This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/Ev9DIl3UcKO2QOG-vO3Xbh6afQ8.roa File: Ev9DIl3UcKO2QOG-vO3Xbh6afQ8.roa (raw, json) Hash identifier: imyx+MqhErllzPgURUbLOjPqBlQ0hxwFitun79GI6bQ= Subject key identifier: 12:FF:43:22:5D:D4:70:A3:B6:40:E1:BE:BC:ED:D7:6E:1E:9A:7D:0F Certificate issuer: /CN=e1f3f6dc4610f6c9bbaa4532111738e493b6adf0 Certificate serial: 019B7C1327DD7386A219B7B231193B4B5A51 Authority key identifier: E1:F3:F6:DC:46:10:F6:C9:BB:AA:45:32:11:17:38:E4:93:B6:AD:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/Ev9DIl3UcKO2QOG-vO3Xbh6afQ8.roa Signing time: Fri 02 Jan 2026 00:19:48 +0000 ROA not before: Fri 02 Jan 2026 00:19:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39689 IP address blocks: 91.212.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 06:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:27:dd:73:86:a2:19:b7:b2:31:19:3b:4b:5a:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1f3f6dc4610f6c9bbaa4532111738e493b6adf0 Validity Not Before: Jan 2 00:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=12ff43225dd470a3b640e1bebcedd76e1e9a7d0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:75:1b:64:97:c3:a1:11:86:c0:db:cc:b7:6c: 08:35:46:79:5e:67:9d:8a:f8:21:e1:67:3e:af:1d: ce:5c:45:44:2a:f3:99:66:0c:dd:44:7d:d2:84:74: ef:fe:88:e2:e9:cc:6c:98:b1:0a:ad:82:4a:52:fa: 54:5f:47:38:eb:10:5d:26:ea:21:4c:5f:f7:ab:be: df:71:ca:fe:e2:16:94:5d:08:91:62:a9:bd:28:fb: e8:3d:84:16:71:c4:66:c9:05:6d:9d:46:4d:a2:d1: 73:88:27:83:28:55:fa:52:76:af:df:85:c5:7b:3e: d0:aa:ad:da:f5:ca:72:7f:4e:b9:59:2b:7b:a4:0d: e4:aa:64:f9:b7:e7:63:60:00:33:9a:6a:3f:2f:18: 25:59:44:b5:19:4b:38:b0:14:61:79:fc:e4:87:e2: bb:6e:7f:e3:07:20:b5:5b:cd:b5:11:54:47:69:57: a8:63:51:34:03:d2:43:8a:72:e0:3e:5c:a8:70:e0: fd:85:78:c1:13:6f:55:43:1e:14:bf:1f:be:d7:d6: 72:6a:23:1e:d7:13:45:4f:e9:1d:6b:43:14:be:41: 8d:e8:5f:1d:fb:81:ea:c9:60:87:73:7c:ec:02:29: 9e:20:30:df:d2:a6:a5:bf:28:d9:bd:98:6b:da:34: 97:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:FF:43:22:5D:D4:70:A3:B6:40:E1:BE:BC:ED:D7:6E:1E:9A:7D:0F X509v3 Authority Key Identifier: keyid:E1:F3:F6:DC:46:10:F6:C9:BB:AA:45:32:11:17:38:E4:93:B6:AD:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/Ev9DIl3UcKO2QOG-vO3Xbh6afQ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.4.0/24 Signature Algorithm: sha256WithRSAEncryption 91:87:27:3b:97:6a:91:ef:fe:51:0d:b5:80:00:c1:81:23:2b: 42:6d:ac:75:25:1a:cc:c7:3a:4f:34:68:fa:e8:34:3d:ad:8f: dd:0a:8f:a3:c6:b5:4f:08:79:2d:bf:50:63:6d:19:7b:02:5c: 60:4c:72:19:ab:ea:7e:2b:ac:92:84:35:47:4a:c5:f6:06:9b: 55:45:05:e6:41:e8:94:2a:38:86:6f:43:4c:c6:f2:dc:ab:91: 27:4e:83:a0:41:9f:3b:05:c0:01:e1:5f:17:b0:eb:95:54:14: d7:b2:e5:bd:24:97:a6:5c:df:38:b8:7b:35:17:37:d4:07:ed: bb:fa:a3:74:d0:e4:81:9b:e0:ce:7f:5d:a6:5e:64:40:18:9c: dd:2f:ed:fd:82:82:5a:80:e5:bb:e8:02:49:c4:a4:00:36:2b: c6:ec:c7:71:65:cc:f7:87:3d:14:38:8a:bc:18:6d:9b:4d:4f: 65:40:73:f9:6e:39:b7:32:0a:99:56:e1:37:90:71:84:12:fd: d6:f1:4c:e9:7e:96:e1:69:71:18:85:ab:84:3f:f2:27:02:18: 44:7b:4d:15:99:f5:2f:ee:70:72:60:ed:09:65:e7:19:51:46: 99:0c:81:a6:29:2c:71:29:10:c2:6e:0c:39:33:e2:0a:87:56: 1a:6a:82:8e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Eyfdc4aiGbeyMRk7S1pRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZjNmNmRjNDYxMGY2YzliYmFhNDUzMjExMTczOGU0OTNi NmFkZjAwHhcNMjYwMTAyMDAxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMmZmNDMyMjVkZDQ3MGEzYjY0MGUxYmViY2VkZDc2ZTFlOWE3ZDBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3UbZJfDoRGGwNvMt2wINUZ5Xmed ivgh4Wc+rx3OXEVEKvOZZgzdRH3ShHTv/oji6cxsmLEKrYJKUvpUX0c46xBdJuoh TF/3q77fccr+4haUXQiRYqm9KPvoPYQWccRmyQVtnUZNotFziCeDKFX6Unav34XF ez7Qqq3a9cpyf065WSt7pA3kqmT5t+djYAAzmmo/LxglWUS1GUs4sBRhefzkh+K7 bn/jByC1W821EVRHaVeoY1E0A9JDinLgPlyocOD9hXjBE29VQx4Uvx++19ZyaiMe 1xNFT+kda0MUvkGN6F8d+4HqyWCHc3zsAimeIDDf0qalvyjZvZhr2jSXewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBL/QyJd1HCjtkDhvrzt124emn0PMB8GA1UdIwQY MBaAFOHz9txGEPbJu6pFMhEXOOSTtq3wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGZQMjNFWVE5c203cWtVeUVSYzQ1Sk8ycmZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iMzYxMzItY2E3Ny00NTg0LThkN2It MjkxYjdhZDA5M2JmLzEvRXY5RElsM1VjS08yUU9HLXZPM1hiaDZhZlE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iMzYxMzItY2E3Ny00NTg0LThkN2ItMjkxYjdhZDA5M2Jm LzEvNGZQMjNFWVE5c203cWtVeUVSYzQ1Sk8ycmZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9QEMA0G CSqGSIb3DQEBCwUAA4IBAQCRhyc7l2qR7/5RDbWAAMGBIytCbax1JRrMxzpPNGj6 6DQ9rY/dCo+jxrVPCHktv1BjbRl7AlxgTHIZq+p+K6yShDVHSsX2BptVRQXmQeiU KjiGb0NMxvLcq5EnToOgQZ87BcAB4V8XsOuVVBTXsuW9JJemXN84uHs1FzfUB+27 +qN00OSBm+DOf12mXmRAGJzdL+39goJagOW76AJJxKQANivG7MdxZcz3hz0UOIq8 GG2bTU9lQHP5bjm3MgqZVuE3kHGEEv3W8UzpfpbhaXEYhauEP/InAhhEe00VmfUv 7nByYO0JZecZUUaZDIGmKSxxKRDCbgw5M+IKh1YaaoKO -----END CERTIFICATE-----Generated at Wed Jan 7 10:22:11 2026 by rpki-client