This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/vUm2P-SV22T5wOaUTtxuKZ8o8V4.roa File: vUm2P-SV22T5wOaUTtxuKZ8o8V4.roa (raw, json) Hash identifier: mePIINJRIHSndAspP7XU6MW6J2iDzKwGYGxxInmc05Q= Subject key identifier: BD:49:B6:3F:E4:95:DB:64:F9:C0:E6:94:4E:DC:6E:29:9F:28:F1:5E Certificate issuer: /CN=5e6140f17312784ef62ae3be030c0c2cc661a702 Certificate serial: 019B7BA4CD469D824B66AEE2E5083D5BB3DF Authority key identifier: 5E:61:40:F1:73:12:78:4E:F6:2A:E3:BE:03:0C:0C:2C:C6:61:A7:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/vUm2P-SV22T5wOaUTtxuKZ8o8V4.roa Signing time: Thu 01 Jan 2026 22:19:16 +0000 ROA not before: Thu 01 Jan 2026 22:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30058 IP address blocks: 91.211.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.crl rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:cd:46:9d:82:4b:66:ae:e2:e5:08:3d:5b:b3:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e6140f17312784ef62ae3be030c0c2cc661a702 Validity Not Before: Jan 1 22:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd49b63fe495db64f9c0e6944edc6e299f28f15e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f8:a0:ab:99:03:41:24:98:90:57:89:70:e7: 92:b5:3b:27:5a:36:8d:d4:ab:19:1f:8e:b5:28:3f: a7:f7:63:5d:9c:52:0b:ab:bd:92:70:54:be:ce:96: b5:a5:cf:0c:4f:ee:a8:8d:fb:88:9d:2a:6d:b7:70: ef:30:b2:ee:e7:ba:16:46:4e:16:4e:c3:7e:ad:52: d5:b6:02:e8:8f:ff:cb:de:55:40:5e:d0:39:c2:ba: 79:a2:ed:c0:31:0a:a1:4f:15:b7:ef:8d:15:0a:bb: 15:54:81:76:cf:00:d8:6d:4c:fb:d0:dc:9c:5b:62: 88:60:58:12:c0:d1:a5:c2:d7:ae:4c:82:2f:91:a4: df:f9:02:42:24:20:35:77:81:df:96:c6:60:75:ff: d8:96:c1:c9:91:70:6e:76:0f:ed:96:b2:e9:be:da: 98:b5:96:32:2d:c0:70:ba:40:e4:70:78:58:57:1c: 84:ef:bd:5b:6a:7d:57:45:30:8c:c6:b2:6a:1c:e5: dd:91:fb:c3:4e:9d:e0:6a:a7:d6:96:02:d7:16:e9: 17:24:f2:66:43:79:44:e5:a2:5a:62:28:76:d6:83: 50:5c:27:44:4c:2c:da:97:7e:5c:54:97:e3:aa:45: 0b:b9:bc:56:0e:03:9a:b3:7b:b0:65:14:2c:f6:c2: 5a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:49:B6:3F:E4:95:DB:64:F9:C0:E6:94:4E:DC:6E:29:9F:28:F1:5E X509v3 Authority Key Identifier: keyid:5E:61:40:F1:73:12:78:4E:F6:2A:E3:BE:03:0C:0C:2C:C6:61:A7:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/vUm2P-SV22T5wOaUTtxuKZ8o8V4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.211.89.0/24 Signature Algorithm: sha256WithRSAEncryption 01:0c:62:b0:42:b1:c5:0d:2d:0d:78:e9:d4:4c:bf:4d:f4:72: e6:e9:0b:78:c2:32:84:f3:99:72:b4:39:2f:7e:92:0f:65:aa: 2a:9c:3c:6c:5f:3d:60:c8:7a:fc:ba:a7:b8:07:3a:af:3d:b5: 4b:f0:cb:e8:11:77:24:fb:60:75:bd:d6:e7:f0:f1:72:79:ec: ad:9f:28:71:20:fc:22:05:3c:e4:9a:35:55:89:35:44:4f:57: de:01:09:67:6c:c9:87:a7:c6:9c:4a:58:f1:37:1b:80:7a:a4: 24:14:86:0a:c3:49:c4:d1:f3:37:cf:23:e2:50:aa:a7:c7:15: f4:65:9d:70:f3:e8:2f:eb:36:53:af:ab:05:3d:25:f4:51:98: cf:37:41:a5:5d:c4:2d:e0:f9:5f:e8:62:6d:10:59:22:a3:43: e4:78:d3:15:23:cf:50:5a:26:02:f7:10:12:66:68:f3:2a:a7: c1:93:2e:a0:00:77:d8:15:ed:88:e2:ff:b9:ab:34:59:39:84: 96:a3:09:cd:0a:4d:82:09:b9:35:7a:86:40:08:c7:1f:10:0c: 6b:04:eb:06:fb:a6:f3:72:13:9f:0b:e8:13:d9:75:a1:02:c5: cd:fc:3b:a5:38:b5:a3:f7:d4:e5:52:80:b1:35:59:ec:dc:db: 78:06:18:c8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pM1GnYJLZq7i5Qg9W7PfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNjE0MGYxNzMxMjc4NGVmNjJhZTNiZTAzMGMwYzJjYzY2 MWE3MDIwHhcNMjYwMTAxMjIxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDQ5YjYzZmU0OTVkYjY0ZjljMGU2OTQ0ZWRjNmUyOTlmMjhmMTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvigq5kDQSSYkFeJcOeStTsnWjaN 1KsZH461KD+n92NdnFILq72ScFS+zpa1pc8MT+6ojfuInSptt3DvMLLu57oWRk4W TsN+rVLVtgLoj//L3lVAXtA5wrp5ou3AMQqhTxW3740VCrsVVIF2zwDYbUz70Nyc W2KIYFgSwNGlwteuTIIvkaTf+QJCJCA1d4HflsZgdf/YlsHJkXBudg/tlrLpvtqY tZYyLcBwukDkcHhYVxyE771ban1XRTCMxrJqHOXdkfvDTp3gaqfWlgLXFukXJPJm Q3lE5aJaYih21oNQXCdETCzal35cVJfjqkULubxWDgOas3uwZRQs9sJalwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL1Jtj/kldtk+cDmlE7cbimfKPFeMB8GA1UdIwQY MBaAFF5hQPFzEnhO9irjvgMMDCzGYacCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWG1GQThYTVNlRTcyS3VPLUF3d01MTVpocHdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9jNGNlMzItYzIyMC00MGM5LThiZTgt MGRiY2JhMjc1NDE3LzEvdlVtMlAtU1YyMlQ1d09hVVR0eHVLWjhvOFY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9jNGNlMzItYzIyMC00MGM5LThiZTgtMGRiY2JhMjc1NDE3 LzEvWG1GQThYTVNlRTcyS3VPLUF3d01MTVpocHdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9NZMA0G CSqGSIb3DQEBCwUAA4IBAQABDGKwQrHFDS0NeOnUTL9N9HLm6Qt4wjKE85lytDkv fpIPZaoqnDxsXz1gyHr8uqe4BzqvPbVL8MvoEXck+2B1vdbn8PFyeeytnyhxIPwi BTzkmjVViTVET1feAQlnbMmHp8acSljxNxuAeqQkFIYKw0nE0fM3zyPiUKqnxxX0 ZZ1w8+gv6zZTr6sFPSX0UZjPN0GlXcQt4Plf6GJtEFkio0PkeNMVI89QWiYC9xAS ZmjzKqfBky6gAHfYFe2I4v+5qzRZOYSWownNCk2CCbk1eoZACMcfEAxrBOsG+6bz chOfC+gT2XWhAsXN/DulOLWj99TlUoCxNVns3Nt4BhjI -----END CERTIFICATE-----Generated at Tue Jan 20 12:50:35 2026 by rpki-client