This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/e-wh2r9wdch9AbYzWAb-amfpi3k.roa File: e-wh2r9wdch9AbYzWAb-amfpi3k.roa (raw, json) Hash identifier: 7RxrmeOp+FYtmV6C/Huryp37MguNnmSBg7rxFRERF7A= Subject key identifier: 7B:EC:21:DA:BF:70:75:C8:7D:01:B6:33:58:06:FE:6A:67:E9:8B:79 Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Certificate serial: 019B77C6BA97DFA1692B8189CF8D6750BBF2 Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/e-wh2r9wdch9AbYzWAb-amfpi3k.roa Signing time: Thu 01 Jan 2026 04:17:51 +0000 ROA not before: Thu 01 Jan 2026 04:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44477 IP address blocks: 92.60.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 01:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:ba:97:df:a1:69:2b:81:89:cf:8d:67:50:bb:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Validity Not Before: Jan 1 04:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7bec21dabf7075c87d01b6335806fe6a67e98b79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ad:d1:bc:bb:70:16:86:eb:41:ed:38:f0:3b: f6:60:e9:58:b5:ed:0b:f9:54:1d:41:64:12:8c:e6: 78:32:12:db:b6:b2:0d:55:61:0d:b1:ed:18:e1:eb: cf:da:1f:df:d6:e0:11:a1:3d:01:0f:93:0a:aa:f1: 54:7a:09:cd:5a:cb:1a:70:e9:7d:64:a0:cc:63:af: 96:1d:59:41:44:8c:f2:e5:d5:ba:bb:4a:20:54:7c: 54:69:12:ea:39:09:38:43:09:aa:5c:3e:e3:06:b6: 02:04:e1:85:91:d2:a1:88:37:01:f0:79:13:0e:df: 36:b4:7a:a3:83:5e:cd:7b:5b:17:00:c2:f6:c6:bc: d8:42:3a:f9:fa:ce:44:04:4e:71:13:eb:f5:1c:37: de:cf:8d:fc:d9:1e:1c:d0:c7:60:f0:78:06:54:88: 22:93:58:36:60:2d:05:7f:99:8b:22:dc:a3:89:4d: d4:9c:15:f2:9c:31:ff:34:ea:3b:78:b7:28:2f:99: e1:a2:aa:d1:da:b9:dc:da:ed:4a:78:42:b4:44:9d: 9f:98:0b:a1:51:6e:6b:b7:7a:0c:27:0b:3a:da:95: b4:c3:a4:b5:e4:20:f6:71:12:62:ff:82:41:5e:bb: e6:33:01:15:3a:b3:24:05:eb:88:af:b0:df:3c:eb: cb:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:EC:21:DA:BF:70:75:C8:7D:01:B6:33:58:06:FE:6A:67:E9:8B:79 X509v3 Authority Key Identifier: keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/e-wh2r9wdch9AbYzWAb-amfpi3k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.60.69.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:80:db:d9:e6:4b:1c:74:1e:7f:9e:02:9a:32:a9:94:11:26: 40:f3:2e:a3:cd:1e:c3:b6:ca:88:27:6d:c6:36:73:c1:44:1b: 81:b0:3d:41:98:f5:f5:b3:b4:57:0d:88:b2:8b:07:6d:a0:2a: e1:35:e6:0a:a1:2a:d6:4c:d2:a7:80:b7:5f:06:6d:98:ef:d4: 60:f0:1d:43:dc:86:4b:55:8a:3c:12:0e:f6:94:39:7b:4a:0f: 3f:c2:59:99:b4:91:1e:55:ce:91:c5:7d:77:bd:20:ed:4c:95: c0:d1:7d:50:a8:5b:4b:98:13:a0:80:e1:ee:91:4c:1c:94:89: 17:c3:d8:3d:10:0b:cc:2c:b5:e8:40:ec:de:4e:36:45:b6:58: 3a:2a:08:70:b0:93:5b:ca:92:b0:d1:40:86:dc:23:f5:88:4e: eb:02:98:79:c9:cf:64:2b:15:a4:d9:a6:c2:7b:60:2f:5e:5c: d1:df:76:4d:76:4a:a5:95:2a:b4:b0:64:ca:4f:e5:2f:9a:25: 5e:e7:53:30:c5:b7:eb:91:d9:56:87:05:da:8f:4e:0d:40:4b: aa:e0:01:18:02:4a:16:d8:41:d6:4e:22:ef:7f:0e:89:59:ac: 82:18:a8:07:d3:10:e3:06:b1:04:ee:ec:75:0b:42:1d:9e:03: 72:6a:29:50 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xrqX36FpK4GJz41nULvyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZGRlNzFiNDFiZmZiMWI1MTZlMDdiMGM2MTM5MWJkZjRk M2JmMTEwHhcNMjYwMTAxMDQxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YmVjMjFkYWJmNzA3NWM4N2QwMWI2MzM1ODA2ZmU2YTY3ZTk4Yjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr63RvLtwFobrQe048Dv2YOlYte0L +VQdQWQSjOZ4MhLbtrINVWENse0Y4evP2h/f1uARoT0BD5MKqvFUegnNWssacOl9 ZKDMY6+WHVlBRIzy5dW6u0ogVHxUaRLqOQk4QwmqXD7jBrYCBOGFkdKhiDcB8HkT Dt82tHqjg17Ne1sXAML2xrzYQjr5+s5EBE5xE+v1HDfez4382R4c0Mdg8HgGVIgi k1g2YC0Ff5mLItyjiU3UnBXynDH/NOo7eLcoL5nhoqrR2rnc2u1KeEK0RJ2fmAuh UW5rt3oMJws62pW0w6S15CD2cRJi/4JBXrvmMwEVOrMkBeuIr7DfPOvLkwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHvsIdq/cHXIfQG2M1gG/mpn6Yt5MB8GA1UdIwQY MBaAFEDd5xtBv/sbUW4HsMYTkb30078RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYt MmJhZGNlNDY2ODUzLzEvZS13aDJyOXdkY2g5QWJZeldBYi1hbWZwaTNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYtMmJhZGNlNDY2ODUz LzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXDxFMA0G CSqGSIb3DQEBCwUAA4IBAQB7gNvZ5kscdB5/ngKaMqmUESZA8y6jzR7DtsqIJ23G NnPBRBuBsD1BmPX1s7RXDYiyiwdtoCrhNeYKoSrWTNKngLdfBm2Y79Rg8B1D3IZL VYo8Eg72lDl7Sg8/wlmZtJEeVc6RxX13vSDtTJXA0X1QqFtLmBOggOHukUwclIkX w9g9EAvMLLXoQOzeTjZFtlg6KghwsJNbypKw0UCG3CP1iE7rAph5yc9kKxWk2abC e2AvXlzR33ZNdkqllSq0sGTKT+UvmiVe51MwxbfrkdlWhwXaj04NQEuq4AEYAkoW 2EHWTiLvfw6JWayCGKgH0xDjBrEE7ux1C0IdngNyailQ -----END CERTIFICATE-----Generated at Fri Jan 9 12:02:30 2026 by rpki-client