This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/EqY0KefF-dXD1ybBHnswpERq3H4.roa File: EqY0KefF-dXD1ybBHnswpERq3H4.roa (raw, json) Hash identifier: YQZdI5aROLUswQgX5YCUushUt55IJ3UR7f+6G7Iiqhs= Subject key identifier: 12:A6:34:29:E7:C5:F9:D5:C3:D7:26:C1:1E:7B:30:A4:44:6A:DC:7E Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4 Certificate serial: 019B77C6FC3A11C5F02B812C1FA5260FFA6D Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/EqY0KefF-dXD1ybBHnswpERq3H4.roa Signing time: Thu 01 Jan 2026 04:18:07 +0000 ROA not before: Thu 01 Jan 2026 04:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62610 IP address blocks: 91.193.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:fc:3a:11:c5:f0:2b:81:2c:1f:a5:26:0f:fa:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4 Validity Not Before: Jan 1 04:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=12a63429e7c5f9d5c3d726c11e7b30a4446adc7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:57:f9:14:51:07:9f:d4:a6:56:36:02:dc:1c: 0b:98:97:87:55:be:b1:c8:e4:bd:57:ec:bf:56:2c: 21:06:21:b4:5f:57:b4:e6:5f:e6:8a:70:84:a1:ee: bc:c7:cf:78:15:37:c3:46:1d:a9:72:fc:1f:07:4a: 7e:3f:b8:86:84:be:f6:2a:e4:01:ad:13:48:92:fe: 97:83:74:17:bc:3e:65:14:0c:a5:a3:f5:a5:af:26: 7c:c1:f2:37:65:01:01:9d:ee:f1:84:c8:85:2a:1d: de:01:ea:72:44:1f:40:6c:ab:67:a3:a5:e2:e4:80: 78:46:d1:81:6d:2d:d3:f3:fb:af:94:dd:d9:19:cd: 04:99:3d:f8:88:d8:6b:a0:15:98:c6:85:a6:ac:ca: 85:a1:5a:e1:99:f6:7a:6a:50:32:87:6d:a9:06:54: 21:83:b0:87:db:a3:90:ea:b8:cb:3e:40:bb:04:d5: 10:0d:bc:a1:5e:6c:32:14:a3:0c:72:7c:40:39:46: cd:db:39:15:1d:2a:d1:ed:56:99:91:de:7e:1b:ad: 85:b1:de:87:ab:44:81:fc:83:63:54:d0:01:3c:c0: b8:fb:37:d9:a8:2d:5d:05:ab:59:f0:74:29:00:bf: ea:f0:42:54:f4:f5:31:7e:40:13:38:97:21:31:d4: 6f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A6:34:29:E7:C5:F9:D5:C3:D7:26:C1:1E:7B:30:A4:44:6A:DC:7E X509v3 Authority Key Identifier: keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/EqY0KefF-dXD1ybBHnswpERq3H4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.193.233.0/24 Signature Algorithm: sha256WithRSAEncryption 25:6b:ea:54:3e:dd:bf:18:5c:f1:a0:8e:23:76:00:af:ed:ca: ea:5d:09:b2:23:cb:37:46:92:d5:c1:e9:e5:5a:c0:ae:f3:80: 2c:1d:38:ed:6c:ee:3c:c3:ab:53:a2:9e:3f:4e:b9:9b:eb:7d: f5:84:cc:48:8c:ce:46:60:9c:84:d9:03:ff:4f:c4:ad:bd:40: ba:dd:bc:c2:b4:29:29:2c:88:c1:b0:c9:21:ac:ac:a0:c2:5f: bd:e7:a6:00:8f:4a:df:0e:40:b2:e5:ee:5c:40:92:03:ab:bb: c3:4a:c1:2c:9e:bb:5d:19:ce:ee:da:b7:8a:ec:c4:e8:ab:60: 10:4c:bc:ae:33:a9:19:6b:03:26:4f:d3:49:76:bf:2d:f8:76: e1:cd:64:d0:60:54:a4:d4:da:6b:5e:d2:0a:6c:4d:c1:a0:67: 3e:58:3e:17:10:25:48:21:73:3e:a3:55:d4:b7:ad:f0:1a:06: 7f:f5:a9:13:81:d8:4a:d2:a4:12:db:d7:d6:ff:05:22:42:48: 1b:ee:03:67:26:2e:12:9c:07:11:e8:a1:53:c3:f3:32:16:fa: 41:8b:97:0e:35:2c:a3:1c:83:ce:23:8a:ca:d0:99:d7:e8:61: 6c:56:58:18:1c:35:7a:80:b3:b8:09:4b:df:ae:31:f2:56:aa: 58:39:b2:8d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xvw6EcXwK4EsH6UmD/ptMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNWIzMzQ5NjU3ODg3OTRkNmYxNDdhMmYwMDRkMTNiZTMy NTdkYzQwHhcNMjYwMTAxMDQxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMmE2MzQyOWU3YzVmOWQ1YzNkNzI2YzExZTdiMzBhNDQ0NmFkYzdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFf5FFEHn9SmVjYC3BwLmJeHVb6x yOS9V+y/ViwhBiG0X1e05l/minCEoe68x894FTfDRh2pcvwfB0p+P7iGhL72KuQB rRNIkv6Xg3QXvD5lFAylo/WlryZ8wfI3ZQEBne7xhMiFKh3eAepyRB9AbKtno6Xi 5IB4RtGBbS3T8/uvlN3ZGc0EmT34iNhroBWYxoWmrMqFoVrhmfZ6alAyh22pBlQh g7CH26OQ6rjLPkC7BNUQDbyhXmwyFKMMcnxAOUbN2zkVHSrR7VaZkd5+G62Fsd6H q0SB/INjVNABPMC4+zfZqC1dBatZ8HQpAL/q8EJU9PUxfkATOJchMdRvUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBKmNCnnxfnVw9cmwR57MKREatx+MB8GA1UdIwQY MBaAFB5bM0lleIeU1vFHovAE0TvjJX3EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDIt OTk5MGUyZDllYWZlLzEvRXFZMEtlZkYtZFhEMXliQkhuc3dwRVJxM0g0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDItOTk5MGUyZDllYWZl LzEvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8HpMA0G CSqGSIb3DQEBCwUAA4IBAQAla+pUPt2/GFzxoI4jdgCv7crqXQmyI8s3RpLVwenl WsCu84AsHTjtbO48w6tTop4/Trmb6331hMxIjM5GYJyE2QP/T8StvUC63bzCtCkp LIjBsMkhrKygwl+956YAj0rfDkCy5e5cQJIDq7vDSsEsnrtdGc7u2reK7MToq2AQ TLyuM6kZawMmT9NJdr8t+HbhzWTQYFSk1NprXtIKbE3BoGc+WD4XECVIIXM+o1XU t63wGgZ/9akTgdhK0qQS29fW/wUiQkgb7gNnJi4SnAcR6KFTw/MyFvpBi5cONSyj HIPOI4rK0JnX6GFsVlgYHDV6gLO4CUvfrjHyVqpYObKN -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:30 2026 by rpki-client