This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/576FY0htuOTihVV_Xfh8Gk5YhvE.roa File: 576FY0htuOTihVV_Xfh8Gk5YhvE.roa (raw, json) Hash identifier: /NelqJKw0NPqbnl6n4O2sPZR3e1Zlcz8g4NWhOK8/FA= Subject key identifier: E7:BE:85:63:48:6D:B8:E4:E2:85:55:7F:5D:F8:7C:1A:4E:58:86:F1 Certificate issuer: /CN=ea2c4ea79ddb7b003de01f1d05f6dbf716b11336 Certificate serial: 019B783536C77119E6FC80D73AFD8E4C242F Authority key identifier: EA:2C:4E:A7:9D:DB:7B:00:3D:E0:1F:1D:05:F6:DB:F7:16:B1:13:36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/576FY0htuOTihVV_Xfh8Gk5YhvE.roa Signing time: Thu 01 Jan 2026 06:18:31 +0000 ROA not before: Thu 01 Jan 2026 06:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206314 IP address blocks: 91.238.172.0/22 maxlen: 22 91.241.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft rsync://rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:36:c7:71:19:e6:fc:80:d7:3a:fd:8e:4c:24:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea2c4ea79ddb7b003de01f1d05f6dbf716b11336 Validity Not Before: Jan 1 06:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e7be8563486db8e4e285557f5df87c1a4e5886f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d6:1b:5b:88:5f:55:21:d3:7e:c2:97:75:48: f8:25:35:e9:81:8c:c7:a6:ce:dd:07:81:57:b5:fe: d5:35:90:bf:5a:70:3c:39:5f:74:fd:10:e9:c5:77: a2:55:09:54:44:9f:11:21:8e:9f:f0:06:56:dd:68: 71:06:dd:ef:e7:b8:1c:cc:6b:aa:7f:fc:30:7f:96: 6a:e5:69:e5:e7:d8:6c:7c:b0:84:af:26:f7:41:dd: c2:44:f1:e8:95:75:10:80:ac:89:43:e3:20:bc:b9: aa:18:a8:a1:1c:48:ce:59:ed:d0:d7:5a:74:99:7e: 24:25:70:4c:d8:b8:3f:e3:c9:31:e0:d4:a0:69:dd: 0d:0f:e4:2b:8d:db:82:84:b9:30:68:da:49:ad:62: 49:67:64:19:e3:2a:f9:c7:06:ba:f3:80:1a:d8:13: af:c0:e5:cd:42:8c:dd:dd:fd:78:b6:e6:de:46:3f: 94:7a:b4:3e:b0:6c:2c:82:1f:5f:7e:47:b5:f4:87: a4:6c:96:0e:ff:46:73:7c:09:f3:13:a5:43:c2:ef: e3:a9:93:31:7d:d0:37:da:34:76:7c:83:3f:48:1e: cd:0c:55:fb:5c:24:15:c9:08:b1:5e:f3:bc:7c:39: 13:3a:8b:81:93:6b:8a:6c:90:4f:dd:2a:7f:d3:a0: 18:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:BE:85:63:48:6D:B8:E4:E2:85:55:7F:5D:F8:7C:1A:4E:58:86:F1 X509v3 Authority Key Identifier: keyid:EA:2C:4E:A7:9D:DB:7B:00:3D:E0:1F:1D:05:F6:DB:F7:16:B1:13:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/576FY0htuOTihVV_Xfh8Gk5YhvE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.238.172.0/22 91.241.24.0/22 Signature Algorithm: sha256WithRSAEncryption 84:04:4b:92:dd:41:72:85:e6:e6:1b:0d:df:ca:0d:ba:33:04: 38:b7:8a:5d:85:b6:b4:d1:09:04:27:7d:b9:b2:93:63:ff:80: 4b:cf:77:70:d7:23:f4:e4:0d:6a:3f:27:28:a8:27:65:02:3a: 83:c5:3d:95:5f:0f:ec:80:49:d6:f5:8e:5d:84:10:ff:e8:dc: 04:5f:7a:e2:e9:2d:24:db:d3:69:48:c7:91:6b:05:d8:a3:de: 99:e0:e5:b1:3a:b1:52:18:56:b3:9c:ff:6c:a3:90:cc:1d:73: 96:78:32:30:37:43:61:ce:cb:20:f2:59:e5:7d:03:28:fa:f0: f6:f6:9a:c8:75:e7:db:2c:f1:f4:7b:8d:f9:ff:12:e6:4e:1a: 91:b1:22:7f:ba:32:c3:31:86:09:bf:74:0b:9c:0a:dd:5d:6d: 41:e1:9f:e2:90:74:36:ed:0a:c2:6b:89:a7:1c:1a:ba:5f:4e: 6b:db:b0:dd:17:8e:a1:82:78:fa:9f:a0:53:21:48:22:c3:1f: 68:36:97:fe:d1:f5:6c:8e:a6:96:a9:93:4a:d9:44:7c:93:08: e5:02:ce:ad:d9:8e:bc:d7:8d:a7:71:62:f6:0d:56:15:54:7d: f8:69:45:04:d9:53:3c:0b:3d:05:bf:07:57:93:cf:da:0f:ab: 8e:f3:93:26 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NTbHcRnm/IDXOv2OTCQvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhMmM0ZWE3OWRkYjdiMDAzZGUwMWYxZDA1ZjZkYmY3MTZi MTEzMzYwHhcNMjYwMTAxMDYxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlN2JlODU2MzQ4NmRiOGU0ZTI4NTU1N2Y1ZGY4N2MxYTRlNTg4NmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNYbW4hfVSHTfsKXdUj4JTXpgYzH ps7dB4FXtf7VNZC/WnA8OV90/RDpxXeiVQlURJ8RIY6f8AZW3WhxBt3v57gczGuq f/wwf5Zq5Wnl59hsfLCEryb3Qd3CRPHolXUQgKyJQ+MgvLmqGKihHEjOWe3Q11p0 mX4kJXBM2Lg/48kx4NSgad0ND+QrjduChLkwaNpJrWJJZ2QZ4yr5xwa684Aa2BOv wOXNQozd3f14tubeRj+UerQ+sGwsgh9ffke19IekbJYO/0ZzfAnzE6VDwu/jqZMx fdA32jR2fIM/SB7NDFX7XCQVyQixXvO8fDkTOouBk2uKbJBP3Sp/06AYaQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOe+hWNIbbjk4oVVf134fBpOWIbxMB8GA1UdIwQY MBaAFOosTqed23sAPeAfHQX22/cWsRM2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNml4T3A1M2Jld0E5NEI4ZEJmYmI5eGF4RXpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC84ZTdlMWQtMTU4Zi00YzZlLWFiYTMt MzlmMTNlNzZhZmEzLzEvNTc2RlkwaHR1T1RpaFZWX1hmaDhHazVZaHZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC84ZTdlMWQtMTU4Zi00YzZlLWFiYTMtMzlmMTNlNzZhZmEz LzEvNml4T3A1M2Jld0E5NEI4ZEJmYmI5eGF4RXpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW+6sAwQC W/EYMA0GCSqGSIb3DQEBCwUAA4IBAQCEBEuS3UFyhebmGw3fyg26MwQ4t4pdhba0 0QkEJ325spNj/4BLz3dw1yP05A1qPycoqCdlAjqDxT2VXw/sgEnW9Y5dhBD/6NwE X3ri6S0k29NpSMeRawXYo96Z4OWxOrFSGFaznP9so5DMHXOWeDIwN0Nhzssg8lnl fQMo+vD29prIdefbLPH0e435/xLmThqRsSJ/ujLDMYYJv3QLnArdXW1B4Z/ikHQ2 7QrCa4mnHBq6X05r27DdF46hgnj6n6BTIUgiwx9oNpf+0fVsjqaWqZNK2UR8kwjl As6t2Y68142ncWL2DVYVVH34aUUE2VM8Cz0FvwdXk8/aD6uO85Mm -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:22 2026 by rpki-client