This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/m5cCxh_PhsabAGIRJfH-lY0-6rI.roa File: m5cCxh_PhsabAGIRJfH-lY0-6rI.roa (raw, json) Hash identifier: sPrlMxEkxZrDcF6KQs3latR2l78VhegB/Bdy2kmEXaw= Subject key identifier: 9B:97:02:C6:1F:CF:86:C6:9B:00:62:11:25:F1:FE:95:8D:3E:EA:B2 Certificate issuer: /CN=cf9cc33182e44d897f4eacf14213467ef88711d4 Certificate serial: 019B7BA4BD77FCC195B98646C4805FA6050B Authority key identifier: CF:9C:C3:31:82:E4:4D:89:7F:4E:AC:F1:42:13:46:7E:F8:87:11:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/m5cCxh_PhsabAGIRJfH-lY0-6rI.roa Signing time: Thu 01 Jan 2026 22:19:12 +0000 ROA not before: Thu 01 Jan 2026 22:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35393 IP address blocks: 91.209.245.0/24 maxlen: 24 193.200.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.crl rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:bd:77:fc:c1:95:b9:86:46:c4:80:5f:a6:05:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf9cc33182e44d897f4eacf14213467ef88711d4 Validity Not Before: Jan 1 22:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b9702c61fcf86c69b00621125f1fe958d3eeab2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5d:17:d0:c4:b1:7d:a0:99:be:04:2f:4e:55: f1:42:a2:d0:63:10:a0:6a:df:de:00:9a:b1:c7:f0: 48:ce:49:7e:63:22:4a:60:60:89:b7:32:02:85:0d: 8e:98:04:97:4b:b5:09:88:de:d4:ed:50:9f:05:aa: 53:19:05:7f:ce:0b:33:b0:8c:ae:25:58:86:33:17: 5b:70:39:79:7f:b0:83:24:11:cb:04:9c:84:1c:a2: 93:2a:49:a5:0e:cf:f9:72:1a:73:18:80:a4:89:43: 48:78:24:4b:0c:04:4c:fc:ad:80:ca:35:81:bb:28: d1:30:fb:71:cc:4c:24:d6:f9:79:1c:93:dd:9f:92: 24:b4:c9:9c:11:63:e9:08:c8:a4:bc:b3:61:3b:b2: 1b:59:d3:7b:6e:02:6c:24:74:49:fc:bb:0f:7e:93: 21:4e:43:6f:08:d2:ae:6e:d4:1d:4d:28:b7:fb:47: 3c:f2:de:f5:0e:80:02:5a:f7:74:5c:eb:48:f0:2f: 5b:94:05:44:0e:1f:6d:f6:67:d2:a3:e9:db:95:76: cb:ac:3c:4c:9d:aa:20:98:5a:22:df:cd:96:44:5e: 39:18:0f:77:91:d3:70:b8:40:dc:e9:70:59:44:5d: 87:37:97:0b:62:9c:64:7e:fc:32:69:9c:eb:e1:b8: 69:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:97:02:C6:1F:CF:86:C6:9B:00:62:11:25:F1:FE:95:8D:3E:EA:B2 X509v3 Authority Key Identifier: keyid:CF:9C:C3:31:82:E4:4D:89:7F:4E:AC:F1:42:13:46:7E:F8:87:11:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/m5cCxh_PhsabAGIRJfH-lY0-6rI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.245.0/24 193.200.171.0/24 Signature Algorithm: sha256WithRSAEncryption 74:fa:7b:4e:dd:67:8a:02:f2:8d:9b:e0:3a:25:7c:11:45:15: 1b:64:16:21:19:bc:3f:6a:60:28:2b:c2:37:76:3d:da:d1:fe: b2:9a:ae:77:30:46:11:f1:69:a2:62:82:61:42:2b:14:81:04: c0:cb:d6:80:db:12:93:31:de:b6:70:2e:51:31:ac:f4:f5:64: 6c:7e:01:ea:0f:e3:3c:47:05:bb:25:f2:6e:71:91:4d:42:ce: 37:31:de:55:dd:7c:3e:d7:47:36:1a:39:c8:45:21:9e:c5:0c: ec:58:af:cf:fa:43:dc:76:82:35:c2:c1:dd:60:38:52:a9:70: 40:ae:83:f6:e8:86:7e:ea:a0:99:9c:e8:8d:bf:f4:d5:b6:55: e3:2e:b2:cf:07:a2:f3:e8:da:25:8e:93:40:53:52:55:b2:85: 3b:06:1a:91:c1:1b:4e:99:ce:a8:56:75:b0:64:4b:42:19:ec: af:4b:fc:b4:1f:f0:0e:78:1f:37:62:e5:97:64:90:62:39:82: bb:27:67:49:c0:e5:9c:fe:c3:dd:6a:2a:7b:25:8d:71:c7:f0: 21:cf:dc:ee:ab:b7:f3:24:7f:a5:7d:7d:17:49:65:c7:12:be: 33:b3:fa:b6:ab:6f:8a:3e:af:26:89:c5:f6:ab:ff:07:bc:e1: e5:24:e0:73 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7pL13/MGVuYZGxIBfpgULMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmOWNjMzMxODJlNDRkODk3ZjRlYWNmMTQyMTM0NjdlZjg4 NzExZDQwHhcNMjYwMTAxMjIxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Yjk3MDJjNjFmY2Y4NmM2OWIwMDYyMTEyNWYxZmU5NThkM2VlYWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt10X0MSxfaCZvgQvTlXxQqLQYxCg at/eAJqxx/BIzkl+YyJKYGCJtzIChQ2OmASXS7UJiN7U7VCfBapTGQV/zgszsIyu JViGMxdbcDl5f7CDJBHLBJyEHKKTKkmlDs/5chpzGICkiUNIeCRLDARM/K2AyjWB uyjRMPtxzEwk1vl5HJPdn5IktMmcEWPpCMikvLNhO7IbWdN7bgJsJHRJ/LsPfpMh TkNvCNKubtQdTSi3+0c88t71DoACWvd0XOtI8C9blAVEDh9t9mfSo+nblXbLrDxM naogmFoi382WRF45GA93kdNwuEDc6XBZRF2HN5cLYpxkfvwyaZzr4bhpHwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJuXAsYfz4bGmwBiESXx/pWNPuqyMB8GA1UdIwQY MBaAFM+cwzGC5E2Jf06s8UITRn74hxHUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejV6RE1ZTGtUWWxfVHF6eFFoTkdmdmlIRWRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC85MjgzMWUtYjBmZC00MzEyLWE0NmIt MjRhMGQ4MmNlYTllLzEvbTVjQ3hoX1Boc2FiQUdJUkpmSC1sWTAtNnJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC85MjgzMWUtYjBmZC00MzEyLWE0NmItMjRhMGQ4MmNlYTll LzEvejV6RE1ZTGtUWWxfVHF6eFFoTkdmdmlIRWRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9H1AwQA wcirMA0GCSqGSIb3DQEBCwUAA4IBAQB0+ntO3WeKAvKNm+A6JXwRRRUbZBYhGbw/ amAoK8I3dj3a0f6ymq53MEYR8WmiYoJhQisUgQTAy9aA2xKTMd62cC5RMaz09WRs fgHqD+M8RwW7JfJucZFNQs43Md5V3Xw+10c2GjnIRSGexQzsWK/P+kPcdoI1wsHd YDhSqXBAroP26IZ+6qCZnOiNv/TVtlXjLrLPB6Lz6NoljpNAU1JVsoU7BhqRwRtO mc6oVnWwZEtCGeyvS/y0H/AOeB83YuWXZJBiOYK7J2dJwOWc/sPdaip7JY1xx/Ah z9zuq7fzJH+lfX0XSWXHEr4zs/q2q2+KPq8micX2q/8HvOHlJOBz -----END CERTIFICATE-----Generated at Mon Jan 26 12:19:18 2026 by rpki-client