This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/5CrZJSgU3umnhBpv3SBW8GVEgqE.roa File: 5CrZJSgU3umnhBpv3SBW8GVEgqE.roa (raw, json) Hash identifier: 2gixcHV7KBq6bvuQpRe8OX0ebav7J2q4kd7P6HGr740= Subject key identifier: E4:2A:D9:25:28:14:DE:E9:A7:84:1A:6F:DD:20:56:F0:65:44:82:A1 Certificate issuer: /CN=2bc8695772f0e64f3b9a1621733cc02506f74702 Certificate serial: 019B791147A9D2C4C7F8D219FF8E9797ACAF Authority key identifier: 2B:C8:69:57:72:F0:E6:4F:3B:9A:16:21:73:3C:C0:25:06:F7:47:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K8hpV3Lw5k87mhYhczzAJQb3RwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/5CrZJSgU3umnhBpv3SBW8GVEgqE.roa Signing time: Thu 01 Jan 2026 10:18:54 +0000 ROA not before: Thu 01 Jan 2026 10:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13044 IP address blocks: 91.188.208.0/24 maxlen: 24 91.188.209.0/24 maxlen: 24 91.188.210.0/24 maxlen: 24 91.188.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.mft rsync://rpki.ripe.net/repository/DEFAULT/K8hpV3Lw5k87mhYhczzAJQb3RwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:47:a9:d2:c4:c7:f8:d2:19:ff:8e:97:97:ac:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc8695772f0e64f3b9a1621733cc02506f74702 Validity Not Before: Jan 1 10:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e42ad9252814dee9a7841a6fdd2056f0654482a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:54:ce:c2:fb:6e:6e:ec:92:10:59:88:9a:55: be:03:ac:08:a1:c1:2e:bc:36:cb:00:87:fe:9a:87: 74:2a:3c:d4:a0:65:17:75:ed:d1:0f:e4:99:ea:90: 9d:1d:ed:62:e8:c3:11:28:d4:4d:b0:09:dd:e6:39: 73:fd:1c:7a:91:25:2e:a6:51:54:a3:6d:11:0e:c7: 38:bd:b0:b9:7e:1a:09:25:fd:d2:c5:87:43:cc:5f: 38:71:26:9e:9c:8c:dd:87:f8:32:7a:89:69:e9:91: 81:5f:6e:02:6f:c5:be:e0:5b:50:35:6b:d4:8f:fd: 2b:df:cb:1c:21:a0:e7:73:62:14:fe:a1:f9:8f:89: d0:0b:b7:b5:7d:e0:4e:17:3f:60:18:5c:fd:84:e6: 74:3e:e6:52:55:48:c0:a8:2f:7d:b6:62:b6:d9:d1: 72:e8:f0:f8:68:6b:20:d5:b6:8b:92:e2:ea:58:ef: d8:75:57:55:a0:54:71:73:61:e0:4b:db:e7:7b:2f: ab:25:4d:ab:95:17:f2:a9:73:20:bc:d8:f0:af:76: fe:76:78:ea:34:fb:a4:cd:a0:5f:a8:97:bb:d4:c0: 57:dc:93:a0:89:74:60:53:9b:63:c5:cd:54:f0:6e: cf:ba:f7:48:71:b2:f9:4f:b6:ad:e9:fc:d9:74:94: da:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:2A:D9:25:28:14:DE:E9:A7:84:1A:6F:DD:20:56:F0:65:44:82:A1 X509v3 Authority Key Identifier: keyid:2B:C8:69:57:72:F0:E6:4F:3B:9A:16:21:73:3C:C0:25:06:F7:47:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8hpV3Lw5k87mhYhczzAJQb3RwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/5CrZJSgU3umnhBpv3SBW8GVEgqE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.188.208.0/22 Signature Algorithm: sha256WithRSAEncryption 60:a9:5e:d9:86:8e:44:35:19:02:8a:38:2a:b3:ce:44:ce:16: 24:4a:d5:20:f0:42:52:13:30:2e:9a:28:76:d3:64:48:3d:1d: 05:10:d7:90:66:41:8b:c5:32:ac:dc:60:10:a0:92:46:54:e1: 7d:43:c1:f7:8f:16:27:0d:e4:b3:bb:c3:ec:41:bb:17:bd:3a: d0:61:04:33:6f:b7:11:dd:8e:9a:cb:9d:6b:9a:1f:42:a4:0d: 3b:2e:f4:c9:a8:3d:af:a9:f0:12:ce:4d:a5:7a:4a:aa:30:56: 92:07:1d:06:58:28:1f:b8:b5:b2:ac:48:44:83:05:7d:02:f1: 27:00:65:26:27:97:60:09:d4:5e:e6:f0:c3:be:7d:b9:fc:05: 8d:07:f8:c9:df:eb:7c:3a:7c:28:f9:41:e7:ec:41:80:9a:cb: f3:49:e2:33:c9:23:9b:f4:35:7e:40:c0:a9:8d:cb:77:c2:91: 74:34:ba:ef:be:02:64:2b:b2:a9:c9:85:20:cd:c9:ff:9b:4b: e6:34:d3:15:d6:09:13:c5:4f:f8:97:b9:ac:03:9c:a3:43:7c: 51:e6:36:e3:a6:22:38:ca:99:c3:f0:69:d5:fa:46:37:7b:5b: 63:17:96:a2:35:1c:fe:23:fa:40:54:29:52:4d:ce:92:b3:7c: fb:83:92:5f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EUep0sTH+NIZ/46Xl6yvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiYzg2OTU3NzJmMGU2NGYzYjlhMTYyMTczM2NjMDI1MDZm NzQ3MDIwHhcNMjYwMTAxMTAxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDJhZDkyNTI4MTRkZWU5YTc4NDFhNmZkZDIwNTZmMDY1NDQ4MmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1TOwvtubuySEFmImlW+A6wIocEu vDbLAIf+mod0KjzUoGUXde3RD+SZ6pCdHe1i6MMRKNRNsAnd5jlz/Rx6kSUuplFU o20RDsc4vbC5fhoJJf3SxYdDzF84cSaenIzdh/gyeolp6ZGBX24Cb8W+4FtQNWvU j/0r38scIaDnc2IU/qH5j4nQC7e1feBOFz9gGFz9hOZ0PuZSVUjAqC99tmK22dFy 6PD4aGsg1baLkuLqWO/YdVdVoFRxc2HgS9vney+rJU2rlRfyqXMgvNjwr3b+dnjq NPukzaBfqJe71MBX3JOgiXRgU5tjxc1U8G7PuvdIcbL5T7at6fzZdJTaawIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOQq2SUoFN7pp4Qab90gVvBlRIKhMB8GA1UdIwQY MBaAFCvIaVdy8OZPO5oWIXM8wCUG90cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzhocFYzTHc1azg3bWhZaGN6ekFKUWIzUndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9jYmZhOWItMDI5MS00OGUzLTgwNWMt NDNkNjZhMDMzMWVjLzEvNUNyWkpTZ1UzdW1uaEJwdjNTQlc4R1ZFZ3FFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9jYmZhOWItMDI5MS00OGUzLTgwNWMtNDNkNjZhMDMzMWVj LzEvSzhocFYzTHc1azg3bWhZaGN6ekFKUWIzUndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW7zQMA0G CSqGSIb3DQEBCwUAA4IBAQBgqV7Zho5ENRkCijgqs85EzhYkStUg8EJSEzAumih2 02RIPR0FENeQZkGLxTKs3GAQoJJGVOF9Q8H3jxYnDeSzu8PsQbsXvTrQYQQzb7cR 3Y6ay51rmh9CpA07LvTJqD2vqfASzk2lekqqMFaSBx0GWCgfuLWyrEhEgwV9AvEn AGUmJ5dgCdRe5vDDvn25/AWNB/jJ3+t8Onwo+UHn7EGAmsvzSeIzySOb9DV+QMCp jct3wpF0NLrvvgJkK7KpyYUgzcn/m0vmNNMV1gkTxU/4l7msA5yjQ3xR5jbjpiI4 ypnD8GnV+kY3e1tjF5aiNRz+I/pAVClSTc6Ss3z7g5Jf -----END CERTIFICATE-----Generated at Mon Jan 26 04:50:32 2026 by rpki-client