This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/5sNgYfzumUf7Ww-tVdXZ2drJDck.roa File: 5sNgYfzumUf7Ww-tVdXZ2drJDck.roa (raw, json) Hash identifier: RjBuFrMSbcH679kVv4NcjMBWXv9A5eiZerb+NKF9kzQ= Subject key identifier: E6:C3:60:61:FC:EE:99:47:FB:5B:0F:AD:55:D5:D9:D9:DA:C9:0D:C9 Certificate issuer: /CN=1f29bcbd5cfcc195e76b70a1bf0dd991ec7e33d4 Certificate serial: 019B77C6CA4284B5D2046FB731C3AAD806A3 Authority key identifier: 1F:29:BC:BD:5C:FC:C1:95:E7:6B:70:A1:BF:0D:D9:91:EC:7E:33:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/5sNgYfzumUf7Ww-tVdXZ2drJDck.roa Signing time: Thu 01 Jan 2026 04:17:55 +0000 ROA not before: Thu 01 Jan 2026 04:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207066 IP address blocks: 91.199.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:ca:42:84:b5:d2:04:6f:b7:31:c3:aa:d8:06:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f29bcbd5cfcc195e76b70a1bf0dd991ec7e33d4 Validity Not Before: Jan 1 04:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e6c36061fcee9947fb5b0fad55d5d9d9dac90dc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f5:53:08:74:a8:52:df:c3:98:47:6a:0d:ec: 9c:72:78:a2:d1:d2:7a:ac:45:a8:12:9e:b4:27:9c: e1:8e:bb:e5:13:2e:ab:51:2c:da:1a:cd:81:db:62: 46:3b:b2:4c:b7:1c:fa:bc:9d:17:ef:0b:c3:c8:12: c6:84:33:8a:f1:41:a4:2d:ee:ce:b7:f8:14:12:11: 5b:44:ef:33:5d:56:2f:45:53:5b:98:83:97:13:4c: bf:28:9a:d9:8e:f4:f9:d1:a9:11:2e:92:8e:76:d0: f8:c7:b5:f8:94:1f:99:02:d1:62:f2:3f:1b:68:d7: aa:3a:87:db:cf:4c:ec:bb:e6:63:3e:ef:0e:6a:18: 47:5c:e8:46:0c:91:3e:79:67:c5:5e:28:09:38:2a: 2e:e5:07:30:b4:6a:83:92:0e:2d:83:6e:07:2b:05: 39:ba:88:6d:8a:19:bf:d0:8b:94:93:e1:4c:a9:a8: 41:e2:d4:a1:30:50:8f:8c:b5:4e:b6:5d:1b:ed:f7: e1:60:28:d1:b2:e5:a8:b8:da:4b:ef:5c:ea:fd:9c: 8f:24:c2:c5:54:27:a0:61:66:f6:46:21:85:3c:30: a2:ef:a9:52:e3:34:16:a8:d8:cb:af:ff:ec:f6:ba: 0d:93:9f:85:ba:d7:bd:2e:1c:97:3f:f5:4d:41:9f: 08:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:C3:60:61:FC:EE:99:47:FB:5B:0F:AD:55:D5:D9:D9:DA:C9:0D:C9 X509v3 Authority Key Identifier: keyid:1F:29:BC:BD:5C:FC:C1:95:E7:6B:70:A1:BF:0D:D9:91:EC:7E:33:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/5sNgYfzumUf7Ww-tVdXZ2drJDck.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.86.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:60:cf:3b:c4:56:a9:64:ff:66:fc:2e:76:22:78:2d:e4:ac: 42:2f:b5:2d:68:46:90:a3:11:1c:db:40:23:f0:49:9c:d5:be: 05:bb:88:42:a0:25:14:7c:3b:e3:c3:ba:02:a6:0d:1e:47:42: 9a:0d:ba:79:44:1e:49:43:0c:e9:ad:62:2e:d0:3c:c4:c2:6a: 39:47:a4:3e:60:8f:aa:16:05:83:5c:da:b5:15:a2:24:cb:7e: 72:18:1e:ce:20:7b:81:e8:ae:2a:65:ff:98:0b:f6:2b:6c:de: 78:6d:c8:6c:f6:7c:02:a8:b3:51:dd:82:73:ca:6f:c2:66:d7: 45:3f:58:bb:ce:12:58:79:e7:d5:82:bd:aa:07:8f:ca:be:09: 99:34:a2:76:67:6d:0d:28:54:f1:0f:2d:65:33:a3:83:29:ad: f5:61:b9:5a:15:2e:6d:19:bb:5e:5e:58:d8:c1:28:6f:1e:72: d0:e4:94:fc:0c:c6:8d:9a:36:a3:64:56:4d:47:07:ec:6b:13: e6:86:f8:e2:3f:34:dd:3b:02:b7:64:6d:ce:3c:12:db:54:5a: c3:ad:58:18:06:59:a5:df:24:5b:63:75:10:53:27:a5:d7:a7: fc:be:12:77:b4:8a:2b:ba:04:ee:2e:05:60:33:bc:44:df:e6: e1:67:10:18 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xspChLXSBG+3McOq2AajMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmMjliY2JkNWNmY2MxOTVlNzZiNzBhMWJmMGRkOTkxZWM3 ZTMzZDQwHhcNMjYwMTAxMDQxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNmMzNjA2MWZjZWU5OTQ3ZmI1YjBmYWQ1NWQ1ZDlkOWRhYzkwZGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/VTCHSoUt/DmEdqDeyccnii0dJ6 rEWoEp60J5zhjrvlEy6rUSzaGs2B22JGO7JMtxz6vJ0X7wvDyBLGhDOK8UGkLe7O t/gUEhFbRO8zXVYvRVNbmIOXE0y/KJrZjvT50akRLpKOdtD4x7X4lB+ZAtFi8j8b aNeqOofbz0zsu+ZjPu8OahhHXOhGDJE+eWfFXigJOCou5QcwtGqDkg4tg24HKwU5 uohtihm/0IuUk+FMqahB4tShMFCPjLVOtl0b7ffhYCjRsuWouNpL71zq/ZyPJMLF VCegYWb2RiGFPDCi76lS4zQWqNjLr//s9roNk5+Fute9LhyXP/VNQZ8IrQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFObDYGH87plH+1sPrVXV2dnayQ3JMB8GA1UdIwQY MBaAFB8pvL1c/MGV52twob8N2ZHsfjPUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHltOHZWejh3WlhuYTNDaHZ3M1prZXgtTTlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC83NDIyZmUtZjAxMy00M2UzLWJlOTEt ZDRkMzVkOTk5ODFkLzEvNXNOZ1lmenVtVWY3V3ctdFZkWFoyZHJKRGNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC83NDIyZmUtZjAxMy00M2UzLWJlOTEtZDRkMzVkOTk5ODFk LzEvSHltOHZWejh3WlhuYTNDaHZ3M1prZXgtTTlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8dWMA0G CSqGSIb3DQEBCwUAA4IBAQBNYM87xFapZP9m/C52Ingt5KxCL7UtaEaQoxEc20Aj 8Emc1b4Fu4hCoCUUfDvjw7oCpg0eR0KaDbp5RB5JQwzprWIu0DzEwmo5R6Q+YI+q FgWDXNq1FaIky35yGB7OIHuB6K4qZf+YC/YrbN54bchs9nwCqLNR3YJzym/CZtdF P1i7zhJYeefVgr2qB4/KvgmZNKJ2Z20NKFTxDy1lM6ODKa31YblaFS5tGbteXljY wShvHnLQ5JT8DMaNmjajZFZNRwfsaxPmhvjiPzTdOwK3ZG3OPBLbVFrDrVgYBlml 3yRbY3UQUyel16f8vhJ3tIorugTuLgVgM7xE3+bhZxAY -----END CERTIFICATE-----Generated at Sun Jan 25 15:14:24 2026 by rpki-client