This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/CmEbUhenhDmMKvHKSkFpe9LG8X0.roa File: CmEbUhenhDmMKvHKSkFpe9LG8X0.roa (raw, json) Hash identifier: Jsb+hfYBWXp4dm2lj3dTAoFqYAK6O+6kl4dBC77ANZE= Subject key identifier: 0A:61:1B:52:17:A7:84:39:8C:2A:F1:CA:4A:41:69:7B:D2:C6:F1:7D Certificate issuer: /CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c Certificate serial: 019B7D5CB0B9D7485CBD9C52675F868EDDA8 Authority key identifier: CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/CmEbUhenhDmMKvHKSkFpe9LG8X0.roa Signing time: Fri 02 Jan 2026 06:19:44 +0000 ROA not before: Fri 02 Jan 2026 06:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34177 IP address blocks: 91.234.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.crl rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:b0:b9:d7:48:5c:bd:9c:52:67:5f:86:8e:dd:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c Validity Not Before: Jan 2 06:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a611b5217a784398c2af1ca4a41697bd2c6f17d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b7:e4:2b:05:05:56:a1:4a:e3:9f:9f:43:35: d6:67:7b:0c:81:42:a3:d8:82:d2:01:c2:47:4b:8d: 98:39:5d:f3:5a:09:f1:20:51:7f:fa:56:1d:92:6e: 69:30:c2:3c:3a:51:7f:f6:65:47:d3:79:f6:ff:90: e8:a4:c3:82:f7:b1:88:8c:3f:1f:22:fd:19:19:4b: df:d4:d4:74:de:b0:78:90:88:55:bd:ae:28:fa:71: 21:6d:1c:5c:85:40:6d:e5:8c:8d:13:99:e1:bf:cd: 63:1d:e6:ec:13:7b:3a:ca:54:a1:06:a4:74:c8:13: 96:88:50:51:5a:ff:47:4b:ce:f7:ee:6a:bb:67:a5: 58:b1:ca:0b:31:60:ed:8d:34:1b:1b:c6:0a:b0:05: 31:2f:59:43:de:ca:e4:1e:8c:99:3f:32:69:81:55: 26:70:8a:5e:1d:54:20:c9:d8:fb:b3:7f:55:9a:e7: 66:76:7a:0e:33:3c:0f:df:e5:a8:ae:f9:1d:9d:ad: e2:c4:0b:24:a7:08:bb:8d:29:e9:68:a6:c7:88:63: 2d:e7:47:d3:cf:f6:4d:cc:d4:f0:9b:8e:71:df:88: c8:e6:ef:29:3c:43:3e:22:86:22:85:82:44:3d:ad: 69:c8:b5:06:62:c7:f1:1c:38:59:ad:2c:2e:a2:29: 32:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:61:1B:52:17:A7:84:39:8C:2A:F1:CA:4A:41:69:7B:D2:C6:F1:7D X509v3 Authority Key Identifier: keyid:CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/CmEbUhenhDmMKvHKSkFpe9LG8X0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.234.9.0/24 Signature Algorithm: sha256WithRSAEncryption 38:07:87:98:ce:24:10:04:4a:34:59:2a:fe:91:61:82:fc:49: dd:6e:91:28:fa:bb:ad:52:74:25:d5:0a:d7:a9:3d:e6:8d:da: 60:05:24:32:2a:4b:2f:a0:66:01:9c:46:26:91:7f:b5:06:cb: 9a:c2:7a:79:44:85:b0:65:6c:d5:c3:11:00:08:c2:26:56:44: 66:e3:c4:5e:b5:4d:a4:d3:94:2d:96:2b:fa:ab:70:00:b1:ea: 83:0e:1c:c9:30:09:9e:c6:25:30:77:af:57:b6:ef:23:ae:99: 4c:4f:6d:b6:ae:96:c1:4a:1e:c7:e3:f7:35:1a:cc:f5:86:05: 92:4c:0c:83:a6:0e:8f:83:98:d9:ac:a2:6d:5b:64:6c:c6:63: 28:14:17:76:30:b3:92:40:4d:52:5a:b6:68:c5:7b:18:35:92: 26:f9:9b:f4:40:f4:cc:d0:60:f4:10:ad:1c:90:87:82:a6:c7: 32:c1:aa:02:e5:47:0c:08:63:8e:55:f2:88:72:0c:68:0f:3c: cc:2b:4c:d6:d0:66:8f:86:e8:9e:53:b7:50:d0:51:5b:23:8a: eb:9f:3c:59:82:66:c8:25:8a:49:27:cf:3c:82:0b:5d:74:f7: a2:32:20:79:d9:af:ec:d5:96:59:d9:35:03:16:c1:6d:ae:8b: 16:a6:bb:ef -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XLC510hcvZxSZ1+Gjt2oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlNzE4MGM0YmFkM2NmNDI1YTUwNjcyZTFjYjdhOWQyYWM3 OGUyMGMwHhcNMjYwMTAyMDYxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTYxMWI1MjE3YTc4NDM5OGMyYWYxY2E0YTQxNjk3YmQyYzZmMTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7fkKwUFVqFK45+fQzXWZ3sMgUKj 2ILSAcJHS42YOV3zWgnxIFF/+lYdkm5pMMI8OlF/9mVH03n2/5DopMOC97GIjD8f Iv0ZGUvf1NR03rB4kIhVva4o+nEhbRxchUBt5YyNE5nhv81jHebsE3s6ylShBqR0 yBOWiFBRWv9HS8737mq7Z6VYscoLMWDtjTQbG8YKsAUxL1lD3srkHoyZPzJpgVUm cIpeHVQgydj7s39VmudmdnoOMzwP3+Worvkdna3ixAskpwi7jSnpaKbHiGMt50fT z/ZNzNTwm45x34jI5u8pPEM+IoYihYJEPa1pyLUGYsfxHDhZrSwuoikysQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAphG1IXp4Q5jCrxykpBaXvSxvF9MB8GA1UdIwQY MBaAFM5xgMS6089CWlBnLhy3qdKseOIMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvem5HQXhMclR6MEphVUdjdUhMZXAwcXg0NGd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9kN2Q1Y2QtNzlhOS00YzgyLThmYzQt MDQ2ZDJlMmFkY2Q1LzEvQ21FYlVoZW5oRG1NS3ZIS1NrRnBlOUxHOFgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9kN2Q1Y2QtNzlhOS00YzgyLThmYzQtMDQ2ZDJlMmFkY2Q1 LzEvem5HQXhMclR6MEphVUdjdUhMZXAwcXg0NGd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+oJMA0G CSqGSIb3DQEBCwUAA4IBAQA4B4eYziQQBEo0WSr+kWGC/EndbpEo+rutUnQl1QrX qT3mjdpgBSQyKksvoGYBnEYmkX+1Bsuawnp5RIWwZWzVwxEACMImVkRm48RetU2k 05Qtliv6q3AAseqDDhzJMAmexiUwd69Xtu8jrplMT222rpbBSh7H4/c1Gsz1hgWS TAyDpg6Pg5jZrKJtW2RsxmMoFBd2MLOSQE1SWrZoxXsYNZIm+Zv0QPTM0GD0EK0c kIeCpscywaoC5UcMCGOOVfKIcgxoDzzMK0zW0GaPhuieU7dQ0FFbI4rrnzxZgmbI JYpJJ888ggtddPeiMiB52a/s1ZZZ2TUDFsFtrosWprvv -----END CERTIFICATE-----Generated at Mon Jan 26 16:22:31 2026 by rpki-client