This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/vQDrdsVKUyg3AdinxsQg6qe1Fs8.roa File: vQDrdsVKUyg3AdinxsQg6qe1Fs8.roa (raw, json) Hash identifier: FsUD/qILrBqWkPuIKdZisJEsoMgHswVeHLUrDTTRgbo= Subject key identifier: BD:00:EB:76:C5:4A:53:28:37:01:D8:A7:C6:C4:20:EA:A7:B5:16:CF Certificate issuer: /CN=18caeb14a01ee16d836565e14fa53b4ab3c3cd26 Certificate serial: 019B78A30DD44AA9CDFF34EE763A1AA770C5 Authority key identifier: 18:CA:EB:14:A0:1E:E1:6D:83:65:65:E1:4F:A5:3B:4A:B3:C3:CD:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMrrFKAe4W2DZWXhT6U7SrPDzSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/vQDrdsVKUyg3AdinxsQg6qe1Fs8.roa Signing time: Thu 01 Jan 2026 08:18:30 +0000 ROA not before: Thu 01 Jan 2026 08:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43868 IP address blocks: 91.217.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft rsync://rpki.ripe.net/repository/DEFAULT/GMrrFKAe4W2DZWXhT6U7SrPDzSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:0d:d4:4a:a9:cd:ff:34:ee:76:3a:1a:a7:70:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18caeb14a01ee16d836565e14fa53b4ab3c3cd26 Validity Not Before: Jan 1 08:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd00eb76c54a53283701d8a7c6c420eaa7b516cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:31:ac:0c:66:06:08:b7:8d:52:5f:42:9f:05: a0:25:be:28:a9:97:50:83:77:f4:5c:42:d8:1e:d7: ef:72:ac:3d:e4:58:1a:47:f1:39:18:a1:70:d6:79: 9d:dc:e4:f5:d3:bb:07:c9:4a:9c:e9:ff:5e:43:4d: 77:f7:f9:b9:ce:21:08:37:df:3f:09:0a:91:bf:52: c4:24:57:70:51:b9:bb:eb:1b:7e:c7:c0:f7:47:f5: 2c:06:71:43:e6:d6:89:74:b9:90:bb:f7:54:d4:6d: 54:0c:40:59:d9:f0:77:21:75:82:e9:f6:16:2e:47: 8a:0c:b4:de:f8:82:a2:29:1b:89:e4:59:3f:d8:d6: 51:ce:9e:3f:51:41:17:bc:ab:e4:4b:b2:50:b4:9b: 3e:18:3e:61:7a:50:a4:32:2c:9e:bb:60:aa:76:a2: 9d:74:24:e9:6c:26:cb:30:51:af:b9:67:37:29:8b: cf:9c:da:ea:50:d4:20:da:6b:99:a2:39:09:10:1d: 37:d8:7f:5c:ed:67:7c:17:2b:3b:a1:d8:ce:e8:0b: c1:86:80:96:e2:7e:ea:1f:6d:11:e1:03:db:7b:c9: b1:75:01:ea:37:6c:87:84:c0:9c:74:e9:1c:22:9a: 09:26:5b:40:6e:96:52:d5:64:47:1b:8a:73:81:59: 1b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:00:EB:76:C5:4A:53:28:37:01:D8:A7:C6:C4:20:EA:A7:B5:16:CF X509v3 Authority Key Identifier: keyid:18:CA:EB:14:A0:1E:E1:6D:83:65:65:E1:4F:A5:3B:4A:B3:C3:CD:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMrrFKAe4W2DZWXhT6U7SrPDzSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/vQDrdsVKUyg3AdinxsQg6qe1Fs8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.217.27.0/24 Signature Algorithm: sha256WithRSAEncryption 80:fb:7e:ba:f9:49:a8:53:9e:6b:c5:50:e7:4d:58:6f:7e:78: 76:5b:3b:e0:93:28:11:3a:f6:24:22:e9:e5:81:7f:0c:a9:22: 8b:df:bf:7a:26:ce:30:b4:62:68:34:3f:71:e0:83:3e:e4:90: 52:84:3b:c1:dd:ae:ec:3f:fd:21:cc:e9:45:2e:49:76:23:bc: 67:ae:f0:56:51:36:1b:cd:a9:9b:37:70:fd:7f:bb:30:a0:a3: c4:43:d2:55:86:5a:46:eb:47:bd:98:b2:dd:66:74:74:f5:4a: 76:08:04:da:90:16:76:43:5a:6b:0d:79:cb:ed:59:c6:0d:2c: 7c:f0:42:f8:8c:2f:19:68:5b:b9:0a:d0:ac:9d:f4:67:a9:b3: 0f:ea:27:c5:d9:cb:7d:b1:e5:40:85:d8:45:fe:af:d7:86:88: a5:8c:e0:ae:3d:24:c4:9d:27:27:ca:d9:0c:46:4c:ca:5d:59: 08:f8:8c:aa:e8:8d:21:cf:47:23:35:b4:2d:50:de:d3:48:f2: 55:41:b9:47:b1:32:03:d3:05:18:82:3e:fe:79:4a:e2:b4:20: bf:8a:93:b7:15:38:bc:1d:4c:76:b7:6c:48:05:c0:a5:cc:0b: 78:2f:4f:8c:38:af:b6:3e:10:d9:6c:c8:8d:b9:4b:cf:55:84: 67:3a:ef:c1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ow3USqnN/zTudjoap3DFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4Y2FlYjE0YTAxZWUxNmQ4MzY1NjVlMTRmYTUzYjRhYjNj M2NkMjYwHhcNMjYwMTAxMDgxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDAwZWI3NmM1NGE1MzI4MzcwMWQ4YTdjNmM0MjBlYWE3YjUxNmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTGsDGYGCLeNUl9CnwWgJb4oqZdQ g3f0XELYHtfvcqw95FgaR/E5GKFw1nmd3OT107sHyUqc6f9eQ0139/m5ziEIN98/ CQqRv1LEJFdwUbm76xt+x8D3R/UsBnFD5taJdLmQu/dU1G1UDEBZ2fB3IXWC6fYW LkeKDLTe+IKiKRuJ5Fk/2NZRzp4/UUEXvKvkS7JQtJs+GD5helCkMiyeu2CqdqKd dCTpbCbLMFGvuWc3KYvPnNrqUNQg2muZojkJEB032H9c7Wd8Fys7odjO6AvBhoCW 4n7qH20R4QPbe8mxdQHqN2yHhMCcdOkcIpoJJltAbpZS1WRHG4pzgVkbyQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL0A63bFSlMoNwHYp8bEIOqntRbPMB8GA1UdIwQY MBaAFBjK6xSgHuFtg2Vl4U+lO0qzw80mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR01yckZLQWU0VzJEWldYaFQ2VTdTclBEelNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9lN2IxZDctM2Q3YS00NmFiLTgxMGYt ZWRkZjIzYzFiYTZkLzEvdlFEcmRzVktVeWczQWRpbnhzUWc2cWUxRnM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9lN2IxZDctM2Q3YS00NmFiLTgxMGYtZWRkZjIzYzFiYTZk LzEvR01yckZLQWU0VzJEWldYaFQ2VTdTclBEelNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9kbMA0G CSqGSIb3DQEBCwUAA4IBAQCA+366+UmoU55rxVDnTVhvfnh2WzvgkygROvYkIunl gX8MqSKL3796Js4wtGJoND9x4IM+5JBShDvB3a7sP/0hzOlFLkl2I7xnrvBWUTYb zambN3D9f7swoKPEQ9JVhlpG60e9mLLdZnR09Up2CATakBZ2Q1prDXnL7VnGDSx8 8EL4jC8ZaFu5CtCsnfRnqbMP6ifF2ct9seVAhdhF/q/XhoiljOCuPSTEnScnytkM RkzKXVkI+Iyq6I0hz0cjNbQtUN7TSPJVQblHsTID0wUYgj7+eUritCC/ipO3FTi8 HUx2t2xIBcClzAt4L0+MOK+2PhDZbMiNuUvPVYRnOu/B -----END CERTIFICATE-----Generated at Tue Feb 10 03:57:23 2026 by rpki-client