This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/eKvvnoPa0Hg5dhkHPP-vXuZ-6qk.roa File: eKvvnoPa0Hg5dhkHPP-vXuZ-6qk.roa (raw, json) Hash identifier: 8b2l6sLxKDcQzB4gntOXXFhK5d0o5i3qf8nwkLcMhwQ= Subject key identifier: 78:AB:EF:9E:83:DA:D0:78:39:76:19:07:3C:FF:AF:5E:E6:7E:EA:A9 Certificate issuer: /CN=07f231365985828d5a9663ed1b440624b24fec13 Certificate serial: 019B797DEFC00702394BEA8939BE979797D5 Authority key identifier: 07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/eKvvnoPa0Hg5dhkHPP-vXuZ-6qk.roa Signing time: Thu 01 Jan 2026 12:17:35 +0000 ROA not before: Thu 01 Jan 2026 12:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 91.199.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:ef:c0:07:02:39:4b:ea:89:39:be:97:97:97:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07f231365985828d5a9663ed1b440624b24fec13 Validity Not Before: Jan 1 12:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=78abef9e83dad078397619073cffaf5ee67eeaa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:d2:81:d5:5e:86:9e:c8:62:35:b1:33:59:0a: 17:17:e4:d5:f4:1c:74:01:d5:6e:d7:03:8e:7e:36: 7c:34:55:4c:65:9b:b1:14:b3:5a:e6:be:56:53:b7: b0:e3:a4:e9:d4:b8:c2:3c:16:cb:4e:81:5a:33:48: 36:15:f1:16:ba:31:e0:b5:7a:e1:fe:2f:82:1a:f5: 4c:24:23:df:ed:33:a5:f9:6a:2e:90:60:ff:17:a2: bb:ae:3e:22:0e:be:71:f2:4a:a3:c9:d0:8e:86:8d: 66:75:fc:6d:49:95:3f:d2:9e:af:c3:34:9f:34:4f: 27:26:70:48:b1:d2:4e:f3:98:42:8b:76:42:c5:90: 01:b1:57:1e:bd:27:b1:35:47:cd:1c:c3:bb:3e:7f: 16:51:75:6d:f3:34:e3:5b:64:95:83:2e:db:31:ff: 5d:67:e8:1b:63:25:2f:32:e2:8e:95:b6:59:49:3b: f3:b6:2a:ca:31:dc:a9:34:76:09:46:c0:92:38:ba: c0:52:c9:64:25:2d:cb:ff:fd:aa:08:09:fb:fb:89: ca:9f:99:97:e4:69:49:e6:74:b7:c4:9d:4b:3c:54: 94:ac:0c:0a:dc:7b:a1:f0:ee:4e:24:e2:94:42:fb: aa:94:57:fe:46:c1:8c:53:59:83:8d:30:77:89:0f: 3d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:AB:EF:9E:83:DA:D0:78:39:76:19:07:3C:FF:AF:5E:E6:7E:EA:A9 X509v3 Authority Key Identifier: keyid:07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/eKvvnoPa0Hg5dhkHPP-vXuZ-6qk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.47.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:b3:12:b4:08:c8:5f:65:47:ce:42:99:2e:45:66:d5:5d:81: a3:26:ca:39:00:8c:c6:f4:c2:ea:c8:5a:05:de:58:71:1e:4f: 8c:19:ab:00:1e:95:3d:70:f8:f9:4d:50:85:8e:1a:99:bf:1f: f5:f6:35:3d:54:ec:a7:96:8a:25:ed:bb:7a:39:12:80:3b:6d: 6f:79:58:0d:c4:5f:e2:c3:8c:19:de:f7:c1:47:b8:96:90:4e: 6f:65:ba:3c:f1:de:fe:dc:97:48:36:4c:b4:d7:66:6e:3a:6e: 85:fa:6f:f0:a9:5e:3e:f1:15:08:98:2c:2c:27:a8:7d:b9:99: 36:38:45:1b:d9:6c:7b:12:3d:a0:0a:fc:8d:f7:fa:8e:4a:de: 10:d8:81:8e:be:44:c1:1f:49:9c:2c:96:cf:53:ed:c5:14:02: 0f:0a:60:ba:06:e8:d2:1d:9c:22:39:7e:93:a7:33:d2:d3:c7: 77:b7:04:dd:63:8d:fc:fe:bf:04:6e:36:06:2d:62:dc:48:77: 52:a0:a5:b3:ce:5b:7b:b6:dc:04:4f:b2:7c:cf:53:ad:99:09: 8b:e8:9e:66:6b:6c:1a:df:21:e0:85:80:a2:76:56:b5:20:e3: 4a:da:f3:1d:48:dc:c8:96:c1:4b:ee:8d:68:74:a5:91:7a:d5: d9:89:68:e8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fe/ABwI5S+qJOb6Xl5fVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZjIzMTM2NTk4NTgyOGQ1YTk2NjNlZDFiNDQwNjI0YjI0 ZmVjMTMwHhcNMjYwMTAxMTIxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OGFiZWY5ZTgzZGFkMDc4Mzk3NjE5MDczY2ZmYWY1ZWU2N2VlYWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8tKB1V6GnshiNbEzWQoXF+TV9Bx0 AdVu1wOOfjZ8NFVMZZuxFLNa5r5WU7ew46Tp1LjCPBbLToFaM0g2FfEWujHgtXrh /i+CGvVMJCPf7TOl+WoukGD/F6K7rj4iDr5x8kqjydCOho1mdfxtSZU/0p6vwzSf NE8nJnBIsdJO85hCi3ZCxZABsVcevSexNUfNHMO7Pn8WUXVt8zTjW2SVgy7bMf9d Z+gbYyUvMuKOlbZZSTvztirKMdypNHYJRsCSOLrAUslkJS3L//2qCAn7+4nKn5mX 5GlJ5nS3xJ1LPFSUrAwK3Huh8O5OJOKUQvuqlFf+RsGMU1mDjTB3iQ89YwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHir756D2tB4OXYZBzz/r17mfuqpMB8GA1UdIwQY MBaAFAfyMTZZhYKNWpZj7RtEBiSyT+wTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQl9JeE5sbUZnbzFhbG1QdEcwUUdKTEpQN0JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9lZjVmYjMtM2U1Ni00Yjc3LWFhYzct MDg1ZmEwYTU2MDUyLzEvZUt2dm5vUGEwSGc1ZGhrSFBQLXZYdVotNnFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9lZjVmYjMtM2U1Ni00Yjc3LWFhYzctMDg1ZmEwYTU2MDUy LzEvQl9JeE5sbUZnbzFhbG1QdEcwUUdKTEpQN0JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8cvMA0G CSqGSIb3DQEBCwUAA4IBAQCNsxK0CMhfZUfOQpkuRWbVXYGjJso5AIzG9MLqyFoF 3lhxHk+MGasAHpU9cPj5TVCFjhqZvx/19jU9VOynlool7bt6ORKAO21veVgNxF/i w4wZ3vfBR7iWkE5vZbo88d7+3JdINky012ZuOm6F+m/wqV4+8RUImCwsJ6h9uZk2 OEUb2Wx7Ej2gCvyN9/qOSt4Q2IGOvkTBH0mcLJbPU+3FFAIPCmC6BujSHZwiOX6T pzPS08d3twTdY438/r8EbjYGLWLcSHdSoKWzzlt7ttwET7J8z1OtmQmL6J5ma2wa 3yHghYCidla1IONK2vMdSNzIlsFL7o1odKWRetXZiWjo -----END CERTIFICATE-----Generated at Fri Jan 2 09:50:11 2026 by rpki-client