This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/fI5jVmmy88-mIgPso0R_tYbnmK8.roa File: fI5jVmmy88-mIgPso0R_tYbnmK8.roa (raw, json) Hash identifier: DZgFgnCe+GlazLWeguoKXJElQSdORsAcJbygFhHnVCE= Subject key identifier: 7C:8E:63:56:69:B2:F3:CF:A6:22:03:EC:A3:44:7F:B5:86:E7:98:AF Certificate issuer: /CN=dc43ea2cd07997ecdfe17188872708652e172df2 Certificate serial: 019B7DCB611F5D8BC77E603D7597238F8589 Authority key identifier: DC:43:EA:2C:D0:79:97:EC:DF:E1:71:88:87:27:08:65:2E:17:2D:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/fI5jVmmy88-mIgPso0R_tYbnmK8.roa Signing time: Fri 02 Jan 2026 08:20:39 +0000 ROA not before: Fri 02 Jan 2026 08:20:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35332 IP address blocks: 91.220.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:61:1f:5d:8b:c7:7e:60:3d:75:97:23:8f:85:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc43ea2cd07997ecdfe17188872708652e172df2 Validity Not Before: Jan 2 08:20:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c8e635669b2f3cfa62203eca3447fb586e798af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2b:fa:4d:82:27:b1:48:a6:b6:d7:29:84:87: 12:fd:22:1a:5a:b8:30:b9:19:19:f6:7d:ee:07:ef: cf:89:86:6d:9f:97:c3:a3:8a:1d:6a:5e:14:c1:01: 1d:4f:1e:cf:81:24:b5:a9:12:1c:11:0a:9f:95:0c: 2c:b3:03:0f:f7:d0:73:a0:fd:27:44:71:bf:68:9f: 90:26:38:44:d2:6b:7c:2c:ae:61:f5:f2:a9:6f:62: 71:67:91:d9:f4:5f:db:eb:f5:5c:75:0e:4f:40:0c: c7:69:de:82:a5:ca:38:bd:3f:83:98:dc:a1:5d:96: 8a:eb:39:01:be:d7:ff:38:fe:6e:06:e9:56:b0:84: 3c:5f:26:01:54:13:5d:86:c0:2e:2b:cd:14:2a:26: ac:39:7d:46:37:82:d7:80:f8:5e:3f:e2:bb:1f:6b: 39:ef:fe:97:79:0a:03:04:f9:c2:43:10:e0:6b:79: 03:1f:11:10:e2:84:3a:ac:d0:34:b1:92:2c:99:74: cc:f5:04:ef:82:48:9d:59:f9:45:7c:e5:21:8d:18: 9a:f3:11:1d:88:d2:75:62:71:9a:05:f8:36:36:2f: 15:a5:c0:b5:d4:54:08:65:0e:2a:f1:2d:f9:3e:fd: 51:e3:cb:b6:1e:33:7c:41:69:00:a0:fc:45:ea:cc: 46:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:8E:63:56:69:B2:F3:CF:A6:22:03:EC:A3:44:7F:B5:86:E7:98:AF X509v3 Authority Key Identifier: keyid:DC:43:EA:2C:D0:79:97:EC:DF:E1:71:88:87:27:08:65:2E:17:2D:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/fI5jVmmy88-mIgPso0R_tYbnmK8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.220.21.0/24 Signature Algorithm: sha256WithRSAEncryption 16:92:38:b1:fa:c3:51:a6:c1:c8:30:75:28:bf:2b:8c:06:12: 6d:99:5b:db:0e:50:29:d2:6a:bf:f5:ca:e4:c7:98:74:5a:1a: 1b:3c:53:81:aa:44:94:75:8c:eb:21:e7:56:96:12:43:50:13: 7d:7f:32:3a:f8:a8:46:3c:04:fe:ec:8d:75:99:ae:46:29:2b: 2e:37:dc:31:72:65:9e:2b:65:9f:f6:6e:0f:61:d8:7f:fc:a1: d8:bf:fa:28:4b:fe:c8:b4:bb:98:ba:0a:3d:db:aa:bc:ff:e5: a5:06:8b:b2:f2:0d:76:c1:d7:c1:46:07:67:58:c1:e7:16:17: f6:f2:c6:27:93:58:d8:77:07:04:88:56:de:12:9e:d4:a4:69: 9d:b2:2d:24:06:39:b4:0c:f1:57:50:39:63:a5:65:ce:2d:c7: ae:42:78:fc:2f:6d:fb:ce:4d:b9:2d:ec:4b:91:3a:d1:80:3e: 6c:8d:fa:d0:67:f1:3d:3f:1d:72:cb:13:c7:61:15:2c:d6:de: 83:69:fc:49:be:7e:6f:29:c2:65:35:67:f4:bf:36:04:16:a3: 4c:e2:aa:63:e1:c4:0b:d7:82:11:58:5b:0a:75:69:8d:c7:e1: bf:58:ad:7e:fc:b4:38:e2:4c:67:7a:7b:80:1a:c5:82:4e:69: 29:eb:cd:7e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y2EfXYvHfmA9dZcjj4WJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNDNlYTJjZDA3OTk3ZWNkZmUxNzE4ODg3MjcwODY1MmUx NzJkZjIwHhcNMjYwMTAyMDgyMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzhlNjM1NjY5YjJmM2NmYTYyMjAzZWNhMzQ0N2ZiNTg2ZTc5OGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSv6TYInsUimttcphIcS/SIaWrgw uRkZ9n3uB+/PiYZtn5fDo4odal4UwQEdTx7PgSS1qRIcEQqflQwsswMP99BzoP0n RHG/aJ+QJjhE0mt8LK5h9fKpb2JxZ5HZ9F/b6/VcdQ5PQAzHad6Cpco4vT+DmNyh XZaK6zkBvtf/OP5uBulWsIQ8XyYBVBNdhsAuK80UKiasOX1GN4LXgPheP+K7H2s5 7/6XeQoDBPnCQxDga3kDHxEQ4oQ6rNA0sZIsmXTM9QTvgkidWflFfOUhjRia8xEd iNJ1YnGaBfg2Ni8VpcC11FQIZQ4q8S35Pv1R48u2HjN8QWkAoPxF6sxG6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHyOY1ZpsvPPpiID7KNEf7WG55ivMB8GA1UdIwQY MBaAFNxD6izQeZfs3+FxiIcnCGUuFy3yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0VQcUxOQjVsLXpmNFhHSWh5Y0laUzRYTGZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80ZmU3NmEtYWI4MS00MmE0LWFlY2Yt NDQ2NDRkZDVlZDQ0LzEvZkk1alZtbXk4OC1tSWdQc28wUl90WWJubUs4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS80ZmU3NmEtYWI4MS00MmE0LWFlY2YtNDQ2NDRkZDVlZDQ0 LzEvM0VQcUxOQjVsLXpmNFhHSWh5Y0laUzRYTGZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9wVMA0G CSqGSIb3DQEBCwUAA4IBAQAWkjix+sNRpsHIMHUovyuMBhJtmVvbDlAp0mq/9crk x5h0WhobPFOBqkSUdYzrIedWlhJDUBN9fzI6+KhGPAT+7I11ma5GKSsuN9wxcmWe K2Wf9m4PYdh//KHYv/ooS/7ItLuYugo926q8/+WlBouy8g12wdfBRgdnWMHnFhf2 8sYnk1jYdwcEiFbeEp7UpGmdsi0kBjm0DPFXUDljpWXOLceuQnj8L237zk25LexL kTrRgD5sjfrQZ/E9Px1yyxPHYRUs1t6DafxJvn5vKcJlNWf0vzYEFqNM4qpj4cQL 14IRWFsKdWmNx+G/WK1+/LQ44kxnenuAGsWCTmkp681+ -----END CERTIFICATE-----Generated at Mon Jan 26 00:13:47 2026 by rpki-client