This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/5WTOPfP4GIE5sx5MkNTYwg1UDCw.roa File: 5WTOPfP4GIE5sx5MkNTYwg1UDCw.roa (raw, json) Hash identifier: wiv18quwyClsd4yVsJMpmHhiUfcPB5/Y1Yp9XFRzyRk= Subject key identifier: E5:64:CE:3D:F3:F8:18:81:39:B3:1E:4C:90:D4:D8:C2:0D:54:0C:2C Certificate issuer: /CN=8968883765549991d7ff376126d58a909a14b8f1 Certificate serial: 019B7F8207644F5510ECB17E01CF8B970099 Authority key identifier: 89:68:88:37:65:54:99:91:D7:FF:37:61:26:D5:8A:90:9A:14:B8:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWiIN2VUmZHX_zdhJtWKkJoUuPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/5WTOPfP4GIE5sx5MkNTYwg1UDCw.roa Signing time: Fri 02 Jan 2026 16:19:46 +0000 ROA not before: Fri 02 Jan 2026 16:19:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52194 IP address blocks: 91.203.234.0/24 maxlen: 24 91.241.47.0/24 maxlen: 24 193.19.110.0/24 maxlen: 24 193.106.97.0/24 maxlen: 24 194.242.26.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.crl rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft rsync://rpki.ripe.net/repository/DEFAULT/iWiIN2VUmZHX_zdhJtWKkJoUuPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:07:64:4f:55:10:ec:b1:7e:01:cf:8b:97:00:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8968883765549991d7ff376126d58a909a14b8f1 Validity Not Before: Jan 2 16:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e564ce3df3f8188139b31e4c90d4d8c20d540c2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fd:ac:8f:b1:4b:49:28:97:ea:56:d9:e5:c6: 39:41:90:f8:01:73:d9:cb:cb:89:c5:28:7c:e8:dd: cb:a3:f4:73:87:77:2e:dd:a0:45:e3:98:69:8f:90: 4c:ad:17:3c:c7:9a:b4:d5:5f:d6:d8:04:7b:f0:68: cd:1d:9c:86:86:3c:2e:50:43:e5:de:01:6f:78:86: 14:c0:a1:15:66:b8:a4:c0:04:ec:3b:97:11:97:eb: d1:14:87:ea:ae:f9:ea:ca:9e:5d:62:d9:af:f5:17: 6f:99:af:b9:8b:7a:18:96:5e:c2:42:43:22:ff:63: ba:7e:8c:9b:54:d1:81:a2:f3:db:1f:c0:96:99:2d: ae:f5:76:aa:40:c9:39:9c:e4:58:a8:e7:a3:03:3e: 58:4e:9b:50:e9:b5:61:c8:44:37:ab:fb:3b:f8:61: b0:1e:ba:c2:b5:6b:64:ee:54:72:ba:31:73:7b:2e: b5:a9:a6:09:1e:c2:3b:9a:7e:e3:a8:6f:2c:6e:b9: 69:36:26:2f:f2:15:a2:1f:91:72:40:a4:4e:90:98: 52:24:0b:08:57:6e:e8:17:b3:93:62:07:0a:7d:44: dc:fe:da:95:73:b8:ea:0d:6a:4e:d0:1f:11:89:52: 17:05:dd:19:5a:d1:a0:9d:e2:fe:bf:4e:f5:a5:13: 95:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:64:CE:3D:F3:F8:18:81:39:B3:1E:4C:90:D4:D8:C2:0D:54:0C:2C X509v3 Authority Key Identifier: keyid:89:68:88:37:65:54:99:91:D7:FF:37:61:26:D5:8A:90:9A:14:B8:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWiIN2VUmZHX_zdhJtWKkJoUuPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/5WTOPfP4GIE5sx5MkNTYwg1UDCw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.203.234.0/24 91.241.47.0/24 193.19.110.0/24 193.106.97.0/24 194.242.26.0/23 Signature Algorithm: sha256WithRSAEncryption 86:28:11:e2:e3:c1:d8:ce:dc:8c:3e:a3:83:3b:71:a3:18:d5: 58:c3:59:70:11:6e:a5:b3:3e:3f:fa:3b:27:34:29:b6:a6:2d: ec:79:f8:3b:1e:ed:62:8b:1b:1b:54:96:df:1b:87:1e:3f:3e: 4d:83:02:c2:97:5a:d0:8a:95:98:0f:47:25:85:49:54:7a:46: 02:0c:23:6f:da:66:24:7d:a1:05:5a:e0:6c:7b:a3:d3:e3:be: 1a:81:e7:c9:04:1c:db:73:51:1f:37:f5:c0:56:da:7c:c2:20: 6f:b7:44:c5:aa:8a:95:e2:1b:99:57:e2:b4:10:f0:27:c4:5f: c1:47:ba:d0:06:d2:d7:e3:30:1f:c0:48:ae:46:b8:6f:11:7a: dd:64:ce:35:5d:7d:86:c2:1c:f4:a9:aa:0b:32:e0:96:f8:90: a0:d3:87:44:3a:f0:ed:c9:66:4c:bf:de:be:f7:1b:c3:91:f3: 36:db:d6:73:a5:1c:ca:e4:ff:d4:0a:8a:66:aa:b5:98:cb:47: 80:e8:7b:6f:c7:5d:70:76:2f:36:d6:4d:5d:b3:92:d3:6d:cd: ae:f8:e9:3f:76:8e:9f:60:3c:c0:82:1e:c9:cd:e0:90:72:ff: 94:dc:97:ff:ce:f0:4c:c5:4e:41:8e:be:2d:e6:c0:95:a2:67: f2:8f:0f:12 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt/ggdkT1UQ7LF+Ac+LlwCZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5Njg4ODM3NjU1NDk5OTFkN2ZmMzc2MTI2ZDU4YTkwOWEx NGI4ZjEwHhcNMjYwMTAyMTYxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTY0Y2UzZGYzZjgxODgxMzliMzFlNGM5MGQ0ZDhjMjBkNTQwYzJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/2sj7FLSSiX6lbZ5cY5QZD4AXPZ y8uJxSh86N3Lo/Rzh3cu3aBF45hpj5BMrRc8x5q01V/W2AR78GjNHZyGhjwuUEPl 3gFveIYUwKEVZrikwATsO5cRl+vRFIfqrvnqyp5dYtmv9Rdvma+5i3oYll7CQkMi /2O6foybVNGBovPbH8CWmS2u9XaqQMk5nORYqOejAz5YTptQ6bVhyEQ3q/s7+GGw HrrCtWtk7lRyujFzey61qaYJHsI7mn7jqG8sbrlpNiYv8hWiH5FyQKROkJhSJAsI V27oF7OTYgcKfUTc/tqVc7jqDWpO0B8RiVIXBd0ZWtGgneL+v071pROVjQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFOVkzj3z+BiBObMeTJDU2MINVAwsMB8GA1UdIwQY MBaAFIloiDdlVJmR1/83YSbVipCaFLjxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVdpSU4yVlVtWkhYX3pkaEp0V0trSm9VdVBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9jMTcxZDQtMDY3Mi00MTRkLWEwMmQt Y2QwMjdhMDY4MWJkLzEvNVdUT1BmUDRHSUU1c3g1TWtOVFl3ZzFVREN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9jMTcxZDQtMDY3Mi00MTRkLWEwMmQtY2QwMjdhMDY4MWJk LzEvaVdpSU4yVlVtWkhYX3pkaEp0V0trSm9VdVBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAW8vqAwQA W/EvAwQAwRNuAwQAwWphAwQBwvIaMA0GCSqGSIb3DQEBCwUAA4IBAQCGKBHi48HY ztyMPqODO3GjGNVYw1lwEW6lsz4/+jsnNCm2pi3sefg7Hu1iixsbVJbfG4cePz5N gwLCl1rQipWYD0clhUlUekYCDCNv2mYkfaEFWuBse6PT474agefJBBzbc1EfN/XA Vtp8wiBvt0TFqoqV4huZV+K0EPAnxF/BR7rQBtLX4zAfwEiuRrhvEXrdZM41XX2G whz0qaoLMuCW+JCg04dEOvDtyWZMv96+9xvDkfM229ZzpRzK5P/UCopmqrWYy0eA 6Htvx11wdi821k1ds5LTbc2u+Ok/do6fYDzAgh7JzeCQcv+U3Jf/zvBMxU5Bjr4t 5sCVomfyjw8S -----END CERTIFICATE-----Generated at Sun Jan 25 14:36:34 2026 by rpki-client