This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/SS-XwihKQ_Jut_u0kB0C0jTBC6g.roa File: SS-XwihKQ_Jut_u0kB0C0jTBC6g.roa (raw, json) Hash identifier: rPpkOjYvnM4DCXuhdrHJgLwjmOB3eXAXFBoPZ/CIvH8= Subject key identifier: 49:2F:97:C2:28:4A:43:F2:6E:B7:FB:B4:90:1D:02:D2:34:C1:0B:A8 Certificate issuer: /CN=e56076f27e13d1800e77d16e4b60b23b6f58c820 Certificate serial: 019B7CECD585227615C51866D3C73D729DE1 Authority key identifier: E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/SS-XwihKQ_Jut_u0kB0C0jTBC6g.roa Signing time: Fri 02 Jan 2026 04:17:34 +0000 ROA not before: Fri 02 Jan 2026 04:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5511 IP address blocks: 91.240.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:d5:85:22:76:15:c5:18:66:d3:c7:3d:72:9d:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e56076f27e13d1800e77d16e4b60b23b6f58c820 Validity Not Before: Jan 2 04:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=492f97c2284a43f26eb7fbb4901d02d234c10ba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:71:34:2d:10:3e:bc:0b:e7:34:bb:4d:b3:21: f1:54:bf:7c:56:c3:9b:e6:23:db:b8:96:38:42:7d: 7f:0f:2f:74:e9:c9:e0:c7:db:a1:6a:bf:be:0d:c3: 62:a1:f6:8c:3c:6d:2b:93:a3:9f:cb:76:5a:76:8d: 89:f0:0b:ca:e7:81:77:8b:eb:f8:8f:55:91:43:20: fd:68:e2:db:bd:10:64:26:fa:e9:0f:9d:0c:50:83: e7:67:90:3f:7d:4c:d1:d6:3c:c6:5d:72:9d:db:1b: 24:2b:de:f7:99:37:5f:b2:c0:ec:b2:c0:78:34:e8: 0f:f2:f9:d9:66:ae:e2:7a:f9:40:d9:be:67:2a:2f: 49:3b:48:78:10:5f:45:d5:09:16:38:ef:e0:14:04: d2:9b:c8:68:ae:19:28:40:d3:f4:ed:10:61:d6:8f: 50:9e:9d:5e:76:94:17:5c:27:ed:24:7a:4c:a8:06: 39:a0:65:ad:15:83:23:3b:03:2d:45:ea:9a:e8:f3: 21:c2:1b:61:bd:aa:d9:dc:3a:e3:75:f0:b7:d8:61: 71:25:bc:61:33:4a:4f:4f:01:02:68:20:14:2d:57: bd:d2:b3:7e:f2:24:fd:60:76:df:b4:5b:b9:ca:28: 4c:78:44:b5:51:60:08:b4:92:1f:3e:f4:64:7b:d7: 85:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:2F:97:C2:28:4A:43:F2:6E:B7:FB:B4:90:1D:02:D2:34:C1:0B:A8 X509v3 Authority Key Identifier: keyid:E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/SS-XwihKQ_Jut_u0kB0C0jTBC6g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.240.228.0/24 Signature Algorithm: sha256WithRSAEncryption 79:c0:b2:62:09:c7:14:b4:9f:ff:45:26:79:9c:93:12:46:ca: d3:b1:45:0c:fd:a3:99:87:07:3a:56:bc:7c:3a:66:61:c5:80: d8:3d:8b:88:8f:d0:52:98:78:e0:aa:62:c4:a0:fc:e1:43:d0: f9:ef:d1:70:77:93:00:a5:f4:24:bb:13:a9:cb:ec:da:73:bc: c5:bf:78:ee:b9:37:3a:8b:5f:2b:58:5a:5f:24:92:07:a3:d7: 7a:80:aa:d4:3d:9e:22:e4:f3:41:a8:a1:e7:ad:b2:b6:34:af: 51:75:69:51:0e:11:7e:5c:8e:bc:d3:53:24:65:91:59:06:96: 51:6a:4e:d4:ef:8e:ce:42:5e:eb:e2:22:37:e5:68:ce:eb:2b: 24:33:74:eb:73:7e:6f:ea:49:3a:27:c9:55:59:8b:23:31:d7: 36:90:0a:ec:75:d5:92:06:76:8c:01:84:12:59:ca:6e:e2:5c: 42:cd:02:cc:07:fa:b2:77:e3:34:1a:20:36:d8:f8:4d:72:74: 7d:77:e0:15:b7:5a:f6:91:91:09:af:e5:f5:55:b4:cc:23:52: 79:01:22:57:db:ef:55:2e:a5:aa:f2:21:d7:71:2e:6b:29:53: f5:0f:3e:a3:95:0d:a0:1a:9e:da:bd:13:a6:8a:b6:01:a8:ea: 3b:ac:17:1e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87NWFInYVxRhm08c9cp3hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1NjA3NmYyN2UxM2QxODAwZTc3ZDE2ZTRiNjBiMjNiNmY1 OGM4MjAwHhcNMjYwMTAyMDQxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTJmOTdjMjI4NGE0M2YyNmViN2ZiYjQ5MDFkMDJkMjM0YzEwYmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHE0LRA+vAvnNLtNsyHxVL98VsOb 5iPbuJY4Qn1/Dy906cngx9uhar++DcNiofaMPG0rk6Ofy3Zado2J8AvK54F3i+v4 j1WRQyD9aOLbvRBkJvrpD50MUIPnZ5A/fUzR1jzGXXKd2xskK973mTdfssDsssB4 NOgP8vnZZq7ievlA2b5nKi9JO0h4EF9F1QkWOO/gFATSm8horhkoQNP07RBh1o9Q np1edpQXXCftJHpMqAY5oGWtFYMjOwMtReqa6PMhwhthvarZ3DrjdfC32GFxJbxh M0pPTwECaCAULVe90rN+8iT9YHbftFu5yihMeES1UWAItJIfPvRke9eFRwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEkvl8IoSkPybrf7tJAdAtI0wQuoMB8GA1UdIwQY MBaAFOVgdvJ+E9GADnfRbktgsjtvWMggMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVdCMjhuNFQwWUFPZDlGdVMyQ3lPMjlZeUNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8wYWM0NGQtYjNiZS00Mjc3LTgwZjgt NThjZjg5ODg4ZTJhLzEvU1MtWHdpaEtRX0p1dF91MGtCMEMwalRCQzZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8wYWM0NGQtYjNiZS00Mjc3LTgwZjgtNThjZjg5ODg4ZTJh LzEvNVdCMjhuNFQwWUFPZDlGdVMyQ3lPMjlZeUNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/DkMA0G CSqGSIb3DQEBCwUAA4IBAQB5wLJiCccUtJ//RSZ5nJMSRsrTsUUM/aOZhwc6Vrx8 OmZhxYDYPYuIj9BSmHjgqmLEoPzhQ9D579Fwd5MApfQkuxOpy+zac7zFv3juuTc6 i18rWFpfJJIHo9d6gKrUPZ4i5PNBqKHnrbK2NK9RdWlRDhF+XI6801MkZZFZBpZR ak7U747OQl7r4iI35WjO6yskM3Trc35v6kk6J8lVWYsjMdc2kArsddWSBnaMAYQS Wcpu4lxCzQLMB/qyd+M0GiA22PhNcnR9d+AVt1r2kZEJr+X1VbTMI1J5ASJX2+9V LqWq8iHXcS5rKVP1Dz6jlQ2gGp7avROmirYBqOo7rBce -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:02 2026 by rpki-client