This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/EyNcY5Z8gMCGSsUlurZ-vzlzRMk.roa File: EyNcY5Z8gMCGSsUlurZ-vzlzRMk.roa (raw, json) Hash identifier: WB7iGBNBwcsdOHeiUNEfNJNFo1bIzRxEZw4wIprpZOA= Subject key identifier: 13:23:5C:63:96:7C:80:C0:86:4A:C5:25:BA:B6:7E:BF:39:73:44:C9 Certificate issuer: /CN=480b4e6530f58db338e41d434e5c248eb8b49eb5 Certificate serial: 019B79ED5EF207A9FEB9BE3835594E2E85AC Authority key identifier: 48:0B:4E:65:30:F5:8D:B3:38:E4:1D:43:4E:5C:24:8E:B8:B4:9E:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAtOZTD1jbM45B1DTlwkjri0nrU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/EyNcY5Z8gMCGSsUlurZ-vzlzRMk.roa Signing time: Thu 01 Jan 2026 14:19:18 +0000 ROA not before: Thu 01 Jan 2026 14:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48674 IP address blocks: 91.211.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/SAtOZTD1jbM45B1DTlwkjri0nrU.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/SAtOZTD1jbM45B1DTlwkjri0nrU.mft rsync://rpki.ripe.net/repository/DEFAULT/SAtOZTD1jbM45B1DTlwkjri0nrU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:5e:f2:07:a9:fe:b9:be:38:35:59:4e:2e:85:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=480b4e6530f58db338e41d434e5c248eb8b49eb5 Validity Not Before: Jan 1 14:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=13235c63967c80c0864ac525bab67ebf397344c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:4b:fc:c8:b6:5e:fd:ef:40:5e:36:5b:61:75: ab:1c:b0:df:5e:21:4a:07:f1:e8:ce:71:e2:5f:5d: d2:c8:7b:5b:cd:27:49:4e:d1:fa:6a:41:c8:41:50: f2:5d:e0:30:06:b3:73:75:eb:a7:6c:6b:6f:36:cb: 5a:ac:2d:a3:89:53:17:43:59:2b:b3:ca:d9:a3:cf: 93:d2:19:c2:b6:dc:f8:8e:4c:bb:29:84:27:f7:79: 0c:5e:71:be:45:b7:16:ea:c1:eb:ac:7a:97:f1:3e: 2b:44:62:6f:17:53:4d:f5:22:07:9f:cf:c3:1a:6b: f2:82:d2:38:af:4f:71:b0:4c:69:40:65:88:3b:e0: b8:b6:e1:23:54:8e:fa:e9:2c:49:6b:b3:ac:07:89: c3:1b:53:6e:59:7c:dd:08:fd:d9:9d:4f:be:d4:6f: 59:78:da:2d:2e:20:07:f7:fa:e7:93:ea:f8:57:bc: 08:13:07:30:af:02:fd:33:96:5a:3e:71:68:60:0c: cd:fa:2f:4d:8a:9f:8b:39:94:46:46:d3:6f:c2:06: ac:a9:3b:fc:56:47:7f:9e:76:35:81:79:9d:f1:40: 71:c6:2a:d3:2b:e8:8a:ae:dc:f4:10:f3:1b:c0:ad: 58:a3:b8:42:28:58:52:c4:7a:db:06:12:cc:6d:2c: 6a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:23:5C:63:96:7C:80:C0:86:4A:C5:25:BA:B6:7E:BF:39:73:44:C9 X509v3 Authority Key Identifier: keyid:48:0B:4E:65:30:F5:8D:B3:38:E4:1D:43:4E:5C:24:8E:B8:B4:9E:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAtOZTD1jbM45B1DTlwkjri0nrU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/EyNcY5Z8gMCGSsUlurZ-vzlzRMk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/SAtOZTD1jbM45B1DTlwkjri0nrU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.211.176.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:6f:cb:01:bf:7b:04:4d:d0:f3:62:6f:97:14:81:ef:05:46: d5:14:7b:7c:57:07:02:6b:9e:b9:24:f9:b1:df:e5:9a:02:7a: c6:ef:fd:04:cd:85:b6:22:08:03:a3:c9:db:7f:55:a0:be:b3: e2:03:82:cb:f3:e9:8b:55:54:37:91:64:e5:ce:47:92:34:a9: 64:c6:08:90:7d:cd:53:e1:f8:34:aa:a9:9c:1a:6b:2a:de:46: 8f:a5:01:33:4a:fb:1b:de:9c:c7:e7:aa:0d:2f:2c:47:bc:ec: 99:7b:39:c5:ea:25:1b:12:b3:d2:8d:94:53:8f:79:b4:a2:f5: db:7e:15:f5:cb:f6:e8:4c:c4:d3:5f:34:7a:44:ac:58:a3:a5: 5e:31:6f:84:5c:7d:74:3b:77:5b:1b:40:28:a1:c5:84:50:08: f7:f3:e9:70:62:03:b1:93:fc:6c:90:97:6b:5a:57:fd:a5:e8: d7:25:20:be:42:b2:14:60:61:2b:f4:c9:82:6b:53:f5:06:31: 6f:46:2a:99:5e:a6:b1:c0:f4:48:6a:97:16:0f:76:f3:e6:a4: 91:96:43:d3:01:1f:bd:91:ac:97:ee:33:b1:6b:17:27:45:a7: 3d:e5:26:2b:a4:93:68:a5:76:d3:f1:cc:99:78:83:5b:59:14: e5:7a:67:49 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57V7yB6n+ub44NVlOLoWsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MGI0ZTY1MzBmNThkYjMzOGU0MWQ0MzRlNWMyNDhlYjhi NDllYjUwHhcNMjYwMTAxMTQxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzIzNWM2Mzk2N2M4MGMwODY0YWM1MjViYWI2N2ViZjM5NzM0NGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Ev8yLZe/e9AXjZbYXWrHLDfXiFK B/HoznHiX13SyHtbzSdJTtH6akHIQVDyXeAwBrNzdeunbGtvNstarC2jiVMXQ1kr s8rZo8+T0hnCttz4jky7KYQn93kMXnG+RbcW6sHrrHqX8T4rRGJvF1NN9SIHn8/D GmvygtI4r09xsExpQGWIO+C4tuEjVI766SxJa7OsB4nDG1NuWXzdCP3ZnU++1G9Z eNotLiAH9/rnk+r4V7wIEwcwrwL9M5ZaPnFoYAzN+i9Nip+LOZRGRtNvwgasqTv8 Vkd/nnY1gXmd8UBxxirTK+iKrtz0EPMbwK1Yo7hCKFhSxHrbBhLMbSxqUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBMjXGOWfIDAhkrFJbq2fr85c0TJMB8GA1UdIwQY MBaAFEgLTmUw9Y2zOOQdQ05cJI64tJ61MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0F0T1pURDFqYk00NUIxRFRsd2tqcmkwbnJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8yYTcyZWUtZWMxZi00MGM2LWFkOWQt NWE0ZGY4OTZmYzNlLzEvRXlOY1k1WjhnTUNHU3NVbHVyWi12emx6Uk1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi8yYTcyZWUtZWMxZi00MGM2LWFkOWQtNWE0ZGY4OTZmYzNl LzEvU0F0T1pURDFqYk00NUIxRFRsd2tqcmkwbnJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9OwMA0G CSqGSIb3DQEBCwUAA4IBAQB8b8sBv3sETdDzYm+XFIHvBUbVFHt8VwcCa565JPmx 3+WaAnrG7/0EzYW2IggDo8nbf1WgvrPiA4LL8+mLVVQ3kWTlzkeSNKlkxgiQfc1T 4fg0qqmcGmsq3kaPpQEzSvsb3pzH56oNLyxHvOyZeznF6iUbErPSjZRTj3m0ovXb fhX1y/boTMTTXzR6RKxYo6VeMW+EXH10O3dbG0AoocWEUAj38+lwYgOxk/xskJdr Wlf9pejXJSC+QrIUYGEr9MmCa1P1BjFvRiqZXqaxwPRIapcWD3bz5qSRlkPTAR+9 kayX7jOxaxcnRac95SYrpJNopXbT8cyZeINbWRTlemdJ -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:31 2026 by rpki-client