This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/eyf8XzSbncmCJU29RuqgmWhSNro.roa File: eyf8XzSbncmCJU29RuqgmWhSNro.roa (raw, json) Hash identifier: mUIcsYMRdVByHfVcrIRSb1EWADuJM/ORhSKfGGlrQmI= Subject key identifier: 7B:27:FC:5F:34:9B:9D:C9:82:25:4D:BD:46:EA:A0:99:68:52:36:BA Certificate issuer: /CN=91d01c47f00e64f35cc752d03b34a71b71406b3f Certificate serial: 019B797E350925757C8F546679EC65010954 Authority key identifier: 91:D0:1C:47:F0:0E:64:F3:5C:C7:52:D0:3B:34:A7:1B:71:40:6B:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdAcR_AOZPNcx1LQOzSnG3FAaz8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/eyf8XzSbncmCJU29RuqgmWhSNro.roa Signing time: Thu 01 Jan 2026 12:17:52 +0000 ROA not before: Thu 01 Jan 2026 12:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201268 IP address blocks: 91.221.248.0/24 maxlen: 24 91.221.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.mft rsync://rpki.ripe.net/repository/DEFAULT/kdAcR_AOZPNcx1LQOzSnG3FAaz8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:35:09:25:75:7c:8f:54:66:79:ec:65:01:09:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91d01c47f00e64f35cc752d03b34a71b71406b3f Validity Not Before: Jan 1 12:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7b27fc5f349b9dc982254dbd46eaa099685236ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6c:75:ac:ac:2e:22:5e:3a:8f:db:9e:3b:b4: 7b:f9:ac:d6:cf:72:fa:85:0e:29:e6:79:20:9c:b5: 3a:3f:1c:c8:c6:82:db:61:82:4f:bf:49:32:f3:09: 7d:ee:52:45:65:b3:c0:72:e7:29:fa:bd:64:82:4e: 7d:63:76:9b:50:07:ce:13:c2:fe:65:b3:b3:a4:39: c2:b7:93:5c:32:b9:29:96:a8:32:a1:c3:c1:c7:3a: 6c:58:73:ae:c0:6d:c2:01:7d:95:29:ec:40:bf:b9: b4:a1:c1:76:36:65:6d:37:8d:0a:30:27:43:f3:94: 25:02:98:20:4f:bf:d4:a5:05:97:8d:34:04:96:ab: 26:4b:17:ce:f1:27:12:0c:80:b5:e0:5e:9f:46:06: a4:17:22:74:41:48:42:de:81:ed:d8:e4:a9:d5:8c: 0d:ac:2a:b1:ad:a6:e7:a8:15:f1:a3:5d:ed:f8:9e: b9:3a:a8:21:49:fa:c8:59:18:1a:14:49:24:f6:96: f2:96:a0:4a:ab:ae:de:ab:d0:c2:28:51:df:73:cd: 40:bd:40:2d:25:57:75:b7:b4:49:55:1d:a6:08:73: d4:b2:39:5a:30:46:19:f7:b3:31:2a:7f:f2:cc:63: c5:c6:91:db:64:98:d2:c0:26:f2:c0:5c:2c:1f:d2: 6b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:27:FC:5F:34:9B:9D:C9:82:25:4D:BD:46:EA:A0:99:68:52:36:BA X509v3 Authority Key Identifier: keyid:91:D0:1C:47:F0:0E:64:F3:5C:C7:52:D0:3B:34:A7:1B:71:40:6B:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdAcR_AOZPNcx1LQOzSnG3FAaz8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/eyf8XzSbncmCJU29RuqgmWhSNro.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.221.248.0/23 Signature Algorithm: sha256WithRSAEncryption ab:bf:98:1d:2b:71:37:51:39:bb:4a:de:0b:0b:84:81:90:f8: ce:96:7a:4e:c4:2f:b3:47:bb:21:e7:9a:58:83:20:58:85:a6: a8:f7:54:a1:49:76:25:12:0d:76:08:9d:62:dc:b0:25:75:74: 22:dc:59:08:c1:af:eb:d2:e4:b7:76:8a:65:6b:65:8e:c3:aa: 30:6f:f2:10:e3:a2:13:85:df:ac:ab:b5:65:9a:82:e4:52:98: a7:ac:9c:73:37:76:2f:20:6f:1e:e3:2a:d0:ea:21:50:1f:8b: 5a:7f:6a:fa:c3:0c:dc:e8:f1:71:b6:53:43:b4:c0:20:da:14: 05:bd:2a:e3:6b:15:10:63:78:f9:09:a4:2d:64:55:b9:57:58: c4:61:d0:b4:8d:d3:8e:38:8f:ff:b8:46:5a:ea:de:b8:6d:aa: 35:ba:37:5a:bb:bf:63:45:3b:f5:c6:6b:cd:49:11:5e:ad:49: c6:a1:80:3b:c7:93:44:1d:70:7a:3f:13:97:c0:65:6e:26:2c: 20:73:7c:5d:1f:ac:6a:1f:6f:cc:4c:97:c8:b4:7e:63:99:b3: d4:4e:a3:b9:6b:01:67:59:65:ea:31:10:09:42:c0:18:be:b7: 1a:e7:ac:96:fa:84:01:8c:a9:74:b0:20:30:f6:c9:01:ef:6a: 1e:42:9d:14 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fjUJJXV8j1RmeexlAQlUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxZDAxYzQ3ZjAwZTY0ZjM1Y2M3NTJkMDNiMzRhNzFiNzE0 MDZiM2YwHhcNMjYwMTAxMTIxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YjI3ZmM1ZjM0OWI5ZGM5ODIyNTRkYmQ0NmVhYTA5OTY4NTIzNmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGx1rKwuIl46j9ueO7R7+azWz3L6 hQ4p5nkgnLU6PxzIxoLbYYJPv0ky8wl97lJFZbPAcucp+r1kgk59Y3abUAfOE8L+ ZbOzpDnCt5NcMrkplqgyocPBxzpsWHOuwG3CAX2VKexAv7m0ocF2NmVtN40KMCdD 85QlApggT7/UpQWXjTQElqsmSxfO8ScSDIC14F6fRgakFyJ0QUhC3oHt2OSp1YwN rCqxrabnqBXxo13t+J65OqghSfrIWRgaFEkk9pbylqBKq67eq9DCKFHfc81AvUAt JVd1t7RJVR2mCHPUsjlaMEYZ97MxKn/yzGPFxpHbZJjSwCbywFwsH9JrrQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHsn/F80m53JgiVNvUbqoJloUja6MB8GA1UdIwQY MBaAFJHQHEfwDmTzXMdS0Ds0pxtxQGs/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2RBY1JfQU9aUE5jeDFMUU96U25HM0ZBYXo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9iMGZjMGMtYzUzNy00MGI0LTliNWIt NTZiMDA2ZWYwZDNiLzEvZXlmOFh6U2JuY21DSlUyOVJ1cWdtV2hTTnJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9iMGZjMGMtYzUzNy00MGI0LTliNWItNTZiMDA2ZWYwZDNi LzEva2RBY1JfQU9aUE5jeDFMUU96U25HM0ZBYXo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW934MA0G CSqGSIb3DQEBCwUAA4IBAQCrv5gdK3E3UTm7St4LC4SBkPjOlnpOxC+zR7sh55pY gyBYhaao91ShSXYlEg12CJ1i3LAldXQi3FkIwa/r0uS3dopla2WOw6owb/IQ46IT hd+sq7VlmoLkUpinrJxzN3YvIG8e4yrQ6iFQH4taf2r6wwzc6PFxtlNDtMAg2hQF vSrjaxUQY3j5CaQtZFW5V1jEYdC0jdOOOI//uEZa6t64bao1ujdau79jRTv1xmvN SRFerUnGoYA7x5NEHXB6PxOXwGVuJiwgc3xdH6xqH2/MTJfItH5jmbPUTqO5awFn WWXqMRAJQsAYvrca56yW+oQBjKl0sCAw9skB72oeQp0U -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:54 2026 by rpki-client