This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/EWm46AI1rMUSMZthGRFJLKzdg5w.roa File: EWm46AI1rMUSMZthGRFJLKzdg5w.roa (raw, json) Hash identifier: VkQfmMtNp47GhBpBHPy5YMBbYpA58g2YnMi7hmT4lRU= Subject key identifier: 11:69:B8:E8:02:35:AC:C5:12:31:9B:61:19:11:49:2C:AC:DD:83:9C Certificate issuer: /CN=69f1a6b4804bb6a3854a44e1069f257267417805 Certificate serial: 019B7CECD807F6078D8311906A3F35D01E28 Authority key identifier: 69:F1:A6:B4:80:4B:B6:A3:85:4A:44:E1:06:9F:25:72:67:41:78:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afGmtIBLtqOFSkThBp8lcmdBeAU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/EWm46AI1rMUSMZthGRFJLKzdg5w.roa Signing time: Fri 02 Jan 2026 04:17:35 +0000 ROA not before: Fri 02 Jan 2026 04:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51580 IP address blocks: 91.220.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft rsync://rpki.ripe.net/repository/DEFAULT/afGmtIBLtqOFSkThBp8lcmdBeAU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:d8:07:f6:07:8d:83:11:90:6a:3f:35:d0:1e:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f1a6b4804bb6a3854a44e1069f257267417805 Validity Not Before: Jan 2 04:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1169b8e80235acc512319b611911492cacdd839c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e7:0b:f7:2d:72:f5:8e:61:2b:e8:e4:57:54: 63:05:e0:02:0f:49:de:58:a0:24:72:f9:72:8c:7a: e7:67:77:b6:a1:d3:5c:51:0d:ec:b9:6d:ed:73:ed: b8:cb:44:ad:b9:ee:2b:b2:de:56:75:db:66:3b:9e: 64:99:c2:b5:cd:b9:d1:6e:78:13:b4:c0:cf:da:35: f4:c0:9d:81:3c:83:61:be:2a:e5:0c:92:3f:ed:34: 48:76:2b:9b:fe:24:7b:a1:b2:4d:04:e3:8b:d6:5f: 9e:e5:43:9e:98:6d:fb:9b:e9:0b:60:e8:53:82:f5: e0:72:5b:b6:b5:e1:98:27:10:20:e1:1b:5f:7c:3c: 37:ec:ea:84:94:d7:15:8a:6f:6b:f7:b0:d4:01:f4: 21:d1:c2:57:f6:5f:aa:fe:e5:02:f8:a4:93:88:6d: c6:4f:c2:27:72:92:85:70:2a:44:f0:cd:c5:ad:92: 72:0a:2e:90:e2:38:52:34:c7:4a:10:3f:b6:f4:19: fb:bd:59:51:9f:c1:d2:42:8e:f7:69:46:a8:44:8f: 1f:99:1f:65:d5:ea:b4:0d:48:e3:43:1c:18:ed:7c: d5:ba:76:3c:83:45:fc:78:1d:8a:8f:c0:69:03:cf: 17:12:c4:e2:f5:e5:2e:fc:01:44:c6:3c:d7:59:f5: 2e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:69:B8:E8:02:35:AC:C5:12:31:9B:61:19:11:49:2C:AC:DD:83:9C X509v3 Authority Key Identifier: keyid:69:F1:A6:B4:80:4B:B6:A3:85:4A:44:E1:06:9F:25:72:67:41:78:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afGmtIBLtqOFSkThBp8lcmdBeAU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/EWm46AI1rMUSMZthGRFJLKzdg5w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.220.83.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:da:37:0d:72:da:bc:57:48:27:ba:58:da:5b:b9:ae:6c:e3: 39:a8:37:ef:05:70:1f:7b:87:8a:23:17:7c:57:e9:56:45:7f: f9:82:42:12:aa:74:14:0c:b7:59:37:5e:e9:60:d1:d3:c6:70: b9:c1:5d:92:dd:52:92:0c:db:7f:fc:10:62:14:ed:1d:a6:2b: 0f:3e:cb:ab:07:b5:96:87:92:62:df:7c:c7:09:4d:2e:6f:e4: e4:cb:e4:96:e7:63:ec:3c:0b:f8:75:e3:fe:ca:f6:f1:5c:68: 52:f0:f1:2b:f8:93:7e:16:63:7a:17:5f:93:dc:40:99:ba:05: e7:83:51:4d:3f:ba:41:e9:d0:d3:93:d7:2d:b6:ba:24:7d:da: 3a:ab:b1:40:e0:4f:1f:4f:f8:3c:01:19:c2:d1:e9:db:07:5c: 41:2e:b2:1c:4f:e1:57:c7:49:57:f8:6c:1d:32:c8:2f:ba:cc: 8b:64:dd:f4:4f:2a:e7:4a:8d:ad:18:e5:8a:53:e9:58:cf:c2: 26:32:2f:2b:5c:38:b0:1b:27:19:9c:91:e2:42:b6:41:aa:f1: 34:b0:49:6e:2e:29:76:1a:72:51:11:58:f3:35:97:8c:40:21: 15:ab:36:ce:85:43:41:d8:fa:f1:40:a4:fe:e3:c1:a4:b5:bb: e6:4f:1d:34 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87NgH9geNgxGQaj810B4oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZjFhNmI0ODA0YmI2YTM4NTRhNDRlMTA2OWYyNTcyNjc0 MTc4MDUwHhcNMjYwMTAyMDQxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTY5YjhlODAyMzVhY2M1MTIzMTliNjExOTExNDkyY2FjZGQ4MzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+cL9y1y9Y5hK+jkV1RjBeACD0ne WKAkcvlyjHrnZ3e2odNcUQ3suW3tc+24y0Stue4rst5WddtmO55kmcK1zbnRbngT tMDP2jX0wJ2BPINhvirlDJI/7TRIdiub/iR7obJNBOOL1l+e5UOemG37m+kLYOhT gvXgclu2teGYJxAg4RtffDw37OqElNcVim9r97DUAfQh0cJX9l+q/uUC+KSTiG3G T8IncpKFcCpE8M3FrZJyCi6Q4jhSNMdKED+29Bn7vVlRn8HSQo73aUaoRI8fmR9l 1eq0DUjjQxwY7XzVunY8g0X8eB2Kj8BpA88XEsTi9eUu/AFExjzXWfUuZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBFpuOgCNazFEjGbYRkRSSys3YOcMB8GA1UdIwQY MBaAFGnxprSAS7ajhUpE4QafJXJnQXgFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWZHbXRJQkx0cU9GU2tUaEJwOGxjbWRCZUFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8zZjFmMmUtNWM1Mi00ZmIwLWI1Mzgt MTczNjZmZjk2Mzc5LzEvRVdtNDZBSTFyTVVTTVp0aEdSRkpMS3pkZzV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi8zZjFmMmUtNWM1Mi00ZmIwLWI1MzgtMTczNjZmZjk2Mzc5 LzEvYWZHbXRJQkx0cU9GU2tUaEJwOGxjbWRCZUFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9xTMA0G CSqGSIb3DQEBCwUAA4IBAQBM2jcNctq8V0gnuljaW7mubOM5qDfvBXAfe4eKIxd8 V+lWRX/5gkISqnQUDLdZN17pYNHTxnC5wV2S3VKSDNt//BBiFO0dpisPPsurB7WW h5Ji33zHCU0ub+Tky+SW52PsPAv4deP+yvbxXGhS8PEr+JN+FmN6F1+T3ECZugXn g1FNP7pB6dDTk9cttrokfdo6q7FA4E8fT/g8ARnC0enbB1xBLrIcT+FXx0lX+Gwd MsgvusyLZN30TyrnSo2tGOWKU+lYz8ImMi8rXDiwGycZnJHiQrZBqvE0sEluLil2 GnJREVjzNZeMQCEVqzbOhUNB2PrxQKT+48GktbvmTx00 -----END CERTIFICATE-----Generated at Tue Feb 10 00:28:50 2026 by rpki-client