This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/hd5bwKcEpm08QIWCcytv3QQlZzY.roa File: hd5bwKcEpm08QIWCcytv3QQlZzY.roa (raw, json) Hash identifier: ISacRaLyRAgjnsAWpFUYnRjcBj6/iOfbYqamKB5VXnE= Subject key identifier: 85:DE:5B:C0:A7:04:A6:6D:3C:40:85:82:73:2B:6F:DD:04:25:67:36 Certificate issuer: /CN=8dc69c6bbe89e7c0479b617744a4424f66674944 Certificate serial: 019B78A30F187DF33E92D3A8E2EE096FC1B9 Authority key identifier: 8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/hd5bwKcEpm08QIWCcytv3QQlZzY.roa Signing time: Thu 01 Jan 2026 08:18:30 +0000 ROA not before: Thu 01 Jan 2026 08:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199239 IP address blocks: 91.92.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:0f:18:7d:f3:3e:92:d3:a8:e2:ee:09:6f:c1:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8dc69c6bbe89e7c0479b617744a4424f66674944 Validity Not Before: Jan 1 08:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85de5bc0a704a66d3c408582732b6fdd04256736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c3:51:f9:9d:25:18:0c:00:39:61:97:f8:81: aa:50:a2:e4:96:74:b3:11:39:90:6b:36:49:8f:74: 02:b9:cc:d2:d4:31:ad:b7:8f:9d:14:66:f0:05:55: 5b:91:93:d3:21:d3:94:91:22:8c:b7:92:14:2f:44: eb:09:cf:cb:78:5f:fe:44:11:ab:c2:f6:cb:bb:39: ad:c2:f4:94:36:c9:3d:d4:f5:0f:a5:3f:f3:44:d7: 71:33:c9:06:1a:7c:71:09:e2:58:85:67:5d:78:54: ae:cf:dd:a1:5c:8a:38:41:45:b4:61:bb:86:b0:25: c4:5e:e0:3e:09:3e:1c:ba:a2:08:e3:8e:d9:95:80: 8b:ad:7b:ca:56:2a:f2:8e:43:bf:c2:4f:1a:e3:03: 0b:2b:4d:38:98:67:a1:48:8d:8d:b8:90:5b:f7:1b: fd:08:39:31:0d:ef:81:5c:e8:29:32:4d:50:fc:b2: fd:62:22:56:2a:18:ac:ea:85:49:42:da:99:8a:ef: b6:c2:58:9d:c0:3e:7f:f0:c9:31:92:0f:55:15:c2: a5:5e:45:9b:2f:a5:45:a5:6b:e3:5f:75:65:dd:78: 50:ae:c3:e9:d9:55:eb:f6:cb:df:5c:a4:ab:d1:dc: 24:31:41:12:90:22:d1:d4:99:69:7d:45:0e:33:75: 1d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:DE:5B:C0:A7:04:A6:6D:3C:40:85:82:73:2B:6F:DD:04:25:67:36 X509v3 Authority Key Identifier: keyid:8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/hd5bwKcEpm08QIWCcytv3QQlZzY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.92.115.0/24 Signature Algorithm: sha256WithRSAEncryption 43:7e:5e:25:da:80:dd:4f:30:aa:9b:14:72:d0:bc:70:61:2d: 12:54:df:6a:09:f6:2d:50:18:ff:a4:18:5e:c0:64:b8:f6:a8: 3d:16:38:f4:65:04:8f:48:b9:fd:68:f6:98:06:b8:8c:ed:1a: 11:bc:db:d4:f8:78:58:66:b5:50:81:a0:97:01:75:73:8b:6e: 6f:0e:b7:32:29:d7:06:85:fa:1c:85:23:81:ac:9c:89:93:24: d2:4f:5b:19:e6:56:a8:53:74:fc:cf:fc:a8:6a:76:e2:30:3a: 03:1f:9d:55:ff:a0:52:cd:5a:2f:e6:32:be:14:26:a4:a9:c1: 2c:01:c9:78:0b:85:09:57:fa:d8:25:99:53:c9:e6:35:71:d7: 75:30:63:fa:08:01:e0:ce:22:64:05:4e:48:01:06:32:17:75: f5:33:59:18:f2:eb:f7:b5:a9:f6:8c:9e:1e:72:ee:e3:be:f8: 32:2a:11:b9:be:9b:d1:7b:43:07:7f:3c:2e:34:55:ab:f9:44: ac:7f:c2:0b:f2:1b:7a:d8:37:66:c0:d1:08:74:c4:2f:3d:25: 7b:b0:44:2e:83:82:8e:5e:a4:81:5a:73:dc:6b:65:53:2b:0e: b4:40:9b:4a:cd:85:c0:8b:c9:4f:98:7b:ca:79:ba:00:59:69: 51:45:f2:f8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ow8YffM+ktOo4u4Jb8G5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYzY5YzZiYmU4OWU3YzA0NzliNjE3NzQ0YTQ0MjRmNjY2 NzQ5NDQwHhcNMjYwMTAxMDgxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NWRlNWJjMGE3MDRhNjZkM2M0MDg1ODI3MzJiNmZkZDA0MjU2NzM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcNR+Z0lGAwAOWGX+IGqUKLklnSz ETmQazZJj3QCuczS1DGtt4+dFGbwBVVbkZPTIdOUkSKMt5IUL0TrCc/LeF/+RBGr wvbLuzmtwvSUNsk91PUPpT/zRNdxM8kGGnxxCeJYhWddeFSuz92hXIo4QUW0YbuG sCXEXuA+CT4cuqII447ZlYCLrXvKViryjkO/wk8a4wMLK004mGehSI2NuJBb9xv9 CDkxDe+BXOgpMk1Q/LL9YiJWKhis6oVJQtqZiu+2wlidwD5/8Mkxkg9VFcKlXkWb L6VFpWvjX3Vl3XhQrsPp2VXr9svfXKSr0dwkMUESkCLR1JlpfUUOM3Ud0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIXeW8CnBKZtPECFgnMrb90EJWc2MB8GA1UdIwQY MBaAFI3GnGu+iefAR5thd0SkQk9mZ0lEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamNhY2E3Nko1OEJIbTJGM1JLUkNUMlpuU1VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8yM2RiNWMtMWExMC00NGM2LTlkNzct YmI1Y2FhYzJlOTAzLzEvaGQ1YndLY0VwbTA4UUlXQ2N5dHYzUVFsWnpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8yM2RiNWMtMWExMC00NGM2LTlkNzctYmI1Y2FhYzJlOTAz LzEvamNhY2E3Nko1OEJIbTJGM1JLUkNUMlpuU1VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW1xzMA0G CSqGSIb3DQEBCwUAA4IBAQBDfl4l2oDdTzCqmxRy0LxwYS0SVN9qCfYtUBj/pBhe wGS49qg9Fjj0ZQSPSLn9aPaYBriM7RoRvNvU+HhYZrVQgaCXAXVzi25vDrcyKdcG hfochSOBrJyJkyTST1sZ5laoU3T8z/yoanbiMDoDH51V/6BSzVov5jK+FCakqcEs Acl4C4UJV/rYJZlTyeY1cdd1MGP6CAHgziJkBU5IAQYyF3X1M1kY8uv3tan2jJ4e cu7jvvgyKhG5vpvRe0MHfzwuNFWr+USsf8IL8ht62DdmwNEIdMQvPSV7sEQug4KO XqSBWnPca2VTKw60QJtKzYXAi8lPmHvKeboAWWlRRfL4 -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:23 2026 by rpki-client