This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/aE-igOYVXwkygfdsftmlck44E1U.roa File: aE-igOYVXwkygfdsftmlck44E1U.roa (raw, json) Hash identifier: Zm5SKhsISbz1FGue4q9TwJE5ZIQbj5Gs5h02565RFb0= Subject key identifier: 68:4F:A2:80:E6:15:5F:09:32:81:F7:6C:7E:D9:A5:72:4E:38:13:55 Certificate issuer: /CN=cc1e7c46b81ddab2744270c5bad986af86df4f60 Certificate serial: 019B797EE9F6532C10DC2D887A9395385949 Authority key identifier: CC:1E:7C:46:B8:1D:DA:B2:74:42:70:C5:BA:D9:86:AF:86:DF:4F:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/aE-igOYVXwkygfdsftmlck44E1U.roa Signing time: Thu 01 Jan 2026 12:18:39 +0000 ROA not before: Thu 01 Jan 2026 12:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 91.193.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.crl rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:e9:f6:53:2c:10:dc:2d:88:7a:93:95:38:59:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc1e7c46b81ddab2744270c5bad986af86df4f60 Validity Not Before: Jan 1 12:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=684fa280e6155f093281f76c7ed9a5724e381355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1c:a5:1e:97:39:04:6b:43:3f:45:81:fb:b3: 8d:b1:e6:db:27:6e:58:56:4a:98:d7:71:77:85:fe: f7:86:c4:96:e7:90:86:e4:93:79:e1:32:61:39:75: c0:66:f4:52:80:84:a0:bb:e1:88:f8:62:87:28:38: 55:fb:15:f4:f9:63:e5:df:5b:62:e1:7a:f5:4d:ab: a4:a6:58:b0:7a:04:c8:5d:ca:0d:37:c5:dd:00:c6: 56:ce:e0:38:3f:4f:5b:83:5a:5b:c4:86:79:3f:bf: e6:d6:a6:6a:b7:c6:d9:82:e7:28:31:66:a2:5b:7b: 44:d9:13:af:ff:8b:fd:69:b5:c7:64:2d:60:90:16: 7b:81:7b:05:5d:cc:9c:88:73:70:1d:dc:25:83:87: 09:6a:ee:b3:d9:49:e2:10:db:7d:de:40:ae:a7:73: 8b:0e:67:aa:2d:25:c5:75:df:34:dc:bc:09:db:98: 7d:06:a4:a2:8e:ce:ff:97:6b:5d:33:42:eb:b4:e7: 82:2d:95:e1:1e:2b:44:61:38:24:30:05:6d:4e:c8: f9:39:96:8c:34:1e:ed:22:d7:40:1a:b8:13:ce:b7: 96:a4:9f:5b:53:53:fb:ef:66:3e:1d:ec:8c:89:c5: d8:f7:a6:89:9f:e4:fe:f4:90:3e:5b:cf:87:ae:f2: 54:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:4F:A2:80:E6:15:5F:09:32:81:F7:6C:7E:D9:A5:72:4E:38:13:55 X509v3 Authority Key Identifier: keyid:CC:1E:7C:46:B8:1D:DA:B2:74:42:70:C5:BA:D9:86:AF:86:DF:4F:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/aE-igOYVXwkygfdsftmlck44E1U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.193.42.0/24 Signature Algorithm: sha256WithRSAEncryption 53:d9:e0:3b:7f:cf:97:81:3d:be:65:1b:cc:af:e5:35:ea:03: c6:ed:75:8e:a1:af:5f:94:94:8c:02:96:63:86:ed:61:e8:ef: 1f:a2:be:5f:fb:89:62:2a:e0:e8:68:45:7f:fb:5c:82:b7:92: 60:e2:fb:6f:e4:83:56:d3:9a:25:84:22:41:6f:67:d4:fe:d3: 81:8b:65:6b:4f:4d:07:e6:11:da:95:4d:a7:8b:d5:83:27:f0: b1:7c:0a:74:be:08:c8:78:8a:bb:64:4e:b3:25:4d:03:7f:77: 35:5e:e4:dc:2e:02:16:45:45:be:a6:79:61:65:c5:84:fb:4c: 91:14:03:e7:72:49:7b:ea:a8:f5:d5:10:4d:12:92:b3:df:0a: 57:2b:d5:4d:09:13:29:81:12:77:60:ed:07:05:9b:75:9f:5f: 87:45:6a:d6:77:a3:27:53:de:d8:af:b4:b2:60:c7:a5:51:9f: df:50:da:90:5f:02:c0:9f:e4:a3:af:d0:dd:39:4a:df:5a:56: 79:03:93:8e:1c:e7:94:d6:75:36:78:f1:36:e6:25:b2:92:0c: f5:d8:4a:b1:84:24:de:0c:b2:75:46:1c:be:49:94:4c:d8:51: 35:b0:d8:ab:c2:9a:e1:b0:a0:7a:4f:44:84:7e:75:31:76:21: eb:71:bd:7c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fun2UywQ3C2IepOVOFlJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjMWU3YzQ2YjgxZGRhYjI3NDQyNzBjNWJhZDk4NmFmODZk ZjRmNjAwHhcNMjYwMTAxMTIxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODRmYTI4MGU2MTU1ZjA5MzI4MWY3NmM3ZWQ5YTU3MjRlMzgxMzU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthylHpc5BGtDP0WB+7ONsebbJ25Y VkqY13F3hf73hsSW55CG5JN54TJhOXXAZvRSgISgu+GI+GKHKDhV+xX0+WPl31ti 4Xr1TaukpliwegTIXcoNN8XdAMZWzuA4P09bg1pbxIZ5P7/m1qZqt8bZgucoMWai W3tE2ROv/4v9abXHZC1gkBZ7gXsFXcyciHNwHdwlg4cJau6z2UniENt93kCup3OL DmeqLSXFdd803LwJ25h9BqSijs7/l2tdM0LrtOeCLZXhHitEYTgkMAVtTsj5OZaM NB7tItdAGrgTzreWpJ9bU1P772Y+HeyMicXY96aJn+T+9JA+W8+HrvJUEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGhPooDmFV8JMoH3bH7ZpXJOOBNVMB8GA1UdIwQY MBaAFMwefEa4HdqydEJwxbrZhq+G309gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekI1OFJyZ2QyckowUW5ERnV0bUdyNGJmVDJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9kZDNmMTUtYmJhYy00OWQ0LTk0MzUt Mzk5YjdhM2IyMGNmLzEvYUUtaWdPWVZYd2t5Z2Zkc2Z0bWxjazQ0RTFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9kZDNmMTUtYmJhYy00OWQ0LTk0MzUtMzk5YjdhM2IyMGNm LzEvekI1OFJyZ2QyckowUW5ERnV0bUdyNGJmVDJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8EqMA0G CSqGSIb3DQEBCwUAA4IBAQBT2eA7f8+XgT2+ZRvMr+U16gPG7XWOoa9flJSMApZj hu1h6O8for5f+4liKuDoaEV/+1yCt5Jg4vtv5INW05olhCJBb2fU/tOBi2VrT00H 5hHalU2ni9WDJ/CxfAp0vgjIeIq7ZE6zJU0Df3c1XuTcLgIWRUW+pnlhZcWE+0yR FAPnckl76qj11RBNEpKz3wpXK9VNCRMpgRJ3YO0HBZt1n1+HRWrWd6MnU97Yr7Sy YMelUZ/fUNqQXwLAn+Sjr9DdOUrfWlZ5A5OOHOeU1nU2ePE25iWykgz12EqxhCTe DLJ1Rhy+SZRM2FE1sNirwprhsKB6T0SEfnUxdiHrcb18 -----END CERTIFICATE-----Generated at Fri Jan 2 11:04:03 2026 by rpki-client