This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/5SVfxpykBtGisNJ_fWGkKKRqAXE.roa File: 5SVfxpykBtGisNJ_fWGkKKRqAXE.roa (raw, json) Hash identifier: majDLjjox5+IIo91UtEcKltEO1Uytp4RkTkKzUgxr90= Subject key identifier: E5:25:5F:C6:9C:A4:06:D1:A2:B0:D2:7F:7D:61:A4:28:A4:6A:01:71 Certificate issuer: /CN=9a7edeac0c6c20ea49d492990e4858541d190ff1 Certificate serial: 019B7D5C7683096B2FAB1D93288C28336D6B Authority key identifier: 9A:7E:DE:AC:0C:6C:20:EA:49:D4:92:99:0E:48:58:54:1D:19:0F:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/5SVfxpykBtGisNJ_fWGkKKRqAXE.roa Signing time: Fri 02 Jan 2026 06:19:30 +0000 ROA not before: Fri 02 Jan 2026 06:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35319 IP address blocks: 91.195.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.crl rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:76:83:09:6b:2f:ab:1d:93:28:8c:28:33:6d:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a7edeac0c6c20ea49d492990e4858541d190ff1 Validity Not Before: Jan 2 06:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e5255fc69ca406d1a2b0d27f7d61a428a46a0171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f5:fa:bb:28:9d:98:2d:48:cb:b6:98:8a:36: bd:e6:af:a0:77:90:24:c9:cd:c3:34:19:3e:51:cc: c6:fb:76:75:55:dd:5b:59:de:57:5e:8e:e1:5f:51: 8c:f8:a2:48:55:e3:45:24:1f:26:b7:8e:cd:22:2f: 84:a7:d7:57:10:7e:c9:57:e3:f4:67:eb:80:5a:79: 10:28:22:58:4b:ca:43:c2:9b:dc:f8:5b:95:0a:4d: f3:af:f6:14:7a:90:30:4d:df:e3:71:30:f9:c3:1e: 89:9d:ba:ed:f4:62:b9:9b:b0:3a:ed:f1:8a:7a:3f: 7a:2b:23:56:6f:15:64:83:69:8c:8f:68:43:76:6a: 2a:36:78:4a:d8:b0:41:b6:f9:cd:60:5d:2f:5d:72: cf:d5:92:65:04:0c:5c:a5:b9:be:b7:6f:07:f1:cd: 7c:e0:5d:ea:b1:11:bd:27:b3:d7:5a:b0:a6:bd:77: 5d:8b:b3:0d:3b:bc:35:f4:bc:bb:f5:fc:95:f5:3b: 0e:eb:49:50:98:6e:d4:43:17:00:ba:33:25:21:87: 5a:60:09:d2:dd:2a:8a:a6:64:43:54:68:91:b1:d7: 7a:95:4c:6b:53:13:0f:0c:0d:7d:2d:ea:93:ae:cc: a2:e3:2f:0d:df:25:5a:1b:49:2c:a4:03:2a:db:e8: f0:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:25:5F:C6:9C:A4:06:D1:A2:B0:D2:7F:7D:61:A4:28:A4:6A:01:71 X509v3 Authority Key Identifier: keyid:9A:7E:DE:AC:0C:6C:20:EA:49:D4:92:99:0E:48:58:54:1D:19:0F:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/5SVfxpykBtGisNJ_fWGkKKRqAXE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.195.121.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:32:d6:1b:ef:79:1d:5d:70:e4:eb:35:b3:9f:47:bd:0b:4c: 45:5b:b2:16:d8:26:a3:37:ee:66:6a:b3:48:0f:ab:22:73:27: 85:6c:d8:2b:d3:c0:48:88:50:af:80:09:2e:ff:03:67:ba:04: 33:a4:0d:eb:b9:3f:d0:fa:fa:5d:59:24:a0:d4:64:09:90:e9: d7:d5:c3:e4:b1:1d:f5:0d:96:83:aa:5b:e3:2e:f4:20:27:26: ba:87:5a:51:fd:51:4c:71:49:2b:22:d8:2c:ee:70:73:21:ed: b4:e3:8e:ad:97:7d:9c:58:27:08:7a:01:30:73:0e:38:5c:09: e9:b6:1d:61:87:d5:06:e3:7a:63:12:d6:b5:de:84:14:ff:71: a7:17:76:02:5b:f3:e5:db:ea:35:e4:d3:b3:23:bf:8c:ed:d5: 27:9e:dc:e7:f6:30:76:51:a2:d6:42:b7:c0:34:a5:81:a2:31: 68:69:84:b0:37:a9:62:a0:4b:48:2c:e4:5c:f7:b8:3f:ca:10: 38:c6:cb:60:3e:f2:95:28:c5:f7:be:e6:94:7e:66:a6:75:1e: bb:20:19:1e:32:70:3d:54:b6:af:59:d0:fd:5e:fe:d6:5e:1a: 5a:70:3a:51:05:52:04:ae:6f:63:5c:7c:3b:67:d3:2b:47:9e: 26:2b:aa:22 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XHaDCWsvqx2TKIwoM21rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhN2VkZWFjMGM2YzIwZWE0OWQ0OTI5OTBlNDg1ODU0MWQx OTBmZjEwHhcNMjYwMTAyMDYxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTI1NWZjNjljYTQwNmQxYTJiMGQyN2Y3ZDYxYTQyOGE0NmEwMTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPX6uyidmC1Iy7aYija95q+gd5Ak yc3DNBk+UczG+3Z1Vd1bWd5XXo7hX1GM+KJIVeNFJB8mt47NIi+Ep9dXEH7JV+P0 Z+uAWnkQKCJYS8pDwpvc+FuVCk3zr/YUepAwTd/jcTD5wx6Jnbrt9GK5m7A67fGK ej96KyNWbxVkg2mMj2hDdmoqNnhK2LBBtvnNYF0vXXLP1ZJlBAxcpbm+t28H8c18 4F3qsRG9J7PXWrCmvXddi7MNO7w19Ly79fyV9TsO60lQmG7UQxcAujMlIYdaYAnS 3SqKpmRDVGiRsdd6lUxrUxMPDA19LeqTrsyi4y8N3yVaG0kspAMq2+jwXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOUlX8acpAbRorDSf31hpCikagFxMB8GA1UdIwQY MBaAFJp+3qwMbCDqSdSSmQ5IWFQdGQ/xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbW43ZXJBeHNJT3BKMUpLWkRraFlWQjBaRF9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My81YThlMDQtZGQwNy00MzVhLWIxYmYt YWRlZGNhYTNkMjZlLzEvNVNWZnhweWtCdEdpc05KX2ZXR2tLS1JxQVhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My81YThlMDQtZGQwNy00MzVhLWIxYmYtYWRlZGNhYTNkMjZl LzEvbW43ZXJBeHNJT3BKMUpLWkRraFlWQjBaRF9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8N5MA0G CSqGSIb3DQEBCwUAA4IBAQB7MtYb73kdXXDk6zWzn0e9C0xFW7IW2CajN+5marNI D6sicyeFbNgr08BIiFCvgAku/wNnugQzpA3ruT/Q+vpdWSSg1GQJkOnX1cPksR31 DZaDqlvjLvQgJya6h1pR/VFMcUkrItgs7nBzIe20446tl32cWCcIegEwcw44XAnp th1hh9UG43pjEta13oQU/3GnF3YCW/Pl2+o15NOzI7+M7dUnntzn9jB2UaLWQrfA NKWBojFoaYSwN6lioEtILORc97g/yhA4xstgPvKVKMX3vuaUfmamdR67IBkeMnA9 VLavWdD9Xv7WXhpacDpRBVIErm9jXHw7Z9MrR54mK6oi -----END CERTIFICATE-----Generated at Mon Jan 26 01:00:28 2026 by rpki-client