This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/54hfE0Y4-JoRYQyGvrDtVZ8e-2w.roa File: 54hfE0Y4-JoRYQyGvrDtVZ8e-2w.roa (raw, json) Hash identifier: kkVZPLuB/2kBag1x2xaUBlbz/Jrwxqs4X3vOALGnn6I= Subject key identifier: E7:88:5F:13:46:38:F8:9A:11:61:0C:86:BE:B0:ED:55:9F:1E:FB:6C Certificate issuer: /CN=0e117a3e0d0d05d4b0ab823080e7bf6cfd4b3776 Certificate serial: 019B7A5B9881E7A04BFC90B7D1931C049FEB Authority key identifier: 0E:11:7A:3E:0D:0D:05:D4:B0:AB:82:30:80:E7:BF:6C:FD:4B:37:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/54hfE0Y4-JoRYQyGvrDtVZ8e-2w.roa Signing time: Thu 01 Jan 2026 16:19:41 +0000 ROA not before: Thu 01 Jan 2026 16:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44482 IP address blocks: 91.199.138.0/24 maxlen: 24 91.225.92.0/22 maxlen: 22 194.28.52.0/22 maxlen: 22 195.238.116.0/24 maxlen: 24 195.238.117.0/24 maxlen: 24 195.238.118.0/24 maxlen: 24 195.238.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft rsync://rpki.ripe.net/repository/DEFAULT/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:98:81:e7:a0:4b:fc:90:b7:d1:93:1c:04:9f:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e117a3e0d0d05d4b0ab823080e7bf6cfd4b3776 Validity Not Before: Jan 1 16:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e7885f134638f89a11610c86beb0ed559f1efb6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e1:41:35:69:e5:41:1b:81:58:e4:34:fa:9b: 0a:1a:f7:1e:4f:e8:d8:89:66:1b:c1:f1:85:79:6d: 6b:fe:d0:68:ca:aa:99:18:15:2e:7b:ec:9b:7c:fe: b1:d7:ef:5e:48:c9:02:72:76:bb:b6:a8:25:ef:06: a9:e1:1d:53:e1:14:4d:e7:78:6e:e0:b6:3b:d6:eb: 71:d5:5d:11:16:8f:cb:09:23:e5:60:07:b0:7d:84: 73:2d:31:91:ae:05:8c:39:4e:ac:09:04:1c:67:da: 1a:78:08:54:ea:36:f8:9c:6b:b5:e1:f8:9a:48:de: de:68:91:cc:4d:f9:21:e0:c9:a2:de:1c:8b:87:cf: e4:55:51:bc:a3:2d:14:85:70:af:23:f4:1f:f0:a4: f8:ef:f9:06:0a:ef:84:82:e9:fc:6a:3c:01:54:32: 58:7b:ff:6d:0d:d3:c5:b1:4c:be:b8:11:7e:5a:fe: 3e:1f:ac:35:81:27:90:e3:24:9e:ca:60:3b:a1:57: 8c:ff:02:14:60:ca:f9:20:30:ce:60:ac:52:39:56: 27:05:c1:80:39:e5:05:23:20:c7:8c:eb:9b:6c:a7: bc:42:47:5e:82:88:34:9d:77:54:83:32:5f:ae:4a: 83:1b:e3:3d:78:66:6e:8e:79:62:0b:4c:3d:ee:33: 06:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:88:5F:13:46:38:F8:9A:11:61:0C:86:BE:B0:ED:55:9F:1E:FB:6C X509v3 Authority Key Identifier: keyid:0E:11:7A:3E:0D:0D:05:D4:B0:AB:82:30:80:E7:BF:6C:FD:4B:37:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/54hfE0Y4-JoRYQyGvrDtVZ8e-2w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.138.0/24 91.225.92.0/22 194.28.52.0/22 195.238.116.0/22 Signature Algorithm: sha256WithRSAEncryption 0a:d4:c5:d4:70:2a:4b:8a:6e:e4:57:0c:a4:50:63:72:a1:eb: 86:c1:65:fc:3e:8c:ed:a4:47:f6:30:12:6f:d4:4f:53:c1:bb: 9f:98:ef:b8:25:f1:8f:6e:e9:31:55:50:e0:77:2f:20:3d:b4: c7:23:3a:62:7c:09:0a:f8:6f:3b:31:36:31:77:45:cd:99:d2: 2c:96:75:90:06:26:90:1c:42:a7:d7:cc:2a:b6:f1:4d:7d:11: e9:7b:89:20:be:a3:e7:12:f1:34:85:31:f6:8a:59:4a:1d:54: a5:4a:04:ca:8a:b3:4b:b8:14:10:07:72:85:0d:f9:58:a5:e9: 1b:93:c6:fd:39:de:e5:e4:84:96:3f:6f:ba:38:08:2c:9f:84: 18:82:5e:f4:2c:30:44:33:c7:ef:8b:ae:d6:f0:bf:00:06:85: 40:fb:60:ae:f9:ec:be:0b:32:38:ae:88:3a:ff:73:06:85:6c: ad:e6:d5:38:4d:a7:9a:8d:5d:c5:3c:62:e5:46:4f:3e:bc:a7: 4d:aa:98:04:52:38:cd:c6:18:66:78:16:27:2d:1d:1f:ea:a2: 6e:f9:ac:e8:0d:3b:cf:14:20:40:c9:59:d3:4e:f8:53:d9:c1: 3b:36:bc:92:f5:9f:6e:52:33:0b:b9:b9:a8:5d:e1:90:c7:28: d7:e7:c9:5f -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt6W5iB56BL/JC30ZMcBJ/rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMTE3YTNlMGQwZDA1ZDRiMGFiODIzMDgwZTdiZjZjZmQ0 YjM3NzYwHhcNMjYwMTAxMTYxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzg4NWYxMzQ2MzhmODlhMTE2MTBjODZiZWIwZWQ1NTlmMWVmYjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOFBNWnlQRuBWOQ0+psKGvceT+jY iWYbwfGFeW1r/tBoyqqZGBUue+ybfP6x1+9eSMkCcna7tqgl7wap4R1T4RRN53hu 4LY71utx1V0RFo/LCSPlYAewfYRzLTGRrgWMOU6sCQQcZ9oaeAhU6jb4nGu14fia SN7eaJHMTfkh4Mmi3hyLh8/kVVG8oy0UhXCvI/Qf8KT47/kGCu+Egun8ajwBVDJY e/9tDdPFsUy+uBF+Wv4+H6w1gSeQ4ySeymA7oVeM/wIUYMr5IDDOYKxSOVYnBcGA OeUFIyDHjOubbKe8Qkdegog0nXdUgzJfrkqDG+M9eGZujnliC0w97jMGbQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFOeIXxNGOPiaEWEMhr6w7VWfHvtsMB8GA1UdIwQY MBaAFA4Rej4NDQXUsKuCMIDnv2z9Szd2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGhGNlBnME5CZFN3cTRJd2dPZV9iUDFMTjNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8xNDIyZmEtZTgyYi00YzBiLWIyM2It ZDg0NzVmMTg0NjRlLzEvNTRoZkUwWTQtSm9SWVF5R3ZyRHRWWjhlLTJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS8xNDIyZmEtZTgyYi00YzBiLWIyM2ItZDg0NzVmMTg0NjRl LzEvRGhGNlBnME5CZFN3cTRJd2dPZV9iUDFMTjNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAW8eKAwQC W+FcAwQCwhw0AwQCw+50MA0GCSqGSIb3DQEBCwUAA4IBAQAK1MXUcCpLim7kVwyk UGNyoeuGwWX8PoztpEf2MBJv1E9TwbufmO+4JfGPbukxVVDgdy8gPbTHIzpifAkK +G87MTYxd0XNmdIslnWQBiaQHEKn18wqtvFNfRHpe4kgvqPnEvE0hTH2illKHVSl SgTKirNLuBQQB3KFDflYpekbk8b9Od7l5ISWP2+6OAgsn4QYgl70LDBEM8fvi67W 8L8ABoVA+2Cu+ey+CzI4rog6/3MGhWyt5tU4TaeajV3FPGLlRk8+vKdNqpgEUjjN xhhmeBYnLR0f6qJu+azoDTvPFCBAyVnTTvhT2cE7NryS9Z9uUjMLubmoXeGQxyjX 58lf -----END CERTIFICATE-----Generated at Mon Feb 9 23:43:57 2026 by rpki-client