This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/2F4RMUmq0lpAOhiDCB5e-Y1vbfk.roa File: 2F4RMUmq0lpAOhiDCB5e-Y1vbfk.roa (raw, json) Hash identifier: l3nVP84qgAebXZ45df8F6skmyfbFKhUrmvG9dZuwE7o= Subject key identifier: D8:5E:11:31:49:AA:D2:5A:40:3A:18:83:08:1E:5E:F9:8D:6F:6D:F9 Certificate issuer: /CN=e39557250543e4476af88c4612d4a89531313b57 Certificate serial: 019B7F8476E00754657B6DB99E2F75BAAEBA Authority key identifier: E3:95:57:25:05:43:E4:47:6A:F8:8C:46:12:D4:A8:95:31:31:3B:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/45VXJQVD5Edq-IxGEtSolTExO1c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/2F4RMUmq0lpAOhiDCB5e-Y1vbfk.roa Signing time: Fri 02 Jan 2026 16:22:26 +0000 ROA not before: Fri 02 Jan 2026 16:22:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3301 IP address blocks: 91.227.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft rsync://rpki.ripe.net/repository/DEFAULT/45VXJQVD5Edq-IxGEtSolTExO1c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:76:e0:07:54:65:7b:6d:b9:9e:2f:75:ba:ae:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e39557250543e4476af88c4612d4a89531313b57 Validity Not Before: Jan 2 16:22:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d85e113149aad25a403a1883081e5ef98d6f6df9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4b:07:75:0f:4d:0b:a8:ef:df:9a:6a:3c:f5: a2:6d:4b:fc:9b:2f:f9:70:66:fb:35:1d:d8:50:fa: 7d:db:3f:a4:20:73:61:f5:8c:3e:84:cf:37:c1:da: 56:d7:15:05:a4:12:bd:fc:bc:41:fc:7a:d4:04:d8: b8:2a:6d:49:9b:3b:89:f2:6a:be:1a:ed:0e:08:14: 2b:cb:98:72:50:96:15:93:41:fd:35:0f:d1:e8:ef: 50:9c:03:ec:26:a3:c0:4a:94:24:9d:c1:61:a2:76: 6f:57:15:5e:0c:c8:70:92:c8:9f:93:fd:ef:b7:41: 5d:16:86:bd:96:06:ba:a5:c4:84:d5:4a:ba:30:66: 0f:cc:4b:fd:70:ad:9c:6e:51:61:b8:b6:b5:c7:92: be:0b:ca:84:6c:fa:9b:bd:62:bd:ad:8b:90:fe:31: 8e:60:40:4c:30:32:e0:8d:86:e5:3a:b1:a4:5b:eb: 5b:3e:15:95:d2:4c:c3:b7:86:41:d6:2e:28:49:ce: ce:bc:63:42:2e:e8:04:65:6b:ef:9f:ad:81:5c:a3: 80:41:d4:12:04:0c:8b:69:cd:53:a1:18:4c:55:09: ff:e8:a7:49:f2:f0:4c:7d:e4:5f:c1:62:eb:54:a3: f3:93:3e:03:12:e8:81:22:d5:12:1b:2a:73:9d:d0: cf:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:5E:11:31:49:AA:D2:5A:40:3A:18:83:08:1E:5E:F9:8D:6F:6D:F9 X509v3 Authority Key Identifier: keyid:E3:95:57:25:05:43:E4:47:6A:F8:8C:46:12:D4:A8:95:31:31:3B:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45VXJQVD5Edq-IxGEtSolTExO1c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/2F4RMUmq0lpAOhiDCB5e-Y1vbfk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.227.49.0/24 Signature Algorithm: sha256WithRSAEncryption 39:3b:9c:65:11:7b:6a:b4:b1:71:c0:79:22:e7:f4:55:2c:80: b2:5e:cd:4d:29:85:2a:de:dc:1e:40:09:5a:ab:34:41:f0:9f: e3:80:4f:f4:02:9c:f5:7d:bc:fb:36:af:85:61:2e:10:61:49: 15:16:d5:eb:9f:1f:ef:be:85:bd:19:aa:6a:71:35:81:df:92: 20:1e:f5:e1:33:51:4f:c0:1c:ea:87:9b:93:e6:2e:71:23:fb: 6a:ee:ae:71:13:fd:b6:cb:69:14:1f:ce:07:d5:37:72:71:4a: dd:00:7e:c0:e9:0f:77:0f:c0:24:4d:36:22:59:7c:1e:41:50: 51:a4:8d:3e:c4:55:ff:e9:65:7b:6c:62:30:1f:70:90:a3:1b: ca:da:56:12:2b:e0:63:f9:19:42:c1:24:13:9e:e7:ad:26:30: 15:e5:b5:fb:78:d7:11:e3:4e:b5:f8:36:74:ea:c9:fc:5d:fb: 64:82:c2:f5:d2:da:27:31:ee:a8:43:67:f1:8c:98:f7:6d:0b: 28:52:ca:b4:ad:58:1a:b0:d1:c7:d9:70:fa:2e:06:f4:f5:1b: 2a:bd:0d:2d:bc:ad:c7:f2:20:7d:1d:d1:13:86:1c:78:a9:d6: 52:b1:87:39:08:4c:de:ab:03:2e:e9:b6:c9:0e:77:2f:7e:84: 60:98:1f:fc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hHbgB1Rle225ni91uq66MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzOTU1NzI1MDU0M2U0NDc2YWY4OGM0NjEyZDRhODk1MzEz MTNiNTcwHhcNMjYwMTAyMTYyMjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODVlMTEzMTQ5YWFkMjVhNDAzYTE4ODMwODFlNWVmOThkNmY2ZGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEsHdQ9NC6jv35pqPPWibUv8my/5 cGb7NR3YUPp92z+kIHNh9Yw+hM83wdpW1xUFpBK9/LxB/HrUBNi4Km1JmzuJ8mq+ Gu0OCBQry5hyUJYVk0H9NQ/R6O9QnAPsJqPASpQkncFhonZvVxVeDMhwksifk/3v t0FdFoa9lga6pcSE1Uq6MGYPzEv9cK2cblFhuLa1x5K+C8qEbPqbvWK9rYuQ/jGO YEBMMDLgjYblOrGkW+tbPhWV0kzDt4ZB1i4oSc7OvGNCLugEZWvvn62BXKOAQdQS BAyLac1ToRhMVQn/6KdJ8vBMfeRfwWLrVKPzkz4DEuiBItUSGypzndDPiwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNheETFJqtJaQDoYgwgeXvmNb235MB8GA1UdIwQY MBaAFOOVVyUFQ+RHaviMRhLUqJUxMTtXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDVWWEpRVkQ1RWRxLUl4R0V0U29sVEV4TzFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8yOWQyNjQtYjk0MS00N2E0LTllYzUt MjA2OTUxOTNhYzA3LzEvMkY0Uk1VbXEwbHBBT2hpRENCNWUtWTF2YmZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8yOWQyNjQtYjk0MS00N2E0LTllYzUtMjA2OTUxOTNhYzA3 LzEvNDVWWEpRVkQ1RWRxLUl4R0V0U29sVEV4TzFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+MxMA0G CSqGSIb3DQEBCwUAA4IBAQA5O5xlEXtqtLFxwHki5/RVLICyXs1NKYUq3tweQAla qzRB8J/jgE/0Apz1fbz7Nq+FYS4QYUkVFtXrnx/vvoW9GapqcTWB35IgHvXhM1FP wBzqh5uT5i5xI/tq7q5xE/22y2kUH84H1TdycUrdAH7A6Q93D8AkTTYiWXweQVBR pI0+xFX/6WV7bGIwH3CQoxvK2lYSK+Bj+RlCwSQTnuetJjAV5bX7eNcR4061+DZ0 6sn8XftkgsL10tonMe6oQ2fxjJj3bQsoUsq0rVgasNHH2XD6Lgb09RsqvQ0tvK3H 8iB9HdEThhx4qdZSsYc5CEzeqwMu6bbJDncvfoRgmB/8 -----END CERTIFICATE-----Generated at Mon Jan 26 12:55:32 2026 by rpki-client