This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/e2xgXuwJHd2kCUvRcc0JZ_ZWpIU.roa File: e2xgXuwJHd2kCUvRcc0JZ_ZWpIU.roa (raw, json) Hash identifier: ghMimNEZUb3ZFVFJUrfR1g8VeQyoHCCHBKZY/69OpTk= Subject key identifier: 7B:6C:60:5E:EC:09:1D:DD:A4:09:4B:D1:71:CD:09:67:F6:56:A4:85 Certificate issuer: /CN=36cfaffc9c7868708f3c81ee5c0d64c35ac1bef1 Certificate serial: 019B7C8002BFBCC845DA57434AFC8FEA3B73 Authority key identifier: 36:CF:AF:FC:9C:78:68:70:8F:3C:81:EE:5C:0D:64:C3:5A:C1:BE:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/e2xgXuwJHd2kCUvRcc0JZ_ZWpIU.roa Signing time: Fri 02 Jan 2026 02:18:42 +0000 ROA not before: Fri 02 Jan 2026 02:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206948 IP address blocks: 91.226.78.0/24 maxlen: 24 91.226.160.0/24 maxlen: 24 91.226.184.0/24 maxlen: 24 185.216.182.0/23 maxlen: 23 2a13:8440::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.mft rsync://rpki.ripe.net/repository/DEFAULT/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:02:bf:bc:c8:45:da:57:43:4a:fc:8f:ea:3b:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36cfaffc9c7868708f3c81ee5c0d64c35ac1bef1 Validity Not Before: Jan 2 02:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7b6c605eec091ddda4094bd171cd0967f656a485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:6e:5d:e8:d6:cc:5e:59:84:62:3c:f0:cc:f6: 7e:8d:32:5b:58:b4:ae:a4:41:f0:5a:75:6b:32:7c: 98:64:f7:82:f7:f4:31:01:ae:b3:7c:f6:da:bd:61: 9e:a5:ce:6c:5b:50:3b:99:c0:e3:b2:20:84:aa:5f: f6:3f:7e:42:17:7a:52:81:91:00:9a:0f:79:8e:66: 37:d6:f6:ee:d0:43:1c:3c:b9:8b:51:c7:a1:ab:6e: 1f:73:32:b2:81:07:71:8e:5a:3d:93:78:b0:b3:e3: 49:a7:26:79:58:8f:1f:37:cc:e8:c0:f5:83:e7:12: 5d:1e:ff:4e:1f:fa:42:f1:55:e4:68:44:ac:40:bf: e5:e7:32:c3:47:df:a7:49:53:d5:2b:4d:49:0c:48: 25:51:fc:f1:26:f1:29:b1:37:10:57:31:9e:3f:42: d5:86:9b:f0:03:7d:1c:40:8c:7a:ef:77:aa:b5:ac: 78:12:13:48:44:83:2c:8d:06:b9:40:2f:16:fe:09: 8b:d8:14:1a:77:49:36:58:02:6c:df:da:f0:f3:9d: 93:34:1e:7e:e6:c5:43:33:39:31:fd:b4:bb:e8:7b: d0:97:f9:f0:d9:f9:39:d2:65:b9:f3:d6:87:7c:fc: 5b:11:56:a3:b2:a8:7e:fe:37:1c:ef:99:39:60:ee: 02:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:6C:60:5E:EC:09:1D:DD:A4:09:4B:D1:71:CD:09:67:F6:56:A4:85 X509v3 Authority Key Identifier: keyid:36:CF:AF:FC:9C:78:68:70:8F:3C:81:EE:5C:0D:64:C3:5A:C1:BE:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/e2xgXuwJHd2kCUvRcc0JZ_ZWpIU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.226.78.0/24 91.226.160.0/24 91.226.184.0/24 185.216.182.0/23 IPv6: 2a13:8440::/32 Signature Algorithm: sha256WithRSAEncryption 45:9c:b7:0d:07:6f:ac:29:2c:e3:86:da:2a:7b:88:0e:2a:4e: cb:75:c5:3f:81:c4:f8:fd:c2:02:33:58:b9:85:49:0a:f0:46: 21:38:bc:0b:37:65:58:4c:af:72:62:9c:90:a4:d5:b9:9c:b7: d6:80:50:a5:5e:3f:be:15:8d:38:11:e6:50:37:c5:54:74:99: ff:06:5b:e4:cb:33:57:f5:42:f9:ed:35:aa:26:24:3b:88:69: d0:c9:b0:3d:f3:51:8f:49:ac:fc:a4:78:0b:e9:bf:54:ec:7b: 10:56:34:6b:fb:0f:b9:1e:e4:89:d9:09:6f:e4:57:9f:44:40: 86:d3:1e:3e:96:4c:ab:42:cd:ff:6c:2b:32:2c:54:88:79:00: 98:8c:1b:9e:87:51:3f:fb:b0:cc:62:58:95:cb:64:a1:f3:66: 3a:1a:3b:0e:61:57:fe:90:7f:18:63:be:f9:d0:d1:9e:5f:49: 68:fb:b0:91:3a:47:32:8a:2a:4b:2a:57:a2:89:16:e4:2d:06: c5:ac:fd:34:84:08:31:0e:21:33:f1:5d:bc:78:38:fa:93:61: ef:bb:69:0b:a9:31:29:b6:83:7d:cc:01:23:90:96:f7:b4:32: ba:f6:70:56:4e:d1:6e:03:f4:a7:69:97:9d:b8:e7:f0:0c:3c: 37:b3:49:9c -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt8gAK/vMhF2ldDSvyP6jtzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2Y2ZhZmZjOWM3ODY4NzA4ZjNjODFlZTVjMGQ2NGMzNWFj MWJlZjEwHhcNMjYwMTAyMDIxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YjZjNjA1ZWVjMDkxZGRkYTQwOTRiZDE3MWNkMDk2N2Y2NTZhNDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9W5d6NbMXlmEYjzwzPZ+jTJbWLSu pEHwWnVrMnyYZPeC9/QxAa6zfPbavWGepc5sW1A7mcDjsiCEql/2P35CF3pSgZEA mg95jmY31vbu0EMcPLmLUcehq24fczKygQdxjlo9k3iws+NJpyZ5WI8fN8zowPWD 5xJdHv9OH/pC8VXkaESsQL/l5zLDR9+nSVPVK01JDEglUfzxJvEpsTcQVzGeP0LV hpvwA30cQIx673eqtax4EhNIRIMsjQa5QC8W/gmL2BQad0k2WAJs39rw852TNB5+ 5sVDMzkx/bS76HvQl/nw2fk50mW589aHfPxbEVajsqh+/jcc75k5YO4C9QIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFHtsYF7sCR3dpAlL0XHNCWf2VqSFMB8GA1UdIwQY MBaAFDbPr/yceGhwjzyB7lwNZMNawb7xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnMtdl9KeDRhSENQUElIdVhBMWt3MXJCdnZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9kMDliNTYtNGZjYi00N2JmLTgwMjUt OTk4NzhjYzliMTRjLzEvZTJ4Z1h1d0pIZDJrQ1V2UmNjMEpaX1pXcElVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9kMDliNTYtNGZjYi00N2JmLTgwMjUtOTk4NzhjYzliMTRj LzEvTnMtdl9KeDRhSENQUElIdVhBMWt3MXJCdnZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAW+JOAwQA W+KgAwQAW+K4AwQBudi2MA0EAgACMAcDBQAqE4RAMA0GCSqGSIb3DQEBCwUAA4IB AQBFnLcNB2+sKSzjhtoqe4gOKk7LdcU/gcT4/cICM1i5hUkK8EYhOLwLN2VYTK9y YpyQpNW5nLfWgFClXj++FY04EeZQN8VUdJn/BlvkyzNX9UL57TWqJiQ7iGnQybA9 81GPSaz8pHgL6b9U7HsQVjRr+w+5HuSJ2Qlv5FefRECG0x4+lkyrQs3/bCsyLFSI eQCYjBueh1E/+7DMYliVy2Sh82Y6GjsOYVf+kH8YY7750NGeX0lo+7CROkcyiipL KleiiRbkLQbFrP00hAgxDiEz8V28eDj6k2Hvu2kLqTEptoN9zAEjkJb3tDK69nBW TtFuA/SnaZeduOfwDDw3s0mc -----END CERTIFICATE-----Generated at Tue Feb 10 02:29:51 2026 by rpki-client