This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/IcEfPnhAjewSEEO3LOP7u-TcVC4.roa File: IcEfPnhAjewSEEO3LOP7u-TcVC4.roa (raw, json) Hash identifier: BRMvl9t5zukkJheawmCAi6lNUM26ZBTh/KTKt1g+rZ0= Subject key identifier: 21:C1:1F:3E:78:40:8D:EC:12:10:43:B7:2C:E3:FB:BB:E4:DC:54:2E Certificate issuer: /CN=e6cc65c27c23298b0c5a0e0bc74ba51034a704c8 Certificate serial: 019B77C734C10210B37A15153330AC898ADC Authority key identifier: E6:CC:65:C2:7C:23:29:8B:0C:5A:0E:0B:C7:4B:A5:10:34:A7:04:C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/IcEfPnhAjewSEEO3LOP7u-TcVC4.roa Signing time: Thu 01 Jan 2026 04:18:22 +0000 ROA not before: Thu 01 Jan 2026 04:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31010 IP address blocks: 91.212.85.0/24 maxlen: 24 2001:678:598::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft rsync://rpki.ripe.net/repository/DEFAULT/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:34:c1:02:10:b3:7a:15:15:33:30:ac:89:8a:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6cc65c27c23298b0c5a0e0bc74ba51034a704c8 Validity Not Before: Jan 1 04:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=21c11f3e78408dec121043b72ce3fbbbe4dc542e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2a:c8:f1:f9:fe:d8:78:62:85:e7:13:42:b0: 35:b7:53:ae:a7:b5:a8:93:fc:4d:bf:f6:5e:ee:b7: c5:47:f5:7a:7a:04:90:c0:83:81:5c:35:7c:ac:6f: f3:3f:c4:f8:8a:6b:c4:44:88:df:85:79:96:b6:7e: 78:2d:2a:f9:91:65:b0:9b:21:32:a8:70:51:83:d8: 75:42:54:94:ba:6e:22:71:31:73:cc:45:5c:03:41: 1d:17:ae:7a:62:47:66:fc:03:2b:f8:f8:13:0b:e8: 26:d3:00:0c:5a:af:f9:df:91:20:a1:78:8c:52:0b: 8e:17:be:f0:e0:00:e8:8f:e1:a2:2a:1e:0f:a8:4d: 30:e1:7c:0f:56:28:bf:55:ae:f4:48:ea:20:54:76: c0:35:00:74:bf:d3:85:24:3b:ac:89:26:49:68:b0: d9:ba:27:71:af:ea:60:65:10:c8:d0:71:43:d8:b9: 21:65:a4:82:15:d1:36:c4:42:f5:c4:7f:ab:b8:cd: 79:23:1e:2a:2a:86:56:97:76:c1:2c:65:cd:c4:0d: 5b:1c:e5:39:92:9d:83:47:22:d2:a4:a7:45:ed:a5: ee:0b:ed:da:94:18:16:28:9b:e3:78:84:17:f5:38: 7a:6b:1d:d6:4e:b5:aa:6c:17:4b:23:07:21:90:e3: f8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:C1:1F:3E:78:40:8D:EC:12:10:43:B7:2C:E3:FB:BB:E4:DC:54:2E X509v3 Authority Key Identifier: keyid:E6:CC:65:C2:7C:23:29:8B:0C:5A:0E:0B:C7:4B:A5:10:34:A7:04:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/IcEfPnhAjewSEEO3LOP7u-TcVC4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.85.0/24 IPv6: 2001:678:598::/48 Signature Algorithm: sha256WithRSAEncryption 0f:4b:de:c6:33:45:99:6f:33:db:81:e8:15:eb:fc:b6:78:cc: ae:e1:a0:d5:a9:00:37:9d:5b:18:96:b4:f7:55:2d:4a:ef:70: bb:9b:aa:f4:8c:d7:9c:2e:20:8b:24:56:6c:2f:39:41:e0:bb: 15:27:7e:24:04:db:11:cc:6e:8e:e4:50:12:48:60:24:74:12: e5:fa:c5:56:fd:7e:18:65:79:0e:44:e7:6f:62:2b:7e:a4:19: 41:29:2c:2f:b0:97:a2:7f:e7:66:a8:49:97:3c:3d:26:6d:2b: 27:ae:b7:e3:01:31:22:b6:b0:19:ca:4d:45:55:ad:f4:cb:3a: 3b:62:97:73:34:5d:3f:cc:17:60:56:02:4b:f8:e5:ec:a7:0d: dc:23:14:6c:dd:c0:8e:30:ea:87:4c:27:23:3a:bb:e9:c3:87: bd:8b:06:74:33:17:0c:71:ac:b5:b0:e4:3c:7b:4f:13:bf:38: c9:39:a3:6b:df:4c:d7:c7:38:11:a2:73:38:99:57:07:19:31: 0a:6b:71:ce:7a:ef:38:1f:0a:8c:26:f9:71:0e:8c:94:08:55: 6d:97:00:2a:04:65:c0:fe:0d:f2:aa:9e:7b:d2:af:50:67:4a: f5:39:b6:31:5e:34:2f:b2:d0:0d:97:60:dd:35:19:17:a3:ec: fd:56:13:1c -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt3xzTBAhCzehUVMzCsiYrcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2Y2M2NWMyN2MyMzI5OGIwYzVhMGUwYmM3NGJhNTEwMzRh NzA0YzgwHhcNMjYwMTAxMDQxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMWMxMWYzZTc4NDA4ZGVjMTIxMDQzYjcyY2UzZmJiYmU0ZGM1NDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvirI8fn+2HhihecTQrA1t1Oup7Wo k/xNv/Ze7rfFR/V6egSQwIOBXDV8rG/zP8T4imvERIjfhXmWtn54LSr5kWWwmyEy qHBRg9h1QlSUum4icTFzzEVcA0EdF656Ykdm/AMr+PgTC+gm0wAMWq/535EgoXiM UguOF77w4ADoj+GiKh4PqE0w4XwPVii/Va70SOogVHbANQB0v9OFJDusiSZJaLDZ uidxr+pgZRDI0HFD2LkhZaSCFdE2xEL1xH+ruM15Ix4qKoZWl3bBLGXNxA1bHOU5 kp2DRyLSpKdF7aXuC+3alBgWKJvjeIQX9Th6ax3WTrWqbBdLIwchkOP4RQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFCHBHz54QI3sEhBDtyzj+7vk3FQuMB8GA1UdIwQY MBaAFObMZcJ8IymLDFoOC8dLpRA0pwTIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXN4bHdud2pLWXNNV2c0THgwdWxFRFNuQk1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8wZThiYWQtMTIxYy00YTU2LTk2Y2Qt YWFjZmMwZGJlZDEyLzEvSWNFZlBuaEFqZXdTRUVPM0xPUDd1LVRjVkM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC8wZThiYWQtMTIxYy00YTU2LTk2Y2QtYWFjZmMwZGJlZDEy LzEvNXN4bHdud2pLWXNNV2c0THgwdWxFRFNuQk1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW9RVMA8E AgACMAkDBwAgAQZ4BZgwDQYJKoZIhvcNAQELBQADggEBAA9L3sYzRZlvM9uB6BXr /LZ4zK7hoNWpADedWxiWtPdVLUrvcLubqvSM15wuIIskVmwvOUHguxUnfiQE2xHM bo7kUBJIYCR0EuX6xVb9fhhleQ5E529iK36kGUEpLC+wl6J/52aoSZc8PSZtKyeu t+MBMSK2sBnKTUVVrfTLOjtil3M0XT/MF2BWAkv45eynDdwjFGzdwI4w6odMJyM6 u+nDh72LBnQzFwxxrLWw5Dx7TxO/OMk5o2vfTNfHOBGicziZVwcZMQprcc567zgf Cowm+XEOjJQIVW2XACoEZcD+DfKqnnvSr1BnSvU5tjFeNC+y0A2XYN01GRej7P1W Exw= -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:05 2026 by rpki-client