This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/fe5q7Ym0eOTsgMAB1IUrjncVBXg.roa File: fe5q7Ym0eOTsgMAB1IUrjncVBXg.roa (raw, json) Hash identifier: 5UUqkfEzMB1xSChuf7PbFjMq0H7jo6WK6DJ2it+YBAc= Subject key identifier: 7D:EE:6A:ED:89:B4:78:E4:EC:80:C0:01:D4:85:2B:8E:77:15:05:78 Certificate issuer: /CN=8b6e65b82fe4007e82fd2db134cf42c6aec4e0bc Certificate serial: 019B7D5ADA8438E7C512ACDDADBB655D3105 Authority key identifier: 8B:6E:65:B8:2F:E4:00:7E:82:FD:2D:B1:34:CF:42:C6:AE:C4:E0:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/fe5q7Ym0eOTsgMAB1IUrjncVBXg.roa Signing time: Fri 02 Jan 2026 06:17:44 +0000 ROA not before: Fri 02 Jan 2026 06:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43135 IP address blocks: 91.225.53.0/24 maxlen: 24 91.225.54.0/24 maxlen: 24 91.225.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:da:84:38:e7:c5:12:ac:dd:ad:bb:65:5d:31:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6e65b82fe4007e82fd2db134cf42c6aec4e0bc Validity Not Before: Jan 2 06:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7dee6aed89b478e4ec80c001d4852b8e77150578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:92:c5:f2:15:d2:b6:d7:01:a7:c6:da:c8:c3: 72:1a:3d:31:08:b0:f8:ff:99:cb:1b:01:d0:2a:2f: be:ba:36:94:53:31:45:cd:c9:e1:71:70:f2:30:e0: 1c:a2:39:ae:a8:50:3b:f9:4a:21:e1:15:ce:79:1c: 92:b3:60:12:3d:8c:fa:de:e9:05:2f:64:7c:80:14: 53:c3:77:c6:2f:dd:68:f2:5b:33:f8:68:96:a9:69: b5:9c:6d:44:f7:47:d1:c5:cd:aa:95:c7:a9:48:2b: 30:e0:dc:b3:19:b4:71:33:7c:fc:df:32:43:83:7a: c8:0d:e8:28:01:b9:e8:0e:c1:00:7b:1c:cf:92:86: 0f:a7:0c:08:81:fb:06:db:4a:46:4f:b6:ef:8c:ac: 75:f9:a0:99:54:77:1a:3e:e8:7c:ad:af:b9:b0:11: f6:29:3f:ce:08:70:b6:6e:32:a8:ee:74:8c:4e:bc: f6:ab:d5:ce:e9:34:eb:fd:be:fb:08:b5:22:c2:3e: 9a:7a:ac:d6:1c:73:b4:3d:05:bb:d6:b2:25:e6:52: ec:04:9f:1d:cb:0c:00:70:70:7a:93:6e:5b:4a:13: f2:16:ab:61:52:2a:ae:76:9e:22:ef:cc:f0:01:3b: 87:3f:b6:15:86:60:20:34:23:d4:a2:4e:92:3c:43: 4a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:EE:6A:ED:89:B4:78:E4:EC:80:C0:01:D4:85:2B:8E:77:15:05:78 X509v3 Authority Key Identifier: keyid:8B:6E:65:B8:2F:E4:00:7E:82:FD:2D:B1:34:CF:42:C6:AE:C4:E0:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/fe5q7Ym0eOTsgMAB1IUrjncVBXg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.225.53.0-91.225.55.255 Signature Algorithm: sha256WithRSAEncryption 2c:18:47:a9:be:95:b2:d9:f4:44:92:a6:01:60:38:da:99:99: 21:52:5e:63:6a:3c:02:dc:91:00:69:69:af:a9:72:6d:79:7a: a2:b0:30:da:8b:25:55:89:1a:56:00:c4:a0:90:b3:7b:15:9a: 58:0c:73:be:e3:3c:0b:41:51:64:91:e1:3e:50:b9:39:91:3b: fc:52:43:f0:ac:8c:6a:b2:d3:af:3a:0a:53:e0:28:4c:a1:2b: e1:47:41:bf:1a:a7:89:14:e2:de:48:81:c1:da:2d:4c:eb:6a: 76:a9:b4:cc:43:35:94:91:6a:04:c0:93:4a:3d:2e:a5:67:18: fd:b3:92:44:32:4d:47:83:c4:b9:f7:f4:04:66:ec:ee:c6:02: 96:cf:65:86:cb:b6:8c:63:ef:fd:2a:03:93:ac:93:a0:9c:5a: c9:56:2f:03:3f:0e:70:82:96:47:19:99:c0:cc:62:6b:62:82: 33:ca:e2:83:fe:1e:19:47:37:ec:b4:80:ab:d0:61:97:fb:c5: 12:39:98:b5:c6:d5:4f:13:16:3b:d4:b2:f8:0d:fb:74:76:23: 34:78:05:fa:0a:40:05:08:35:5d:36:be:0d:9e:d2:61:f6:f1: be:23:d4:82:74:23:56:82:71:1f:b4:6b:f2:b2:ea:cb:99:9b: 14:d9:e1:b5 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt9WtqEOOfFEqzdrbtlXTEFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiNmU2NWI4MmZlNDAwN2U4MmZkMmRiMTM0Y2Y0MmM2YWVj NGUwYmMwHhcNMjYwMTAyMDYxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZGVlNmFlZDg5YjQ3OGU0ZWM4MGMwMDFkNDg1MmI4ZTc3MTUwNTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5LF8hXSttcBp8bayMNyGj0xCLD4 /5nLGwHQKi++ujaUUzFFzcnhcXDyMOAcojmuqFA7+Uoh4RXOeRySs2ASPYz63ukF L2R8gBRTw3fGL91o8lsz+GiWqWm1nG1E90fRxc2qlcepSCsw4NyzGbRxM3z83zJD g3rIDegoAbnoDsEAexzPkoYPpwwIgfsG20pGT7bvjKx1+aCZVHcaPuh8ra+5sBH2 KT/OCHC2bjKo7nSMTrz2q9XO6TTr/b77CLUiwj6aeqzWHHO0PQW71rIl5lLsBJ8d ywwAcHB6k25bShPyFqthUiqudp4i78zwATuHP7YVhmAgNCPUok6SPENKCQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFH3uau2JtHjk7IDAAdSFK453FQV4MB8GA1UdIwQY MBaAFItuZbgv5AB+gv0tsTTPQsauxOC8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTI1bHVDX2tBSDZDX1MyeE5NOUN4cTdFNEx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83YmQ2OGMtYTAzNi00Y2ZlLWI3NjMt YWY5MDM2MmJkM2JhLzEvZmU1cTdZbTBlT1RzZ01BQjFJVXJqbmNWQlhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS83YmQ2OGMtYTAzNi00Y2ZlLWI3NjMtYWY5MDM2MmJkM2Jh LzEvaTI1bHVDX2tBSDZDX1MyeE5NOUN4cTdFNEx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABb4TUD BANb4TAwDQYJKoZIhvcNAQELBQADggEBACwYR6m+lbLZ9ESSpgFgONqZmSFSXmNq PALckQBpaa+pcm15eqKwMNqLJVWJGlYAxKCQs3sVmlgMc77jPAtBUWSR4T5QuTmR O/xSQ/CsjGqy0686ClPgKEyhK+FHQb8ap4kU4t5IgcHaLUzranaptMxDNZSRagTA k0o9LqVnGP2zkkQyTUeDxLn39ARm7O7GApbPZYbLtoxj7/0qA5Osk6CcWslWLwM/ DnCClkcZmcDMYmtigjPK4oP+HhlHN+y0gKvQYZf7xRI5mLXG1U8TFjvUsvgN+3R2 IzR4BfoKQAUINV02vg2e0mH28b4j1IJ0I1aCcR+0a/Ky6suZmxTZ4bU= -----END CERTIFICATE-----Generated at Mon Jan 26 08:37:41 2026 by rpki-client