This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/K5rhtCQez3UrTdf0FosqAmDCYa0.roa File: K5rhtCQez3UrTdf0FosqAmDCYa0.roa (raw, json) Hash identifier: IQvbhZSaJLy8W0x8oiGtpYn5Yz5K/bEM7HiYoMzUocg= Subject key identifier: 2B:9A:E1:B4:24:1E:CF:75:2B:4D:D7:F4:16:8B:2A:02:60:C2:61:AD Certificate issuer: /CN=26a5aa918cbfeb3e12997f33890feb258907b343 Certificate serial: 019B7C1216B829215F5D07E5E9091FB0ED01 Authority key identifier: 26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/K5rhtCQez3UrTdf0FosqAmDCYa0.roa Signing time: Fri 02 Jan 2026 00:18:38 +0000 ROA not before: Fri 02 Jan 2026 00:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198414 IP address blocks: 91.228.196.0/22 maxlen: 24 91.234.146.0/24 maxlen: 24 91.237.52.0/24 maxlen: 24 91.239.66.0/23 maxlen: 24 185.5.96.0/22 maxlen: 24 185.25.148.0/22 maxlen: 24 185.140.120.0/22 maxlen: 22 185.180.204.0/22 maxlen: 24 185.193.112.0/22 maxlen: 24 185.201.112.0/22 maxlen: 24 193.17.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:16:b8:29:21:5f:5d:07:e5:e9:09:1f:b0:ed:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26a5aa918cbfeb3e12997f33890feb258907b343 Validity Not Before: Jan 2 00:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b9ae1b4241ecf752b4dd7f4168b2a0260c261ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c7:16:59:d0:2d:08:83:1b:8a:00:88:cd:26: 2e:93:0b:17:30:6f:11:9b:c9:53:e9:c1:0a:6f:4b: b9:5f:3e:96:3e:74:29:bd:cb:2b:80:e7:1d:0a:55: 6c:8e:d4:a4:ff:b6:e6:11:24:11:7a:49:1e:21:5a: 99:04:70:01:6c:86:47:94:f3:80:33:be:4e:0a:9f: 63:3f:8f:43:29:90:70:b1:7d:6f:24:1d:ca:1f:f0: ed:37:aa:a9:f4:37:76:6b:c0:fa:50:e4:3e:a2:2f: 39:fe:78:48:a6:58:23:a2:1e:8f:0a:62:94:4e:c8: cd:c3:0a:8a:12:c5:32:61:c0:a9:30:ae:de:e4:1f: 13:36:21:e7:6f:f9:b9:18:38:85:e3:70:d6:eb:41: 81:4d:31:ee:e5:f1:cf:e9:2d:0a:79:9a:90:bf:bc: fc:30:2a:74:9a:60:fa:a7:99:9f:d2:b4:9d:97:ad: 98:b2:bb:4e:0d:9d:df:3c:19:2d:69:0e:b4:1b:c3: c7:0f:57:c7:39:f3:97:90:bb:32:6f:f5:77:03:88: be:c1:97:84:ff:50:ed:0e:d0:eb:be:26:93:46:38: a1:36:06:3f:ae:b9:51:35:f5:6e:d0:04:56:9f:25: f3:92:f5:d6:de:3b:53:b8:6a:21:69:af:ff:34:48: 37:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:9A:E1:B4:24:1E:CF:75:2B:4D:D7:F4:16:8B:2A:02:60:C2:61:AD X509v3 Authority Key Identifier: keyid:26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/K5rhtCQez3UrTdf0FosqAmDCYa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.228.196.0/22 91.234.146.0/24 91.237.52.0/24 91.239.66.0/23 185.5.96.0/22 185.25.148.0/22 185.140.120.0/22 185.180.204.0/22 185.193.112.0/22 185.201.112.0/22 193.17.184.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:c8:54:48:77:34:dd:d7:84:e1:80:03:75:64:a1:7a:06:ab: 6c:b6:10:1b:e5:1b:b9:ae:3c:3f:41:1b:84:32:2d:f8:4b:ac: c1:be:46:e1:9d:ed:88:bb:d3:71:d1:de:8d:85:74:54:6a:7f: 3c:74:cf:b1:9e:c6:ac:d2:30:27:d1:fe:05:21:fe:24:c1:fb: f2:87:48:00:67:ad:e4:7c:3a:20:51:39:8f:70:25:16:71:e5: 58:64:27:2d:03:bb:a9:78:e2:16:53:56:f9:83:34:63:5b:c2: f0:0f:2b:a2:c3:1a:a1:a0:60:93:b8:c6:29:e3:2a:58:da:9d: f1:e6:76:c9:67:04:8a:d1:f3:42:d6:59:d3:cb:0a:50:be:d2: d8:d3:10:d5:28:71:0d:d2:4f:f9:bd:78:43:0d:8d:ad:da:18: ad:a6:87:b0:a6:8e:ca:6f:ee:29:02:3a:64:af:66:e8:6f:50: a3:bd:4e:4c:0d:be:16:f7:3e:41:fa:ea:9f:2e:58:2c:35:9b: bb:55:3b:be:d8:bd:67:1d:26:86:49:ba:25:99:f3:30:5f:98: e1:c9:d1:79:a0:4c:4a:ea:9f:95:65:70:59:73:0e:0b:bb:e9: 95:3b:a1:c6:99:fc:27:30:07:5c:56:d2:18:e1:32:1a:18:c5: 16:7a:82:b2 -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgISAZt8Eha4KSFfXQfl6QkfsO0BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2YTVhYTkxOGNiZmViM2UxMjk5N2YzMzg5MGZlYjI1ODkw N2IzNDMwHhcNMjYwMTAyMDAxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjlhZTFiNDI0MWVjZjc1MmI0ZGQ3ZjQxNjhiMmEwMjYwYzI2MWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwccWWdAtCIMbigCIzSYukwsXMG8R m8lT6cEKb0u5Xz6WPnQpvcsrgOcdClVsjtSk/7bmESQRekkeIVqZBHABbIZHlPOA M75OCp9jP49DKZBwsX1vJB3KH/DtN6qp9Dd2a8D6UOQ+oi85/nhIplgjoh6PCmKU TsjNwwqKEsUyYcCpMK7e5B8TNiHnb/m5GDiF43DW60GBTTHu5fHP6S0KeZqQv7z8 MCp0mmD6p5mf0rSdl62YsrtODZ3fPBktaQ60G8PHD1fHOfOXkLsyb/V3A4i+wZeE /1DtDtDrviaTRjihNgY/rrlRNfVu0ARWnyXzkvXW3jtTuGohaa//NEg3MQIDAQAB o4ICRTCCAkEwHQYDVR0OBBYEFCua4bQkHs91K03X9BaLKgJgwmGtMB8GA1UdIwQY MBaAFCalqpGMv+s+Epl/M4kP6yWJB7NDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnFXcWtZeV82ejRTbVg4emlRX3JKWWtIczBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8xNDMzZWEtMTA4MC00NmU1LWI2MTIt Mjk3ZTI4MmQ2NmE4LzEvSzVyaHRDUWV6M1VyVGRmMEZvc3FBbURDWWEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC8xNDMzZWEtMTA4MC00NmU1LWI2MTItMjk3ZTI4MmQ2NmE4 LzEvSnFXcWtZeV82ejRTbVg4emlRX3JKWWtIczBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQCW+TEAwQA W+qSAwQAW+00AwQBW+9CAwQCuQVgAwQCuRmUAwQCuYx4AwQCubTMAwQCucFwAwQC uclwAwQAwRG4MA0GCSqGSIb3DQEBCwUAA4IBAQBvyFRIdzTd14ThgAN1ZKF6Bqts thAb5Ru5rjw/QRuEMi34S6zBvkbhne2Iu9Nx0d6NhXRUan88dM+xnsas0jAn0f4F If4kwfvyh0gAZ63kfDogUTmPcCUWceVYZCctA7upeOIWU1b5gzRjW8LwDyuiwxqh oGCTuMYp4ypY2p3x5nbJZwSK0fNC1lnTywpQvtLY0xDVKHEN0k/5vXhDDY2t2hit poewpo7Kb+4pAjpkr2bob1CjvU5MDb4W9z5B+uqfLlgsNZu7VTu+2L1nHSaGSbol mfMwX5jhydF5oExK6p+VZXBZcw4Lu+mVO6HGmfwnMAdcVtIY4TIaGMUWeoKy -----END CERTIFICATE-----Generated at Mon Jan 26 12:37:15 2026 by rpki-client