This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/U_9ae0dR5bvWF_m8_-n5IQjoXho.roa File: U_9ae0dR5bvWF_m8_-n5IQjoXho.roa (raw, json) Hash identifier: YhkIXrg11/s9MnoBurHE21hW+DopIbiFzMqganoNxbU= Subject key identifier: 53:FF:5A:7B:47:51:E5:BB:D6:17:F9:BC:FF:E9:F9:21:08:E8:5E:1A Certificate issuer: /CN=391e994a95012d92fb51a28c8a650ed9f97737b8 Certificate serial: 019B7F15E0BF86F7AECC50076234EA8D0A4C Authority key identifier: 39:1E:99:4A:95:01:2D:92:FB:51:A2:8C:8A:65:0E:D9:F9:77:37:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OR6ZSpUBLZL7UaKMimUO2fl3N7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/U_9ae0dR5bvWF_m8_-n5IQjoXho.roa Signing time: Fri 02 Jan 2026 14:21:38 +0000 ROA not before: Fri 02 Jan 2026 14:21:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56792 IP address blocks: 91.227.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.crl rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft rsync://rpki.ripe.net/repository/DEFAULT/OR6ZSpUBLZL7UaKMimUO2fl3N7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:e0:bf:86:f7:ae:cc:50:07:62:34:ea:8d:0a:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=391e994a95012d92fb51a28c8a650ed9f97737b8 Validity Not Before: Jan 2 14:21:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=53ff5a7b4751e5bbd617f9bcffe9f92108e85e1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6e:b5:c2:39:d7:fd:cf:13:ec:ef:e8:bb:df: aa:fa:ac:a9:62:01:cd:14:db:44:58:e4:09:36:53: 77:53:73:f5:8f:11:ea:9f:2b:35:70:94:9c:1f:92: fe:c3:7c:cb:32:b1:ac:16:55:29:b7:44:db:65:60: 80:c8:be:f6:75:0a:07:5c:3f:cf:b6:47:36:f2:78: 3b:4b:5d:5e:24:8a:bc:ed:9d:d0:7b:9b:1b:58:17: 68:ca:9f:5b:03:86:eb:db:6c:9d:21:01:bf:07:3b: 22:47:13:f8:7e:e8:94:29:87:00:ca:6b:1d:0a:95: 75:2d:97:fa:4f:d9:a4:93:c9:72:05:6e:63:0e:01: b9:eb:60:1b:ae:42:56:9c:37:8f:b1:a0:df:69:e9: f6:f9:fc:46:e7:c5:e7:15:10:39:70:d5:81:07:97: 51:23:2c:1d:73:6d:a6:c9:dc:e3:74:09:ac:41:69: 3e:1f:f4:9c:90:2b:86:7c:8d:cd:03:3c:73:8b:40: d1:c9:19:8d:de:79:61:a5:a3:8f:52:ed:4d:29:8c: f1:c6:8e:13:80:8e:65:c8:31:21:e5:76:5c:0b:99: aa:7e:5d:c1:ab:e8:f7:48:a7:49:a3:e0:31:aa:e1: 3e:31:a3:0d:6f:2f:1b:f9:e2:4d:a6:89:88:bf:89: 01:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:FF:5A:7B:47:51:E5:BB:D6:17:F9:BC:FF:E9:F9:21:08:E8:5E:1A X509v3 Authority Key Identifier: keyid:39:1E:99:4A:95:01:2D:92:FB:51:A2:8C:8A:65:0E:D9:F9:77:37:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OR6ZSpUBLZL7UaKMimUO2fl3N7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/U_9ae0dR5bvWF_m8_-n5IQjoXho.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.227.185.0/24 Signature Algorithm: sha256WithRSAEncryption 18:07:cf:be:f2:16:f7:f5:f1:73:20:0c:19:79:b0:83:e0:66: da:5f:ff:6b:42:9f:f9:0f:af:b3:a3:11:21:e4:fd:bf:9b:b8: dc:72:5e:3a:83:40:1e:9f:94:ea:84:bb:56:e8:5e:7d:45:3b: e6:2a:1e:fe:ae:03:0a:5c:7e:1c:4b:ef:e3:e0:66:d4:86:ba: 9e:7a:3c:70:54:96:00:46:1c:03:28:b4:33:bc:eb:48:f8:e9: ba:9e:a8:49:55:46:b9:8c:56:51:9a:ac:af:d2:c8:e5:86:32: 58:8d:47:e8:d3:9b:fd:3e:b3:f1:a4:a4:c6:38:5a:54:12:73: e3:9b:82:23:d2:f5:c1:e1:bc:6c:5a:18:8e:c0:1c:59:b3:51: cc:dc:2a:7c:11:a5:18:5d:0b:72:b3:0a:48:a1:13:c4:ae:d9: a0:4d:d0:15:9b:58:4c:c8:e1:a9:f5:6f:d9:96:42:5b:33:47: 9a:12:20:5c:63:0f:3a:b5:f2:a7:03:16:e1:51:e0:69:8b:bd: 7b:ad:00:7a:70:a8:cc:8f:a3:2a:66:34:b0:94:1d:3a:af:f8: f1:5b:13:cf:cb:24:86:36:3b:e4:5e:08:39:80:26:a3:ff:b6: 4a:be:db:3f:1e:3e:04:e6:2a:49:71:be:c2:88:ae:c1:3a:f7: 89:62:9c:69 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FeC/hveuzFAHYjTqjQpMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MWU5OTRhOTUwMTJkOTJmYjUxYTI4YzhhNjUwZWQ5Zjk3 NzM3YjgwHhcNMjYwMTAyMTQyMTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1M2ZmNWE3YjQ3NTFlNWJiZDYxN2Y5YmNmZmU5ZjkyMTA4ZTg1ZTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsG61wjnX/c8T7O/ou9+q+qypYgHN FNtEWOQJNlN3U3P1jxHqnys1cJScH5L+w3zLMrGsFlUpt0TbZWCAyL72dQoHXD/P tkc28ng7S11eJIq87Z3Qe5sbWBdoyp9bA4br22ydIQG/BzsiRxP4fuiUKYcAymsd CpV1LZf6T9mkk8lyBW5jDgG562AbrkJWnDePsaDfaen2+fxG58XnFRA5cNWBB5dR Iywdc22mydzjdAmsQWk+H/SckCuGfI3NAzxzi0DRyRmN3nlhpaOPUu1NKYzxxo4T gI5lyDEh5XZcC5mqfl3Bq+j3SKdJo+AxquE+MaMNby8b+eJNpomIv4kB2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFP/WntHUeW71hf5vP/p+SEI6F4aMB8GA1UdIwQY MBaAFDkemUqVAS2S+1GijIplDtn5dze4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1I2WlNwVUJMWkw3VWFLTWltVU8yZmwzTjdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9lMzQ2ZTQtNTgzMS00MGNmLWE0ZGMt NDJmYjM2NzdkZjc3LzEvVV85YWUwZFI1YnZXRl9tOF8tbjVJUWpvWGhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9lMzQ2ZTQtNTgzMS00MGNmLWE0ZGMtNDJmYjM2NzdkZjc3 LzEvT1I2WlNwVUJMWkw3VWFLTWltVU8yZmwzTjdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+O5MA0G CSqGSIb3DQEBCwUAA4IBAQAYB8++8hb39fFzIAwZebCD4GbaX/9rQp/5D6+zoxEh 5P2/m7jccl46g0Aen5TqhLtW6F59RTvmKh7+rgMKXH4cS+/j4GbUhrqeejxwVJYA RhwDKLQzvOtI+Om6nqhJVUa5jFZRmqyv0sjlhjJYjUfo05v9PrPxpKTGOFpUEnPj m4Ij0vXB4bxsWhiOwBxZs1HM3Cp8EaUYXQtyswpIoRPErtmgTdAVm1hMyOGp9W/Z lkJbM0eaEiBcYw86tfKnAxbhUeBpi717rQB6cKjMj6MqZjSwlB06r/jxWxPPyySG NjvkXgg5gCaj/7ZKvts/Hj4E5ipJcb7CiK7BOveJYpxp -----END CERTIFICATE-----Generated at Tue Feb 10 02:33:34 2026 by rpki-client