This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/5keHs3ZF32HHKjKjaH3sZPymTNw.roa File: 5keHs3ZF32HHKjKjaH3sZPymTNw.roa (raw, json) Hash identifier: gQldWta3BCOowcdKdH4KVhP0tTXoPexAJ5F4Iq4GDNs= Subject key identifier: E6:47:87:B3:76:45:DF:61:C7:2A:32:A3:68:7D:EC:64:FC:A6:4C:DC Certificate issuer: /CN=6e7eb1318a3cc8834f5c06854bec14f5837746d9 Certificate serial: 019B77595AB100C0FF54BABD985C31F7CCE9 Authority key identifier: 6E:7E:B1:31:8A:3C:C8:83:4F:5C:06:85:4B:EC:14:F5:83:77:46:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bn6xMYo8yINPXAaFS-wU9YN3Rtk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/5keHs3ZF32HHKjKjaH3sZPymTNw.roa Signing time: Thu 01 Jan 2026 02:18:22 +0000 ROA not before: Thu 01 Jan 2026 02:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214836 IP address blocks: 91.212.184.0/24 maxlen: 24 2001:67c:874::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft rsync://rpki.ripe.net/repository/DEFAULT/bn6xMYo8yINPXAaFS-wU9YN3Rtk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:5a:b1:00:c0:ff:54:ba:bd:98:5c:31:f7:cc:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e7eb1318a3cc8834f5c06854bec14f5837746d9 Validity Not Before: Jan 1 02:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e64787b37645df61c72a32a3687dec64fca64cdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:88:49:90:22:c1:a6:f6:e0:14:6b:51:62:e4: c6:b4:59:78:72:48:3a:d3:7e:21:cd:32:20:ba:cd: 85:d8:01:1b:ea:84:68:e6:8f:61:c1:f9:77:e0:db: cd:a9:07:a8:b9:47:b6:90:e7:e2:d5:bc:3f:ef:4d: 4d:c2:4f:d4:61:19:3d:e9:45:8d:80:86:11:76:25: e1:3b:89:89:16:e5:2e:e2:d7:2f:9e:33:af:f4:a2: d4:76:59:1d:86:a4:0d:2d:d1:d6:e8:2e:26:6d:d4: 53:f9:b4:b1:a9:1e:2c:1f:ba:8f:80:7f:50:ee:45: c6:d4:6d:e7:c5:dd:78:49:84:ab:90:6f:af:50:8a: eb:fc:f8:60:c2:1f:c0:1f:e3:39:cd:71:3a:30:fd: 3e:22:e3:28:a7:97:cf:2e:32:7b:b9:c1:f6:6e:38: ef:b4:82:82:72:6b:be:9c:b0:f5:14:4a:c5:30:ed: 97:86:c5:76:f5:88:58:bb:c4:c5:1b:0e:e7:03:1b: ef:98:d2:87:dc:7d:ca:7b:23:fe:48:dc:7d:bb:57: 41:4f:4f:04:18:5c:c2:a3:de:ac:72:3c:b6:a2:05: ea:91:be:6c:4e:d3:e6:06:7d:5a:62:74:ba:95:79: 30:b2:c8:ae:03:60:da:31:72:c6:15:41:82:b8:4a: 6a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:47:87:B3:76:45:DF:61:C7:2A:32:A3:68:7D:EC:64:FC:A6:4C:DC X509v3 Authority Key Identifier: keyid:6E:7E:B1:31:8A:3C:C8:83:4F:5C:06:85:4B:EC:14:F5:83:77:46:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bn6xMYo8yINPXAaFS-wU9YN3Rtk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/5keHs3ZF32HHKjKjaH3sZPymTNw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.184.0/24 IPv6: 2001:67c:874::/48 Signature Algorithm: sha256WithRSAEncryption 03:06:72:e4:a8:80:65:bc:ed:bc:7d:e4:21:8c:ff:87:89:83: 3b:9d:ce:c1:8e:ff:dc:3a:1e:49:5b:e1:74:89:60:69:8f:d6: 90:8c:19:d6:43:d9:0d:15:64:5e:a4:b8:c6:91:39:33:d8:65: 14:b2:e5:c9:a9:b5:86:a7:3f:8f:88:a2:3c:ce:32:d6:3e:78: 66:15:bd:fa:d4:c9:cc:7f:aa:72:86:be:9d:87:b2:02:34:09: e0:18:cd:09:fe:e8:d8:f6:49:82:6b:45:d5:05:1c:e3:b3:a8: c4:bb:34:7b:ca:b9:64:f2:b6:63:66:ba:e2:3e:a6:46:ab:71: d9:e0:79:f7:6f:05:3e:da:ea:c3:60:7f:a3:54:13:25:d3:b2: e0:93:3e:99:0b:20:70:89:d7:50:ad:9f:28:d6:f7:fb:40:08: 0d:65:08:4e:eb:90:0f:30:b5:dc:75:c4:b6:63:ad:63:d0:48: 74:db:60:cc:55:77:b1:0d:0c:73:66:73:b7:fc:fa:d0:4d:fa: 4a:d6:34:57:21:b9:d6:09:40:26:de:fc:64:78:be:dd:23:d4: fe:59:5b:c9:2b:8f:a6:e6:37:a7:ba:f0:e6:cf:78:08:73:00: f8:d4:05:9d:d6:13:47:e3:cb:96:e4:e4:73:e1:34:a6:0c:05: 82:34:1c:dd -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt3WVqxAMD/VLq9mFwx98zpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlN2ViMTMxOGEzY2M4ODM0ZjVjMDY4NTRiZWMxNGY1ODM3 NzQ2ZDkwHhcNMjYwMTAxMDIxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjQ3ODdiMzc2NDVkZjYxYzcyYTMyYTM2ODdkZWM2NGZjYTY0Y2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIhJkCLBpvbgFGtRYuTGtFl4ckg6 034hzTIgus2F2AEb6oRo5o9hwfl34NvNqQeouUe2kOfi1bw/701Nwk/UYRk96UWN gIYRdiXhO4mJFuUu4tcvnjOv9KLUdlkdhqQNLdHW6C4mbdRT+bSxqR4sH7qPgH9Q 7kXG1G3nxd14SYSrkG+vUIrr/Phgwh/AH+M5zXE6MP0+IuMop5fPLjJ7ucH2bjjv tIKCcmu+nLD1FErFMO2XhsV29YhYu8TFGw7nAxvvmNKH3H3KeyP+SNx9u1dBT08E GFzCo96scjy2ogXqkb5sTtPmBn1aYnS6lXkwssiuA2DaMXLGFUGCuEpqaQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFOZHh7N2Rd9hxyoyo2h97GT8pkzcMB8GA1UdIwQY MBaAFG5+sTGKPMiDT1wGhUvsFPWDd0bZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm42eE1Zbzh5SU5QWEFhRlMtd1U5WU4zUnRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8yMjhjNDgtMGNjZS00YjgyLThhZDkt OTlhODA3MDBhNTViLzEvNWtlSHMzWkYzMkhIS2pLamFIM3NaUHltVE53LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC8yMjhjNDgtMGNjZS00YjgyLThhZDktOTlhODA3MDBhNTVi LzEvYm42eE1Zbzh5SU5QWEFhRlMtd1U5WU4zUnRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW9S4MA8E AgACMAkDBwAgAQZ8CHQwDQYJKoZIhvcNAQELBQADggEBAAMGcuSogGW87bx95CGM /4eJgzudzsGO/9w6Hklb4XSJYGmP1pCMGdZD2Q0VZF6kuMaROTPYZRSy5cmptYan P4+IojzOMtY+eGYVvfrUycx/qnKGvp2HsgI0CeAYzQn+6Nj2SYJrRdUFHOOzqMS7 NHvKuWTytmNmuuI+pkarcdngefdvBT7a6sNgf6NUEyXTsuCTPpkLIHCJ11CtnyjW 9/tACA1lCE7rkA8wtdx1xLZjrWPQSHTbYMxVd7ENDHNmc7f8+tBN+krWNFchudYJ QCbe/GR4vt0j1P5ZW8krj6bmN6e68ObPeAhzAPjUBZ3WE0fjy5bk5HPhNKYMBYI0 HN0= -----END CERTIFICATE-----Generated at Mon Jan 26 10:14:04 2026 by rpki-client