This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/2i5WIWirDm8nQE7n8LQRrIqyiUY.roa File: 2i5WIWirDm8nQE7n8LQRrIqyiUY.roa (raw, json) Hash identifier: oS+sdbQeGU/G8hAIoIG9lt2OWKv2ez1aGHAFUGxnjf4= Subject key identifier: DA:2E:56:21:68:AB:0E:6F:27:40:4E:E7:F0:B4:11:AC:8A:B2:89:46 Certificate issuer: /CN=45effe98c24c3d6d6087c8d1d3f901b8ccd40088 Certificate serial: 019B77C698240AB9911EB74ACC576AFE863D Authority key identifier: 45:EF:FE:98:C2:4C:3D:6D:60:87:C8:D1:D3:F9:01:B8:CC:D4:00:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Re_-mMJMPW1gh8jR0_kBuMzUAIg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/2i5WIWirDm8nQE7n8LQRrIqyiUY.roa Signing time: Thu 01 Jan 2026 04:17:42 +0000 ROA not before: Thu 01 Jan 2026 04:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57043 IP address blocks: 91.217.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.crl rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.mft rsync://rpki.ripe.net/repository/DEFAULT/Re_-mMJMPW1gh8jR0_kBuMzUAIg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:98:24:0a:b9:91:1e:b7:4a:cc:57:6a:fe:86:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45effe98c24c3d6d6087c8d1d3f901b8ccd40088 Validity Not Before: Jan 1 04:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da2e562168ab0e6f27404ee7f0b411ac8ab28946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bc:dc:96:e2:20:49:ab:67:68:38:ef:37:50: 50:52:e8:74:63:80:97:69:e1:f7:c0:d4:8f:7a:72: a0:97:90:ce:2b:f0:c3:a7:38:d3:e4:47:8e:55:a9: 6a:da:92:64:4a:0a:40:2d:0b:30:ec:7b:1b:9b:85: 45:5f:07:5d:ad:9c:a8:e5:ce:47:dc:4b:ee:77:bd: 3d:36:98:5d:0e:ea:97:5a:65:5d:e6:b5:37:81:c6: db:3b:fa:46:de:48:e3:e2:1c:1b:85:f0:4b:fc:36: 1a:ce:8e:97:ed:78:cc:12:ed:43:f4:f3:6e:da:b7: 26:3f:17:ce:7e:c5:a3:e5:1d:06:1d:ff:ed:f6:31: 7b:cd:79:f1:35:82:98:ed:b0:c3:dd:95:08:6a:3c: 83:36:31:4e:4e:d6:60:d4:c7:91:4b:63:1d:fe:96: ab:f0:5e:df:89:22:ce:41:a9:a0:5c:10:68:94:43: 53:86:f0:9a:dc:ad:6c:c3:9e:72:ff:41:45:49:cc: 0a:b9:8e:09:0b:71:64:ce:7b:48:9f:02:d7:6b:7a: 76:95:fb:57:52:11:be:70:fe:c6:56:2c:e6:7b:d1: 26:98:e4:93:bc:c3:e7:96:5a:c3:18:df:24:d6:da: ca:49:93:4c:8b:5e:6f:92:ee:ee:30:b3:c7:2e:9c: 9b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:2E:56:21:68:AB:0E:6F:27:40:4E:E7:F0:B4:11:AC:8A:B2:89:46 X509v3 Authority Key Identifier: keyid:45:EF:FE:98:C2:4C:3D:6D:60:87:C8:D1:D3:F9:01:B8:CC:D4:00:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Re_-mMJMPW1gh8jR0_kBuMzUAIg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/2i5WIWirDm8nQE7n8LQRrIqyiUY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.217.149.0/24 Signature Algorithm: sha256WithRSAEncryption 50:0d:8b:48:c7:48:64:ef:03:9a:fc:5c:35:3a:6b:97:59:91: 4f:fc:07:0a:3c:10:a3:0c:e1:2b:b4:84:15:29:4d:cf:17:10: 9a:a0:fc:b0:6f:b9:61:7a:90:22:dd:d4:da:1b:8b:c1:b8:96: a5:80:3c:dc:77:6b:61:84:f7:cd:ea:e2:cb:df:06:18:99:87: 2f:82:dd:3e:32:36:52:a7:41:d9:bd:41:ed:aa:f9:69:99:f7: d6:00:fd:d2:28:0e:7f:18:46:66:ac:1f:25:99:ce:76:4a:8b: 1d:c8:25:3a:b1:62:cd:08:e3:f3:6b:da:ce:1b:68:92:34:c1: f4:d2:c6:00:d0:35:1c:09:ae:fe:fe:c5:fe:5c:5b:e7:88:4c: 6f:c6:85:23:9f:c9:9e:d8:05:8e:21:d8:c7:d7:85:0e:72:bb: 93:39:c6:f7:45:19:1a:b3:ec:ef:97:b9:48:5c:2b:cc:e4:da: e9:97:81:9d:2a:70:f0:96:be:92:0d:c4:f9:d3:23:f4:76:88: c4:e1:29:c2:80:d0:74:9f:0a:6b:08:aa:5e:3e:7a:b5:b3:8a: 56:cd:6e:d9:24:9c:57:63:2d:21:ab:35:58:c9:54:72:32:43: d3:7b:3b:20:31:2a:2e:2e:58:78:b2:db:7a:17:33:b6:1d:fd: c4:c6:62:44 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xpgkCrmRHrdKzFdq/oY9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1ZWZmZTk4YzI0YzNkNmQ2MDg3YzhkMWQzZjkwMWI4Y2Nk NDAwODgwHhcNMjYwMTAxMDQxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTJlNTYyMTY4YWIwZTZmMjc0MDRlZTdmMGI0MTFhYzhhYjI4OTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7zcluIgSatnaDjvN1BQUuh0Y4CX aeH3wNSPenKgl5DOK/DDpzjT5EeOValq2pJkSgpALQsw7Hsbm4VFXwddrZyo5c5H 3Evud709NphdDuqXWmVd5rU3gcbbO/pG3kjj4hwbhfBL/DYazo6X7XjMEu1D9PNu 2rcmPxfOfsWj5R0GHf/t9jF7zXnxNYKY7bDD3ZUIajyDNjFOTtZg1MeRS2Md/par 8F7fiSLOQamgXBBolENThvCa3K1sw55y/0FFScwKuY4JC3FkzntInwLXa3p2lftX UhG+cP7GVizme9EmmOSTvMPnllrDGN8k1trKSZNMi15vku7uMLPHLpyb5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNouViFoqw5vJ0BO5/C0EayKsolGMB8GA1UdIwQY MBaAFEXv/pjCTD1tYIfI0dP5AbjM1ACIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmVfLW1NSk1QVzFnaDhqUjBfa0J1TXpVQUlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8xZTRhNjQtN2FhMC00Yzk0LTliYjAt ZGViN2I5MTg5MTY5LzEvMmk1V0lXaXJEbThuUUU3bjhMUVJySXF5aVVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS8xZTRhNjQtN2FhMC00Yzk0LTliYjAtZGViN2I5MTg5MTY5 LzEvUmVfLW1NSk1QVzFnaDhqUjBfa0J1TXpVQUlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9mVMA0G CSqGSIb3DQEBCwUAA4IBAQBQDYtIx0hk7wOa/Fw1OmuXWZFP/AcKPBCjDOErtIQV KU3PFxCaoPywb7lhepAi3dTaG4vBuJalgDzcd2thhPfN6uLL3wYYmYcvgt0+MjZS p0HZvUHtqvlpmffWAP3SKA5/GEZmrB8lmc52SosdyCU6sWLNCOPza9rOG2iSNMH0 0sYA0DUcCa7+/sX+XFvniExvxoUjn8me2AWOIdjH14UOcruTOcb3RRkas+zvl7lI XCvM5Nrpl4GdKnDwlr6SDcT50yP0dojE4SnCgNB0nwprCKpePnq1s4pWzW7ZJJxX Yy0hqzVYyVRyMkPTezsgMSouLlh4stt6FzO2Hf3ExmJE -----END CERTIFICATE-----Generated at Sun Jan 25 16:13:43 2026 by rpki-client