This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/5PKpxbjzQTcMRVXd3V65NrZpjbU.roa File: 5PKpxbjzQTcMRVXd3V65NrZpjbU.roa (raw, json) Hash identifier: G2QqltWnjrOjGGa9OTf7TSLmfjW8TR4ivagT+kd4cyI= Subject key identifier: E4:F2:A9:C5:B8:F3:41:37:0C:45:55:DD:DD:5E:B9:36:B6:69:8D:B5 Certificate issuer: /CN=6a8edda2f21c885fbe67286218b8318d6ad23896 Certificate serial: 019B7CED722C9C7F66C1DAC3000B4456F3AD Authority key identifier: 6A:8E:DD:A2:F2:1C:88:5F:BE:67:28:62:18:B8:31:8D:6A:D2:38:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/5PKpxbjzQTcMRVXd3V65NrZpjbU.roa Signing time: Fri 02 Jan 2026 04:18:14 +0000 ROA not before: Fri 02 Jan 2026 04:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198193 IP address blocks: 91.216.73.0/24 maxlen: 24 91.216.77.0/24 maxlen: 24 185.91.192.0/22 maxlen: 24 185.104.164.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:72:2c:9c:7f:66:c1:da:c3:00:0b:44:56:f3:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a8edda2f21c885fbe67286218b8318d6ad23896 Validity Not Before: Jan 2 04:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4f2a9c5b8f341370c4555dddd5eb936b6698db5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:72:44:72:d9:b2:20:71:bf:ac:10:7d:a5:c9: 7a:22:85:4b:16:8c:6d:a0:7a:96:f2:cf:6c:73:98: 6f:a8:67:b3:a0:1a:54:0d:2c:e2:f6:ec:23:a9:3e: 0a:4c:d4:93:5b:93:bd:ee:aa:99:09:a3:5f:83:f7: d6:41:b0:07:b2:39:47:1e:4c:14:e0:e7:ad:2e:aa: 9f:fb:c3:4d:b8:65:2f:ec:42:bf:0b:03:ba:f3:d8: 19:59:40:b9:33:b2:af:8d:ca:fb:cb:b6:7e:49:48: e2:ec:38:b9:a7:95:ed:61:08:f8:c8:cd:f9:86:81: be:99:86:57:4b:72:33:61:42:12:92:0c:86:0e:88: e2:48:25:35:3a:1a:58:dc:68:af:07:16:6e:53:af: db:98:f6:ef:c4:d4:f9:fd:18:df:dd:a7:3f:7f:d5: 09:95:34:9e:91:35:59:f9:a2:4f:23:56:da:bd:4e: 81:31:dc:61:30:4a:84:2e:86:28:02:61:21:70:be: dd:87:9d:95:d8:8a:5d:7f:b7:11:69:02:a2:3f:60: 7c:79:37:de:dd:b7:95:d5:e2:64:07:e7:36:87:89: 2a:a6:0b:26:06:50:01:71:af:56:0a:45:8d:15:dc: bd:ce:9c:6d:83:bb:2a:c7:af:3f:48:f8:66:e6:97: bc:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:F2:A9:C5:B8:F3:41:37:0C:45:55:DD:DD:5E:B9:36:B6:69:8D:B5 X509v3 Authority Key Identifier: keyid:6A:8E:DD:A2:F2:1C:88:5F:BE:67:28:62:18:B8:31:8D:6A:D2:38:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/5PKpxbjzQTcMRVXd3V65NrZpjbU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.73.0/24 91.216.77.0/24 185.91.192.0/22 185.104.164.0/22 Signature Algorithm: sha256WithRSAEncryption 09:33:ba:5f:1c:d2:19:46:f3:9e:f7:01:9c:cd:fb:15:35:a5: 39:15:0e:8e:67:d4:05:67:8e:83:36:cf:b3:2a:f4:e2:5e:f9: e3:0f:c3:d7:98:fb:b2:41:84:e5:e8:e0:e8:eb:85:94:b3:86: 98:2a:a5:45:2b:5f:2a:35:85:d9:86:f1:8b:12:8a:ec:f5:ca: 7e:d4:ca:e8:bc:aa:a6:68:85:59:b8:2e:2f:4c:2c:74:bf:ff: 93:f5:c4:c3:03:98:db:47:5c:30:a6:96:40:c2:70:b4:8e:cf: 36:b5:f5:a7:aa:06:b6:8d:a5:ed:b3:85:34:8a:b8:21:40:2c: d8:27:3e:c6:cd:26:d8:69:15:75:9e:cc:df:e2:59:bb:0f:77: 1d:f3:53:5a:2e:3f:1e:57:7b:16:d9:6d:c7:9d:46:54:6a:b4: 40:12:81:58:bc:87:23:4f:10:53:32:69:60:00:04:f3:d4:6b: 1b:74:bb:c5:2b:9e:c8:23:2f:13:b0:d9:ad:99:42:1c:72:03: 9a:3a:7e:f5:de:60:5c:83:87:c1:c7:b4:74:c3:b2:5c:4f:c2: 9f:1e:cc:95:59:aa:9a:18:a9:ac:cf:0a:74:a3:b7:78:ef:2a: b9:52:b6:1f:cb:f2:5e:ba:eb:25:61:a6:07:63:d8:de:21:6d: c6:98:8e:b1 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt87XIsnH9mwdrDAAtEVvOtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhOGVkZGEyZjIxYzg4NWZiZTY3Mjg2MjE4YjgzMThkNmFk MjM4OTYwHhcNMjYwMTAyMDQxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNGYyYTljNWI4ZjM0MTM3MGM0NTU1ZGRkZDVlYjkzNmI2Njk4ZGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3JEctmyIHG/rBB9pcl6IoVLFoxt oHqW8s9sc5hvqGezoBpUDSzi9uwjqT4KTNSTW5O97qqZCaNfg/fWQbAHsjlHHkwU 4OetLqqf+8NNuGUv7EK/CwO689gZWUC5M7Kvjcr7y7Z+SUji7Di5p5XtYQj4yM35 hoG+mYZXS3IzYUISkgyGDojiSCU1OhpY3GivBxZuU6/bmPbvxNT5/Rjf3ac/f9UJ lTSekTVZ+aJPI1bavU6BMdxhMEqELoYoAmEhcL7dh52V2Ipdf7cRaQKiP2B8eTfe 3beV1eJkB+c2h4kqpgsmBlABca9WCkWNFdy9zpxtg7sqx68/SPhm5pe81QIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFOTyqcW480E3DEVV3d1euTa2aY21MB8GA1UdIwQY MBaAFGqO3aLyHIhfvmcoYhi4MY1q0jiWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYW83ZG92SWNpRi0tWnloaUdMZ3hqV3JTT0pZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS82ZGI3OTctYTNkMy00MjQxLTkwM2Et MGM2Njg0MDE5OGQwLzEvNVBLcHhianpRVGNNUlZYZDNWNjVOclpwamJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS82ZGI3OTctYTNkMy00MjQxLTkwM2EtMGM2Njg0MDE5OGQw LzEvYW83ZG92SWNpRi0tWnloaUdMZ3hqV3JTT0pZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAW9hJAwQA W9hNAwQCuVvAAwQCuWikMA0GCSqGSIb3DQEBCwUAA4IBAQAJM7pfHNIZRvOe9wGc zfsVNaU5FQ6OZ9QFZ46DNs+zKvTiXvnjD8PXmPuyQYTl6ODo64WUs4aYKqVFK18q NYXZhvGLEors9cp+1MrovKqmaIVZuC4vTCx0v/+T9cTDA5jbR1wwppZAwnC0js82 tfWnqga2jaXts4U0irghQCzYJz7GzSbYaRV1nszf4lm7D3cd81NaLj8eV3sW2W3H nUZUarRAEoFYvIcjTxBTMmlgAATz1GsbdLvFK57IIy8TsNmtmUIccgOaOn713mBc g4fBx7R0w7JcT8KfHsyVWaqaGKmszwp0o7d47yq5UrYfy/JeuuslYaYHY9jeIW3G mI6x -----END CERTIFICATE-----Generated at Sun Jan 25 13:06:07 2026 by rpki-client