This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/enoTM6gddzNV6AawcT6ODLYfj34.roa File: enoTM6gddzNV6AawcT6ODLYfj34.roa (raw, json) Hash identifier: mMYkNGNoPneN+t24YBp+2hbpvk7KUHZzjLDr8wEtW1w= Subject key identifier: 7A:7A:13:33:A8:1D:77:33:55:E8:06:B0:71:3E:8E:0C:B6:1F:8F:7E Certificate issuer: /CN=98fd440cbbb04b969b92bb6b39c0bbb41634cd12 Certificate serial: 019B78A35B5B4ECB52148F87205E827E0CFE Authority key identifier: 98:FD:44:0C:BB:B0:4B:96:9B:92:BB:6B:39:C0:BB:B4:16:34:CD:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mP1EDLuwS5abkrtrOcC7tBY0zRI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/enoTM6gddzNV6AawcT6ODLYfj34.roa Signing time: Thu 01 Jan 2026 08:18:50 +0000 ROA not before: Thu 01 Jan 2026 08:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2914 IP address blocks: 91.212.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.crl rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.mft rsync://rpki.ripe.net/repository/DEFAULT/mP1EDLuwS5abkrtrOcC7tBY0zRI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:5b:5b:4e:cb:52:14:8f:87:20:5e:82:7e:0c:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98fd440cbbb04b969b92bb6b39c0bbb41634cd12 Validity Not Before: Jan 1 08:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a7a1333a81d773355e806b0713e8e0cb61f8f7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:0a:e7:0c:88:24:33:db:e3:05:dd:cf:fc:6d: 2f:bd:30:bc:7b:cc:24:bf:c9:d1:03:88:0b:5e:ec: 81:6d:73:78:36:10:e2:d4:fe:0d:66:ea:bf:46:2e: a4:8d:8a:fe:7b:e1:21:e5:66:f3:6f:fa:c6:23:94: 8e:fe:d5:27:89:bd:f2:45:ba:3c:d1:c7:4f:25:bb: 2a:a4:08:fc:4f:0a:10:2f:96:64:0f:7f:77:fc:80: ef:1a:ec:af:f0:cb:89:a5:20:4b:68:af:75:fa:ee: b8:c8:93:e1:06:ad:27:64:2e:62:9d:64:24:da:d3: 3e:02:9d:68:f6:1e:09:ba:46:ac:8d:16:b7:13:17: 45:0e:e4:74:16:9f:51:e1:d3:f3:8d:5a:b4:fd:6d: 08:cb:07:cb:ac:35:c9:7e:de:75:12:80:0a:a7:d1: e8:8e:9a:c4:c5:e4:94:06:78:5c:91:15:d8:cb:88: 51:5c:0d:f0:e3:20:e4:27:f3:38:ff:e0:ce:9b:b3: 34:82:8a:22:3a:9e:9f:90:52:9c:16:d1:40:95:ac: 0c:30:b4:e1:79:55:40:e6:46:f6:72:d9:4c:09:7f: 5e:4f:e5:c2:d9:1a:4d:c8:e3:5d:83:b8:d3:b0:97: 3d:08:ec:27:2c:b5:25:df:32:3d:f1:52:08:fc:f4: 1f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:7A:13:33:A8:1D:77:33:55:E8:06:B0:71:3E:8E:0C:B6:1F:8F:7E X509v3 Authority Key Identifier: keyid:98:FD:44:0C:BB:B0:4B:96:9B:92:BB:6B:39:C0:BB:B4:16:34:CD:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mP1EDLuwS5abkrtrOcC7tBY0zRI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/enoTM6gddzNV6AawcT6ODLYfj34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.152.0/24 Signature Algorithm: sha256WithRSAEncryption 11:4e:9e:cf:90:45:6b:7b:34:46:36:20:8c:2d:47:5d:9b:4d: fe:fd:33:2f:5b:69:b6:49:37:06:41:54:3f:35:1f:5e:89:36: 37:32:74:36:70:3f:d4:03:fb:c8:89:b6:4d:04:fd:ce:a8:e5: 83:1e:fa:a9:65:5d:a8:32:95:a6:81:24:8e:be:68:a6:ec:8a: 17:f3:eb:ac:6d:74:6a:99:96:0f:aa:fd:cb:0e:e2:97:ca:60: 6e:6d:28:a1:78:61:e9:0d:4b:1c:41:aa:d7:3b:bf:43:2e:7a: b7:de:57:f8:27:3e:22:12:66:ec:26:e2:08:1a:99:05:2b:e8: a4:4e:b7:2f:62:f1:f4:1c:5e:ec:1f:a3:d2:61:8e:6d:de:3f: 72:9a:4e:47:f5:f4:f6:fe:0d:aa:fa:5a:84:df:f0:11:30:32: 1e:7d:11:da:b1:16:ec:5f:d4:07:2e:72:20:5f:14:ec:96:95: aa:8d:22:69:e9:32:60:5d:44:a5:1a:7a:5b:aa:62:f7:91:ec: 7d:a5:84:f7:91:f8:4f:87:89:8d:5b:33:6e:a2:32:ba:c5:f8: 43:34:a0:aa:7d:0c:64:7e:2d:e0:26:9f:c8:4c:b5:de:74:f0: 8e:73:75:30:0b:8b:9f:3c:95:32:fe:01:6f:59:78:25:ef:67: 1b:04:51:a7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o1tbTstSFI+HIF6Cfgz+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4ZmQ0NDBjYmJiMDRiOTY5YjkyYmI2YjM5YzBiYmI0MTYz NGNkMTIwHhcNMjYwMTAxMDgxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTdhMTMzM2E4MWQ3NzMzNTVlODA2YjA3MTNlOGUwY2I2MWY4ZjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/ArnDIgkM9vjBd3P/G0vvTC8e8wk v8nRA4gLXuyBbXN4NhDi1P4NZuq/Ri6kjYr+e+Eh5Wbzb/rGI5SO/tUnib3yRbo8 0cdPJbsqpAj8TwoQL5ZkD393/IDvGuyv8MuJpSBLaK91+u64yJPhBq0nZC5inWQk 2tM+Ap1o9h4JukasjRa3ExdFDuR0Fp9R4dPzjVq0/W0IywfLrDXJft51EoAKp9Ho jprExeSUBnhckRXYy4hRXA3w4yDkJ/M4/+DOm7M0gooiOp6fkFKcFtFAlawMMLTh eVVA5kb2ctlMCX9eT+XC2RpNyONdg7jTsJc9COwnLLUl3zI98VII/PQfUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHp6EzOoHXczVegGsHE+jgy2H49+MB8GA1UdIwQY MBaAFJj9RAy7sEuWm5K7aznAu7QWNM0SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVAxRURMdXdTNWFia3J0ck9jQzd0QlkwelJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS82NjkwOGMtZDVjYi00N2M4LWJmY2Ut YzljMTJiODY2MDc4LzEvZW5vVE02Z2Rkek5WNkFhd2NUNk9ETFlmajM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS82NjkwOGMtZDVjYi00N2M4LWJmY2UtYzljMTJiODY2MDc4 LzEvbVAxRURMdXdTNWFia3J0ck9jQzd0QlkwelJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9SYMA0G CSqGSIb3DQEBCwUAA4IBAQARTp7PkEVrezRGNiCMLUddm03+/TMvW2m2STcGQVQ/ NR9eiTY3MnQ2cD/UA/vIibZNBP3OqOWDHvqpZV2oMpWmgSSOvmim7IoX8+usbXRq mZYPqv3LDuKXymBubSiheGHpDUscQarXO79DLnq33lf4Jz4iEmbsJuIIGpkFK+ik TrcvYvH0HF7sH6PSYY5t3j9ymk5H9fT2/g2q+lqE3/ARMDIefRHasRbsX9QHLnIg XxTslpWqjSJp6TJgXUSlGnpbqmL3kex9pYT3kfhPh4mNWzNuojK6xfhDNKCqfQxk fi3gJp/ITLXedPCOc3UwC4ufPJUy/gFvWXgl72cbBFGn -----END CERTIFICATE-----Generated at Thu Jan 8 00:11:50 2026 by rpki-client