This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/_E48T5Kk_YeYZLQhVAgd8hC7YsU.roa File: _E48T5Kk_YeYZLQhVAgd8hC7YsU.roa (raw, json) Hash identifier: k0dJ8PeVcNyuxj67fWBRQ1gHRoWtlCyhQvB826alDbQ= Subject key identifier: FC:4E:3C:4F:92:A4:FD:87:98:64:B4:21:54:08:1D:F2:10:BB:62:C5 Certificate issuer: /CN=917c33c75961318d8ee3cb13464a90d00ab8bd2d Certificate serial: 019B7910D71C999236C563D9945A8595CFD2 Authority key identifier: 91:7C:33:C7:59:61:31:8D:8E:E3:CB:13:46:4A:90:D0:0A:B8:BD:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/_E48T5Kk_YeYZLQhVAgd8hC7YsU.roa Signing time: Thu 01 Jan 2026 10:18:25 +0000 ROA not before: Thu 01 Jan 2026 10:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56962 IP address blocks: 91.242.235.0/24 maxlen: 24 212.24.121.0/24 maxlen: 24 2a11:2740::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.crl rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft rsync://rpki.ripe.net/repository/DEFAULT/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 04:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:d7:1c:99:92:36:c5:63:d9:94:5a:85:95:cf:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=917c33c75961318d8ee3cb13464a90d00ab8bd2d Validity Not Before: Jan 1 10:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc4e3c4f92a4fd879864b42154081df210bb62c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:61:c3:2a:88:7b:05:f0:65:91:7a:26:3c:23: 22:cd:58:af:8f:20:dd:ee:59:c0:86:6b:8f:e4:76: 67:1e:77:b2:aa:a3:bc:15:5b:1a:33:e3:c8:e5:a5: e6:d8:c1:74:51:fa:b6:5f:17:2d:d7:76:42:af:11: 4c:7d:6c:e4:5f:8d:da:de:16:ea:0a:58:3d:7f:fc: 49:bf:21:26:87:df:7a:94:5d:52:9b:0f:14:1d:17: 3e:a6:5f:58:4e:88:eb:b3:31:d5:bf:41:0a:14:90: 1c:d4:30:13:8a:cb:c7:cf:d8:c3:41:5e:58:4d:e3: d3:a3:ae:85:71:db:f0:16:ac:4c:a0:ce:dd:ae:33: 58:78:c5:8f:09:4a:76:7a:2b:7e:59:96:e6:8c:b0: c4:25:de:52:61:71:43:72:55:cc:ce:ef:27:a1:61: f4:d6:84:8a:a4:85:39:bd:5d:09:75:0f:d6:27:54: 18:78:32:ae:50:81:be:ef:9a:82:03:1d:ba:9e:00: 72:c6:f4:5f:80:93:dd:8b:f4:fd:11:7e:aa:f9:8c: 92:cc:6f:aa:dd:cc:ba:85:47:bf:b6:2a:50:d4:d8: 5c:9f:4a:0e:87:01:63:bf:b7:31:b4:c0:cb:fd:1c: 0a:56:fb:84:38:bb:e7:dc:a2:2e:57:c5:3d:f7:f8: 48:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:4E:3C:4F:92:A4:FD:87:98:64:B4:21:54:08:1D:F2:10:BB:62:C5 X509v3 Authority Key Identifier: keyid:91:7C:33:C7:59:61:31:8D:8E:E3:CB:13:46:4A:90:D0:0A:B8:BD:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/_E48T5Kk_YeYZLQhVAgd8hC7YsU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.242.235.0/24 212.24.121.0/24 IPv6: 2a11:2740::/29 Signature Algorithm: sha256WithRSAEncryption 19:2e:de:76:dc:19:45:71:31:c1:4d:75:92:7e:79:8c:17:72: b1:0a:5d:35:1d:32:6a:15:79:97:e9:8a:06:01:b9:4b:a5:c5: d5:e7:1e:c4:fc:47:2d:c8:d0:e7:f7:79:26:22:47:73:76:2b: 5b:14:51:b6:d6:e9:ce:29:cf:d2:5d:24:7b:af:80:cf:dc:d0: 5a:84:fb:87:05:ce:e9:5e:c8:58:9b:2f:11:f9:8c:f8:ff:bf: d3:29:f4:f0:b7:6a:d8:3e:d6:34:3c:96:2a:82:0f:0b:50:57: 28:88:09:b0:8e:e8:f7:e2:3a:b3:f9:09:c3:9a:52:07:58:7c: 5d:ad:cf:58:ae:16:c4:15:ad:1a:af:70:41:04:54:c5:32:5c: 33:b5:a4:b8:8b:90:1d:ab:e6:11:cf:27:44:26:f1:40:a4:da: e1:43:01:37:d2:30:5e:e1:4e:af:2b:1b:58:57:95:e5:8e:2c: 2f:fc:65:ae:d7:13:9a:15:5b:9e:33:f1:20:91:6a:6b:f4:65: 30:c7:fb:8f:ff:20:2e:cf:01:c1:43:54:9d:94:0a:92:28:3a: 39:1c:fe:b6:0b:52:5f:f2:74:ab:a6:d8:bf:2a:a9:76:3f:09: 13:85:22:0d:13:99:90:d0:29:2b:6b:12:3a:58:ec:2d:83:e6: 8b:be:95:77 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt5ENccmZI2xWPZlFqFlc/SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxN2MzM2M3NTk2MTMxOGQ4ZWUzY2IxMzQ2NGE5MGQwMGFi OGJkMmQwHhcNMjYwMTAxMTAxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzRlM2M0ZjkyYTRmZDg3OTg2NGI0MjE1NDA4MWRmMjEwYmI2MmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2HDKoh7BfBlkXomPCMizVivjyDd 7lnAhmuP5HZnHneyqqO8FVsaM+PI5aXm2MF0Ufq2Xxct13ZCrxFMfWzkX43a3hbq Clg9f/xJvyEmh996lF1Smw8UHRc+pl9YTojrszHVv0EKFJAc1DATisvHz9jDQV5Y TePTo66FcdvwFqxMoM7drjNYeMWPCUp2eit+WZbmjLDEJd5SYXFDclXMzu8noWH0 1oSKpIU5vV0JdQ/WJ1QYeDKuUIG+75qCAx26ngByxvRfgJPdi/T9EX6q+YySzG+q 3cy6hUe/tipQ1Nhcn0oOhwFjv7cxtMDL/RwKVvuEOLvn3KIuV8U99/hI1QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFPxOPE+SpP2HmGS0IVQIHfIQu2LFMB8GA1UdIwQY MBaAFJF8M8dZYTGNjuPLE0ZKkNAKuL0tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1h3engxbGhNWTJPNDhzVFJrcVEwQXE0dlMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9hYzI3M2EtOWM4Yi00ZWY3LWE0MDAt YzM3NjFhNzVkMDQ3LzEvX0U0OFQ1S2tfWWVZWkxRaFZBZ2Q4aEM3WXNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9hYzI3M2EtOWM4Yi00ZWY3LWE0MDAtYzM3NjFhNzVkMDQ3 LzEva1h3engxbGhNWTJPNDhzVFJrcVEwQXE0dlMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAW/LrAwQA 1Bh5MA0EAgACMAcDBQMqESdAMA0GCSqGSIb3DQEBCwUAA4IBAQAZLt523BlFcTHB TXWSfnmMF3KxCl01HTJqFXmX6YoGAblLpcXV5x7E/EctyNDn93kmIkdzditbFFG2 1unOKc/SXSR7r4DP3NBahPuHBc7pXshYmy8R+Yz4/7/TKfTwt2rYPtY0PJYqgg8L UFcoiAmwjuj34jqz+QnDmlIHWHxdrc9YrhbEFa0ar3BBBFTFMlwztaS4i5Adq+YR zydEJvFApNrhQwE30jBe4U6vKxtYV5Xljiwv/GWu1xOaFVueM/EgkWpr9GUwx/uP /yAuzwHBQ1SdlAqSKDo5HP62C1Jf8nSrpti/Kql2PwkThSINE5mQ0CkraxI6WOwt g+aLvpV3 -----END CERTIFICATE-----Generated at Mon Jan 26 12:26:08 2026 by rpki-client