This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/mJ0j47UwFivW9zAPZ7Wpb6242sQ.roa File: mJ0j47UwFivW9zAPZ7Wpb6242sQ.roa (raw, json) Hash identifier: ovh6+isWS+HgWIGH47x4leRVJSZT91OgjJW9sbvcdqA= Subject key identifier: 98:9D:23:E3:B5:30:16:2B:D6:F7:30:0F:67:B5:A9:6F:AD:B8:DA:C4 Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00 Certificate serial: 019B79EC44980514D65906A5915A8B49538C Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/mJ0j47UwFivW9zAPZ7Wpb6242sQ.roa Signing time: Thu 01 Jan 2026 14:18:05 +0000 ROA not before: Thu 01 Jan 2026 14:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57899 IP address blocks: 91.236.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:44:98:05:14:d6:59:06:a5:91:5a:8b:49:53:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00 Validity Not Before: Jan 1 14:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=989d23e3b530162bd6f7300f67b5a96fadb8dac4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:51:9f:1a:7f:6c:5f:c5:db:d7:04:f6:aa:2e: 2c:e7:ab:99:24:3e:8b:d1:d2:7a:8f:4f:ef:33:ff: aa:3a:b0:c0:e7:7e:ab:dc:10:63:c4:b0:82:e5:e9: 89:ab:1e:ea:8d:a4:71:dc:91:5e:87:f2:68:63:a5: 2c:92:8a:2d:d3:12:d8:f7:7c:88:ce:3d:23:51:73: bc:11:08:a0:d1:b9:12:64:48:be:27:43:09:c7:8e: 62:a5:c4:6b:bc:a6:97:58:b9:21:c9:a2:68:ba:46: 61:e6:e1:77:06:9e:c6:bc:24:62:59:20:fd:6c:1e: 4b:ba:be:e6:42:2e:c0:df:33:22:da:67:34:9c:dc: 67:33:45:09:86:d4:b3:94:b1:80:e7:98:5a:ab:76: 98:fa:8d:78:d5:31:72:a9:eb:16:12:dc:6e:76:7e: 81:01:30:28:69:bb:d4:67:a0:6e:7c:dd:17:21:aa: 84:a6:4a:a2:2a:40:5b:aa:7b:82:32:b5:73:a9:e5: 66:ba:ba:3f:fa:2e:85:3b:df:a0:2f:37:d3:4a:a0: 1c:2b:93:d8:b5:62:70:ec:c3:cc:79:cf:a0:b0:bf: d1:3c:8c:a3:3f:33:c1:55:27:b9:77:b4:9f:17:e7: 61:21:d7:81:4b:a6:a9:17:fb:89:2b:53:59:46:a0: 1c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:9D:23:E3:B5:30:16:2B:D6:F7:30:0F:67:B5:A9:6F:AD:B8:DA:C4 X509v3 Authority Key Identifier: keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/mJ0j47UwFivW9zAPZ7Wpb6242sQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.236.135.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:63:3e:fe:7b:0a:98:8b:7b:e5:8c:41:ad:e6:58:83:f2:00: 04:31:cf:61:01:23:eb:2d:b4:f8:ce:43:e0:7e:2a:d4:b9:60: 2e:d2:5d:d7:4c:47:4e:90:bb:c5:e9:6c:1c:ff:95:8e:b9:95: 02:96:df:dd:55:12:ec:01:21:da:d5:0b:84:36:c8:e7:75:7b: 6a:fb:5c:56:00:39:f2:a3:51:3d:8e:af:bc:63:ef:92:f9:a7: 55:91:13:b7:e8:08:4b:d7:67:74:87:b2:3b:7a:3f:95:ec:30: 78:c0:64:24:c0:30:b7:58:77:6d:f3:da:1d:df:8f:7e:0d:94: d4:86:53:7c:0f:27:55:5a:2a:7a:0c:9a:69:38:a5:c2:c9:ef: c1:ef:9a:4d:6e:40:d6:73:f6:90:3f:37:c9:2e:e1:d2:5c:19: 93:45:4d:cd:57:2b:de:43:fa:16:1b:38:b7:48:1f:fe:75:bf: 25:b0:34:04:7d:a8:be:f0:61:ef:60:e7:86:94:3e:06:03:fb: 2f:1c:f1:ed:ba:72:93:1e:52:46:3a:4c:a4:d1:cc:71:02:31: aa:98:49:97:fa:5d:19:c3:d9:ea:07:5f:ef:b0:38:5e:77:a6: 1f:91:50:24:ac:d3:6d:5c:94:05:2d:cd:c3:f9:28:12:a4:57: f9:c2:c0:b0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57ESYBRTWWQalkVqLSVOMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMWRmNjY2N2RhMzhlNTdhMjViMTk0NWZhNDBlNTkzZTVh ZGZhMDAwHhcNMjYwMTAxMTQxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODlkMjNlM2I1MzAxNjJiZDZmNzMwMGY2N2I1YTk2ZmFkYjhkYWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5FGfGn9sX8Xb1wT2qi4s56uZJD6L 0dJ6j0/vM/+qOrDA536r3BBjxLCC5emJqx7qjaRx3JFeh/JoY6Uskoot0xLY93yI zj0jUXO8EQig0bkSZEi+J0MJx45ipcRrvKaXWLkhyaJoukZh5uF3Bp7GvCRiWSD9 bB5Lur7mQi7A3zMi2mc0nNxnM0UJhtSzlLGA55haq3aY+o141TFyqesWEtxudn6B ATAoabvUZ6BufN0XIaqEpkqiKkBbqnuCMrVzqeVmuro/+i6FO9+gLzfTSqAcK5PY tWJw7MPMec+gsL/RPIyjPzPBVSe5d7SfF+dhIdeBS6apF/uJK1NZRqAcmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJidI+O1MBYr1vcwD2e1qW+tuNrEMB8GA1UdIwQY MBaAFM8d9mZ9o45XolsZRfpA5ZPlrfoAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEt OGRmMzYzMzdlNmJjLzEvbUowajQ3VXdGaXZXOXpBUFo3V3BiNjI0MnNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEtOGRmMzYzMzdlNmJj LzEvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+yHMA0G CSqGSIb3DQEBCwUAA4IBAQB8Yz7+ewqYi3vljEGt5liD8gAEMc9hASPrLbT4zkPg firUuWAu0l3XTEdOkLvF6Wwc/5WOuZUClt/dVRLsASHa1QuENsjndXtq+1xWADny o1E9jq+8Y++S+adVkRO36AhL12d0h7I7ej+V7DB4wGQkwDC3WHdt89od349+DZTU hlN8DydVWip6DJppOKXCye/B75pNbkDWc/aQPzfJLuHSXBmTRU3NVyveQ/oWGzi3 SB/+db8lsDQEfai+8GHvYOeGlD4GA/svHPHtunKTHlJGOkyk0cxxAjGqmEmX+l0Z w9nqB1/vsDhed6YfkVAkrNNtXJQFLc3D+SgSpFf5wsCw -----END CERTIFICATE-----Generated at Mon Jan 26 08:03:32 2026 by rpki-client