This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/ew4ZARbjdwXdrbDoqVd1qEolX-0.roa File: ew4ZARbjdwXdrbDoqVd1qEolX-0.roa (raw, json) Hash identifier: sQsSV+rzZKH9rDG5YPbrMoDEZndllCXJsFtPwY4l5I4= Subject key identifier: 7B:0E:19:01:16:E3:77:05:DD:AD:B0:E8:A9:57:75:A8:4A:25:5F:ED Certificate issuer: /CN=5bc9a6c85ca7a5657b9e8ae80865d12ef8166a03 Certificate serial: 019B7B369AF22F825ACB9611CE1A389E1C34 Authority key identifier: 5B:C9:A6:C8:5C:A7:A5:65:7B:9E:8A:E8:08:65:D1:2E:F8:16:6A:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8mmyFynpWV7noroCGXRLvgWagM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/ew4ZARbjdwXdrbDoqVd1qEolX-0.roa Signing time: Thu 01 Jan 2026 20:18:54 +0000 ROA not before: Thu 01 Jan 2026 20:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13172 IP address blocks: 91.211.232.0/24 maxlen: 24 91.211.234.0/24 maxlen: 24 91.211.235.0/24 maxlen: 24 185.108.188.0/24 maxlen: 24 185.108.191.0/24 maxlen: 24 195.225.127.0/24 maxlen: 24 2a03:d180::/32 maxlen: 32 2a03:d180:fffe::/48 maxlen: 48 2a03:d180:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.mft rsync://rpki.ripe.net/repository/DEFAULT/W8mmyFynpWV7noroCGXRLvgWagM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:9a:f2:2f:82:5a:cb:96:11:ce:1a:38:9e:1c:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bc9a6c85ca7a5657b9e8ae80865d12ef8166a03 Validity Not Before: Jan 1 20:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7b0e190116e37705ddadb0e8a95775a84a255fed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:38:da:d7:4b:5d:01:94:8a:bd:24:99:e2:45: 13:65:fe:d4:b9:c8:fd:58:a5:fd:f0:2c:c0:99:2c: 12:15:f9:b1:46:b4:25:13:b1:7d:27:83:fb:e0:c0: be:bc:3c:70:d2:f8:1f:8b:82:df:0e:61:75:5c:92: fc:60:f2:2b:2e:55:5b:96:b3:dd:d0:28:14:15:76: 6e:a5:9d:e3:4f:4e:af:9a:dd:e0:76:a6:21:96:f3: 60:dc:af:82:21:17:a2:a1:4a:7a:74:d8:b3:86:9e: e2:b8:a5:75:67:f6:94:06:d7:80:73:24:a1:0b:54: 5e:d0:75:a3:49:28:a2:ad:2f:96:e6:51:06:35:ee: e7:46:8a:2d:fe:4c:b2:ed:46:7e:87:51:31:18:66: 00:9c:ae:e1:90:b8:2c:58:fd:15:09:3f:f0:84:a3: d2:e5:83:05:c6:ff:a9:21:1f:8f:b9:3a:44:e9:83: 90:95:d5:09:7f:53:4f:ff:4e:63:32:51:6f:d0:fe: 95:52:1b:24:f4:e8:81:7d:e8:ff:8c:83:cd:23:a2: d3:72:14:c3:4a:a2:7f:ab:b3:2d:e3:0f:d8:2b:74: f5:e7:9e:0c:6a:3f:b0:e1:35:26:9d:07:d9:fd:89: 44:af:f3:c8:11:2a:c5:d3:5c:de:37:d5:51:ff:b8: 7e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:0E:19:01:16:E3:77:05:DD:AD:B0:E8:A9:57:75:A8:4A:25:5F:ED X509v3 Authority Key Identifier: keyid:5B:C9:A6:C8:5C:A7:A5:65:7B:9E:8A:E8:08:65:D1:2E:F8:16:6A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8mmyFynpWV7noroCGXRLvgWagM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/ew4ZARbjdwXdrbDoqVd1qEolX-0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.211.232.0/24 91.211.234.0/23 185.108.188.0/24 185.108.191.0/24 195.225.127.0/24 IPv6: 2a03:d180::/32 Signature Algorithm: sha256WithRSAEncryption a7:ee:fb:ba:c0:6f:f7:9d:e4:1f:d5:ab:84:9c:1e:97:89:5a: 0c:e5:97:8d:cd:80:5d:4e:f2:13:84:08:97:6d:06:77:0a:5f: 95:4c:fa:82:b0:1b:ad:ba:1b:08:f4:d3:9a:2f:be:c5:18:ed: ec:e8:25:c6:c0:24:f0:12:2e:77:c6:31:bd:ec:ad:0d:07:56: ea:0c:6d:50:92:83:ab:2f:ca:6b:9f:d5:a6:35:ff:9e:25:30: f0:58:88:83:86:fb:4f:7f:8f:b8:0b:76:a6:04:28:79:ea:70: 92:a2:3b:a4:8a:70:14:9f:af:a8:d5:bf:1a:b9:df:48:9e:02: c9:ef:87:13:1d:9e:b5:2c:a4:4d:76:05:8e:b2:b8:5b:0f:2e: ef:45:38:c3:a3:d5:09:30:71:dc:3d:d2:d4:45:02:ad:59:2d: f5:62:e7:16:1d:2a:41:d9:3c:ab:d7:fd:67:01:1f:66:4a:c5: f7:b3:db:c6:c1:57:34:74:29:b7:c4:92:e3:8a:71:cd:7d:ad: 35:0f:a5:9d:08:17:b0:c2:84:dc:66:20:36:85:cd:a4:41:62: 42:3c:ce:86:51:58:a1:c9:71:45:0f:80:3c:89:48:95:9b:0c: d3:97:3a:a6:3c:5f:65:f6:9f:79:42:5a:00:71:d2:e7:d3:0a: 6b:c4:51:4e -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt7NpryL4Jay5YRzho4nhw0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViYzlhNmM4NWNhN2E1NjU3YjllOGFlODA4NjVkMTJlZjgx NjZhMDMwHhcNMjYwMTAxMjAxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YjBlMTkwMTE2ZTM3NzA1ZGRhZGIwZThhOTU3NzVhODRhMjU1ZmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Tja10tdAZSKvSSZ4kUTZf7Uucj9 WKX98CzAmSwSFfmxRrQlE7F9J4P74MC+vDxw0vgfi4LfDmF1XJL8YPIrLlVblrPd 0CgUFXZupZ3jT06vmt3gdqYhlvNg3K+CIReioUp6dNizhp7iuKV1Z/aUBteAcySh C1Re0HWjSSiirS+W5lEGNe7nRoot/kyy7UZ+h1ExGGYAnK7hkLgsWP0VCT/whKPS 5YMFxv+pIR+PuTpE6YOQldUJf1NP/05jMlFv0P6VUhsk9OiBfej/jIPNI6LTchTD SqJ/q7Mt4w/YK3T1554Maj+w4TUmnQfZ/YlEr/PIESrF01zeN9VR/7h+PwIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFHsOGQEW43cF3a2w6KlXdahKJV/tMB8GA1UdIwQY MBaAFFvJpshcp6Vle56K6Ahl0S74FmoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzhtbXlGeW5wV1Y3bm9yb0NHWFJMdmdXYWdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS82NTU1ZTMtODJmNi00NmNhLWExNzAt NDhmNzdlZTg1YWI5LzEvZXc0WkFSYmpkd1hkcmJEb3FWZDFxRW9sWC0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS82NTU1ZTMtODJmNi00NmNhLWExNzAtNDhmNzdlZTg1YWI5 LzEvVzhtbXlGeW5wV1Y3bm9yb0NHWFJMdmdXYWdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQAW9PoAwQB W9PqAwQAuWy8AwQAuWy/AwQAw+F/MA0EAgACMAcDBQAqA9GAMA0GCSqGSIb3DQEB CwUAA4IBAQCn7vu6wG/3neQf1auEnB6XiVoM5ZeNzYBdTvIThAiXbQZ3Cl+VTPqC sButuhsI9NOaL77FGO3s6CXGwCTwEi53xjG97K0NB1bqDG1QkoOrL8prn9WmNf+e JTDwWIiDhvtPf4+4C3amBCh56nCSojukinAUn6+o1b8aud9IngLJ74cTHZ61LKRN dgWOsrhbDy7vRTjDo9UJMHHcPdLURQKtWS31YucWHSpB2Tyr1/1nAR9mSsX3s9vG wVc0dCm3xJLjinHNfa01D6WdCBewwoTcZiA2hc2kQWJCPM6GUVihyXFFD4A8iUiV mwzTlzqmPF9l9p95QloAcdLn0wprxFFO -----END CERTIFICATE-----Generated at Tue Feb 10 02:30:39 2026 by rpki-client