This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/E3W4jp5zsoikKWLmA1V7bWlcpV4.roa File: E3W4jp5zsoikKWLmA1V7bWlcpV4.roa (raw, json) Hash identifier: YJ9yEvPcrd1MOHEooUf+VZebkz+BFG/oUSCxEMHiKbk= Subject key identifier: 13:75:B8:8E:9E:73:B2:88:A4:29:62:E6:03:55:7B:6D:69:5C:A5:5E Certificate issuer: /CN=0e2e4fd219f5b77ce80cdfaf9e3a6441dec50042 Certificate serial: 019B797F19BE021E6718B24A68CEDA79FE12 Authority key identifier: 0E:2E:4F:D2:19:F5:B7:7C:E8:0C:DF:AF:9E:3A:64:41:DE:C5:00:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/E3W4jp5zsoikKWLmA1V7bWlcpV4.roa Signing time: Thu 01 Jan 2026 12:18:51 +0000 ROA not before: Thu 01 Jan 2026 12:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42214 IP address blocks: 91.246.28.0/24 maxlen: 24 91.246.29.0/24 maxlen: 24 2001:678:47c::/48 maxlen: 48 2001:678:4bc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.mft rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:19:be:02:1e:67:18:b2:4a:68:ce:da:79:fe:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e2e4fd219f5b77ce80cdfaf9e3a6441dec50042 Validity Not Before: Jan 1 12:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1375b88e9e73b288a42962e603557b6d695ca55e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:da:0e:e0:4d:59:43:a1:ec:e9:a3:68:c9:7b: b8:a2:0b:8d:13:77:82:7c:75:e7:7a:a8:51:3e:32: 7d:61:51:a5:7c:2b:8e:44:23:1c:43:d5:23:15:18: b8:c0:47:d9:d9:99:61:94:56:19:1f:8e:16:8e:44: 16:0b:8d:a0:ab:b3:2f:dd:0f:fb:8b:62:e7:b3:e1: 52:ff:ad:bf:ac:c9:1d:b8:a2:42:ee:a5:d4:d4:c9: 5b:84:76:cc:55:46:26:22:ce:a8:81:7d:d7:f9:25: b8:0f:51:81:96:6a:aa:6b:64:57:da:5d:9a:42:3e: 73:c2:19:57:1c:55:c6:d5:a9:03:ff:a2:50:52:51: d7:da:6d:f5:fe:b2:db:f4:55:39:05:15:68:a1:ff: 4c:ee:ee:4d:e7:ef:9c:9a:cd:e9:d5:3f:c0:09:40: 8e:c0:a3:87:f8:a2:ae:27:46:90:6a:18:e4:cf:33: 9f:e4:e4:b9:a8:0a:60:16:f7:6f:e0:35:ee:16:bd: b4:7e:1d:10:a9:fc:1c:3c:fa:2f:a3:6d:4c:5d:29: e7:b6:b7:28:70:b1:96:e3:db:87:5b:3b:75:23:cd: bc:0b:57:88:34:3a:b2:c4:06:75:8e:42:62:86:14: ab:32:9d:38:9a:f5:b7:d2:e4:b3:f1:44:7a:dc:8d: 15:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:75:B8:8E:9E:73:B2:88:A4:29:62:E6:03:55:7B:6D:69:5C:A5:5E X509v3 Authority Key Identifier: keyid:0E:2E:4F:D2:19:F5:B7:7C:E8:0C:DF:AF:9E:3A:64:41:DE:C5:00:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/E3W4jp5zsoikKWLmA1V7bWlcpV4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.246.28.0/23 IPv6: 2001:678:47c::/48 2001:678:4bc::/48 Signature Algorithm: sha256WithRSAEncryption 54:e1:e4:b5:4b:0c:0a:b0:fd:6d:5d:63:d7:74:0e:9a:fb:0e: da:c4:12:24:9d:34:db:8a:34:b4:32:55:14:09:ac:dd:bf:44: c3:50:d9:fe:c0:8b:40:33:9c:b7:be:ea:15:95:56:3e:1c:08: 43:3e:e1:08:ee:57:10:fe:4f:53:b2:a1:c3:dc:bf:a4:f4:30: fc:29:47:2a:c9:a4:5d:ba:9c:60:79:30:b5:c0:9d:de:42:0c: ef:03:22:7d:d9:2d:54:9c:92:8d:cf:c1:69:2b:36:4b:b4:1f: a2:4d:ee:ef:ab:0b:44:21:bb:e6:9a:5b:e2:ed:09:21:42:b4: d1:64:1b:86:54:96:d4:b0:6e:39:a3:c4:e1:87:d3:63:c0:78: 84:bd:03:fb:3e:ac:a2:06:d9:1c:f9:56:07:9b:7f:54:c6:74: 20:b9:b7:8e:28:d8:de:c9:37:20:88:ca:a5:db:aa:6e:be:3b: 03:b0:60:30:5d:50:66:7d:94:4d:2d:b5:a2:8a:a1:d7:14:2d: 69:1b:9d:8c:0f:06:e1:6b:33:b9:3c:48:05:e4:08:e7:97:69: 7c:23:ba:9a:de:36:56:a6:9d:d4:ad:4c:1c:35:3d:74:7e:e1: 1d:17:3b:83:fc:22:c8:d4:b7:d2:ee:69:08:33:97:6b:06:dc: 81:11:c4:2c -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt5fxm+Ah5nGLJKaM7aef4SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMmU0ZmQyMTlmNWI3N2NlODBjZGZhZjllM2E2NDQxZGVj NTAwNDIwHhcNMjYwMTAxMTIxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzc1Yjg4ZTllNzNiMjg4YTQyOTYyZTYwMzU1N2I2ZDY5NWNhNTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutoO4E1ZQ6Hs6aNoyXu4oguNE3eC fHXneqhRPjJ9YVGlfCuORCMcQ9UjFRi4wEfZ2ZlhlFYZH44WjkQWC42gq7Mv3Q/7 i2Lns+FS/62/rMkduKJC7qXU1MlbhHbMVUYmIs6ogX3X+SW4D1GBlmqqa2RX2l2a Qj5zwhlXHFXG1akD/6JQUlHX2m31/rLb9FU5BRVoof9M7u5N5++cms3p1T/ACUCO wKOH+KKuJ0aQahjkzzOf5OS5qApgFvdv4DXuFr20fh0QqfwcPPovo21MXSnntrco cLGW49uHWzt1I828C1eINDqyxAZ1jkJihhSrMp04mvW30uSz8UR63I0VlwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFBN1uI6ec7KIpCli5gNVe21pXKVeMB8GA1UdIwQY MBaAFA4uT9IZ9bd86Azfr546ZEHexQBCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGk1UDBobjF0M3pvRE4tdm5qcGtRZDdGQUVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9lMTEyMjQtNjFjNy00Nzg2LTg2ZTkt MjM4ZmVlNjkyNDMwLzEvRTNXNGpwNXpzb2lrS1dMbUExVjdiV2xjcFY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9lMTEyMjQtNjFjNy00Nzg2LTg2ZTktMjM4ZmVlNjkyNDMw LzEvRGk1UDBobjF0M3pvRE4tdm5qcGtRZDdGQUVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQBW/YcMBgE AgACMBIDBwAgAQZ4BHwDBwAgAQZ4BLwwDQYJKoZIhvcNAQELBQADggEBAFTh5LVL DAqw/W1dY9d0Dpr7DtrEEiSdNNuKNLQyVRQJrN2/RMNQ2f7Ai0AznLe+6hWVVj4c CEM+4QjuVxD+T1OyocPcv6T0MPwpRyrJpF26nGB5MLXAnd5CDO8DIn3ZLVScko3P wWkrNku0H6JN7u+rC0Qhu+aaW+LtCSFCtNFkG4ZUltSwbjmjxOGH02PAeIS9A/s+ rKIG2Rz5Vgebf1TGdCC5t44o2N7JNyCIyqXbqm6+OwOwYDBdUGZ9lE0ttaKKodcU LWkbnYwPBuFrM7k8SAXkCOeXaXwjupreNlamndStTBw1PXR+4R0XO4P8IsjUt9Lu aQgzl2sG3IERxCw= -----END CERTIFICATE-----Generated at Mon Jan 12 03:48:09 2026 by rpki-client