This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/axUwYQFpI_H0PGZ-1hLTsPluQlw.roa File: axUwYQFpI_H0PGZ-1hLTsPluQlw.roa (raw, json) Hash identifier: jYCTtZ3yrS3nW17v+JIWdi31GQ0OQwoHbk+cXhltHjA= Subject key identifier: 6B:15:30:61:01:69:23:F1:F4:3C:66:7E:D6:12:D3:B0:F9:6E:42:5C Certificate issuer: /CN=1055eae30d10faf1d99ebf2cfdfd662ce740f839 Certificate serial: 019B78A3263F760ECEB45F7D122D22024004 Authority key identifier: 10:55:EA:E3:0D:10:FA:F1:D9:9E:BF:2C:FD:FD:66:2C:E7:40:F8:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/axUwYQFpI_H0PGZ-1hLTsPluQlw.roa Signing time: Thu 01 Jan 2026 08:18:36 +0000 ROA not before: Thu 01 Jan 2026 08:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198512 IP address blocks: 91.235.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.crl rsync://rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.mft rsync://rpki.ripe.net/repository/DEFAULT/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:26:3f:76:0e:ce:b4:5f:7d:12:2d:22:02:40:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1055eae30d10faf1d99ebf2cfdfd662ce740f839 Validity Not Before: Jan 1 08:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b153061016923f1f43c667ed612d3b0f96e425c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:71:3b:1d:25:2e:64:79:d0:eb:5e:d5:75:d9: cb:b9:73:fe:af:3a:38:59:ca:7e:42:62:bd:47:2f: 13:8b:98:ea:e0:a0:75:58:20:15:f5:b6:6d:18:f7: 51:93:44:22:9a:60:e3:31:f0:0e:59:d9:f9:3f:3d: e6:19:35:09:c1:8b:c3:e4:1d:44:d9:e9:aa:2c:b7: b9:60:71:c2:8f:59:78:69:91:9c:81:76:77:9b:a6: eb:c1:1f:b7:62:a1:4d:75:7e:b9:66:a8:f8:09:7d: 81:88:42:01:c3:b3:1e:5c:cf:48:de:6a:8c:e1:78: 62:90:c3:41:6b:5c:7d:1b:41:64:ba:de:ff:2f:e6: 72:b5:fa:a1:f4:50:4d:4f:a7:f9:47:35:54:54:56: a2:05:26:ed:96:ff:49:ee:78:97:40:51:9e:d4:07: 91:3e:f5:50:a3:3b:0e:84:24:ba:f1:3d:8a:29:13: 0c:ba:e3:f7:3c:08:ae:14:c9:49:a6:b5:26:e0:de: 4f:4d:92:92:31:0f:b0:cb:ef:ca:e6:c6:2a:6d:10: 2d:ba:df:e8:d7:71:1f:de:73:8f:f3:cc:b7:a8:87: 7d:39:ec:40:82:bc:cf:b4:a0:56:14:5d:fe:cc:9e: 8f:0f:8f:80:e8:ec:cc:55:8e:35:40:37:b7:a9:9b: 39:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:15:30:61:01:69:23:F1:F4:3C:66:7E:D6:12:D3:B0:F9:6E:42:5C X509v3 Authority Key Identifier: keyid:10:55:EA:E3:0D:10:FA:F1:D9:9E:BF:2C:FD:FD:66:2C:E7:40:F8:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/axUwYQFpI_H0PGZ-1hLTsPluQlw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.235.243.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:b3:86:52:bc:fb:eb:53:4e:b5:6f:91:19:24:31:59:b1:e1: de:94:36:92:0c:bf:c6:30:38:f7:6a:21:f0:bf:60:29:45:98: 6d:db:ba:e2:93:57:75:90:e4:51:81:7f:96:c5:85:5a:de:2b: b8:ea:c7:51:e3:ac:77:71:27:d7:df:e6:34:4f:9f:f0:2c:69: 43:2a:2f:57:1c:dd:e9:0f:d5:4b:04:9c:d1:18:81:9b:00:06: e2:bb:3c:8c:26:58:5f:48:8b:cc:f2:33:24:f3:14:09:ea:c7: 03:69:ad:84:39:de:06:90:31:16:53:96:63:97:a1:cf:5b:30: dc:a3:68:08:c1:01:6a:ee:4e:0b:4e:13:c0:b4:b5:8d:af:57: 7b:37:f7:e8:1c:f4:a9:ea:44:dd:fe:39:05:e8:f8:e9:eb:4c: 98:c2:2e:ee:87:b8:68:2d:30:ba:69:c6:1f:84:5b:b0:47:93: dc:a0:e2:e7:a2:fa:72:b9:0f:02:99:56:69:ed:d0:57:9b:b3: 41:11:c2:92:1f:6d:86:db:15:34:c5:a2:1e:dd:1b:4a:cd:1b: 83:56:b6:e2:07:8f:ec:1c:75:6e:71:3e:9f:b5:6a:bd:9b:e2: f6:10:0b:80:f2:ff:c7:8f:e2:b0:e3:09:50:e8:57:5e:c4:04: 7e:04:e8:62 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oyY/dg7OtF99Ei0iAkAEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNTVlYWUzMGQxMGZhZjFkOTllYmYyY2ZkZmQ2NjJjZTc0 MGY4MzkwHhcNMjYwMTAxMDgxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjE1MzA2MTAxNjkyM2YxZjQzYzY2N2VkNjEyZDNiMGY5NmU0MjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3E7HSUuZHnQ617VddnLuXP+rzo4 Wcp+QmK9Ry8Ti5jq4KB1WCAV9bZtGPdRk0QimmDjMfAOWdn5Pz3mGTUJwYvD5B1E 2emqLLe5YHHCj1l4aZGcgXZ3m6brwR+3YqFNdX65Zqj4CX2BiEIBw7MeXM9I3mqM 4XhikMNBa1x9G0Fkut7/L+Zytfqh9FBNT6f5RzVUVFaiBSbtlv9J7niXQFGe1AeR PvVQozsOhCS68T2KKRMMuuP3PAiuFMlJprUm4N5PTZKSMQ+wy+/K5sYqbRAtut/o 13Ef3nOP88y3qId9OexAgrzPtKBWFF3+zJ6PD4+A6OzMVY41QDe3qZs5jwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGsVMGEBaSPx9DxmftYS07D5bkJcMB8GA1UdIwQY MBaAFBBV6uMNEPrx2Z6/LP39ZiznQPg5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUZYcTR3MFEtdkhabnI4c19mMW1MT2RBLURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS84NDY1MjYtNzRmNS00Yjk3LWE1NzQt MjczZTg2OGNlZGYwLzEvYXhVd1lRRnBJX0gwUEdaLTFoTFRzUGx1UWx3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS84NDY1MjYtNzRmNS00Yjk3LWE1NzQtMjczZTg2OGNlZGYw LzEvRUZYcTR3MFEtdkhabnI4c19mMW1MT2RBLURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+vzMA0G CSqGSIb3DQEBCwUAA4IBAQAts4ZSvPvrU061b5EZJDFZseHelDaSDL/GMDj3aiHw v2ApRZht27rik1d1kORRgX+WxYVa3iu46sdR46x3cSfX3+Y0T5/wLGlDKi9XHN3p D9VLBJzRGIGbAAbiuzyMJlhfSIvM8jMk8xQJ6scDaa2EOd4GkDEWU5Zjl6HPWzDc o2gIwQFq7k4LThPAtLWNr1d7N/foHPSp6kTd/jkF6Pjp60yYwi7uh7hoLTC6acYf hFuwR5PcoOLnovpyuQ8CmVZp7dBXm7NBEcKSH22G2xU0xaIe3RtKzRuDVrbiB4/s HHVucT6ftWq9m+L2EAuA8v/Hj+Kw4wlQ6FdexAR+BOhi -----END CERTIFICATE-----Generated at Tue Feb 10 00:09:28 2026 by rpki-client