This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/ralErmH8EJ-9ydnhnrCvDlZV9ys.roa File: ralErmH8EJ-9ydnhnrCvDlZV9ys.roa (raw, json) Hash identifier: sDfjqe7LCY2kx4pVv1vmwGHXaRFhYudsoSBTeUiDShY= Subject key identifier: AD:A9:44:AE:61:FC:10:9F:BD:C9:D9:E1:9E:B0:AF:0E:56:55:F7:2B Certificate issuer: /CN=3ebeaeaa0f07dc3d54bc115cce202ada9820b1d5 Certificate serial: 019B7C13525D502BAACB1BE79286BCFFD1D2 Authority key identifier: 3E:BE:AE:AA:0F:07:DC:3D:54:BC:11:5C:CE:20:2A:DA:98:20:B1:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pr6uqg8H3D1UvBFcziAq2pggsdU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/ralErmH8EJ-9ydnhnrCvDlZV9ys.roa Signing time: Fri 02 Jan 2026 00:19:59 +0000 ROA not before: Fri 02 Jan 2026 00:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209663 IP address blocks: 91.192.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.crl rsync://rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.mft rsync://rpki.ripe.net/repository/DEFAULT/Pr6uqg8H3D1UvBFcziAq2pggsdU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:52:5d:50:2b:aa:cb:1b:e7:92:86:bc:ff:d1:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ebeaeaa0f07dc3d54bc115cce202ada9820b1d5 Validity Not Before: Jan 2 00:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ada944ae61fc109fbdc9d9e19eb0af0e5655f72b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ea:5d:12:f9:bb:7e:6f:9c:6d:1b:e8:42:37: e9:3c:7e:68:3b:b2:79:ef:45:0c:05:38:3e:33:8a: 62:3f:6c:c4:89:d4:5c:49:10:ea:59:94:c8:71:20: 78:4f:cf:ba:dc:13:6c:7e:ef:7c:88:ea:82:86:09: 7d:66:93:1a:54:3e:ba:29:c4:57:3f:07:02:32:cb: 8e:8b:6d:1d:47:16:ef:ff:94:d2:97:94:e9:ee:f7: a2:3e:87:4a:83:08:31:54:2b:e2:60:13:b7:ff:ea: d9:99:50:a6:10:b1:5c:e1:8d:ba:dc:99:bd:95:d9: 28:a2:13:e1:ad:e4:62:77:aa:34:13:2c:03:07:6b: f7:05:c4:4c:fc:80:cf:79:24:55:29:8e:e1:53:0c: 57:e6:3b:06:1f:27:dd:31:d4:85:c0:e2:2e:03:76: 9f:f7:52:1c:51:d0:11:34:90:d6:ef:42:d2:40:1b: 34:67:78:c5:a2:b9:d9:d4:d8:e2:6a:fb:bf:9c:68: 29:73:39:cd:b7:c4:f3:2d:a5:ea:c0:39:46:b8:23: 25:17:8c:5c:5e:11:29:ef:09:7f:64:87:95:7c:92: ea:7e:5d:19:74:38:56:e5:65:f4:ae:0b:cd:58:69: 1c:71:61:c6:21:dc:12:e1:c4:bc:dc:c4:af:79:28: 32:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:A9:44:AE:61:FC:10:9F:BD:C9:D9:E1:9E:B0:AF:0E:56:55:F7:2B X509v3 Authority Key Identifier: keyid:3E:BE:AE:AA:0F:07:DC:3D:54:BC:11:5C:CE:20:2A:DA:98:20:B1:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pr6uqg8H3D1UvBFcziAq2pggsdU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/ralErmH8EJ-9ydnhnrCvDlZV9ys.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.192.8.0/24 Signature Algorithm: sha256WithRSAEncryption 50:f9:05:ad:94:cb:71:25:e1:26:ed:2a:8d:c0:70:4c:2b:12: 6c:ce:48:f1:3d:80:cb:be:4c:ae:9e:8b:5e:9a:fc:a7:87:63: ec:c8:fa:c9:a4:d6:f6:ec:04:2e:8e:6b:e1:9b:c7:de:96:d4: f2:88:82:5b:be:81:91:92:11:ac:8e:44:df:76:47:aa:d2:92: 08:c0:19:33:74:f2:37:63:6a:e6:35:de:b4:ff:02:37:a8:f7: d8:9b:14:2a:da:82:03:5b:1d:30:a0:03:1a:ca:5d:40:90:b9: 80:b8:3b:46:66:d6:cb:cc:01:57:9f:ee:69:1a:69:88:0e:bb: f4:25:a3:41:e6:3c:2d:cb:d4:71:f1:b8:85:80:d9:34:d1:45: 9e:b6:f2:e3:69:1f:54:5a:4a:a8:a2:18:40:1d:2a:cc:8e:fe: d2:2f:37:70:86:8a:70:af:87:38:93:24:f0:26:dd:41:c9:53: b9:6b:94:b6:fa:ed:1a:ae:88:e2:75:96:78:e5:f9:65:04:1b: b7:08:42:1e:e3:fc:73:6e:d5:b8:11:07:01:ec:ee:07:a7:f4: b6:26:c5:2e:b0:7b:cf:60:03:10:49:cc:65:06:a8:b3:d3:83: de:80:08:0a:25:c4:af:af:33:03:c4:d1:d0:9e:f7:7d:0f:6c: d7:21:a3:63 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E1JdUCuqyxvnkoa8/9HSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYmVhZWFhMGYwN2RjM2Q1NGJjMTE1Y2NlMjAyYWRhOTgy MGIxZDUwHhcNMjYwMTAyMDAxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZGE5NDRhZTYxZmMxMDlmYmRjOWQ5ZTE5ZWIwYWYwZTU2NTVmNzJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvupdEvm7fm+cbRvoQjfpPH5oO7J5 70UMBTg+M4piP2zEidRcSRDqWZTIcSB4T8+63BNsfu98iOqChgl9ZpMaVD66KcRX PwcCMsuOi20dRxbv/5TSl5Tp7veiPodKgwgxVCviYBO3/+rZmVCmELFc4Y263Jm9 ldkoohPhreRid6o0EywDB2v3BcRM/IDPeSRVKY7hUwxX5jsGHyfdMdSFwOIuA3af 91IcUdARNJDW70LSQBs0Z3jFornZ1Njiavu/nGgpcznNt8TzLaXqwDlGuCMlF4xc XhEp7wl/ZIeVfJLqfl0ZdDhW5WX0rgvNWGkccWHGIdwS4cS83MSveSgyHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK2pRK5h/BCfvcnZ4Z6wrw5WVfcrMB8GA1UdIwQY MBaAFD6+rqoPB9w9VLwRXM4gKtqYILHVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHI2dXFnOEgzRDFVdkJGY3ppQXEycGdnc2RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8zYTAzNjgtNTcwYy00ODQ3LThkNGEt ZmY0YWQxZTNkYWY1LzEvcmFsRXJtSDhFSi05eWRuaG5yQ3ZEbFpWOXlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS8zYTAzNjgtNTcwYy00ODQ3LThkNGEtZmY0YWQxZTNkYWY1 LzEvUHI2dXFnOEgzRDFVdkJGY3ppQXEycGdnc2RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8AIMA0G CSqGSIb3DQEBCwUAA4IBAQBQ+QWtlMtxJeEm7SqNwHBMKxJszkjxPYDLvkyunote mvynh2PsyPrJpNb27AQujmvhm8feltTyiIJbvoGRkhGsjkTfdkeq0pIIwBkzdPI3 Y2rmNd60/wI3qPfYmxQq2oIDWx0woAMayl1AkLmAuDtGZtbLzAFXn+5pGmmIDrv0 JaNB5jwty9Rx8biFgNk00UWetvLjaR9UWkqoohhAHSrMjv7SLzdwhopwr4c4kyTw Jt1ByVO5a5S2+u0arojidZZ45fllBBu3CEIe4/xzbtW4EQcB7O4Hp/S2JsUusHvP YAMQScxlBqiz04PegAgKJcSvrzMDxNHQnvd9D2zXIaNj -----END CERTIFICATE-----Generated at Tue Feb 10 04:31:13 2026 by rpki-client