This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/29SWESVj_28xdoadJrZYc5E7MTI.roa File: 29SWESVj_28xdoadJrZYc5E7MTI.roa (raw, json) Hash identifier: VWxwiAZM8xvb1YjWbiTGUE8ZtVuKK29DCFOUNiG+8rY= Subject key identifier: DB:D4:96:11:25:63:FF:6F:31:76:86:9D:26:B6:58:73:91:3B:31:32 Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56 Certificate serial: 019B7C804E13A1AA5A3FA81424DDB87464E9 Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/29SWESVj_28xdoadJrZYc5E7MTI.roa Signing time: Fri 02 Jan 2026 02:19:01 +0000 ROA not before: Fri 02 Jan 2026 02:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29226 IP address blocks: 91.229.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:4e:13:a1:aa:5a:3f:a8:14:24:dd:b8:74:64:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56 Validity Not Before: Jan 2 02:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dbd496112563ff6f3176869d26b65873913b3132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:26:07:42:09:87:a1:35:8b:67:af:87:84:3f: 6b:db:a0:33:7a:09:4c:11:e2:db:2a:ab:92:a6:ec: b3:ae:9a:fd:f9:e1:a5:d1:a7:a5:c2:6b:51:f4:69: 14:5f:a0:05:ee:ea:01:79:d5:5f:9a:9d:0a:8e:76: fc:ea:1d:7d:ca:42:de:06:cb:6d:c3:e0:0d:d0:d2: 34:ad:a7:fb:8d:d3:3f:2b:58:9a:bc:7b:d2:7b:50: 35:a4:72:11:2c:b5:5f:07:8f:1b:f7:48:ee:1f:19: ce:94:7e:1f:4f:55:35:ff:2d:7c:d4:fa:bf:26:69: b0:30:85:1c:5c:d9:90:07:42:85:59:73:96:69:ee: b7:3b:dc:46:6a:94:c4:3b:3f:8d:7c:44:41:a0:ab: 33:71:a1:9a:62:6b:0a:98:99:aa:59:fe:27:f8:b6: 6a:55:cd:25:16:98:78:e5:fe:bb:d3:49:67:75:0f: e3:2b:2c:84:f6:b0:81:4d:8a:62:41:d6:b4:38:ed: 6a:5f:62:51:09:4a:8b:3b:aa:be:ea:f2:ec:f3:87: d1:ed:df:c1:d1:1f:58:5d:21:9d:ec:c0:63:d1:9a: 82:45:58:d6:b0:db:66:4d:87:77:a7:81:9a:45:11: c1:bc:f3:a1:d6:b9:dd:61:d4:28:c9:29:41:1a:53: e1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:D4:96:11:25:63:FF:6F:31:76:86:9D:26:B6:58:73:91:3B:31:32 X509v3 Authority Key Identifier: keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/29SWESVj_28xdoadJrZYc5E7MTI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.229.117.0/24 Signature Algorithm: sha256WithRSAEncryption 81:40:0d:c2:0e:de:97:86:57:e4:c6:82:71:cc:b3:a6:dc:14: d6:34:fc:6e:67:5c:f6:dc:44:38:c0:89:a6:2f:1e:72:b5:f4: 15:ef:e5:1c:8e:45:61:8f:ab:40:a5:da:2b:e7:cd:b4:8a:4d: 2d:50:fb:74:ad:b4:4c:f9:fa:b4:bc:92:f4:1d:2f:99:bf:d6: 99:d8:19:eb:82:e0:3b:0b:6e:69:35:a0:77:e1:41:56:a9:fd: f8:07:b0:bc:7b:da:c0:23:e6:4f:45:ef:7b:6b:4b:f4:2c:f4: d3:30:e3:4c:c1:cd:4c:86:83:14:c0:3f:6f:97:1a:09:6c:40: d0:95:87:1c:36:df:05:38:83:73:c8:19:b5:e7:7a:e8:2a:ab: 96:19:d1:46:b1:0b:63:ae:47:8d:e7:05:81:1d:52:54:b0:35: e4:a6:2c:96:94:ca:31:4e:ed:90:55:11:0c:55:d4:ba:dd:88: be:45:29:16:12:41:ef:16:cb:97:d7:44:36:03:ee:97:a6:8f: f1:13:2c:a5:f7:f1:42:5a:e3:60:fd:f3:29:d6:f9:dd:14:48: 07:68:26:34:cf:d8:cb:57:89:fc:70:97:cd:f5:bf:88:7e:7b: 3f:52:e7:d4:ed:bc:6b:b0:40:63:08:7a:64:df:89:82:38:33: c6:d5:5c:f6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gE4ToapaP6gUJN24dGTpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0 ZjVlNTYwHhcNMjYwMTAyMDIxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYmQ0OTYxMTI1NjNmZjZmMzE3Njg2OWQyNmI2NTg3MzkxM2IzMTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSYHQgmHoTWLZ6+HhD9r26AzeglM EeLbKquSpuyzrpr9+eGl0aelwmtR9GkUX6AF7uoBedVfmp0Kjnb86h19ykLeBstt w+AN0NI0raf7jdM/K1iavHvSe1A1pHIRLLVfB48b90juHxnOlH4fT1U1/y181Pq/ JmmwMIUcXNmQB0KFWXOWae63O9xGapTEOz+NfERBoKszcaGaYmsKmJmqWf4n+LZq Vc0lFph45f6700lndQ/jKyyE9rCBTYpiQda0OO1qX2JRCUqLO6q+6vLs84fR7d/B 0R9YXSGd7MBj0ZqCRVjWsNtmTYd3p4GaRRHBvPOh1rndYdQoySlBGlPhkQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNvUlhElY/9vMXaGnSa2WHOROzEyMB8GA1UdIwQY MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt YmE5OGYxMTIyMTIxLzEvMjlTV0VTVmpfMjh4ZG9hZEpyWlljNUU3TVRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+V1MA0G CSqGSIb3DQEBCwUAA4IBAQCBQA3CDt6XhlfkxoJxzLOm3BTWNPxuZ1z23EQ4wImm Lx5ytfQV7+UcjkVhj6tApdor5820ik0tUPt0rbRM+fq0vJL0HS+Zv9aZ2BnrguA7 C25pNaB34UFWqf34B7C8e9rAI+ZPRe97a0v0LPTTMONMwc1MhoMUwD9vlxoJbEDQ lYccNt8FOINzyBm153roKquWGdFGsQtjrkeN5wWBHVJUsDXkpiyWlMoxTu2QVREM VdS63Yi+RSkWEkHvFsuX10Q2A+6Xpo/xEyyl9/FCWuNg/fMp1vndFEgHaCY0z9jL V4n8cJfN9b+Ifns/UufU7bxrsEBjCHpk34mCODPG1Vz2 -----END CERTIFICATE-----Generated at Sat Jan 10 03:55:23 2026 by rpki-client