This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/N5fVoCVJatkBr9HD3lEC3qJcVm4.roa File: N5fVoCVJatkBr9HD3lEC3qJcVm4.roa (raw, json) Hash identifier: +gtsovlf25wXEpp6+Ig2oa80di25wrgdYStBihsirkQ= Subject key identifier: 37:97:D5:A0:25:49:6A:D9:01:AF:D1:C3:DE:51:02:DE:A2:5C:56:6E Certificate issuer: /CN=f6090b4db06a4d65935141bac98098127a8b8f5a Certificate serial: 019B7BA500F2AA292C59D4964F7182C900AA Authority key identifier: F6:09:0B:4D:B0:6A:4D:65:93:51:41:BA:C9:80:98:12:7A:8B:8F:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/N5fVoCVJatkBr9HD3lEC3qJcVm4.roa Signing time: Thu 01 Jan 2026 22:19:29 +0000 ROA not before: Thu 01 Jan 2026 22:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216457 IP address blocks: 91.208.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.mft rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:00:f2:aa:29:2c:59:d4:96:4f:71:82:c9:00:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6090b4db06a4d65935141bac98098127a8b8f5a Validity Not Before: Jan 1 22:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3797d5a025496ad901afd1c3de5102dea25c566e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:33:a9:70:bf:de:36:ea:07:e7:64:ed:b9:1c: 9d:09:bc:21:19:23:8d:e3:08:3c:15:46:fe:f7:e5: 8c:bc:1b:0b:24:bc:1e:cc:9d:cf:d5:4d:1e:99:01: 0e:60:f8:ac:18:d8:05:b1:29:26:c1:46:44:82:0d: 53:18:c3:65:fe:1d:3a:f6:a4:da:fc:cb:ea:aa:03: 5b:44:cf:a9:72:f0:b0:5f:9a:c2:ca:38:19:48:66: 2b:ab:51:66:fb:a3:c0:9d:fa:48:d1:be:f8:89:bf: 2f:e8:5e:01:04:dc:3f:a5:7b:93:40:b8:fc:99:3a: 33:9b:e7:f2:28:f5:32:ae:5e:aa:47:4c:4e:ec:57: 0f:87:87:81:b3:59:4b:5a:92:55:c2:ef:ac:b4:9c: 5e:25:93:17:5c:6b:09:fc:5f:9d:65:21:4a:df:41: 31:8c:8d:5a:1a:7c:85:4a:21:60:e3:dc:35:d9:64: 72:5e:97:2f:8b:cb:32:c0:0d:cb:c1:c5:28:4e:b4: 76:6d:62:b5:fa:e3:59:ad:cc:81:c0:ec:9f:d3:25: 1a:02:63:54:5b:71:71:7d:cc:41:7d:f0:a8:51:d9: e7:9c:44:93:f1:fd:1c:e5:0c:86:e1:21:13:70:9b: 8b:c6:d0:d7:85:ee:1c:fb:a1:f4:04:b6:41:54:e1: 4a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:97:D5:A0:25:49:6A:D9:01:AF:D1:C3:DE:51:02:DE:A2:5C:56:6E X509v3 Authority Key Identifier: keyid:F6:09:0B:4D:B0:6A:4D:65:93:51:41:BA:C9:80:98:12:7A:8B:8F:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/N5fVoCVJatkBr9HD3lEC3qJcVm4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.113.0/24 Signature Algorithm: sha256WithRSAEncryption 39:58:7c:89:25:df:13:77:76:f6:85:20:98:d7:e2:b7:8d:37: cd:80:20:54:38:05:24:99:66:cf:28:0a:88:bb:da:06:36:56: 1b:4f:20:98:89:b0:d3:bc:e0:cb:2d:3c:1e:6d:7f:ea:26:53: 80:67:b0:8f:11:56:41:9d:d7:9e:57:01:11:b9:94:80:72:ab: 93:49:95:d0:f2:dc:53:22:0c:6f:e8:0f:81:19:44:6b:24:7a: f0:de:76:d1:fd:c0:1e:28:3f:b8:f1:c9:0c:3f:32:f8:27:7a: 9d:64:7d:7d:ad:35:54:e1:88:62:f9:82:3e:3e:ce:72:83:ef: 0d:a4:58:41:57:99:f8:bc:97:c1:51:05:53:4d:31:36:a0:ac: ed:3c:3b:4b:78:5c:91:49:b0:a3:e3:9c:78:be:36:7b:29:09: 16:90:b6:bc:b0:fa:94:a3:73:f2:8a:9d:84:ca:1b:73:5f:21: 54:5f:2c:e7:d7:8a:20:b9:3c:8c:e4:f6:f1:1b:4f:43:e3:0c: b7:ea:13:14:f1:8d:58:ca:2e:9f:99:23:e3:04:89:6e:d0:a4: ec:65:7d:0d:8b:ef:e3:09:08:2b:ef:51:23:18:6f:c8:17:55: f6:45:01:18:c9:a0:08:7d:ee:2f:b0:c2:c9:3b:2a:94:29:d3: b6:a8:3d:5a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pQDyqiksWdSWT3GCyQCqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2MDkwYjRkYjA2YTRkNjU5MzUxNDFiYWM5ODA5ODEyN2E4 YjhmNWEwHhcNMjYwMTAxMjIxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzk3ZDVhMDI1NDk2YWQ5MDFhZmQxYzNkZTUxMDJkZWEyNWM1NjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5zOpcL/eNuoH52TtuRydCbwhGSON 4wg8FUb+9+WMvBsLJLwezJ3P1U0emQEOYPisGNgFsSkmwUZEgg1TGMNl/h069qTa /MvqqgNbRM+pcvCwX5rCyjgZSGYrq1Fm+6PAnfpI0b74ib8v6F4BBNw/pXuTQLj8 mTozm+fyKPUyrl6qR0xO7FcPh4eBs1lLWpJVwu+stJxeJZMXXGsJ/F+dZSFK30Ex jI1aGnyFSiFg49w12WRyXpcvi8sywA3LwcUoTrR2bWK1+uNZrcyBwOyf0yUaAmNU W3FxfcxBffCoUdnnnEST8f0c5QyG4SETcJuLxtDXhe4c+6H0BLZBVOFKEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDeX1aAlSWrZAa/Rw95RAt6iXFZuMB8GA1UdIwQY MBaAFPYJC02wak1lk1FBusmAmBJ6i49aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWdrTFRiQnFUV1dUVVVHNnlZQ1lFbnFMajFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8yZGM3YWYtMmM4Yy00NTdiLWFlYjAt NGUxZGMxNTA1MjYwLzEvTjVmVm9DVkphdGtCcjlIRDNsRUMzcUpjVm00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8yZGM3YWYtMmM4Yy00NTdiLWFlYjAtNGUxZGMxNTA1MjYw LzEvOWdrTFRiQnFUV1dUVVVHNnlZQ1lFbnFMajFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9BxMA0G CSqGSIb3DQEBCwUAA4IBAQA5WHyJJd8Td3b2hSCY1+K3jTfNgCBUOAUkmWbPKAqI u9oGNlYbTyCYibDTvODLLTwebX/qJlOAZ7CPEVZBndeeVwERuZSAcquTSZXQ8txT Igxv6A+BGURrJHrw3nbR/cAeKD+48ckMPzL4J3qdZH19rTVU4Yhi+YI+Ps5yg+8N pFhBV5n4vJfBUQVTTTE2oKztPDtLeFyRSbCj45x4vjZ7KQkWkLa8sPqUo3Pyip2E yhtzXyFUXyzn14oguTyM5PbxG09D4wy36hMU8Y1Yyi6fmSPjBIlu0KTsZX0Ni+/j CQgr71EjGG/IF1X2RQEYyaAIfe4vsMLJOyqUKdO2qD1a -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:11 2026 by rpki-client