This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/eRjL7bmUuZoWQUIbq4eEp3CN-0M.roa File: eRjL7bmUuZoWQUIbq4eEp3CN-0M.roa (raw, json) Hash identifier: y5sRxVzTyv3q+thLaOje2bsBoe1cBCrXQcLT//6Uj0k= Subject key identifier: 79:18:CB:ED:B9:94:B9:9A:16:41:42:1B:AB:87:84:A7:70:8D:FB:43 Certificate issuer: /CN=a951e638a2cb95c68bbc54a2728605b27f570681 Certificate serial: 019B7AC8A8845AD7F398124F63823F5DF781 Authority key identifier: A9:51:E6:38:A2:CB:95:C6:8B:BC:54:A2:72:86:05:B2:7F:57:06:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qVHmOKLLlcaLvFSicoYFsn9XBoE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/eRjL7bmUuZoWQUIbq4eEp3CN-0M.roa Signing time: Thu 01 Jan 2026 18:18:49 +0000 ROA not before: Thu 01 Jan 2026 18:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51885 IP address blocks: 91.223.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft rsync://rpki.ripe.net/repository/DEFAULT/qVHmOKLLlcaLvFSicoYFsn9XBoE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:a8:84:5a:d7:f3:98:12:4f:63:82:3f:5d:f7:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a951e638a2cb95c68bbc54a2728605b27f570681 Validity Not Before: Jan 1 18:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7918cbedb994b99a1641421bab8784a7708dfb43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:08:8c:08:6a:b6:37:61:96:47:28:a5:5b:fa: 40:a4:cc:c9:72:df:ce:9a:a1:b2:1a:60:51:89:17: 32:24:19:57:53:57:a4:4f:dd:7f:69:af:e1:a7:66: e6:b7:f1:e9:80:4f:65:72:b7:a8:9b:bb:e3:9b:1b: f8:8e:ce:33:44:40:9f:f6:38:93:bc:a6:21:b8:9c: 76:8a:66:02:96:2e:23:75:9b:63:82:7b:8b:cb:ef: 2e:00:a0:4d:86:a6:b6:04:28:d2:7a:04:41:07:b8: 78:20:cb:7c:1c:06:5b:9b:2a:55:24:d3:bc:9e:69: da:9b:81:3d:5b:67:05:34:5a:15:87:b5:0a:a4:54: 95:bd:77:9d:02:96:0a:32:05:e3:00:1a:09:b0:a4: c5:b1:a2:80:e9:32:bd:ba:ae:b8:20:ad:19:af:aa: 0b:b0:e4:43:e1:ec:4d:ec:ac:2e:1d:da:43:ab:27: 63:85:ef:71:c5:d3:05:a6:43:37:ba:c5:93:f2:47: e0:00:08:c6:0b:4a:40:60:db:b7:61:49:53:f2:8c: 8e:de:4f:dc:71:79:99:10:71:ad:29:76:ba:bd:37: 58:69:e4:39:66:4f:88:09:52:ec:46:bf:fe:89:e6: 3b:2e:14:37:76:67:be:69:53:9f:de:df:f8:3a:e1: 5a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:18:CB:ED:B9:94:B9:9A:16:41:42:1B:AB:87:84:A7:70:8D:FB:43 X509v3 Authority Key Identifier: keyid:A9:51:E6:38:A2:CB:95:C6:8B:BC:54:A2:72:86:05:B2:7F:57:06:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVHmOKLLlcaLvFSicoYFsn9XBoE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/eRjL7bmUuZoWQUIbq4eEp3CN-0M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.156.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:26:d1:21:8f:88:b6:bc:9c:26:ae:4d:64:97:21:e1:10:19: a7:e5:d2:4e:00:c4:4a:83:01:02:0c:18:1b:24:81:33:82:9d: bd:d2:f1:5a:9c:4a:b1:3d:11:5b:b4:d8:6c:0e:38:ce:b9:58: 51:fb:9b:29:90:20:1f:14:35:59:be:63:35:79:10:d5:b8:f9: a3:f7:a3:3d:56:8c:82:a9:b2:87:10:9c:9e:5d:73:58:1c:25: e8:4d:80:e7:7b:33:fa:43:06:42:c1:fb:5d:55:7d:33:bd:af: a9:02:49:85:32:ae:45:4d:b0:2e:a5:c7:6d:02:13:06:c4:db: 5e:53:15:4f:1d:9b:a3:b6:df:00:10:51:ce:ef:76:5b:e4:35: 37:39:c5:ec:87:c5:05:2e:93:b9:62:54:89:5f:5e:61:37:8c: 5d:74:ea:d5:2e:cd:e5:c9:1c:21:65:93:17:b5:ba:b9:5a:c0: d3:ac:f6:0e:ef:fb:6a:cd:87:0f:76:aa:34:94:4b:fb:05:8d: 70:e3:0f:e7:fa:7c:47:f5:89:f8:66:1e:89:3d:09:af:08:25: a1:9c:46:21:a3:65:3b:a2:c0:a2:81:13:0e:fc:11:2a:d0:06: 92:b3:33:ec:df:60:b9:4c:7a:c5:02:d2:cb:78:74:ea:18:36: 0a:5b:a1:6c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yKiEWtfzmBJPY4I/XfeBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5NTFlNjM4YTJjYjk1YzY4YmJjNTRhMjcyODYwNWIyN2Y1 NzA2ODEwHhcNMjYwMTAxMTgxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OTE4Y2JlZGI5OTRiOTlhMTY0MTQyMWJhYjg3ODRhNzcwOGRmYjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQiMCGq2N2GWRyilW/pApMzJct/O mqGyGmBRiRcyJBlXU1ekT91/aa/hp2bmt/HpgE9lcreom7vjmxv4js4zRECf9jiT vKYhuJx2imYCli4jdZtjgnuLy+8uAKBNhqa2BCjSegRBB7h4IMt8HAZbmypVJNO8 nmnam4E9W2cFNFoVh7UKpFSVvXedApYKMgXjABoJsKTFsaKA6TK9uq64IK0Zr6oL sORD4exN7KwuHdpDqydjhe9xxdMFpkM3usWT8kfgAAjGC0pAYNu3YUlT8oyO3k/c cXmZEHGtKXa6vTdYaeQ5Zk+ICVLsRr/+ieY7LhQ3dme+aVOf3t/4OuFaQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHkYy+25lLmaFkFCG6uHhKdwjftDMB8GA1UdIwQY MBaAFKlR5jiiy5XGi7xUonKGBbJ/VwaBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVZIbU9LTExsY2FMdkZTaWNvWUZzbjlYQm9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9mMDZlNzktZWQyYi00M2Q1LWI0YzEt YWJkZjkwNmM1YWRlLzEvZVJqTDdibVV1Wm9XUVVJYnE0ZUVwM0NOLTBNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9mMDZlNzktZWQyYi00M2Q1LWI0YzEtYWJkZjkwNmM1YWRl LzEvcVZIbU9LTExsY2FMdkZTaWNvWUZzbjlYQm9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9+cMA0G CSqGSIb3DQEBCwUAA4IBAQCNJtEhj4i2vJwmrk1klyHhEBmn5dJOAMRKgwECDBgb JIEzgp290vFanEqxPRFbtNhsDjjOuVhR+5spkCAfFDVZvmM1eRDVuPmj96M9VoyC qbKHEJyeXXNYHCXoTYDnezP6QwZCwftdVX0zva+pAkmFMq5FTbAupcdtAhMGxNte UxVPHZujtt8AEFHO73Zb5DU3OcXsh8UFLpO5YlSJX15hN4xddOrVLs3lyRwhZZMX tbq5WsDTrPYO7/tqzYcPdqo0lEv7BY1w4w/n+nxH9Yn4Zh6JPQmvCCWhnEYho2U7 osCigRMO/BEq0AaSszPs32C5THrFAtLLeHTqGDYKW6Fs -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:07 2026 by rpki-client