This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/U-i1oEyBuqeV6jZfreY9KrH4m50.roa File: U-i1oEyBuqeV6jZfreY9KrH4m50.roa (raw, json) Hash identifier: L5IQFtrjgg9i37LgVDvIKbkJPMhrCXGXXL5UYx1rh/c= Subject key identifier: 53:E8:B5:A0:4C:81:BA:A7:95:EA:36:5F:AD:E6:3D:2A:B1:F8:9B:9D Certificate issuer: /CN=05c81c8097437cd179f319183c0282ea6cd1ca51 Certificate serial: 019B7BA515EEAE9E0D678180042EA773A877 Authority key identifier: 05:C8:1C:80:97:43:7C:D1:79:F3:19:18:3C:02:82:EA:6C:D1:CA:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BcgcgJdDfNF58xkYPAKC6mzRylE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/U-i1oEyBuqeV6jZfreY9KrH4m50.roa Signing time: Thu 01 Jan 2026 22:19:35 +0000 ROA not before: Thu 01 Jan 2026 22:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58006 IP address blocks: 91.247.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft rsync://rpki.ripe.net/repository/DEFAULT/BcgcgJdDfNF58xkYPAKC6mzRylE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:15:ee:ae:9e:0d:67:81:80:04:2e:a7:73:a8:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05c81c8097437cd179f319183c0282ea6cd1ca51 Validity Not Before: Jan 1 22:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=53e8b5a04c81baa795ea365fade63d2ab1f89b9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:82:f7:64:b1:3a:58:8d:93:d2:35:6c:1e:e0: 83:6f:18:8c:ee:cb:1b:73:46:9c:cf:12:2a:af:ec: 69:e2:56:b0:9e:1e:23:32:54:91:1f:51:3c:92:eb: 66:90:27:1b:e8:95:5e:0d:97:e7:5d:3d:a0:1c:96: 2c:3f:9c:4c:1f:96:c6:14:c3:64:62:b0:08:10:6a: cd:c7:bd:a4:a0:d9:33:72:03:5a:4e:87:10:37:d4: e1:94:13:ec:44:94:b5:8f:cf:92:92:8f:6a:32:6d: 67:bc:1e:6c:2a:d1:84:52:a1:36:0c:f7:03:3c:76: b4:1a:56:6c:10:f2:70:2f:38:da:2d:b8:95:fe:f1: 4d:f6:c8:c5:79:8d:37:cf:cf:c6:0b:1b:6f:7b:c0: b4:ad:9a:f2:01:f9:24:0f:2f:d4:81:1f:4e:dc:1e: 2b:01:70:e5:43:6e:7a:98:75:c8:75:d7:d9:01:d3: 45:aa:a4:9a:0e:6b:eb:46:83:43:d8:e9:11:11:b7: e3:cc:80:26:7c:54:97:fd:65:48:81:09:25:31:2a: 5f:eb:38:0b:49:6e:0e:a0:9e:dd:d8:bb:c2:ba:d7: cc:b5:54:2f:ce:d0:0b:52:b3:09:3c:97:86:f9:41: 2e:f5:cb:58:c9:12:9f:4c:23:e6:08:af:a2:0d:79: d0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:E8:B5:A0:4C:81:BA:A7:95:EA:36:5F:AD:E6:3D:2A:B1:F8:9B:9D X509v3 Authority Key Identifier: keyid:05:C8:1C:80:97:43:7C:D1:79:F3:19:18:3C:02:82:EA:6C:D1:CA:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BcgcgJdDfNF58xkYPAKC6mzRylE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/U-i1oEyBuqeV6jZfreY9KrH4m50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.247.155.0/24 Signature Algorithm: sha256WithRSAEncryption a8:35:ec:0b:7c:f3:31:b2:af:26:80:e2:5a:73:ec:4c:af:0c: d8:6b:69:68:00:15:c2:e7:df:41:8a:60:d6:b1:1f:15:07:2b: af:fd:2b:49:fe:66:2a:f9:35:21:ab:e6:43:3a:c9:8c:6e:bc: 86:9c:fa:18:4f:83:b8:28:96:42:0a:3d:ad:b7:24:1b:b9:1a: 9f:c3:f3:6a:bb:29:40:84:13:aa:29:a5:12:58:9b:49:7b:a2: 06:5a:b7:86:98:aa:3f:70:13:f5:b3:49:e7:17:d6:63:07:99: e6:2b:da:c4:28:31:9a:2c:e5:9d:8d:bb:b3:e6:b6:f3:61:a9: 43:dd:da:ca:9e:69:81:51:58:c0:b4:88:b9:6b:20:6d:b0:3b: a0:63:f1:a8:e5:12:63:23:02:ba:39:ad:20:bd:5b:cc:8a:7c: e3:da:bf:5e:5d:f6:b2:5d:8f:85:8f:bb:d0:c2:dd:3c:c7:7c: ae:ab:ea:14:73:f5:8f:81:a9:b8:e9:58:d0:09:dc:06:62:79: 46:4b:03:e6:8e:2d:d5:15:32:ea:e5:02:ab:4f:b3:a3:ea:81: e3:52:0b:8b:3d:29:8c:68:e7:f1:3e:07:c0:59:40:06:77:d2: 94:b4:d2:19:32:33:03:fd:f9:2e:d8:55:51:f7:61:c6:d0:a6: 2d:2a:db:13 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pRXurp4NZ4GABC6nc6h3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1YzgxYzgwOTc0MzdjZDE3OWYzMTkxODNjMDI4MmVhNmNk MWNhNTEwHhcNMjYwMTAxMjIxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1M2U4YjVhMDRjODFiYWE3OTVlYTM2NWZhZGU2M2QyYWIxZjg5YjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5IL3ZLE6WI2T0jVsHuCDbxiM7ssb c0aczxIqr+xp4lawnh4jMlSRH1E8kutmkCcb6JVeDZfnXT2gHJYsP5xMH5bGFMNk YrAIEGrNx72koNkzcgNaTocQN9ThlBPsRJS1j8+Sko9qMm1nvB5sKtGEUqE2DPcD PHa0GlZsEPJwLzjaLbiV/vFN9sjFeY03z8/GCxtve8C0rZryAfkkDy/UgR9O3B4r AXDlQ256mHXIddfZAdNFqqSaDmvrRoND2OkREbfjzIAmfFSX/WVIgQklMSpf6zgL SW4OoJ7d2LvCutfMtVQvztALUrMJPJeG+UEu9ctYyRKfTCPmCK+iDXnQIwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFPotaBMgbqnleo2X63mPSqx+JudMB8GA1UdIwQY MBaAFAXIHICXQ3zRefMZGDwCgups0cpRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmNnY2dKZERmTkY1OHhrWVBBS0M2bXpSeWxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9kOTMxNTMtNDYwOS00NjcyLTg1YjQt OTc0ZmQyMzliMGVkLzEvVS1pMW9FeUJ1cWVWNmpaZnJlWTlLckg0bTUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9kOTMxNTMtNDYwOS00NjcyLTg1YjQtOTc0ZmQyMzliMGVk LzEvQmNnY2dKZERmTkY1OHhrWVBBS0M2bXpSeWxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/ebMA0G CSqGSIb3DQEBCwUAA4IBAQCoNewLfPMxsq8mgOJac+xMrwzYa2loABXC599BimDW sR8VByuv/StJ/mYq+TUhq+ZDOsmMbryGnPoYT4O4KJZCCj2ttyQbuRqfw/NquylA hBOqKaUSWJtJe6IGWreGmKo/cBP1s0nnF9ZjB5nmK9rEKDGaLOWdjbuz5rbzYalD 3drKnmmBUVjAtIi5ayBtsDugY/Go5RJjIwK6Oa0gvVvMinzj2r9eXfayXY+Fj7vQ wt08x3yuq+oUc/WPgam46VjQCdwGYnlGSwPmji3VFTLq5QKrT7Oj6oHjUguLPSmM aOfxPgfAWUAGd9KUtNIZMjMD/fku2FVR92HG0KYtKtsT -----END CERTIFICATE-----Generated at Fri Jan 2 18:33:59 2026 by rpki-client