This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/ENxwjXTdbKTvs3cxszl-xyNLpXc.roa File: ENxwjXTdbKTvs3cxszl-xyNLpXc.roa (raw, json) Hash identifier: 47BjcSHsUkq+j3LunSdpEHT6VVnEgYALqU6b9V3eCd4= Subject key identifier: 10:DC:70:8D:74:DD:6C:A4:EF:B3:77:31:B3:39:7E:C7:23:4B:A5:77 Certificate issuer: /CN=32e15d384c38f4872b0ff9352ff19c4d6dfb64c6 Certificate serial: 019B79EBB510847AA8B12A74CE3ABB46B374 Authority key identifier: 32:E1:5D:38:4C:38:F4:87:2B:0F:F9:35:2F:F1:9C:4D:6D:FB:64:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MuFdOEw49IcrD_k1L_GcTW37ZMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/ENxwjXTdbKTvs3cxszl-xyNLpXc.roa Signing time: Thu 01 Jan 2026 14:17:29 +0000 ROA not before: Thu 01 Jan 2026 14:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199663 IP address blocks: 91.245.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.mft rsync://rpki.ripe.net/repository/DEFAULT/MuFdOEw49IcrD_k1L_GcTW37ZMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:b5:10:84:7a:a8:b1:2a:74:ce:3a:bb:46:b3:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32e15d384c38f4872b0ff9352ff19c4d6dfb64c6 Validity Not Before: Jan 1 14:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=10dc708d74dd6ca4efb37731b3397ec7234ba577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0d:c5:cb:10:3b:70:93:c1:28:b3:93:c0:79: 79:d0:3f:0b:d6:ac:37:d3:fb:59:f7:08:b8:da:a7: 13:dd:00:b3:ce:24:67:3d:78:46:b6:76:66:85:87: dd:d8:ab:f2:5f:73:69:92:dc:77:fd:73:32:c0:5a: 22:54:0e:61:8e:b2:0b:5d:e5:69:62:78:05:d3:21: 80:18:11:cf:66:ab:12:17:5e:7a:ce:a1:ce:ea:4b: 30:9f:78:6c:ac:e8:52:03:cb:58:28:04:cb:55:fd: e9:f8:a4:b7:4f:fa:50:2e:a3:be:92:c0:e5:19:55: 91:cf:b5:40:23:93:36:35:3f:ce:fa:c2:4b:9c:9c: e8:f3:bf:00:cb:4c:49:25:e7:31:21:8d:80:2a:d5: a0:f3:02:b2:66:ee:be:74:b0:03:9b:7f:32:77:0b: d7:6e:e6:c8:b2:ca:19:58:7f:49:01:a0:63:9d:6b: 82:02:69:4c:f5:36:a8:48:8d:5b:08:da:9a:8d:7c: 01:2b:69:6e:55:02:44:b9:01:64:6d:ff:ba:d7:e2: ae:3c:19:5b:f5:da:aa:69:c9:52:57:38:ae:20:b4: 0d:cf:ee:c4:6b:5c:1e:ff:43:1a:d9:91:8c:ff:6e: 7e:04:72:f6:c2:6c:e5:9a:87:bd:6b:2a:af:ad:6f: 6f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:DC:70:8D:74:DD:6C:A4:EF:B3:77:31:B3:39:7E:C7:23:4B:A5:77 X509v3 Authority Key Identifier: keyid:32:E1:5D:38:4C:38:F4:87:2B:0F:F9:35:2F:F1:9C:4D:6D:FB:64:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MuFdOEw49IcrD_k1L_GcTW37ZMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/ENxwjXTdbKTvs3cxszl-xyNLpXc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.245.194.0/24 Signature Algorithm: sha256WithRSAEncryption 64:ec:60:d9:cd:22:24:4b:ba:38:37:a4:36:49:20:32:61:cb: 4a:5d:6d:d6:b8:df:78:3a:ea:66:2f:0e:53:26:c6:fe:e3:15: c3:21:51:0d:57:bb:bc:21:9a:82:11:5a:ac:09:05:29:47:c8: 2e:97:15:6e:25:cf:16:cc:23:39:87:80:b1:bc:f0:75:4e:ba: 39:35:02:a4:a4:05:a6:2e:bb:10:72:30:d7:1b:02:d3:3c:58: fe:10:c7:56:0a:a4:c2:bc:01:82:d0:2f:9b:de:af:e2:42:2a: e3:7d:42:4c:c7:54:7c:a5:68:5a:d7:2c:ea:9d:30:79:23:c7: 75:2d:9c:8e:68:77:72:9f:a3:ea:d8:07:52:9f:72:e6:3e:fb: 69:58:ce:bd:b4:29:43:84:77:6a:7b:46:04:35:52:dc:4b:de: 50:1c:7f:f0:25:bd:73:87:fc:d4:4f:06:09:16:26:75:1d:2c: 26:f9:ee:d0:43:e1:c3:fe:26:80:c6:02:67:6e:61:ad:1d:0b: d1:11:f9:b8:72:a7:1d:04:02:06:8f:e7:7d:3c:d3:5b:c5:c2: ed:5f:e7:a5:4f:0d:f1:d7:3f:6a:80:81:d9:00:f7:c1:29:77: 13:26:70:63:bf:34:de:dd:b5:79:de:df:16:00:72:47:3e:cc: 97:06:a3:97 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt567UQhHqosSp0zjq7RrN0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyZTE1ZDM4NGMzOGY0ODcyYjBmZjkzNTJmZjE5YzRkNmRm YjY0YzYwHhcNMjYwMTAxMTQxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMGRjNzA4ZDc0ZGQ2Y2E0ZWZiMzc3MzFiMzM5N2VjNzIzNGJhNTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQ3FyxA7cJPBKLOTwHl50D8L1qw3 0/tZ9wi42qcT3QCzziRnPXhGtnZmhYfd2KvyX3Npktx3/XMywFoiVA5hjrILXeVp YngF0yGAGBHPZqsSF156zqHO6kswn3hsrOhSA8tYKATLVf3p+KS3T/pQLqO+ksDl GVWRz7VAI5M2NT/O+sJLnJzo878Ay0xJJecxIY2AKtWg8wKyZu6+dLADm38ydwvX bubIssoZWH9JAaBjnWuCAmlM9TaoSI1bCNqajXwBK2luVQJEuQFkbf+61+KuPBlb 9dqqaclSVziuILQNz+7Ea1we/0Ma2ZGM/25+BHL2wmzlmoe9ayqvrW9vNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBDccI103Wyk77N3MbM5fscjS6V3MB8GA1UdIwQY MBaAFDLhXThMOPSHKw/5NS/xnE1t+2TGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXVGZE9FdzQ5SWNyRF9rMUxfR2NUVzM3Wk1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS81NWQzY2MtYmNmMC00MjVlLTk4M2Qt NGYzYzQ2ZjE3NzM3LzEvRU54d2pYVGRiS1R2czNjeHN6bC14eU5McFhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS81NWQzY2MtYmNmMC00MjVlLTk4M2QtNGYzYzQ2ZjE3NzM3 LzEvTXVGZE9FdzQ5SWNyRF9rMUxfR2NUVzM3Wk1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/XCMA0G CSqGSIb3DQEBCwUAA4IBAQBk7GDZzSIkS7o4N6Q2SSAyYctKXW3WuN94OupmLw5T Jsb+4xXDIVENV7u8IZqCEVqsCQUpR8gulxVuJc8WzCM5h4CxvPB1Tro5NQKkpAWm LrsQcjDXGwLTPFj+EMdWCqTCvAGC0C+b3q/iQirjfUJMx1R8pWha1yzqnTB5I8d1 LZyOaHdyn6Pq2AdSn3LmPvtpWM69tClDhHdqe0YENVLcS95QHH/wJb1zh/zUTwYJ FiZ1HSwm+e7QQ+HD/iaAxgJnbmGtHQvREfm4cqcdBAIGj+d9PNNbxcLtX+elTw3x 1z9qgIHZAPfBKXcTJnBjvzTe3bV53t8WAHJHPsyXBqOX -----END CERTIFICATE-----Generated at Tue Feb 10 01:04:38 2026 by rpki-client