This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/kV5aHtGuvX5zjjkUPTgvJgGxAhs.roa File: kV5aHtGuvX5zjjkUPTgvJgGxAhs.roa (raw, json) Hash identifier: RmDZVqDTWxbHbVHJYI+dt1cvutcS51g0agILS9swwck= Subject key identifier: 91:5E:5A:1E:D1:AE:BD:7E:73:8E:39:14:3D:38:2F:26:01:B1:02:1B Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Certificate serial: 019B79ECBFCD22B63858E0B0FFCF25F53C01 Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/kV5aHtGuvX5zjjkUPTgvJgGxAhs.roa Signing time: Thu 01 Jan 2026 14:18:37 +0000 ROA not before: Thu 01 Jan 2026 14:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198156 IP address blocks: 91.106.29.0/24 maxlen: 24 212.7.216.0/24 maxlen: 24 2a01:6e80:fffe::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:bf:cd:22:b6:38:58:e0:b0:ff:cf:25:f5:3c:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Validity Not Before: Jan 1 14:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=915e5a1ed1aebd7e738e39143d382f2601b1021b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:59:3e:37:88:b5:7f:cf:55:7f:ae:9e:63:b2: de:f5:c2:b4:70:34:11:c2:20:a7:37:5d:40:61:51: 0d:29:75:7f:f9:4c:46:fb:70:9b:6f:40:0b:91:e6: 55:6b:7f:63:b1:17:ec:0d:54:4e:b2:f7:8d:ad:a1: 6f:98:35:bf:5a:fd:f7:10:21:80:d7:fb:4b:a0:7c: 52:b4:02:df:2f:7d:ca:ee:3c:a2:a7:a1:8a:78:14: 7f:a8:26:6e:b3:ff:d5:fa:17:fe:f6:74:13:67:6b: 92:98:09:10:15:4d:05:bd:c7:43:f1:41:78:3f:77: 5f:f3:52:14:6a:ee:78:9f:97:1b:d6:2e:2b:2e:d8: aa:bb:58:d0:16:4a:a3:63:48:02:7f:73:bc:71:b6: 96:34:ca:53:2d:21:c2:08:5e:cd:f7:f4:ae:0e:3a: 49:8d:42:1f:e5:bb:44:1e:69:2b:75:ca:de:2a:d7: 43:44:bb:df:71:9e:13:e9:c0:75:95:42:10:08:83: c9:1c:f3:d2:88:54:64:a5:16:db:0e:ff:dc:83:27: a2:a5:c7:72:2c:fb:0f:4e:0c:7e:13:4a:82:a3:c2: 2a:ed:e7:86:b8:26:16:c0:cc:10:32:ed:14:52:ba: 24:bb:ee:88:ac:da:e8:a0:8f:35:c9:f8:eb:6e:33: 72:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:5E:5A:1E:D1:AE:BD:7E:73:8E:39:14:3D:38:2F:26:01:B1:02:1B X509v3 Authority Key Identifier: keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/kV5aHtGuvX5zjjkUPTgvJgGxAhs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.106.29.0/24 212.7.216.0/24 IPv6: 2a01:6e80:fffe::/48 Signature Algorithm: sha256WithRSAEncryption 5d:f0:49:86:3c:90:43:31:cd:e6:ba:3a:58:b8:02:2c:ae:41: 1d:68:37:6c:62:24:0b:71:3d:cc:83:db:a3:95:b4:39:ef:1d: 85:4d:e2:dc:82:26:7d:0b:4d:a3:af:20:ee:ae:d9:79:fe:66: 81:6c:f5:40:0f:3a:ac:d4:f6:10:e6:c7:ac:fb:75:4b:39:47: eb:93:a5:33:fb:91:7c:fa:0b:81:e2:d0:b6:f8:83:5e:3a:d0: 20:30:8b:22:78:c7:43:df:e5:e9:d4:13:86:d3:33:57:ff:48: 7e:1e:20:8e:cd:d8:b0:e7:24:a7:75:a1:d2:88:0a:90:59:b2: ae:8c:28:5e:8a:98:38:fb:2d:cf:c3:49:e5:ec:7c:0a:11:4a: b4:de:95:74:39:07:cc:bb:1b:3d:f9:2f:cf:86:3d:61:a5:bd: b0:da:41:e6:54:da:42:ef:38:df:93:53:89:46:60:af:40:6a: ab:0b:67:61:93:db:35:0f:72:92:dd:b2:a7:74:98:1c:04:9b: 37:89:e1:3e:63:d9:ec:e1:98:ef:f5:6a:b6:1a:ef:1c:38:5c: 49:1f:ab:8d:72:2d:89:4e:0b:fb:51:07:52:ab:40:a6:e4:30: 92:32:bd:68:74:f2:c1:84:36:b6:cf:d5:8c:59:a4:74:7d:37: 8f:2c:b2:4a -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt57L/NIrY4WOCw/88l9TwBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MWEyZmQ2ZjVlNWFmODdkNWNlYTA5NTA2NmZiY2MzZDNl NTQ2YTQwHhcNMjYwMTAxMTQxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTVlNWExZWQxYWViZDdlNzM4ZTM5MTQzZDM4MmYyNjAxYjEwMjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lk+N4i1f89Vf66eY7Le9cK0cDQR wiCnN11AYVENKXV/+UxG+3Cbb0ALkeZVa39jsRfsDVROsveNraFvmDW/Wv33ECGA 1/tLoHxStALfL33K7jyip6GKeBR/qCZus//V+hf+9nQTZ2uSmAkQFU0FvcdD8UF4 P3df81IUau54n5cb1i4rLtiqu1jQFkqjY0gCf3O8cbaWNMpTLSHCCF7N9/SuDjpJ jUIf5btEHmkrdcreKtdDRLvfcZ4T6cB1lUIQCIPJHPPSiFRkpRbbDv/cgyeipcdy LPsPTgx+E0qCo8Iq7eeGuCYWwMwQMu0UUroku+6IrNrooI81yfjrbjNy9QIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFJFeWh7Rrr1+c445FD04LyYBsQIbMB8GA1UdIwQY MBaAFDUaL9b15a+H1c6glQZvvMPT5UakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODIt MjMwNDllNGQyZjEyLzEva1Y1YUh0R3V2WDV6amprVVBUZ3ZKZ0d4QWhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODItMjMwNDllNGQyZjEy LzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAW2odAwQA 1AfYMA8EAgACMAkDBwAqAW6A//4wDQYJKoZIhvcNAQELBQADggEBAF3wSYY8kEMx zea6Oli4AiyuQR1oN2xiJAtxPcyD26OVtDnvHYVN4tyCJn0LTaOvIO6u2Xn+ZoFs 9UAPOqzU9hDmx6z7dUs5R+uTpTP7kXz6C4Hi0Lb4g1460CAwiyJ4x0Pf5enUE4bT M1f/SH4eII7N2LDnJKd1odKICpBZsq6MKF6KmDj7Lc/DSeXsfAoRSrTelXQ5B8y7 Gz35L8+GPWGlvbDaQeZU2kLvON+TU4lGYK9AaqsLZ2GT2zUPcpLdsqd0mBwEmzeJ 4T5j2ezhmO/1arYa7xw4XEkfq41yLYlOC/tRB1KrQKbkMJIyvWh08sGENrbP1YxZ pHR9N48ssko= -----END CERTIFICATE-----Generated at Mon Jan 26 05:33:35 2026 by rpki-client