This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/p6fcvhDFcw8Oq1fwe3BO8PpHz3U.roa File: p6fcvhDFcw8Oq1fwe3BO8PpHz3U.roa (raw, json) Hash identifier: 9OCWuqN8cdwaFpWbH6S/GLnMMyvjYjVk46dDsDdpR/Y= Subject key identifier: A7:A7:DC:BE:10:C5:73:0F:0E:AB:57:F0:7B:70:4E:F0:FA:47:CF:75 Certificate issuer: /CN=e31722d79bff4384a597cb544d9e7974490d8734 Certificate serial: 019B7EA7102454D64816BC8D8992A52B368A Authority key identifier: E3:17:22:D7:9B:FF:43:84:A5:97:CB:54:4D:9E:79:74:49:0D:87:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xci15v_Q4Sll8tUTZ55dEkNhzQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/p6fcvhDFcw8Oq1fwe3BO8PpHz3U.roa Signing time: Fri 02 Jan 2026 12:20:36 +0000 ROA not before: Fri 02 Jan 2026 12:20:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63023 IP address blocks: 91.239.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.mft rsync://rpki.ripe.net/repository/DEFAULT/4xci15v_Q4Sll8tUTZ55dEkNhzQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:10:24:54:d6:48:16:bc:8d:89:92:a5:2b:36:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e31722d79bff4384a597cb544d9e7974490d8734 Validity Not Before: Jan 2 12:20:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a7a7dcbe10c5730f0eab57f07b704ef0fa47cf75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:08:fc:cc:1c:72:49:28:62:f3:30:79:b1:c0: e1:b6:4d:db:9a:e6:ac:4b:b9:27:bd:9d:ab:ae:67: 63:1d:f7:27:82:c9:e1:05:11:a0:4f:de:e6:ba:b8: 2d:38:7f:4c:7f:9f:5f:a8:31:82:14:c6:a4:cc:32: 68:3e:81:bb:cd:5c:36:b7:d0:2a:b8:66:b3:46:77: 2c:09:30:1b:30:f3:71:b6:fc:bf:5a:a2:2e:11:d4: d3:7e:1c:e0:52:f4:91:4b:8f:4b:af:73:be:5a:58: bc:5c:94:54:dd:17:83:8b:e1:52:7c:65:e4:52:d5: 54:4a:69:3c:20:e1:d4:8f:00:c0:b5:32:3f:31:f4: 8f:4e:db:bc:fb:b2:00:37:35:8b:dc:ed:01:cb:2e: 9d:65:c7:07:ff:be:24:24:17:31:cc:50:03:3a:da: 4e:6f:31:39:c5:ef:87:d0:2b:b1:3b:4b:64:71:68: d6:44:5f:5c:88:92:9c:8c:7a:ac:ea:18:c7:9c:a1: 2d:1a:7a:16:c3:20:7c:a3:f8:c9:28:18:77:94:e5: af:be:3c:34:35:13:d7:76:d6:b1:1d:0a:45:37:9d: 9f:34:46:41:c5:79:6f:c0:db:86:a7:9f:f4:18:4c: 38:39:19:96:88:9c:a6:f9:04:6e:a9:8b:f7:15:e2: 86:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:A7:DC:BE:10:C5:73:0F:0E:AB:57:F0:7B:70:4E:F0:FA:47:CF:75 X509v3 Authority Key Identifier: keyid:E3:17:22:D7:9B:FF:43:84:A5:97:CB:54:4D:9E:79:74:49:0D:87:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xci15v_Q4Sll8tUTZ55dEkNhzQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/p6fcvhDFcw8Oq1fwe3BO8PpHz3U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.239.53.0/24 Signature Algorithm: sha256WithRSAEncryption c0:8c:49:d7:e3:c1:a3:fa:91:fc:50:7b:a5:40:12:e8:61:6a: 2c:cc:65:01:86:12:c7:15:81:4d:1f:1e:e1:dd:00:aa:36:bc: 89:84:90:8e:d3:6f:9a:3f:19:c7:2f:1e:14:ea:6b:12:86:f3: d1:13:1a:24:ee:b5:b0:2f:17:25:a6:c1:fc:b0:db:0b:31:26: 33:74:75:cd:1a:18:29:f2:86:ed:a2:95:df:a3:e6:13:ee:c7: e9:45:45:10:37:ec:a6:cb:64:4e:24:e6:d6:2d:a7:ac:9b:4a: e6:eb:4d:a5:64:cb:ed:57:ad:79:f3:e0:67:51:1f:8d:dd:52: f7:aa:e8:3a:48:72:7d:b4:3f:4f:57:4b:9c:8f:d6:72:d4:ce: 52:86:cf:b3:04:d0:12:14:4c:e5:55:9e:8f:d1:43:a8:69:77: 2d:7b:02:4b:ad:9c:6b:05:cd:da:83:9c:b4:dc:01:52:b9:e7: 5c:22:ca:e0:88:91:3f:e8:65:a4:c0:a6:14:69:35:5e:e2:41: a4:0e:13:0a:c3:f7:48:86:5b:b4:d4:73:76:0b:c0:4a:88:77: b5:27:30:94:55:e3:52:d4:66:41:c7:04:a1:b1:9c:66:e6:b8: d1:11:b0:57:b7:2e:60:92:61:71:87:46:66:50:83:2a:e4:ca: 65:62:12:0a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pxAkVNZIFryNiZKlKzaKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMTcyMmQ3OWJmZjQzODRhNTk3Y2I1NDRkOWU3OTc0NDkw ZDg3MzQwHhcNMjYwMTAyMTIyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhN2E3ZGNiZTEwYzU3MzBmMGVhYjU3ZjA3YjcwNGVmMGZhNDdjZjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQj8zBxySShi8zB5scDhtk3bmuas S7knvZ2rrmdjHfcngsnhBRGgT97murgtOH9Mf59fqDGCFMakzDJoPoG7zVw2t9Aq uGazRncsCTAbMPNxtvy/WqIuEdTTfhzgUvSRS49Lr3O+Wli8XJRU3ReDi+FSfGXk UtVUSmk8IOHUjwDAtTI/MfSPTtu8+7IANzWL3O0Byy6dZccH/74kJBcxzFADOtpO bzE5xe+H0CuxO0tkcWjWRF9ciJKcjHqs6hjHnKEtGnoWwyB8o/jJKBh3lOWvvjw0 NRPXdtaxHQpFN52fNEZBxXlvwNuGp5/0GEw4ORmWiJym+QRuqYv3FeKGsQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKen3L4QxXMPDqtX8HtwTvD6R891MB8GA1UdIwQY MBaAFOMXIteb/0OEpZfLVE2eeXRJDYc0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHhjaTE1dl9RNFNsbDh0VVRaNTVkRWtOaHpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iNTU1OWUtOTUwYi00OGY0LWEyYWIt YjI2ZjFhNzBhZjBkLzEvcDZmY3ZoREZjdzhPcTFmd2UzQk84UHBIejNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9iNTU1OWUtOTUwYi00OGY0LWEyYWItYjI2ZjFhNzBhZjBk LzEvNHhjaTE1dl9RNFNsbDh0VVRaNTVkRWtOaHpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+81MA0G CSqGSIb3DQEBCwUAA4IBAQDAjEnX48Gj+pH8UHulQBLoYWoszGUBhhLHFYFNHx7h 3QCqNryJhJCO02+aPxnHLx4U6msShvPRExok7rWwLxclpsH8sNsLMSYzdHXNGhgp 8obtopXfo+YT7sfpRUUQN+ymy2ROJObWLaesm0rm602lZMvtV6158+BnUR+N3VL3 qug6SHJ9tD9PV0ucj9Zy1M5Shs+zBNASFEzlVZ6P0UOoaXctewJLrZxrBc3ag5y0 3AFSuedcIsrgiJE/6GWkwKYUaTVe4kGkDhMKw/dIhlu01HN2C8BKiHe1JzCUVeNS 1GZBxwShsZxm5rjREbBXty5gkmFxh0ZmUIMq5MplYhIK -----END CERTIFICATE-----Generated at Mon Jan 19 18:02:09 2026 by rpki-client