This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/Ej1NGALUAyZGkeedSA07ESoqQtI.roa File: Ej1NGALUAyZGkeedSA07ESoqQtI.roa (raw, json) Hash identifier: bVGUYeTkungmGZQJc78ekhzyESu4jsfHGMMaJDPhxpU= Subject key identifier: 12:3D:4D:18:02:D4:03:26:46:91:E7:9D:48:0D:3B:11:2A:2A:42:D2 Certificate issuer: /CN=282e432ed88bec1ad1454449632814d43996b1e0 Certificate serial: 019B78A2C94CAD978FB0742EE6ED42321A1F Authority key identifier: 28:2E:43:2E:D8:8B:EC:1A:D1:45:44:49:63:28:14:D4:39:96:B1:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KC5DLtiL7BrRRURJYygU1DmWseA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/Ej1NGALUAyZGkeedSA07ESoqQtI.roa Signing time: Thu 01 Jan 2026 08:18:12 +0000 ROA not before: Thu 01 Jan 2026 08:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197639 IP address blocks: 91.223.204.0/24 maxlen: 24 2001:67c:620::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.mft rsync://rpki.ripe.net/repository/DEFAULT/KC5DLtiL7BrRRURJYygU1DmWseA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 05:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:c9:4c:ad:97:8f:b0:74:2e:e6:ed:42:32:1a:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=282e432ed88bec1ad1454449632814d43996b1e0 Validity Not Before: Jan 1 08:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=123d4d1802d403264691e79d480d3b112a2a42d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:21:3a:3c:06:ea:32:7e:3c:33:37:6f:7e:87: 4a:64:d7:f0:f9:1a:3c:fb:dd:25:87:ae:41:b6:41: e9:17:31:e2:84:1f:77:b0:aa:0d:1d:f9:b2:39:40: 15:c3:d5:95:3b:ba:a4:cb:98:77:c5:25:d7:87:02: d5:1c:74:02:eb:0f:a4:51:9a:f1:d6:f5:73:44:55: c6:2e:55:00:c2:90:a2:66:01:74:90:4b:42:3a:db: f8:aa:6c:0b:16:af:3a:e7:10:56:93:51:3e:64:57: 98:93:4e:4e:fa:85:89:d7:9e:67:ff:7f:80:fb:c4: 8b:da:84:82:d5:04:eb:56:40:67:b1:b3:01:95:61: 96:33:03:7a:21:ec:6c:dd:e1:d6:13:65:f9:e5:46: 24:37:88:8c:3a:d7:1b:cd:35:c4:3f:14:d9:34:88: bb:dd:bb:db:cf:19:d9:38:ef:c1:89:d1:15:89:1a: 7e:9f:6a:f6:83:eb:4e:d6:3b:54:0f:a1:2f:f2:28: 00:57:ba:d5:6f:e8:1d:04:df:b6:3e:d8:7a:49:08: 91:50:ce:c4:66:16:8b:b1:ad:22:88:de:a7:0b:ba: 8b:5c:15:79:4b:c8:5d:85:03:05:cc:78:26:97:ad: ae:1b:a1:2e:66:8c:52:ce:9e:50:a0:35:d3:3d:b5: 62:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:3D:4D:18:02:D4:03:26:46:91:E7:9D:48:0D:3B:11:2A:2A:42:D2 X509v3 Authority Key Identifier: keyid:28:2E:43:2E:D8:8B:EC:1A:D1:45:44:49:63:28:14:D4:39:96:B1:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KC5DLtiL7BrRRURJYygU1DmWseA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/Ej1NGALUAyZGkeedSA07ESoqQtI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.204.0/24 IPv6: 2001:67c:620::/48 Signature Algorithm: sha256WithRSAEncryption 28:89:50:bc:0d:08:78:ca:6e:02:0d:03:5e:b3:52:d6:4f:68: 7d:15:63:e8:82:1b:8c:47:56:26:66:52:1c:40:97:3b:22:d0: ea:83:05:15:cb:56:87:79:a1:ee:62:be:1c:64:7d:9d:de:ef: 6d:99:56:30:1b:7a:fa:28:6d:4b:81:3b:ff:b1:50:04:0e:46: 79:73:0f:d5:f7:10:4a:21:33:f1:3d:df:93:f8:3f:35:e0:fa: d1:48:8f:9e:8f:96:19:6b:20:e0:3e:b7:b5:c7:78:73:fc:cb: 4c:4c:e0:7e:8c:20:76:4a:38:46:28:84:a1:ec:6f:67:3f:de: 49:c3:78:5c:67:b0:e0:87:1c:80:09:80:18:92:b1:70:99:75: 2b:cb:ac:36:e0:f3:17:38:ec:5d:7e:5b:c4:a4:5f:ab:12:11: 6f:3f:5b:45:ef:b0:0b:d0:78:13:c6:5c:a5:73:ce:70:1b:12: 92:b4:7c:f8:24:24:d1:ef:25:a1:17:e9:ca:34:07:81:17:8b: 25:33:09:43:69:f5:87:2b:0a:eb:60:c9:0f:c6:4f:67:28:a3: ca:8c:06:31:c8:a0:b8:08:c6:fe:12:3a:dd:f3:60:d5:ed:78: b4:48:63:80:09:c0:d5:2a:ec:77:4c:71:cb:ee:94:f7:ea:32: af:67:ad:83 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt4oslMrZePsHQu5u1CMhofMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4MmU0MzJlZDg4YmVjMWFkMTQ1NDQ0OTYzMjgxNGQ0Mzk5 NmIxZTAwHhcNMjYwMTAxMDgxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjNkNGQxODAyZDQwMzI2NDY5MWU3OWQ0ODBkM2IxMTJhMmE0MmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryE6PAbqMn48MzdvfodKZNfw+Ro8 +90lh65BtkHpFzHihB93sKoNHfmyOUAVw9WVO7qky5h3xSXXhwLVHHQC6w+kUZrx 1vVzRFXGLlUAwpCiZgF0kEtCOtv4qmwLFq865xBWk1E+ZFeYk05O+oWJ155n/3+A +8SL2oSC1QTrVkBnsbMBlWGWMwN6Iexs3eHWE2X55UYkN4iMOtcbzTXEPxTZNIi7 3bvbzxnZOO/BidEViRp+n2r2g+tO1jtUD6Ev8igAV7rVb+gdBN+2Pth6SQiRUM7E ZhaLsa0iiN6nC7qLXBV5S8hdhQMFzHgml62uG6EuZoxSzp5QoDXTPbViiQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFBI9TRgC1AMmRpHnnUgNOxEqKkLSMB8GA1UdIwQY MBaAFCguQy7Yi+wa0UVESWMoFNQ5lrHgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0M1REx0aUw3QnJSUlVSSll5Z1UxRG1Xc2VBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9jNjBmMDgtYjI0Yi00ZGM0LWEyN2Mt ZmMwYWE3MmU4ZWFkLzEvRWoxTkdBTFVBeVpHa2VlZFNBMDdFU29xUXRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9jNjBmMDgtYjI0Yi00ZGM0LWEyN2MtZmMwYWE3MmU4ZWFk LzEvS0M1REx0aUw3QnJSUlVSSll5Z1UxRG1Xc2VBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW9/MMA8E AgACMAkDBwAgAQZ8BiAwDQYJKoZIhvcNAQELBQADggEBACiJULwNCHjKbgINA16z UtZPaH0VY+iCG4xHViZmUhxAlzsi0OqDBRXLVod5oe5ivhxkfZ3e722ZVjAbevoo bUuBO/+xUAQORnlzD9X3EEohM/E935P4PzXg+tFIj56PlhlrIOA+t7XHeHP8y0xM 4H6MIHZKOEYohKHsb2c/3knDeFxnsOCHHIAJgBiSsXCZdSvLrDbg8xc47F1+W8Sk X6sSEW8/W0XvsAvQeBPGXKVzznAbEpK0fPgkJNHvJaEX6co0B4EXiyUzCUNp9Ycr CutgyQ/GT2coo8qMBjHIoLgIxv4SOt3zYNXteLRIY4AJwNUq7HdMccvulPfqMq9n rYM= -----END CERTIFICATE-----Generated at Mon Jan 12 16:08:00 2026 by rpki-client