This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/v5IXCnTZ04y2d9WWLRJA3XUiJ2Q.roa File: v5IXCnTZ04y2d9WWLRJA3XUiJ2Q.roa (raw, json) Hash identifier: XiQ/nHqmOBxj0EoQgjKCVpu4MAjbfP9RThmf0ShdsEc= Subject key identifier: BF:92:17:0A:74:D9:D3:8C:B6:77:D5:96:2D:12:40:DD:75:22:27:64 Certificate issuer: /CN=d2abab75e746db1ecaa998759900399485093027 Certificate serial: 019B7910BEFE14AC11E51763B6B66995D538 Authority key identifier: D2:AB:AB:75:E7:46:DB:1E:CA:A9:98:75:99:00:39:94:85:09:30:27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/v5IXCnTZ04y2d9WWLRJA3XUiJ2Q.roa Signing time: Thu 01 Jan 2026 10:18:19 +0000 ROA not before: Thu 01 Jan 2026 10:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198771 IP address blocks: 91.239.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.crl rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:be:fe:14:ac:11:e5:17:63:b6:b6:69:95:d5:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2abab75e746db1ecaa998759900399485093027 Validity Not Before: Jan 1 10:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf92170a74d9d38cb677d5962d1240dd75222764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:75:fd:06:08:c4:e0:d7:da:27:61:2e:3b:e9: 2f:08:77:ae:49:2a:a9:02:b8:02:99:17:83:aa:5a: 85:a3:65:28:73:3d:02:63:65:d1:19:29:eb:e7:99: d0:fe:66:41:ed:1e:da:a6:eb:79:02:63:0b:5e:f4: e8:83:0b:ea:03:2c:4e:7d:ef:d5:35:89:82:6f:58: c3:1c:ef:8d:09:a8:96:4d:49:68:33:23:8e:38:78: 75:ce:57:e4:96:7e:0c:4d:01:e1:5f:e2:11:1e:1e: 8e:1c:9b:c0:c8:6b:82:85:ed:e1:7b:9b:bf:6a:7a: 14:64:c9:22:0f:d3:2a:f7:43:b4:91:0e:96:b7:0a: a6:ce:c0:42:5a:7e:df:e6:1b:e3:05:12:83:fe:8e: 52:35:94:de:d1:71:4a:e9:e4:38:80:a1:7f:e1:bb: 65:2f:1e:f9:d7:bc:86:23:ce:4a:94:1d:0c:b5:06: 3a:b3:cd:44:f9:b6:70:9f:6f:aa:ad:96:38:fc:f9: 0c:55:d3:ff:a2:0c:05:6d:bc:98:3c:24:b3:4d:bc: ed:0b:8e:86:ae:12:e1:5c:d0:fb:68:55:19:e6:27: bc:07:3e:d0:d1:c9:58:24:70:b4:ce:8b:6e:90:09: 8a:af:5b:b9:4c:6c:e6:c7:b0:26:30:d3:e6:c5:42: 88:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:92:17:0A:74:D9:D3:8C:B6:77:D5:96:2D:12:40:DD:75:22:27:64 X509v3 Authority Key Identifier: keyid:D2:AB:AB:75:E7:46:DB:1E:CA:A9:98:75:99:00:39:94:85:09:30:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/v5IXCnTZ04y2d9WWLRJA3XUiJ2Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.239.13.0/24 Signature Algorithm: sha256WithRSAEncryption 86:a5:34:9c:b7:6b:8c:b5:86:ec:b4:1f:9f:e4:b4:d6:b7:e3: ee:f8:21:2d:5e:af:93:3d:95:91:6b:ba:32:ae:3d:72:63:cd: 75:f8:dc:41:0e:87:cc:a4:76:17:cb:bd:5d:dd:8b:5d:7e:57: 32:9e:94:1f:67:09:57:f9:01:e6:1c:af:64:02:0c:42:20:e5: 74:60:c0:73:bd:9f:ff:69:52:b2:6e:aa:79:8d:5d:86:92:27: d6:e8:9a:17:13:f6:38:3d:08:89:f3:3b:6d:92:56:48:1c:ba: fc:a6:2f:5b:31:7d:9a:09:2c:fb:ea:de:5f:29:95:d9:41:c5: d2:a8:79:9c:d1:52:a7:f0:48:94:cd:f4:2f:b9:3d:57:2f:85: 22:9c:ff:48:e5:0f:4b:d1:92:88:4b:b8:b5:9e:1f:99:29:0c: 8f:04:e6:7e:df:17:4f:97:58:33:52:bc:a9:5a:1d:6e:49:b7: 60:ce:dd:71:0c:68:3e:03:97:ff:43:13:fe:5e:2a:b6:04:3c: cb:4e:0a:9a:40:82:bc:1e:88:8f:e1:34:02:5a:9b:12:a1:47: 1f:d5:a7:4f:ff:6b:bb:43:9c:2c:ac:90:72:9a:b6:b5:74:61: 82:d4:65:cb:25:c4:78:27:90:63:19:c0:2d:da:0c:45:ac:fe: 0a:47:ef:32 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EL7+FKwR5RdjtrZpldU4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyYWJhYjc1ZTc0NmRiMWVjYWE5OTg3NTk5MDAzOTk0ODUw OTMwMjcwHhcNMjYwMTAxMTAxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjkyMTcwYTc0ZDlkMzhjYjY3N2Q1OTYyZDEyNDBkZDc1MjIyNzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHX9BgjE4NfaJ2EuO+kvCHeuSSqp ArgCmReDqlqFo2Uocz0CY2XRGSnr55nQ/mZB7R7aput5AmMLXvTogwvqAyxOfe/V NYmCb1jDHO+NCaiWTUloMyOOOHh1zlfkln4MTQHhX+IRHh6OHJvAyGuChe3he5u/ anoUZMkiD9Mq90O0kQ6WtwqmzsBCWn7f5hvjBRKD/o5SNZTe0XFK6eQ4gKF/4btl Lx7517yGI85KlB0MtQY6s81E+bZwn2+qrZY4/PkMVdP/ogwFbbyYPCSzTbztC46G rhLhXND7aFUZ5ie8Bz7Q0clYJHC0zotukAmKr1u5TGzmx7AmMNPmxUKIRQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL+SFwp02dOMtnfVli0SQN11IidkMB8GA1UdIwQY MBaAFNKrq3XnRtseyqmYdZkAOZSFCTAnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHF1cmRlZEcyeDdLcVpoMW1RQTVsSVVKTUNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS82ZTIyZjQtMTdiNy00ZjJjLTk1NmQt NTk1YWRjNWJmZDc0LzEvdjVJWENuVFowNHkyZDlXV0xSSkEzWFVpSjJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS82ZTIyZjQtMTdiNy00ZjJjLTk1NmQtNTk1YWRjNWJmZDc0 LzEvMHF1cmRlZEcyeDdLcVpoMW1RQTVsSVVKTUNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+8NMA0G CSqGSIb3DQEBCwUAA4IBAQCGpTSct2uMtYbstB+f5LTWt+Pu+CEtXq+TPZWRa7oy rj1yY811+NxBDofMpHYXy71d3YtdflcynpQfZwlX+QHmHK9kAgxCIOV0YMBzvZ// aVKybqp5jV2GkifW6JoXE/Y4PQiJ8zttklZIHLr8pi9bMX2aCSz76t5fKZXZQcXS qHmc0VKn8EiUzfQvuT1XL4UinP9I5Q9L0ZKIS7i1nh+ZKQyPBOZ+3xdPl1gzUryp Wh1uSbdgzt1xDGg+A5f/QxP+Xiq2BDzLTgqaQIK8HoiP4TQCWpsSoUcf1adP/2u7 Q5wsrJBymra1dGGC1GXLJcR4J5BjGcAt2gxFrP4KR+8y -----END CERTIFICATE-----Generated at Sun Jan 25 15:29:03 2026 by rpki-client