This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/872097-b0a6-4d08-a6ff-1e88bb278f7b/1/pEVSsM5N7hm3Og32HXsDhg7pL1s.roa File: pEVSsM5N7hm3Og32HXsDhg7pL1s.roa (raw, json) Hash identifier: lkqZ6UHBpwmZdzRaUJjyZFpwtlAHVK4YjoLQTGnDAAc= Subject key identifier: A4:45:52:B0:CE:4D:EE:19:B7:3A:0D:F6:1D:7B:03:86:0E:E9:2F:5B Certificate issuer: /CN=670cd7b2bcfb374a3980cce0d08092238754ea09 Certificate serial: 019C051CF850ADE44ABF881D90EF4586B44D Authority key identifier: 67:0C:D7:B2:BC:FB:37:4A:39:80:CC:E0:D0:80:92:23:87:54:EA:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZwzXsrz7N0o5gMzg0ICSI4dU6gk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/872097-b0a6-4d08-a6ff-1e88bb278f7b/1/pEVSsM5N7hm3Og32HXsDhg7pL1s.roa Signing time: Wed 28 Jan 2026 14:58:30 +0000 ROA not before: Wed 28 Jan 2026 14:58:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201993 IP address blocks: 91.241.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/872097-b0a6-4d08-a6ff-1e88bb278f7b/1/ZwzXsrz7N0o5gMzg0ICSI4dU6gk.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/872097-b0a6-4d08-a6ff-1e88bb278f7b/1/ZwzXsrz7N0o5gMzg0ICSI4dU6gk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZwzXsrz7N0o5gMzg0ICSI4dU6gk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:05:1c:f8:50:ad:e4:4a:bf:88:1d:90:ef:45:86:b4:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=670cd7b2bcfb374a3980cce0d08092238754ea09 Validity Not Before: Jan 28 14:58:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a44552b0ce4dee19b73a0df61d7b03860ee92f5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d8:53:1d:d9:77:4d:8f:17:0b:cd:00:cf:fb: ef:11:39:71:12:85:99:9c:65:28:cd:bd:a1:d1:fa: 8a:bf:54:5b:4d:67:9c:1c:35:90:b5:f7:65:fb:18: e8:0e:36:aa:15:8d:dd:be:f1:1f:64:f8:76:28:92: ae:72:4b:05:7d:7a:34:55:49:31:e2:a8:4a:cc:d7: 29:34:b0:7c:d1:57:d0:f1:db:cb:2e:0d:24:7c:e5: 7c:11:bf:74:ac:94:a4:5c:58:5e:c9:5d:0c:5a:2a: 18:e2:1c:36:23:5f:dd:10:b7:f3:5d:a5:c3:26:be: f6:17:2d:93:09:b4:8a:35:a3:1f:18:8d:50:5d:4d: 33:c7:dd:fd:b1:e5:70:65:d2:63:b9:4e:8b:50:e7: e8:18:15:c1:3a:9d:59:ac:1d:f6:56:be:1c:b4:7d: e7:ef:29:0a:e9:7d:d0:eb:59:b5:3b:48:d2:50:b1: 36:ca:35:4a:5e:2d:d8:ca:7a:0d:5a:f0:34:c1:a5: 9a:29:f0:90:9e:26:b8:ef:84:c0:88:ef:7f:ec:ee: ad:d5:5f:10:81:80:a0:a9:66:ca:e4:34:ef:07:7c: 1e:64:e4:b0:16:c4:66:30:07:45:79:a5:7a:55:5c: 9a:57:2c:c5:90:26:80:55:d6:be:71:3a:3c:c0:76: b1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:45:52:B0:CE:4D:EE:19:B7:3A:0D:F6:1D:7B:03:86:0E:E9:2F:5B X509v3 Authority Key Identifier: keyid:67:0C:D7:B2:BC:FB:37:4A:39:80:CC:E0:D0:80:92:23:87:54:EA:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZwzXsrz7N0o5gMzg0ICSI4dU6gk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/872097-b0a6-4d08-a6ff-1e88bb278f7b/1/pEVSsM5N7hm3Og32HXsDhg7pL1s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/872097-b0a6-4d08-a6ff-1e88bb278f7b/1/ZwzXsrz7N0o5gMzg0ICSI4dU6gk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.241.76.0/24 Signature Algorithm: sha256WithRSAEncryption c7:ff:e1:88:4f:7a:da:a8:8c:74:dd:32:9e:bc:e3:f6:71:f2: af:16:1b:58:0f:c4:cc:a7:02:be:71:1d:5b:df:05:e6:f1:86: c7:4c:58:6f:5e:c7:64:f5:53:ae:c3:d4:89:54:2c:2c:3e:ae: 57:66:5d:51:0c:0c:ec:43:bf:a7:18:48:99:b1:7d:0c:f0:2c: 4f:70:17:8d:4c:f2:b3:5c:64:51:8c:64:eb:5d:e7:d9:b2:ba: 4a:6d:9c:63:83:1c:61:a0:42:92:33:c7:d0:ee:1f:02:46:ca: 63:d4:9e:7a:90:c9:2f:22:c6:b4:c0:68:a2:c3:d3:23:22:5d: 32:ae:e8:3e:89:7f:6b:e5:38:80:bf:ce:e9:58:81:d0:70:82: 15:36:39:20:fa:1a:c2:5f:9e:39:36:41:25:69:a1:92:9f:09: 30:74:6f:6c:b3:ef:39:31:8f:b6:39:a6:23:db:9a:a0:38:91: 0e:63:6c:a4:97:f5:df:5c:69:25:02:4f:94:19:d2:8a:5e:1b: 0d:19:0f:1e:2b:0f:9a:a3:bd:4c:70:f1:b4:8a:b3:1d:06:e4: 1c:1b:65:96:6a:ba:b3:53:36:89:d0:b8:d0:5a:d5:aa:92:9c: 2c:f7:b9:8b:50:02:36:e5:97:0b:e4:0f:d3:50:14:a9:2c:e4: 75:52:95:57 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwFHPhQreRKv4gdkO9FhrRNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3MGNkN2IyYmNmYjM3NGEzOTgwY2NlMGQwODA5MjIzODc1 NGVhMDkwHhcNMjYwMTI4MTQ1ODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDQ1NTJiMGNlNGRlZTE5YjczYTBkZjYxZDdiMDM4NjBlZTkyZjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNhTHdl3TY8XC80Az/vvETlxEoWZ nGUozb2h0fqKv1RbTWecHDWQtfdl+xjoDjaqFY3dvvEfZPh2KJKucksFfXo0VUkx 4qhKzNcpNLB80VfQ8dvLLg0kfOV8Eb90rJSkXFheyV0MWioY4hw2I1/dELfzXaXD Jr72Fy2TCbSKNaMfGI1QXU0zx939seVwZdJjuU6LUOfoGBXBOp1ZrB32Vr4ctH3n 7ykK6X3Q61m1O0jSULE2yjVKXi3YynoNWvA0waWaKfCQnia474TAiO9/7O6t1V8Q gYCgqWbK5DTvB3weZOSwFsRmMAdFeaV6VVyaVyzFkCaAVda+cTo8wHaxuwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKRFUrDOTe4ZtzoN9h17A4YO6S9bMB8GA1UdIwQY MBaAFGcM17K8+zdKOYDM4NCAkiOHVOoJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnd6WHNyejdOMG81Z016ZzBJQ1NJNGRVNmdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS84NzIwOTctYjBhNi00ZDA4LWE2ZmYt MWU4OGJiMjc4ZjdiLzEvcEVWU3NNNU43aG0zT2czMkhYc0RoZzdwTDFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS84NzIwOTctYjBhNi00ZDA4LWE2ZmYtMWU4OGJiMjc4Zjdi LzEvWnd6WHNyejdOMG81Z016ZzBJQ1NJNGRVNmdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/FMMA0G CSqGSIb3DQEBCwUAA4IBAQDH/+GIT3raqIx03TKevOP2cfKvFhtYD8TMpwK+cR1b 3wXm8YbHTFhvXsdk9VOuw9SJVCwsPq5XZl1RDAzsQ7+nGEiZsX0M8CxPcBeNTPKz XGRRjGTrXefZsrpKbZxjgxxhoEKSM8fQ7h8CRspj1J56kMkvIsa0wGiiw9MjIl0y rug+iX9r5TiAv87pWIHQcIIVNjkg+hrCX545NkElaaGSnwkwdG9ss+85MY+2OaYj 25qgOJEOY2ykl/XfXGklAk+UGdKKXhsNGQ8eKw+ao71McPG0irMdBuQcG2WWarqz UzaJ0LjQWtWqkpws97mLUAI25ZcL5A/TUBSpLOR1UpVX -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:13 2026 by rpki-client