This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/E0RxxjzRl6KI64LFqtZcLSw2L2k.roa File: E0RxxjzRl6KI64LFqtZcLSw2L2k.roa (raw, json) Hash identifier: +o4tGG4s2zr/f/sl2ZygwSP9jX+reoSK5d2HJjcm+m4= Subject key identifier: 13:44:71:C6:3C:D1:97:A2:88:EB:82:C5:AA:D6:5C:2D:2C:36:2F:69 Certificate issuer: /CN=ece6498d174adf5c89a365c2d1e477dcf24f982e Certificate serial: 019B78A262C7A20A5510738EA8CCAFCF13B2 Authority key identifier: EC:E6:49:8D:17:4A:DF:5C:89:A3:65:C2:D1:E4:77:DC:F2:4F:98:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7OZJjRdK31yJo2XC0eR33PJPmC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/E0RxxjzRl6KI64LFqtZcLSw2L2k.roa Signing time: Thu 01 Jan 2026 08:17:46 +0000 ROA not before: Thu 01 Jan 2026 08:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198949 IP address blocks: 91.212.189.0/24 maxlen: 24 198.202.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.mft rsync://rpki.ripe.net/repository/DEFAULT/7OZJjRdK31yJo2XC0eR33PJPmC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:62:c7:a2:0a:55:10:73:8e:a8:cc:af:cf:13:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ece6498d174adf5c89a365c2d1e477dcf24f982e Validity Not Before: Jan 1 08:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=134471c63cd197a288eb82c5aad65c2d2c362f69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:18:8b:b2:65:17:3d:dd:33:91:f3:3d:71:b7: c2:dc:9d:b8:37:3d:95:38:31:62:e9:b8:80:3e:34: 8e:39:1f:40:36:e9:18:75:c0:98:fd:01:40:f5:88: 01:e9:1f:12:55:a8:fd:8b:6f:e4:22:bf:d6:99:d7: ca:61:34:2b:ab:79:c4:f1:34:d1:55:95:2a:b6:85: 5d:03:16:6e:0d:27:6c:2a:16:08:e7:07:04:9b:eb: 89:26:03:42:43:aa:2a:d9:cd:a2:2c:1a:87:5f:f6: c0:95:35:46:b6:86:9b:cf:f8:ab:bc:c1:e0:ba:fa: 30:31:93:5b:6c:cc:1b:7a:82:b8:9e:33:27:1d:63: 03:cf:49:eb:3c:68:b8:20:fe:23:e6:20:63:f5:5e: a3:d5:6c:6a:5a:98:da:d1:f0:05:de:f2:14:b4:38: 62:f0:ba:8a:08:23:5e:89:39:20:11:eb:61:5d:16: 2b:3a:8a:96:18:82:96:b5:cb:c7:46:9a:f5:ff:08: 63:80:ec:0e:4b:04:0b:32:3e:39:fe:00:78:e5:78: 55:a7:5c:00:1e:97:20:60:64:6e:06:16:fd:36:24: e0:73:2a:5c:a4:6f:63:32:7d:ea:a4:06:d8:8b:a6: 72:0e:46:cb:18:ce:77:b2:e6:a4:ee:af:ea:a6:d6: 7a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:44:71:C6:3C:D1:97:A2:88:EB:82:C5:AA:D6:5C:2D:2C:36:2F:69 X509v3 Authority Key Identifier: keyid:EC:E6:49:8D:17:4A:DF:5C:89:A3:65:C2:D1:E4:77:DC:F2:4F:98:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7OZJjRdK31yJo2XC0eR33PJPmC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/E0RxxjzRl6KI64LFqtZcLSw2L2k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.189.0/24 198.202.22.0/24 Signature Algorithm: sha256WithRSAEncryption 87:36:20:d2:18:26:af:b9:20:0c:c0:af:af:7d:2a:a9:77:b7: 63:c7:9a:9b:a3:92:40:02:01:f7:f9:42:b3:6a:2c:8f:90:c1: 16:e6:71:24:d6:5f:08:8f:a9:50:68:3a:0a:05:4b:67:91:65: 69:d1:ad:a2:f4:76:7b:cf:7b:d0:d9:b2:64:0d:3f:d8:96:61: a2:6a:b9:10:75:63:5a:bb:ac:b9:b3:b5:f3:78:77:e4:a4:60: 5e:c7:67:64:80:73:bf:87:c8:db:a7:e8:6a:0c:d9:1a:7c:71: e0:27:90:4b:1f:23:e0:8e:26:b0:33:b0:26:2b:c3:bf:8b:2a: ee:16:ef:1f:a2:23:d7:36:82:b1:2e:2a:c0:ad:22:7d:c7:1b: a9:6e:07:fa:27:27:72:42:6d:c3:fe:51:33:6a:7e:29:b2:db: c2:b6:63:e9:a3:bc:d9:56:0f:bc:1e:b6:2c:08:d7:61:7e:a6: 39:dc:74:ff:3f:b6:40:05:28:7e:b3:10:1a:98:c4:f2:db:46: d0:22:43:40:59:87:8f:4f:3a:00:41:c5:5f:6c:46:f2:af:99: 21:21:5a:72:c1:1a:1d:d7:b7:a3:f4:43:85:bb:0a:9f:41:78: bc:69:76:7e:f1:6a:f7:ad:04:26:f5:5f:ab:ee:15:51:2e:4f: a1:a8:6b:4f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4omLHogpVEHOOqMyvzxOyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjZTY0OThkMTc0YWRmNWM4OWEzNjVjMmQxZTQ3N2RjZjI0 Zjk4MmUwHhcNMjYwMTAxMDgxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzQ0NzFjNjNjZDE5N2EyODhlYjgyYzVhYWQ2NWMyZDJjMzYyZjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhiLsmUXPd0zkfM9cbfC3J24Nz2V ODFi6biAPjSOOR9ANukYdcCY/QFA9YgB6R8SVaj9i2/kIr/WmdfKYTQrq3nE8TTR VZUqtoVdAxZuDSdsKhYI5wcEm+uJJgNCQ6oq2c2iLBqHX/bAlTVGtoabz/irvMHg uvowMZNbbMwbeoK4njMnHWMDz0nrPGi4IP4j5iBj9V6j1WxqWpja0fAF3vIUtDhi 8LqKCCNeiTkgEethXRYrOoqWGIKWtcvHRpr1/whjgOwOSwQLMj45/gB45XhVp1wA HpcgYGRuBhb9NiTgcypcpG9jMn3qpAbYi6ZyDkbLGM53suak7q/qptZ6mwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBNEccY80ZeiiOuCxarWXC0sNi9pMB8GA1UdIwQY MBaAFOzmSY0XSt9ciaNlwtHkd9zyT5guMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN09aSmpSZEszMXlKbzJYQzBlUjMzUEpQbUM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy84YWJiNTgtZjMwYy00ZjNiLWI5OTIt OWJlY2MxMzZjYzcxLzEvRTBSeHhqelJsNktJNjRMRnF0WmNMU3cyTDJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy84YWJiNTgtZjMwYy00ZjNiLWI5OTItOWJlY2MxMzZjYzcx LzEvN09aSmpSZEszMXlKbzJYQzBlUjMzUEpQbUM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9S9AwQA xsoWMA0GCSqGSIb3DQEBCwUAA4IBAQCHNiDSGCavuSAMwK+vfSqpd7djx5qbo5JA AgH3+UKzaiyPkMEW5nEk1l8Ij6lQaDoKBUtnkWVp0a2i9HZ7z3vQ2bJkDT/YlmGi arkQdWNau6y5s7XzeHfkpGBex2dkgHO/h8jbp+hqDNkafHHgJ5BLHyPgjiawM7Am K8O/iyruFu8foiPXNoKxLirArSJ9xxupbgf6JydyQm3D/lEzan4pstvCtmPpo7zZ Vg+8HrYsCNdhfqY53HT/P7ZABSh+sxAamMTy20bQIkNAWYePTzoAQcVfbEbyr5kh IVpywRod17ej9EOFuwqfQXi8aXZ+8Wr3rQQm9V+r7hVRLk+hqGtP -----END CERTIFICATE-----Generated at Wed Jan 7 22:29:26 2026 by rpki-client