This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/X9lVyI85cWemgsO6nj6KNiyvWhg.roa File: X9lVyI85cWemgsO6nj6KNiyvWhg.roa (raw, json) Hash identifier: fAtsDmjcFGxCPbNfuOqgmjuDJEqjBeXCafa+9VtJFx4= Subject key identifier: 5F:D9:55:C8:8F:39:71:67:A6:82:C3:BA:9E:3E:8A:36:2C:AF:5A:18 Certificate issuer: /CN=502c37e7ecb59b667fa82ecf093e5ed87661a8e2 Certificate serial: 019B7E38137C046C9F24275A673BCFA94FD1 Authority key identifier: 50:2C:37:E7:EC:B5:9B:66:7F:A8:2E:CF:09:3E:5E:D8:76:61:A8:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UCw35-y1m2Z_qC7PCT5e2HZhqOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/X9lVyI85cWemgsO6nj6KNiyvWhg.roa Signing time: Fri 02 Jan 2026 10:19:22 +0000 ROA not before: Fri 02 Jan 2026 10:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51887 IP address blocks: 91.220.159.0/24 maxlen: 24 91.221.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.crl rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft rsync://rpki.ripe.net/repository/DEFAULT/UCw35-y1m2Z_qC7PCT5e2HZhqOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:13:7c:04:6c:9f:24:27:5a:67:3b:cf:a9:4f:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=502c37e7ecb59b667fa82ecf093e5ed87661a8e2 Validity Not Before: Jan 2 10:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5fd955c88f397167a682c3ba9e3e8a362caf5a18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:af:65:7b:93:56:da:72:c3:a0:45:46:65:e5: 55:03:fd:0b:2b:96:14:c2:0a:a7:0f:93:61:bc:40: 06:97:85:ab:d1:c4:73:ef:ee:55:8f:ec:06:b3:49: 22:2d:31:36:62:b9:a2:63:aa:57:1f:81:d6:b1:ac: ac:39:54:35:c8:a0:e1:1b:e4:24:f9:e4:02:a6:ce: af:b1:65:36:63:28:d5:89:ba:d4:10:c9:33:53:79: 33:66:4b:68:10:80:62:ec:76:9b:a4:18:10:da:4e: 70:7f:5d:f0:49:02:07:3a:ae:84:30:d9:a9:9f:0b: a7:e1:d2:32:a9:3c:42:94:c3:1e:ea:c1:07:dd:c4: 69:6b:71:4c:34:f2:9b:dd:d1:de:c3:28:ca:2e:a0: 0d:22:ab:13:83:1d:81:f6:8f:52:8d:a8:be:67:a0: 09:7a:bd:6e:de:60:e4:c1:08:fa:60:2a:5d:e7:5a: 1b:63:0f:14:a8:90:ac:8c:c1:61:06:5b:ca:2f:ea: 43:09:fb:f7:06:83:d8:89:76:09:63:33:b7:75:ad: 97:c7:34:19:9f:fe:5d:39:0b:d6:50:e4:38:09:a4: a3:e5:61:70:9f:e6:37:36:a6:d4:d4:75:aa:8f:a0: b6:8d:18:31:9c:d4:7a:c8:f6:88:50:1a:35:8b:fb: 8d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:D9:55:C8:8F:39:71:67:A6:82:C3:BA:9E:3E:8A:36:2C:AF:5A:18 X509v3 Authority Key Identifier: keyid:50:2C:37:E7:EC:B5:9B:66:7F:A8:2E:CF:09:3E:5E:D8:76:61:A8:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UCw35-y1m2Z_qC7PCT5e2HZhqOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/X9lVyI85cWemgsO6nj6KNiyvWhg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.220.159.0/24 91.221.120.0/23 Signature Algorithm: sha256WithRSAEncryption 2c:55:e9:7f:ab:ce:6b:06:9f:25:1c:0d:4f:60:00:cb:a8:35: f5:81:08:de:fa:4a:8c:c5:60:7b:a9:90:f2:a7:72:68:d3:bb: 76:ad:f4:9a:9f:64:04:f8:b1:48:a3:5f:c6:3a:99:d2:76:92: 78:a8:67:c7:68:ca:62:7d:03:e5:ac:c9:79:37:0e:a5:f3:f2: 15:89:b5:0d:a0:b8:7a:6e:28:77:da:ea:b6:fc:f0:b5:10:9d: eb:c9:2a:e7:0d:ce:d3:30:2c:1f:f2:66:a9:f6:61:23:95:92: 22:33:42:f5:49:d6:95:aa:f4:c5:08:fa:50:18:2a:87:8d:46: f1:50:e2:38:52:7a:58:9d:af:4c:44:45:98:86:96:11:10:9a: 5d:e0:aa:2e:ad:7b:44:c7:ee:c6:2a:a2:db:22:fc:18:cb:95: 6c:5d:a9:ff:f4:18:12:49:65:00:62:d5:e8:93:df:e9:b2:93: 4a:a0:da:98:07:47:9e:2e:59:4f:64:9a:0a:4d:e0:7c:8d:8f: 27:50:8e:3d:09:38:6e:c4:6f:7d:1a:07:53:63:4b:60:de:7d: 89:0b:2f:78:ee:f5:a9:f8:b3:0f:12:9d:da:37:d4:6a:27:81: 05:af:57:44:f4:37:b9:ae:60:cd:b5:ca:9a:32:68:76:73:4e: bd:1e:c1:da -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OBN8BGyfJCdaZzvPqU/RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwMmMzN2U3ZWNiNTliNjY3ZmE4MmVjZjA5M2U1ZWQ4NzY2 MWE4ZTIwHhcNMjYwMTAyMTAxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZmQ5NTVjODhmMzk3MTY3YTY4MmMzYmE5ZTNlOGEzNjJjYWY1YTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9q9le5NW2nLDoEVGZeVVA/0LK5YU wgqnD5NhvEAGl4Wr0cRz7+5Vj+wGs0kiLTE2YrmiY6pXH4HWsaysOVQ1yKDhG+Qk +eQCps6vsWU2YyjVibrUEMkzU3kzZktoEIBi7HabpBgQ2k5wf13wSQIHOq6EMNmp nwun4dIyqTxClMMe6sEH3cRpa3FMNPKb3dHewyjKLqANIqsTgx2B9o9Sjai+Z6AJ er1u3mDkwQj6YCpd51obYw8UqJCsjMFhBlvKL+pDCfv3BoPYiXYJYzO3da2XxzQZ n/5dOQvWUOQ4CaSj5WFwn+Y3NqbU1HWqj6C2jRgxnNR6yPaIUBo1i/uNjQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFF/ZVciPOXFnpoLDup4+ijYsr1oYMB8GA1UdIwQY MBaAFFAsN+fstZtmf6guzwk+Xth2YajiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUN3MzUteTFtMlpfcUM3UENUNWUySFpocU9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9iNWY2YWYtM2M4My00Y2I1LWI1ZWIt YmExNDg0M2M1NDljLzEvWDlsVnlJODVjV2VtZ3NPNm5qNktOaXl2V2hnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9iNWY2YWYtM2M4My00Y2I1LWI1ZWItYmExNDg0M2M1NDlj LzEvVUN3MzUteTFtMlpfcUM3UENUNWUySFpocU9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9yfAwQB W914MA0GCSqGSIb3DQEBCwUAA4IBAQAsVel/q85rBp8lHA1PYADLqDX1gQje+kqM xWB7qZDyp3Jo07t2rfSan2QE+LFIo1/GOpnSdpJ4qGfHaMpifQPlrMl5Nw6l8/IV ibUNoLh6bih32uq2/PC1EJ3rySrnDc7TMCwf8map9mEjlZIiM0L1SdaVqvTFCPpQ GCqHjUbxUOI4UnpYna9MREWYhpYREJpd4KourXtEx+7GKqLbIvwYy5VsXan/9BgS SWUAYtXok9/pspNKoNqYB0eeLllPZJoKTeB8jY8nUI49CThuxG99GgdTY0tg3n2J Cy947vWp+LMPEp3aN9RqJ4EFr1dE9De5rmDNtcqaMmh2c069HsHa -----END CERTIFICATE-----Generated at Sun Jan 25 22:15:44 2026 by rpki-client