This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/SyOMrq9ZPqa-CxddJFs4EYM4Fbg.roa File: SyOMrq9ZPqa-CxddJFs4EYM4Fbg.roa (raw, json) Hash identifier: wy5+/o73Vk3SAFiCb5cli4N7qOzZBJq1Ya6ET4kdAcw= Subject key identifier: 4B:23:8C:AE:AF:59:3E:A6:BE:0B:17:5D:24:5B:38:11:83:38:15:B8 Certificate issuer: /CN=4cd90891a7932f7356a803339da0ccdf63ad2d35 Certificate serial: 019B7E3760189CB416183624A58FDEDA01AE Authority key identifier: 4C:D9:08:91:A7:93:2F:73:56:A8:03:33:9D:A0:CC:DF:63:AD:2D:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNkIkaeTL3NWqAMznaDM32OtLTU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/SyOMrq9ZPqa-CxddJFs4EYM4Fbg.roa Signing time: Fri 02 Jan 2026 10:18:36 +0000 ROA not before: Fri 02 Jan 2026 10:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13030 IP address blocks: 91.198.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.mft rsync://rpki.ripe.net/repository/DEFAULT/TNkIkaeTL3NWqAMznaDM32OtLTU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:60:18:9c:b4:16:18:36:24:a5:8f:de:da:01:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cd90891a7932f7356a803339da0ccdf63ad2d35 Validity Not Before: Jan 2 10:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b238caeaf593ea6be0b175d245b3811833815b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:25:b7:b3:3e:27:96:66:d2:ec:bd:ff:66:47: 0c:62:07:f1:42:58:b3:57:22:17:b3:a1:d6:1c:8d: b3:71:1f:86:6e:33:2a:3e:8b:45:1a:cb:ed:8d:e1: 57:75:51:f6:54:1b:cf:81:64:5b:12:68:a2:d4:22: c4:d9:63:b5:7b:08:55:19:fa:8b:de:97:fb:d1:b9: e2:8f:22:63:06:33:00:47:57:eb:5c:8e:65:ef:d0: 00:98:ee:53:e3:fa:8a:9d:34:f3:fa:37:90:43:b1: bd:49:5e:5f:03:1b:be:73:00:ad:5e:04:1b:a6:5b: 15:47:d9:04:e4:19:fd:64:67:61:ed:da:a1:ee:89: 5d:36:cb:1d:7b:4d:5c:5f:4c:64:ba:97:a2:d6:80: 98:10:d9:d8:e5:f0:31:8b:4c:2e:32:90:b1:ac:82: 45:b7:61:73:97:69:0a:7e:93:de:46:76:58:b1:c2: b2:f3:a8:93:5a:1b:da:ad:3e:26:09:04:50:d7:81: e1:78:54:37:bb:1a:59:53:4b:62:80:3f:53:09:b6: d1:e6:e2:b5:35:67:96:b2:08:60:d4:d6:74:07:13: b8:98:81:f3:f0:16:bc:f2:98:f1:0f:7a:62:88:30: 62:b1:9f:6b:f1:df:3c:81:35:f9:98:bc:21:41:f3: 72:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:23:8C:AE:AF:59:3E:A6:BE:0B:17:5D:24:5B:38:11:83:38:15:B8 X509v3 Authority Key Identifier: keyid:4C:D9:08:91:A7:93:2F:73:56:A8:03:33:9D:A0:CC:DF:63:AD:2D:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNkIkaeTL3NWqAMznaDM32OtLTU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/SyOMrq9ZPqa-CxddJFs4EYM4Fbg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.8.0/24 Signature Algorithm: sha256WithRSAEncryption 77:58:e2:85:73:6a:a4:d2:2e:21:1b:0d:9c:b6:62:e4:a7:31: 16:d4:ed:97:b6:86:16:c8:97:ec:58:84:ec:f0:8b:1f:f1:b2: 4b:a4:32:79:75:c3:96:92:7f:e3:99:0f:9a:8f:f0:70:0c:bb: 4c:62:ca:c0:bc:73:68:53:dc:1e:98:43:ee:d7:9e:0b:08:e9: f9:b2:a4:65:d0:b7:91:cc:d6:2d:22:f9:af:e6:18:94:a1:c1: f5:cf:22:81:87:f4:cb:18:41:06:97:81:2e:7e:04:4e:d3:3a: 6c:f0:fc:61:59:c7:ed:a0:ae:4e:5c:e4:ec:c2:26:6d:53:43: 96:5a:65:86:f3:72:6a:59:85:bf:c9:5e:7e:06:2a:97:bc:90: 1b:8c:d8:60:9c:a2:18:88:26:42:ce:16:e6:2b:41:5a:37:f4: 65:c3:cd:87:71:a8:b9:aa:2c:2c:d3:5f:49:d9:8e:1c:40:5f: d0:5d:b1:6f:63:a0:6d:96:ea:4d:f2:5f:77:0b:63:b0:ab:a6: 32:49:7d:8f:04:e1:03:9d:e7:62:ac:df:95:fd:b4:7c:a5:8a: fb:4a:66:ea:4b:ef:d8:68:b9:68:21:89:15:59:fd:d8:0a:03: 3d:ba:18:67:6d:20:9d:d1:58:dd:fe:e2:f2:8f:99:2a:17:ef: 61:f4:39:31 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N2AYnLQWGDYkpY/e2gGuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZDkwODkxYTc5MzJmNzM1NmE4MDMzMzlkYTBjY2RmNjNh ZDJkMzUwHhcNMjYwMTAyMTAxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjIzOGNhZWFmNTkzZWE2YmUwYjE3NWQyNDViMzgxMTgzMzgxNWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSW3sz4nlmbS7L3/ZkcMYgfxQliz VyIXs6HWHI2zcR+GbjMqPotFGsvtjeFXdVH2VBvPgWRbEmii1CLE2WO1ewhVGfqL 3pf70bnijyJjBjMAR1frXI5l79AAmO5T4/qKnTTz+jeQQ7G9SV5fAxu+cwCtXgQb plsVR9kE5Bn9ZGdh7dqh7oldNssde01cX0xkupei1oCYENnY5fAxi0wuMpCxrIJF t2Fzl2kKfpPeRnZYscKy86iTWhvarT4mCQRQ14HheFQ3uxpZU0tigD9TCbbR5uK1 NWeWsghg1NZ0BxO4mIHz8Ba88pjxD3piiDBisZ9r8d88gTX5mLwhQfNyIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEsjjK6vWT6mvgsXXSRbOBGDOBW4MB8GA1UdIwQY MBaAFEzZCJGnky9zVqgDM52gzN9jrS01MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVE5rSWthZVRMM05XcUFNem5hRE0zMk90TFRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS82YTkzNzgtMmZhNy00ODJkLThjN2Mt NjljYTRjYjY1Zjk3LzEvU3lPTXJxOVpQcWEtQ3hkZEpGczRFWU00RmJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS82YTkzNzgtMmZhNy00ODJkLThjN2MtNjljYTRjYjY1Zjk3 LzEvVE5rSWthZVRMM05XcUFNem5hRE0zMk90TFRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8YIMA0G CSqGSIb3DQEBCwUAA4IBAQB3WOKFc2qk0i4hGw2ctmLkpzEW1O2XtoYWyJfsWITs 8Isf8bJLpDJ5dcOWkn/jmQ+aj/BwDLtMYsrAvHNoU9wemEPu154LCOn5sqRl0LeR zNYtIvmv5hiUocH1zyKBh/TLGEEGl4EufgRO0zps8PxhWcftoK5OXOTswiZtU0OW WmWG83JqWYW/yV5+BiqXvJAbjNhgnKIYiCZCzhbmK0FaN/Rlw82Hcai5qiws019J 2Y4cQF/QXbFvY6BtlupN8l93C2Owq6YySX2PBOEDnedirN+V/bR8pYr7SmbqS+/Y aLloIYkVWf3YCgM9uhhnbSCd0Vjd/uLyj5kqF+9h9Dkx -----END CERTIFICATE-----Generated at Mon Jan 26 00:59:31 2026 by rpki-client