This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/knQYsypbRhqwvEH3fTnKrdPWqWY.roa File: knQYsypbRhqwvEH3fTnKrdPWqWY.roa (raw, json) Hash identifier: WNEtwLYJf9qeEVFV6iUsuz+sfad0kenK8BH3vda/2QA= Subject key identifier: 92:74:18:B3:2A:5B:46:1A:B0:BC:41:F7:7D:39:CA:AD:D3:D6:A9:66 Certificate issuer: /CN=d1c15f0aec0e336662de9f6371521ce25e8de10f Certificate serial: 019B7D5CC402C7A731B1E3BCBDC90CA21B52 Authority key identifier: D1:C1:5F:0A:EC:0E:33:66:62:DE:9F:63:71:52:1C:E2:5E:8D:E1:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/knQYsypbRhqwvEH3fTnKrdPWqWY.roa Signing time: Fri 02 Jan 2026 06:19:50 +0000 ROA not before: Fri 02 Jan 2026 06:19:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199381 IP address blocks: 91.223.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft rsync://rpki.ripe.net/repository/DEFAULT/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:c4:02:c7:a7:31:b1:e3:bc:bd:c9:0c:a2:1b:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1c15f0aec0e336662de9f6371521ce25e8de10f Validity Not Before: Jan 2 06:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=927418b32a5b461ab0bc41f77d39caadd3d6a966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:53:13:b7:09:82:f1:5d:40:95:58:88:02:a6: 20:33:34:2c:80:e2:2a:40:0d:fa:8b:a5:26:34:37: 48:45:c5:c6:45:70:78:00:b3:9b:da:64:91:1d:9f: 2f:3e:c7:47:24:f2:56:9b:57:fa:71:de:3a:e7:3c: 4a:77:4e:09:99:e0:d7:50:26:1d:db:96:ad:4d:52: 32:0c:6c:d6:9a:5a:40:20:ff:84:a9:d4:d9:d3:0c: b5:dc:ac:ef:dc:6c:37:ed:cf:04:4e:5c:ed:c0:ad: 5a:45:2c:14:2f:00:b3:55:e1:61:88:a2:0a:21:50: 22:15:81:e5:c3:4f:36:73:9d:87:7e:74:a8:66:ef: c8:9a:0b:09:2a:8d:ad:cb:e3:19:ba:23:8e:a7:a9: 66:51:b4:39:60:2d:55:00:66:0c:80:0d:6a:e1:0b: b1:b1:25:d0:49:3a:06:07:35:cd:aa:08:77:da:b2: 1f:03:39:3d:27:d7:c8:bc:e3:48:5e:ef:1d:0d:23: 4b:7e:13:51:5f:25:a0:a4:de:df:f6:50:9a:8b:6a: 01:c4:3c:df:15:e5:0d:b4:fc:9d:0f:3e:c1:2d:c8: fc:e6:fe:66:dd:37:27:65:12:7a:70:cd:97:f3:60: 16:05:42:9f:01:33:c8:53:b2:4c:c5:d6:3b:ea:b4: 25:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:74:18:B3:2A:5B:46:1A:B0:BC:41:F7:7D:39:CA:AD:D3:D6:A9:66 X509v3 Authority Key Identifier: keyid:D1:C1:5F:0A:EC:0E:33:66:62:DE:9F:63:71:52:1C:E2:5E:8D:E1:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/knQYsypbRhqwvEH3fTnKrdPWqWY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.57.0/24 Signature Algorithm: sha256WithRSAEncryption 15:4c:77:c7:88:63:d3:14:ea:5e:8c:12:67:58:18:0c:eb:a8: 6d:b7:ac:75:ad:6d:74:18:df:ae:1d:13:2d:66:9a:2b:41:07: 42:0c:30:9c:5f:61:ae:41:99:11:6f:38:13:ad:e7:80:09:eb: 0c:89:60:07:38:34:37:00:11:db:88:93:08:4d:37:f3:ab:ed: 17:78:b0:09:51:50:9d:00:f4:11:65:c8:62:97:fe:5e:cb:d8: 71:55:48:43:1b:a2:4d:19:fc:d6:e4:f2:2a:cf:a1:33:0b:9e: e7:23:fa:6d:ef:ab:2f:a9:57:68:3a:a8:b6:e8:41:a2:46:a3: 92:d5:a0:08:7f:94:ee:e9:92:8a:28:76:a2:7d:e0:08:24:7f: 47:21:b7:56:0c:b4:35:a1:36:da:5e:36:6f:82:88:a9:b3:c9: f9:89:2e:96:c6:c2:8f:ad:56:13:b2:92:5d:27:75:a4:82:d8: 28:78:94:01:d9:fa:13:eb:8c:bb:12:83:14:e1:bf:e4:de:07: 2d:6c:ad:03:fc:d2:47:e5:e9:12:ea:4f:d9:ab:29:4e:30:68: 99:59:15:f5:b2:f4:2d:a0:40:0a:45:db:1d:2e:12:f8:3e:ab: a0:df:4e:c0:b6:bb:eb:34:50:d0:41:91:a1:38:e7:6b:8b:dd: 9b:87:54:98 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XMQCx6cxseO8vckMohtSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxYzE1ZjBhZWMwZTMzNjY2MmRlOWY2MzcxNTIxY2UyNWU4 ZGUxMGYwHhcNMjYwMTAyMDYxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Mjc0MThiMzJhNWI0NjFhYjBiYzQxZjc3ZDM5Y2FhZGQzZDZhOTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFMTtwmC8V1AlViIAqYgMzQsgOIq QA36i6UmNDdIRcXGRXB4ALOb2mSRHZ8vPsdHJPJWm1f6cd465zxKd04JmeDXUCYd 25atTVIyDGzWmlpAIP+EqdTZ0wy13Kzv3Gw37c8ETlztwK1aRSwULwCzVeFhiKIK IVAiFYHlw082c52HfnSoZu/ImgsJKo2ty+MZuiOOp6lmUbQ5YC1VAGYMgA1q4Qux sSXQSToGBzXNqgh32rIfAzk9J9fIvONIXu8dDSNLfhNRXyWgpN7f9lCai2oBxDzf FeUNtPydDz7BLcj85v5m3TcnZRJ6cM2X82AWBUKfATPIU7JMxdY76rQl5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJJ0GLMqW0YasLxB9305yq3T1qlmMB8GA1UdIwQY MBaAFNHBXwrsDjNmYt6fY3FSHOJejeEPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGNGZkN1d09NMlppM3A5amNWSWM0bDZONFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9jZDIzMWItZmYxZS00YjkzLWE1Yjct ODVkNjM0YzViZDUwLzEva25RWXN5cGJSaHF3dkVIM2ZUbktyZFBXcVdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9jZDIzMWItZmYxZS00YjkzLWE1YjctODVkNjM0YzViZDUw LzEvMGNGZkN1d09NMlppM3A5amNWSWM0bDZONFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW985MA0G CSqGSIb3DQEBCwUAA4IBAQAVTHfHiGPTFOpejBJnWBgM66htt6x1rW10GN+uHRMt ZporQQdCDDCcX2GuQZkRbzgTreeACesMiWAHODQ3ABHbiJMITTfzq+0XeLAJUVCd APQRZchil/5ey9hxVUhDG6JNGfzW5PIqz6EzC57nI/pt76svqVdoOqi26EGiRqOS 1aAIf5Tu6ZKKKHaifeAIJH9HIbdWDLQ1oTbaXjZvgoips8n5iS6WxsKPrVYTspJd J3WkgtgoeJQB2foT64y7EoMU4b/k3gctbK0D/NJH5ekS6k/ZqylOMGiZWRX1svQt oEAKRdsdLhL4Pqug307AtrvrNFDQQZGhOOdri92bh1SY -----END CERTIFICATE-----Generated at Tue Feb 10 06:03:59 2026 by rpki-client