This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/sE95hNuQAFs2bwnjWh5tS1eDbyo.roa File: sE95hNuQAFs2bwnjWh5tS1eDbyo.roa (raw, json) Hash identifier: lJLEBwFDxhpPzZc0IOmOMH9nwksk79qXsIs7n/ttFwo= Subject key identifier: B0:4F:79:84:DB:90:00:5B:36:6F:09:E3:5A:1E:6D:4B:57:83:6F:2A Certificate issuer: /CN=048eefb5b26483561711c990f20ff552ac4e2c9c Certificate serial: 019B7AC7D2FDE8D17AE2F6C22566F1A5BCF5 Authority key identifier: 04:8E:EF:B5:B2:64:83:56:17:11:C9:90:F2:0F:F5:52:AC:4E:2C:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/sE95hNuQAFs2bwnjWh5tS1eDbyo.roa Signing time: Thu 01 Jan 2026 18:17:54 +0000 ROA not before: Thu 01 Jan 2026 18:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42082 IP address blocks: 91.151.128.0/20 maxlen: 24 185.146.176.0/22 maxlen: 24 2a03:3580::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.crl rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.mft rsync://rpki.ripe.net/repository/DEFAULT/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:d2:fd:e8:d1:7a:e2:f6:c2:25:66:f1:a5:bc:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=048eefb5b26483561711c990f20ff552ac4e2c9c Validity Not Before: Jan 1 18:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b04f7984db90005b366f09e35a1e6d4b57836f2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:57:4e:1c:77:33:4d:a7:7e:cd:97:34:30:f6: 5e:75:34:b4:71:1a:d5:ad:05:86:18:61:3e:f6:ac: 70:e1:7f:99:d4:b5:02:dc:f7:72:9e:5f:c7:cd:ea: bd:78:25:57:86:0f:c8:f7:57:e1:a6:2f:01:b2:65: c3:33:99:19:68:25:e8:06:34:ce:21:ab:67:fa:12: 97:2f:57:be:5e:37:1d:e2:ba:3f:45:0d:1a:0c:c6: 81:8e:3e:a9:05:27:cc:cb:ca:2f:2b:ff:fd:1e:3a: b9:93:a6:7a:c5:ea:a8:1f:c8:4f:68:98:d8:52:51: fe:62:83:36:94:34:9e:f1:32:c7:a9:f8:6c:7f:3f: a8:43:b4:64:9c:e4:d7:0f:6f:13:56:74:48:3f:67: 94:33:e0:46:6d:bc:af:82:21:b1:c5:c8:26:9d:38: e6:82:06:7c:d6:9a:ba:50:06:aa:1b:2b:54:54:4e: 58:9f:5f:7a:9d:3e:85:4e:3f:b6:ca:eb:e0:71:5a: ac:98:c6:e7:88:27:ca:b4:fa:41:f9:b1:e9:14:ee: 30:71:69:ef:9e:28:63:8e:14:7f:91:3c:4d:95:f5: 7f:e8:c4:87:53:42:50:f8:b7:10:5a:14:86:2c:d8: 3b:ef:51:9a:ca:d7:a0:61:1a:f9:05:fc:bb:d0:c6: df:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:4F:79:84:DB:90:00:5B:36:6F:09:E3:5A:1E:6D:4B:57:83:6F:2A X509v3 Authority Key Identifier: keyid:04:8E:EF:B5:B2:64:83:56:17:11:C9:90:F2:0F:F5:52:AC:4E:2C:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/sE95hNuQAFs2bwnjWh5tS1eDbyo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.151.128.0/20 185.146.176.0/22 IPv6: 2a03:3580::/32 Signature Algorithm: sha256WithRSAEncryption 0d:ac:01:f3:6d:66:67:76:47:d7:47:14:82:31:ee:88:be:3b: 9c:55:aa:bd:59:01:26:07:70:28:f4:c5:c2:ac:08:1a:89:b6: 19:37:9c:5f:81:78:33:db:67:d2:24:9d:d5:ff:46:25:56:fd: d3:4d:d7:ff:93:87:7a:9a:60:19:e6:94:45:2e:26:55:6e:5f: 3e:68:ca:19:62:2d:99:69:72:94:72:9d:23:10:1e:b3:dd:12: b4:96:0d:ae:44:69:52:fb:8f:b0:cb:a5:c7:18:17:e4:8c:e4: b4:93:d3:12:82:17:0d:15:c6:9a:cc:6e:64:2b:58:68:4f:23: 6e:a1:4c:de:7b:99:d9:2a:ca:1b:2a:e7:37:b0:1a:b6:9d:07: 6a:84:21:08:63:8a:32:59:bf:aa:81:b8:3c:68:3e:f4:41:05: b4:da:ee:71:7c:38:4b:87:a9:b7:1b:cd:da:d5:0e:d7:73:5d: 08:ca:4e:40:dd:94:72:50:f2:ce:7d:da:df:37:44:ac:2e:0b: 7c:4d:e7:7d:79:52:c0:76:58:2e:8a:2a:79:42:b2:db:6e:e8: 83:15:6b:16:07:2f:11:3c:eb:9e:ac:21:73:81:45:a1:f8:0e: 28:09:82:23:63:23:2a:2a:9c:10:fd:e0:0c:5e:4f:08:4c:a1: ed:0c:88:38 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt6x9L96NF64vbCJWbxpbz1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0OGVlZmI1YjI2NDgzNTYxNzExYzk5MGYyMGZmNTUyYWM0 ZTJjOWMwHhcNMjYwMTAxMTgxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDRmNzk4NGRiOTAwMDViMzY2ZjA5ZTM1YTFlNmQ0YjU3ODM2ZjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3VdOHHczTad+zZc0MPZedTS0cRrV rQWGGGE+9qxw4X+Z1LUC3Pdynl/Hzeq9eCVXhg/I91fhpi8BsmXDM5kZaCXoBjTO Iatn+hKXL1e+Xjcd4ro/RQ0aDMaBjj6pBSfMy8ovK//9Hjq5k6Z6xeqoH8hPaJjY UlH+YoM2lDSe8TLHqfhsfz+oQ7RknOTXD28TVnRIP2eUM+BGbbyvgiGxxcgmnTjm ggZ81pq6UAaqGytUVE5Yn196nT6FTj+2yuvgcVqsmMbniCfKtPpB+bHpFO4wcWnv nihjjhR/kTxNlfV/6MSHU0JQ+LcQWhSGLNg771GaytegYRr5Bfy70Mbf9QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFLBPeYTbkABbNm8J41oebUtXg28qMB8GA1UdIwQY MBaAFASO77WyZINWFxHJkPIP9VKsTiycMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkk3dnRiSmtnMVlYRWNtUThnXzFVcXhPTEp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS80YjYzNTQtYTdhMy00MzUxLWE3ZGUt YWVhYzVkOWNkYzdiLzEvc0U5NWhOdVFBRnMyYndualdoNXRTMWVEYnlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS80YjYzNTQtYTdhMy00MzUxLWE3ZGUtYWVhYzVkOWNkYzdi LzEvQkk3dnRiSmtnMVlYRWNtUThnXzFVcXhPTEp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEW5eAAwQC uZKwMA0EAgACMAcDBQAqAzWAMA0GCSqGSIb3DQEBCwUAA4IBAQANrAHzbWZndkfX RxSCMe6IvjucVaq9WQEmB3Ao9MXCrAgaibYZN5xfgXgz22fSJJ3V/0YlVv3TTdf/ k4d6mmAZ5pRFLiZVbl8+aMoZYi2ZaXKUcp0jEB6z3RK0lg2uRGlS+4+wy6XHGBfk jOS0k9MSghcNFcaazG5kK1hoTyNuoUzee5nZKsobKuc3sBq2nQdqhCEIY4oyWb+q gbg8aD70QQW02u5xfDhLh6m3G83a1Q7Xc10Iyk5A3ZRyUPLOfdrfN0SsLgt8Ted9 eVLAdlguiip5QrLbbuiDFWsWBy8RPOuerCFzgUWh+A4oCYIjYyMqKpwQ/eAMXk8I TKHtDIg4 -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:40 2026 by rpki-client