This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/p5uygMovU567H0ml5c8C_ZDtiZY.roa File: p5uygMovU567H0ml5c8C_ZDtiZY.roa (raw, json) Hash identifier: PWQLRe33NpLQ7v5TkzLMs7Rxm+rn1zWzKAt3r3JdpTc= Subject key identifier: A7:9B:B2:80:CA:2F:53:9E:BB:1F:49:A5:E5:CF:02:FD:90:ED:89:96 Certificate issuer: /CN=cb335dc6feb385f6a23344056a13c2c595028e91 Certificate serial: 019B7DC92AA42C8367D47A2B029009EE4B6A Authority key identifier: CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/p5uygMovU567H0ml5c8C_ZDtiZY.roa Signing time: Fri 02 Jan 2026 08:18:14 +0000 ROA not before: Fri 02 Jan 2026 08:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41652 IP address blocks: 45.80.0.0/22 maxlen: 22 91.223.131.0/24 maxlen: 24 193.26.14.0/24 maxlen: 24 193.26.21.0/24 maxlen: 24 193.26.22.0/24 maxlen: 24 2a0e:3780::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.crl rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:2a:a4:2c:83:67:d4:7a:2b:02:90:09:ee:4b:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb335dc6feb385f6a23344056a13c2c595028e91 Validity Not Before: Jan 2 08:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a79bb280ca2f539ebb1f49a5e5cf02fd90ed8996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c5:52:d8:49:ba:39:02:f1:a2:08:01:a0:11: 53:69:72:f4:e7:8e:65:8b:25:05:88:ac:dd:36:1f: 74:f8:54:57:55:4e:97:0f:10:a3:a9:48:d5:a3:fb: e5:15:0c:4e:ff:9b:14:dc:ff:48:e6:f7:bc:5e:59: 29:64:b4:98:51:9e:ac:a7:ea:c2:5b:8d:5c:38:9a: de:da:58:27:a5:d8:87:7a:ee:9b:26:42:8e:fa:b3: 00:81:82:e7:df:18:8c:ef:fd:a3:3c:59:d4:e8:cf: 92:3b:93:9d:82:52:0d:c8:e1:ad:61:7b:de:80:2a: 22:62:98:3e:d4:f4:55:e1:06:e9:a5:a1:37:ff:be: 88:23:a9:ac:2e:6d:e9:33:48:19:af:95:22:0a:f8: e3:d7:a0:d7:8c:a6:f7:89:91:6a:49:4d:78:75:c1: 91:43:21:31:ef:bd:df:0d:0a:38:df:b3:e2:27:1a: 36:d3:e4:25:ce:e6:58:e0:fd:9b:d8:e2:45:6e:05: cc:ca:13:5a:f5:34:86:00:2a:54:a0:7d:87:fe:c2: 7c:f3:04:ed:25:df:7e:62:6a:dc:8f:c5:22:01:ac: b8:b8:af:96:df:4f:6c:18:a1:d9:c5:92:72:10:10: 3f:40:75:4b:4f:39:b0:86:b3:9b:92:ac:ff:d9:e0: 7b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:9B:B2:80:CA:2F:53:9E:BB:1F:49:A5:E5:CF:02:FD:90:ED:89:96 X509v3 Authority Key Identifier: keyid:CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/p5uygMovU567H0ml5c8C_ZDtiZY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.80.0.0/22 91.223.131.0/24 193.26.14.0/24 193.26.21.0-193.26.22.255 IPv6: 2a0e:3780::/29 Signature Algorithm: sha256WithRSAEncryption 8f:72:6d:b3:a0:b1:ed:7c:68:67:f0:97:25:1e:64:a8:97:fb: b3:7a:52:dc:96:b7:64:0c:94:93:6b:a2:69:f7:b2:c6:9e:c1: 0d:af:d6:a7:3a:f6:d0:ac:f6:b4:b1:cb:d8:ec:5d:b4:71:da: 12:16:1a:bb:d7:d1:0b:f6:69:e9:36:4d:b9:07:0f:b8:b5:42: ed:36:23:1b:50:a3:ce:84:88:60:d3:c0:2b:e6:48:51:19:ba: 60:ef:f4:02:16:72:54:c3:f3:a0:fd:1e:ee:d7:d8:83:05:92: c1:e4:7b:28:96:94:91:af:a5:8d:9c:fe:b7:82:d3:82:3f:c4: 05:8b:05:05:f5:86:91:7a:1d:44:eb:6b:42:8f:7b:49:38:57: 43:6f:2d:fa:0e:d6:e3:83:59:ba:8d:f3:76:8c:72:22:e1:c1: 77:77:b4:2e:95:74:00:ba:e6:20:8c:e2:38:76:3b:ce:52:ea: e7:f1:63:08:00:15:8e:9f:83:8b:14:d3:74:99:b8:c0:b5:b1: 38:be:93:38:dd:a1:39:e2:9d:7d:15:76:70:17:ea:b2:51:c6: 31:6a:71:24:5e:1a:8b:9b:5c:38:7f:c3:00:8d:0d:d0:25:4c: b2:1c:d6:88:4d:02:2b:38:7e:3a:e2:eb:a1:89:a6:ac:83:1f: 9d:53:6f:b0 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISAZt9ySqkLINn1HorApAJ7ktqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMzM1ZGM2ZmViMzg1ZjZhMjMzNDQwNTZhMTNjMmM1OTUw MjhlOTEwHhcNMjYwMTAyMDgxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzliYjI4MGNhMmY1MzllYmIxZjQ5YTVlNWNmMDJmZDkwZWQ4OTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsVS2Em6OQLxoggBoBFTaXL0545l iyUFiKzdNh90+FRXVU6XDxCjqUjVo/vlFQxO/5sU3P9I5ve8XlkpZLSYUZ6sp+rC W41cOJre2lgnpdiHeu6bJkKO+rMAgYLn3xiM7/2jPFnU6M+SO5OdglINyOGtYXve gCoiYpg+1PRV4QbppaE3/76II6msLm3pM0gZr5UiCvjj16DXjKb3iZFqSU14dcGR QyEx773fDQo437PiJxo20+QlzuZY4P2b2OJFbgXMyhNa9TSGACpUoH2H/sJ88wTt Jd9+Ymrcj8UiAay4uK+W309sGKHZxZJyEBA/QHVLTzmwhrObkqz/2eB7WwIDAQAB o4ICMjCCAi4wHQYDVR0OBBYEFKebsoDKL1Oeux9JpeXPAv2Q7YmWMB8GA1UdIwQY MBaAFMszXcb+s4X2ojNEBWoTwsWVAo6RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXpOZHh2NnpoZmFpTTBRRmFoUEN4WlVDanBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9mYTM0MmUtYjNiYy00MzczLThjNmIt ODg1NGM4MmI1NDVkLzEvcDV1eWdNb3ZVNTY3SDBtbDVjOENfWkR0aVpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9mYTM0MmUtYjNiYy00MzczLThjNmItODg1NGM4MmI1NDVk LzEveXpOZHh2NnpoZmFpTTBRRmFoUEN4WlVDanBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAmBAIAATAgAwQCLVAAAwQA W9+DAwQAwRoOMAwDBADBGhUDBADBGhYwDQQCAAIwBwMFAyoON4AwDQYJKoZIhvcN AQELBQADggEBAI9ybbOgse18aGfwlyUeZKiX+7N6UtyWt2QMlJNromn3ssaewQ2v 1qc69tCs9rSxy9jsXbRx2hIWGrvX0Qv2aek2TbkHD7i1Qu02IxtQo86EiGDTwCvm SFEZumDv9AIWclTD86D9Hu7X2IMFksHkeyiWlJGvpY2c/reC04I/xAWLBQX1hpF6 HUTra0KPe0k4V0NvLfoO1uODWbqN83aMciLhwXd3tC6VdAC65iCM4jh2O85S6ufx YwgAFY6fg4sU03SZuMC1sTi+kzjdoTninX0VdnAX6rJRxjFqcSReGoubXDh/wwCN DdAlTLIc1ohNAis4fjri66GJpqyDH51Tb7A= -----END CERTIFICATE-----Generated at Mon Jan 26 12:22:09 2026 by rpki-client