This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/n1EKDChFOuZuWL84rj73IB-jcv8.roa File: n1EKDChFOuZuWL84rj73IB-jcv8.roa (raw, json) Hash identifier: Sr227BztaPfHnzMCsINngmZlpDLFQ27p1oMjIVATl88= Subject key identifier: 9F:51:0A:0C:28:45:3A:E6:6E:58:BF:38:AE:3E:F7:20:1F:A3:72:FF Certificate issuer: /CN=2ec121e1545df3e5bb86e9188f2825fad7477f75 Certificate serial: 019B79ED1C6BFD0CF1FF56BC71FB7EF7D561 Authority key identifier: 2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/n1EKDChFOuZuWL84rj73IB-jcv8.roa Signing time: Thu 01 Jan 2026 14:19:01 +0000 ROA not before: Thu 01 Jan 2026 14:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57103 IP address blocks: 91.229.172.0/24 maxlen: 24 185.119.200.0/22 maxlen: 24 2a06:8bc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:1c:6b:fd:0c:f1:ff:56:bc:71:fb:7e:f7:d5:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ec121e1545df3e5bb86e9188f2825fad7477f75 Validity Not Before: Jan 1 14:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f510a0c28453ae66e58bf38ae3ef7201fa372ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:dd:78:5a:39:12:e0:18:8c:c0:79:de:d6:2f: 27:ff:da:cf:ba:94:bd:68:f6:96:84:2f:a8:f2:f0: 85:16:f9:43:59:b8:60:b8:ef:e1:ad:72:b6:70:23: 1f:a5:99:af:93:af:8f:96:11:da:39:ef:d7:42:cf: b8:22:48:59:b5:01:e1:60:4b:3c:bf:92:7b:aa:e2: f4:01:75:39:96:ef:83:3a:61:f4:2e:8d:7a:18:ff: c4:24:b1:1b:3b:07:fd:4e:35:2e:74:e7:65:d3:34: eb:12:50:0e:33:30:c1:d4:fb:a6:80:dd:7e:65:db: 06:c0:77:0f:9a:43:52:ca:c0:fc:a8:65:93:21:ef: ce:72:ee:8c:b1:14:70:d0:5a:7c:d8:c6:85:c3:dc: f0:af:a7:ce:6c:d3:1f:75:54:f1:84:12:d9:7e:91: c7:75:ca:40:da:17:ad:8d:e5:84:4b:45:cc:0f:25: 80:ef:03:7a:59:8a:f1:30:56:fb:bc:5b:ce:06:ff: b3:f5:84:6d:4f:56:c1:58:b7:7e:cc:72:87:4e:6c: a5:37:47:d8:73:20:5a:96:44:e2:c2:c8:5c:d5:50: 24:77:80:da:75:2f:09:98:bd:6f:37:d5:9d:05:ad: f5:58:1a:6e:85:a9:d4:19:bf:9b:05:82:ff:6c:3a: 6e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:51:0A:0C:28:45:3A:E6:6E:58:BF:38:AE:3E:F7:20:1F:A3:72:FF X509v3 Authority Key Identifier: keyid:2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/n1EKDChFOuZuWL84rj73IB-jcv8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.229.172.0/24 185.119.200.0/22 IPv6: 2a06:8bc0::/29 Signature Algorithm: sha256WithRSAEncryption 33:66:42:77:f9:ed:6d:03:56:cc:bf:22:44:fd:5f:f6:a3:bd: 61:d7:4c:b0:77:36:a7:bb:ff:12:42:10:16:1e:cd:6a:e2:ac: 1f:b6:7c:6e:00:16:a0:80:c3:ac:8b:51:69:76:d3:31:77:57: 63:05:27:d5:73:15:92:ea:04:c6:1b:10:51:04:f6:99:b0:12: 9d:dc:55:61:1b:43:fd:92:c2:01:1a:bc:62:03:e0:1a:77:61: 3d:b1:88:0c:0c:7f:64:c2:82:60:bf:33:49:04:f6:11:4c:77: be:62:39:e2:cc:31:86:14:d0:95:e2:97:fa:fe:7e:54:49:4f: 08:45:da:a9:75:e6:d5:4f:b3:18:22:e9:c0:c2:26:58:d7:e0: d3:04:7d:97:f0:a3:92:b9:be:b5:76:0b:ea:79:bd:70:12:65: d2:d8:e4:7f:f1:34:0c:11:32:20:d0:3f:49:9f:f4:d9:48:fc: e3:97:18:e4:d7:62:13:d9:9f:6d:5b:03:34:8a:51:0e:c9:70: a0:7d:e4:9a:01:44:8f:88:40:a5:6f:1a:c9:e8:33:88:dc:fe: 7c:9c:a8:80:ab:f3:03:aa:a6:e8:30:9c:cf:17:b7:bd:ac:e3: ed:ac:d1:05:1b:74:e3:cd:92:0d:76:73:31:1e:9a:b0:86:e7: 23:7a:49:84 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt57Rxr/Qzx/1a8cft+99VhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlYzEyMWUxNTQ1ZGYzZTViYjg2ZTkxODhmMjgyNWZhZDc0 NzdmNzUwHhcNMjYwMTAxMTQxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjUxMGEwYzI4NDUzYWU2NmU1OGJmMzhhZTNlZjcyMDFmYTM3MmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxt14WjkS4BiMwHne1i8n/9rPupS9 aPaWhC+o8vCFFvlDWbhguO/hrXK2cCMfpZmvk6+PlhHaOe/XQs+4IkhZtQHhYEs8 v5J7quL0AXU5lu+DOmH0Lo16GP/EJLEbOwf9TjUudOdl0zTrElAOMzDB1PumgN1+ ZdsGwHcPmkNSysD8qGWTIe/Ocu6MsRRw0Fp82MaFw9zwr6fObNMfdVTxhBLZfpHH dcpA2hetjeWES0XMDyWA7wN6WYrxMFb7vFvOBv+z9YRtT1bBWLd+zHKHTmylN0fY cyBalkTiwshc1VAkd4DadS8JmL1vN9WdBa31WBpuhanUGb+bBYL/bDpu0QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFJ9RCgwoRTrmbli/OK4+9yAfo3L/MB8GA1UdIwQY MBaAFC7BIeFUXfPlu4bpGI8oJfrXR391MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHNFaDRWUmQ4LVc3aHVrWWp5Z2wtdGRIZjNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8xZWQyN2MtMmQ4Yy00MDgwLWE0NTgt OWY1MjJhMjg0NTk1LzEvbjFFS0RDaEZPdVp1V0w4NHJqNzNJQi1qY3Y4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC8xZWQyN2MtMmQ4Yy00MDgwLWE0NTgtOWY1MjJhMjg0NTk1 LzEvTHNFaDRWUmQ4LVc3aHVrWWp5Z2wtdGRIZjNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAW+WsAwQC uXfIMA0EAgACMAcDBQMqBovAMA0GCSqGSIb3DQEBCwUAA4IBAQAzZkJ3+e1tA1bM vyJE/V/2o71h10ywdzanu/8SQhAWHs1q4qwftnxuABaggMOsi1FpdtMxd1djBSfV cxWS6gTGGxBRBPaZsBKd3FVhG0P9ksIBGrxiA+Aad2E9sYgMDH9kwoJgvzNJBPYR THe+YjnizDGGFNCV4pf6/n5USU8IRdqpdebVT7MYIunAwiZY1+DTBH2X8KOSub61 dgvqeb1wEmXS2OR/8TQMETIg0D9Jn/TZSPzjlxjk12IT2Z9tWwM0ilEOyXCgfeSa AUSPiEClbxrJ6DOI3P58nKiAq/MDqqboMJzPF7e9rOPtrNEFG3TjzZINdnMxHpqw hucjekmE -----END CERTIFICATE-----Generated at Tue Feb 10 01:29:22 2026 by rpki-client