This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/E5D8fKpIoYmoCBAx0hdWVglrEi4.roa File: E5D8fKpIoYmoCBAx0hdWVglrEi4.roa (raw, json) Hash identifier: pGzsUX/AZG/SjNx7mj675+/yamBKkvpo0vVvYUiCPeo= Subject key identifier: 13:90:FC:7C:AA:48:A1:89:A8:08:10:31:D2:17:56:56:09:6B:12:2E Certificate issuer: /CN=db1d6eba463b7564abfae938b46ed47187de0ec0 Certificate serial: 019B7E391B585FD8C7E4D03C9BFCB715F419 Authority key identifier: DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/E5D8fKpIoYmoCBAx0hdWVglrEi4.roa Signing time: Fri 02 Jan 2026 10:20:30 +0000 ROA not before: Fri 02 Jan 2026 10:20:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 26548 IP address blocks: 91.242.228.0/24 maxlen: 24 94.154.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:1b:58:5f:d8:c7:e4:d0:3c:9b:fc:b7:15:f4:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db1d6eba463b7564abfae938b46ed47187de0ec0 Validity Not Before: Jan 2 10:20:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1390fc7caa48a189a8081031d2175656096b122e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b9:b1:40:e3:2a:67:a4:75:22:08:d9:f2:d8: e7:1b:1c:77:93:ce:2e:e2:f0:ad:82:cd:d7:7d:fa: c1:42:bb:5d:ff:f5:29:f4:1b:08:11:f9:c4:35:b3: 81:ed:bd:54:59:e1:b4:ad:2a:d8:b3:4b:4d:ed:bf: 97:4c:c5:0e:ce:0d:72:06:98:05:6a:17:06:a0:e1: e3:fe:56:f1:cd:f2:da:6d:29:25:c1:d5:c4:15:eb: 7e:6d:71:ae:da:27:11:16:09:8d:8f:52:a7:d7:4f: 39:34:5f:50:f3:88:22:f9:d1:90:d3:7d:51:fc:76: 9b:14:ca:ef:1f:8e:00:b4:2f:86:af:cf:c5:c3:f3: c2:f2:35:a0:0d:7f:0a:9a:cf:35:d4:67:ea:83:a0: 7f:8a:6b:aa:6b:84:0d:62:1a:7b:c8:ea:72:8e:dc: 1c:bf:0c:46:a5:48:a2:08:f2:94:e5:bb:09:59:47: bc:65:6c:61:f8:83:0c:98:d9:49:9c:60:54:19:34: a4:8b:30:d2:dc:51:69:84:ac:5a:5c:e4:4d:65:ee: 05:2a:08:60:04:23:b5:8d:b6:58:b7:ef:c3:6e:f1: 1f:4e:94:26:bc:4d:c9:c2:23:b2:e1:5d:c1:81:26: 59:e1:3c:48:81:a5:44:f1:15:a0:a0:bf:b1:c7:24: 9e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:90:FC:7C:AA:48:A1:89:A8:08:10:31:D2:17:56:56:09:6B:12:2E X509v3 Authority Key Identifier: keyid:DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/E5D8fKpIoYmoCBAx0hdWVglrEi4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.242.228.0/24 94.154.127.0/24 Signature Algorithm: sha256WithRSAEncryption a8:3a:77:d9:4d:07:f4:d9:85:80:0f:25:83:6b:13:bb:0a:a5: 42:bf:c5:16:f1:0f:1a:e0:4f:1e:8d:57:65:2a:38:be:ea:c9: a7:57:12:66:bd:f1:86:c9:5f:35:37:d9:68:9f:05:43:6b:77: bd:2f:2b:15:a5:07:10:7e:80:78:10:67:f5:4b:d9:7f:f0:7b: 97:70:b2:9a:23:38:68:3e:e9:c4:c3:57:49:4a:d9:dd:0d:77: 09:d6:4b:cf:60:c1:7b:0b:a5:9a:6a:d0:3b:53:27:a7:4e:29: 8f:28:ba:b4:2a:d9:98:85:56:36:1a:dc:11:09:2f:ff:98:7a: 9c:6d:64:38:4f:2b:92:f0:06:a0:4b:7a:53:8c:20:3a:df:fb: 38:5b:90:09:4c:50:52:69:12:2d:ee:e3:f8:9c:e7:5a:33:32: da:fd:50:1a:f7:e9:ff:43:8f:a4:cf:8a:b3:5e:74:2a:ea:e9: ad:9f:4c:20:7a:85:ca:64:03:d7:90:f1:81:6c:73:f2:7c:d0: c6:44:7c:b5:4a:0b:32:dd:45:8c:c2:5a:60:1a:1d:37:9f:3b: 80:c8:1d:05:7b:f4:88:c0:9a:f2:7c:22:bf:65:30:6c:b0:95: 4a:8f:25:19:a7:1f:dc:17:ea:63:c4:91:48:6a:ca:e1:01:d4: 60:aa:4b:12 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+ORtYX9jH5NA8m/y3FfQZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiMWQ2ZWJhNDYzYjc1NjRhYmZhZTkzOGI0NmVkNDcxODdk ZTBlYzAwHhcNMjYwMTAyMTAyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzkwZmM3Y2FhNDhhMTg5YTgwODEwMzFkMjE3NTY1NjA5NmIxMjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrmxQOMqZ6R1IgjZ8tjnGxx3k84u 4vCtgs3XffrBQrtd//Up9BsIEfnENbOB7b1UWeG0rSrYs0tN7b+XTMUOzg1yBpgF ahcGoOHj/lbxzfLabSklwdXEFet+bXGu2icRFgmNj1Kn1085NF9Q84gi+dGQ031R /HabFMrvH44AtC+Gr8/Fw/PC8jWgDX8Kms811Gfqg6B/imuqa4QNYhp7yOpyjtwc vwxGpUiiCPKU5bsJWUe8ZWxh+IMMmNlJnGBUGTSkizDS3FFphKxaXORNZe4FKghg BCO1jbZYt+/DbvEfTpQmvE3JwiOy4V3BgSZZ4TxIgaVE8RWgoL+xxySe8wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBOQ/HyqSKGJqAgQMdIXVlYJaxIuMB8GA1UdIwQY MBaAFNsdbrpGO3Vkq/rpOLRu1HGH3g7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMngxdXVrWTdkV1NyLXVrNHRHN1VjWWZlRHNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80ZjY5ODUtYjk0YS00N2NjLWEzMDAt NmYyY2Y0ZjAzY2ViLzEvRTVEOGZLcElvWW1vQ0JBeDBoZFdWZ2xyRWk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC80ZjY5ODUtYjk0YS00N2NjLWEzMDAtNmYyY2Y0ZjAzY2Vi LzEvMngxdXVrWTdkV1NyLXVrNHRHN1VjWWZlRHNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW/LkAwQA Xpp/MA0GCSqGSIb3DQEBCwUAA4IBAQCoOnfZTQf02YWADyWDaxO7CqVCv8UW8Q8a 4E8ejVdlKji+6smnVxJmvfGGyV81N9lonwVDa3e9LysVpQcQfoB4EGf1S9l/8HuX cLKaIzhoPunEw1dJStndDXcJ1kvPYMF7C6WaatA7UyenTimPKLq0KtmYhVY2GtwR CS//mHqcbWQ4TyuS8AagS3pTjCA63/s4W5AJTFBSaRIt7uP4nOdaMzLa/VAa9+n/ Q4+kz4qzXnQq6umtn0wgeoXKZAPXkPGBbHPyfNDGRHy1Sgsy3UWMwlpgGh03nzuA yB0Fe/SIwJryfCK/ZTBssJVKjyUZpx/cF+pjxJFIasrhAdRgqksS -----END CERTIFICATE-----Generated at Tue Jan 20 00:06:17 2026 by rpki-client