This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/ei49HQBepZfijJONn1YXG9qTwnQ.roa File: ei49HQBepZfijJONn1YXG9qTwnQ.roa (raw, json) Hash identifier: 436lkK/qtqzaDmSUiPMUIk0ZEB4+mDd5VFzkWFWYadA= Subject key identifier: 7A:2E:3D:1D:00:5E:A5:97:E2:8C:93:8D:9F:56:17:1B:DA:93:C2:74 Certificate issuer: /CN=237f7db033314c473cda194e0df79f1c375da3f4 Certificate serial: 019B79ECF66E0DB624E0E63D16F6F1E9C389 Authority key identifier: 23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/ei49HQBepZfijJONn1YXG9qTwnQ.roa Signing time: Thu 01 Jan 2026 14:18:51 +0000 ROA not before: Thu 01 Jan 2026 14:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6453 IP address blocks: 91.140.128.0/17 maxlen: 24 194.54.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.crl rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.mft rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:f6:6e:0d:b6:24:e0:e6:3d:16:f6:f1:e9:c3:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=237f7db033314c473cda194e0df79f1c375da3f4 Validity Not Before: Jan 1 14:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a2e3d1d005ea597e28c938d9f56171bda93c274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:45:5f:41:86:93:5a:1f:96:2b:53:c1:6d:8b: 43:3c:b0:91:45:f9:29:7c:e2:03:40:06:cf:1f:86: 3a:71:76:bc:f9:f6:0b:79:ad:3a:9e:b7:a5:11:db: df:fe:a8:ad:56:e5:7c:4a:89:d9:0b:bd:90:69:e0: 9c:a1:cd:21:2f:ec:a3:d3:d2:44:5f:33:52:61:93: 8c:1d:8e:68:3a:ce:0a:ff:08:8b:fc:ab:5d:1c:d6: ed:30:cc:09:9a:c0:6d:78:da:3b:45:3e:35:82:88: b2:3d:a8:d5:06:90:90:8f:61:94:f2:e0:06:53:5e: b5:cd:3b:f1:a8:ad:0e:8a:de:26:6c:8e:ba:92:53: 35:9e:dc:23:1c:2d:02:6b:0c:e4:86:52:09:aa:d4: f2:ec:85:cd:64:a2:60:ca:15:bb:e1:61:50:78:7f: 04:4b:68:c3:4e:0a:07:26:6c:5d:83:46:c1:34:c3: 01:8b:b8:b3:47:af:25:d3:d2:6e:c5:1a:1d:1a:fa: e7:5b:52:54:e5:0d:89:11:00:42:e7:90:41:6b:f6: 67:c0:51:2e:fc:6f:37:15:13:b1:c0:2d:af:59:7b: 38:8c:69:1a:bd:99:72:b0:81:7c:f3:85:86:a2:31: d9:52:26:61:1e:94:be:0d:45:d3:86:eb:50:4e:93: b8:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:2E:3D:1D:00:5E:A5:97:E2:8C:93:8D:9F:56:17:1B:DA:93:C2:74 X509v3 Authority Key Identifier: keyid:23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/ei49HQBepZfijJONn1YXG9qTwnQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.140.128.0/17 194.54.192.0/18 Signature Algorithm: sha256WithRSAEncryption 54:0b:35:8c:20:92:33:24:4a:af:f5:96:37:a0:49:9b:9f:b2: 9e:72:ed:bd:d3:99:aa:9f:f0:7a:78:8a:0f:3f:e9:66:ca:d4: 47:46:66:ea:1b:be:bd:bb:95:ea:32:0f:9c:0f:d2:04:bb:8a: 2b:30:12:28:27:2d:1b:c3:f4:3b:e2:8d:bb:0d:9b:bb:97:c7: 5f:fc:5f:d9:a5:71:b2:60:6b:92:74:b8:17:40:36:07:76:95: e1:be:ac:a9:d5:47:53:3b:c7:0b:32:5d:98:81:93:bd:41:fc: bc:c3:93:00:34:a7:07:50:59:85:03:3a:67:bc:a0:9e:2c:ea: 83:bb:59:a0:af:96:ef:13:1f:b3:11:f5:1c:47:10:96:95:36: 50:0d:d1:6f:5d:d1:6f:db:73:00:5c:97:df:11:8f:39:99:a1: 0c:29:c0:4c:fb:38:97:5f:53:a1:ce:2b:3b:70:5b:1c:d0:4e: 56:0d:eb:d7:df:68:5e:06:49:24:e8:27:d3:31:7e:16:27:05: 09:62:9d:f0:20:e8:a1:5e:27:59:95:60:9b:5c:a8:af:ba:03: ea:e3:64:e9:da:1a:36:7c:b9:92:b7:0b:cc:51:34:98:9d:9e: e9:c6:b2:9c:3d:90:ad:f6:01:21:d2:a5:3b:7e:63:f2:99:cd: 54:87:8d:7e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57PZuDbYk4OY9Fvbx6cOJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzN2Y3ZGIwMzMzMTRjNDczY2RhMTk0ZTBkZjc5ZjFjMzc1 ZGEzZjQwHhcNMjYwMTAxMTQxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTJlM2QxZDAwNWVhNTk3ZTI4YzkzOGQ5ZjU2MTcxYmRhOTNjMjc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4UVfQYaTWh+WK1PBbYtDPLCRRfkp fOIDQAbPH4Y6cXa8+fYLea06nrelEdvf/qitVuV8SonZC72QaeCcoc0hL+yj09JE XzNSYZOMHY5oOs4K/wiL/KtdHNbtMMwJmsBteNo7RT41goiyPajVBpCQj2GU8uAG U161zTvxqK0Oit4mbI66klM1ntwjHC0CawzkhlIJqtTy7IXNZKJgyhW74WFQeH8E S2jDTgoHJmxdg0bBNMMBi7izR68l09JuxRodGvrnW1JU5Q2JEQBC55BBa/ZnwFEu /G83FROxwC2vWXs4jGkavZlysIF884WGojHZUiZhHpS+DUXThutQTpO47wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHouPR0AXqWX4oyTjZ9WFxvak8J0MB8GA1UdIwQY MBaAFCN/fbAzMUxHPNoZTg33nxw3XaP0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTM5OXNETXhURWM4MmhsT0RmZWZIRGRkb19RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9lZWY1NTctMGUxMC00MGNlLWE0OGYt ZWUwNjAzOTQ5ZjkzLzEvZWk0OUhRQmVwWmZpakpPTm4xWVhHOXFUd25RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9lZWY1NTctMGUxMC00MGNlLWE0OGYtZWUwNjAzOTQ5Zjkz LzEvSTM5OXNETXhURWM4MmhsT0RmZWZIRGRkb19RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQHW4yAAwQG wjbAMA0GCSqGSIb3DQEBCwUAA4IBAQBUCzWMIJIzJEqv9ZY3oEmbn7Kecu2905mq n/B6eIoPP+lmytRHRmbqG769u5XqMg+cD9IEu4orMBIoJy0bw/Q74o27DZu7l8df /F/ZpXGyYGuSdLgXQDYHdpXhvqyp1UdTO8cLMl2YgZO9Qfy8w5MANKcHUFmFAzpn vKCeLOqDu1mgr5bvEx+zEfUcRxCWlTZQDdFvXdFv23MAXJffEY85maEMKcBM+ziX X1Ohzis7cFsc0E5WDevX32heBkkk6CfTMX4WJwUJYp3wIOihXidZlWCbXKivugPq 42Tp2ho2fLmStwvMUTSYnZ7pxrKcPZCt9gEh0qU7fmPymc1Uh41+ -----END CERTIFICATE-----Generated at Tue Jan 20 06:17:59 2026 by rpki-client