d:cc:1f:84:60:da:5e:6b:a1:02:79:94:c4:e2:9b: 4b:5c:42:d5:39:90:af:86:48:1f:35:16:23:00:6c:02:4a:1b: 57:4f:87:cc:4f:e9:a9:a9:0f:0f:3a:c6:94:5b:fd:4c:ee:e0: 49:f6:9b:db:21:d1:e4:de:d3:40:76:85:cd:c9:28:28:10:04: 66:40:8e:5b:d9:0f:1a:08:d9:7a:1a:fc:11:11:bf:1f:db:3e: 93:86:37:00 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OSgSri6GVIqZfG8IZKGLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMGUwOTQ5ZGY1OTMwZjZiNzllZmNiZDljYmExNzRjYTIx M2Y1NjkwHhcNMjYwMTAyMTAyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YjdiMzM1OTg5ZDFjMWM5ZDVhZTUwYzhjMThjNDlkZTk2MGNhMjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkt//RY43nSUdNpeFRVCFY9JRlQkE EJ7NA3BGSDNkrVXam5shp+FIUg5CvuTUzpKA3L5tMaLXXG8XWeGHzV2aHAeFK6Re 6Xd0EHlK3p5t9ttPGv/wxWyswd6nD2T/wPT3ss3AgG1GTNxXq2Ju/HNHgIjkJARi SbknmGK3Rv39QGViZpXMB++ggdJmVZr0uiE8sz7HRXlHAuuDnt0leR+Rq4ihVjpX SWqe66fsQqoLK6l5mP/OBNLfA+uotfbHvStQzYI1aUZQReifo/rOuiR5mLIYSGkE 0iwgbQT74kWENwJjhulkzq2yaIIRbbTGfe9QgHNvgVv5sPs9lsAasIo4/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHt7M1mJ0cHJ1a5QyMGMSd6WDKJuMB8GA1UdIwQY MBaAFEMOCUnfWTD2t578vZy6F0yiE/VpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXc0SlNkOVpNUGEzbnZ5OW5Mb1hUS0lUOVdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC81MmE5N2YtMmFkNi00MDU5LTg2NDYt MDY4NjE2MGE3ZTY4LzEvZTNzeldZblJ3Y25WcmxESXdZeEozcFlNb200LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC81MmE5N2YtMmFkNi00MDU5LTg2NDYtMDY4NjE2MGE3ZTY4 LzEvUXc0SlNkOVpNUGEzbnZ5OW5Mb1hUS0lUOVdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW864MA0G CSqGSIb3DQEBCwUAA4IBAQB+senK35XDbrQ3atUnxNPZ3LqNUOEMFoeAbuGb1dNo jY5CXsGBsDP3xTij7yAfPzB5bMQBWgu0c7bK2VCyx0ZcOFeiK54KlgtvTIue2ZbH A/kwlYrUKeLxtNGfzgjLryMUaApxcULi6D0o24Ok5WyJRnsxEgEUbgjnfOkSYi7r Zab40FGoc60cIe2c4ZL1qGB1Tgt0M9Uo2eTE3fSjgV/M9BGUvNVdzB+EYNpea6EC eZTE4ptLXELVOZCvhkgfNRYjAGwCShtXT4fMT+mpqQ8POsaUW/1M7uBJ9pvbIdHk 3tNAdoXNySgoEARmQI5b2Q8aCNl6GvwREb8f2z6ThjcA -----END CERTIFICATE-----Generated at Tue Feb 10 04:50:22 2026 by rpki-client