This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/1-0xF5ML0bduYXp4NxAMCrgqBZCE.roa File: 1-0xF5ML0bduYXp4NxAMCrgqBZCE.roa (raw, json) Hash identifier: X+cSvs5tBJ3R2BFoZMWk6LhvwUNEm2phoSs3LFEP0AU= Subject key identifier: FB:4C:45:E4:C2:F4:6D:DB:98:5E:9E:0D:C4:03:02:AE:0A:81:64:21 Certificate issuer: /CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8 Certificate serial: 019B7D5CCC01728A99B41F5D4B0BC972957C Authority key identifier: 26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/1-0xF5ML0bduYXp4NxAMCrgqBZCE.roa Signing time: Fri 02 Jan 2026 06:19:52 +0000 ROA not before: Fri 02 Jan 2026 06:19:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197730 IP address blocks: 91.190.152.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:cc:01:72:8a:99:b4:1f:5d:4b:0b:c9:72:95:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8 Validity Not Before: Jan 2 06:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb4c45e4c2f46ddb985e9e0dc40302ae0a816421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cd:e6:36:f0:07:9a:b8:55:e2:d8:b2:99:cf: 63:4e:03:9a:4d:cd:81:f7:b9:c2:fe:9b:70:da:4b: 81:44:05:11:cb:bc:04:3d:c8:88:8e:ed:7c:5e:e5: 46:fb:3e:08:36:7d:8a:51:e0:27:07:d8:37:b0:53: 60:03:a6:13:7f:ad:2d:2d:49:21:2c:e0:43:8a:58: fb:bb:53:a2:63:f6:75:d0:e8:8e:0a:70:76:e7:d5: 76:ba:da:2a:e5:23:dc:fa:5f:92:c1:25:bb:b5:77: c8:74:72:4e:bb:49:a5:20:42:42:55:92:47:04:6a: f2:9f:cd:4f:bb:10:12:2a:c8:77:d3:0b:f5:af:f9: 6c:32:b8:b5:04:1b:e7:db:ed:55:c8:c8:89:da:6e: cc:c5:40:f6:9b:a8:ca:42:36:9e:d1:ce:63:e2:09: dc:7e:0f:5c:1f:43:67:cd:6b:1a:a4:d1:1d:88:99: 68:f3:4b:8f:40:14:00:f0:a9:39:01:4d:cb:f6:1e: ab:50:69:d6:df:13:74:93:e7:0b:30:c3:a2:5f:bb: 89:cf:66:82:71:3b:57:84:bb:a1:24:80:c4:5c:71: 7c:4a:ba:87:b0:46:d8:e8:dd:2f:f3:39:2c:cb:26: c6:0e:78:4f:93:3f:b5:1e:df:f5:21:e7:67:b8:91: 83:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:4C:45:E4:C2:F4:6D:DB:98:5E:9E:0D:C4:03:02:AE:0A:81:64:21 X509v3 Authority Key Identifier: keyid:26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/1-0xF5ML0bduYXp4NxAMCrgqBZCE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.190.152.0/24 Signature Algorithm: sha256WithRSAEncryption 31:ce:9c:47:f2:6c:7d:a8:e6:e9:c4:46:a7:42:90:c3:50:20: 24:ef:f8:10:b2:70:33:4b:cb:f4:44:3a:91:1f:bc:4e:51:3c: 96:66:fe:7d:70:78:f0:5a:05:0b:d7:ed:1c:9a:cd:7f:78:fb: 2a:17:0c:41:9d:d9:02:40:0b:83:ca:c0:49:26:72:5c:2d:85: f3:e2:ad:e1:fb:cd:5b:8b:b0:c3:92:13:1f:6e:0b:31:35:f1: ce:f3:f7:64:36:94:7f:91:ac:39:5a:1e:e6:18:36:86:45:33: 59:26:90:96:c7:16:69:9e:c8:e1:04:70:3a:44:ca:43:42:12: 57:5c:95:ab:a9:00:0a:2b:e1:09:70:2f:a1:22:18:d4:7b:47: 83:ad:c8:f7:be:ac:52:dc:ef:f5:49:e4:f3:74:30:5f:bc:a8: d5:47:76:c8:bb:a5:67:29:ca:94:da:c1:74:64:8a:c7:4f:42: d7:69:c7:d0:83:2a:ef:f4:fb:39:15:3e:c1:cb:12:3c:5b:dc: d1:da:84:3c:46:0b:a2:8a:2c:59:c9:fe:67:29:ad:44:b9:7f: 43:28:7f:25:91:54:b8:66:3b:9e:38:75:dd:2c:9e:1e:ba:77: 5b:32:15:d4:2c:0c:0d:39:51:ca:48:6c:a9:08:41:26:90:6a: 70:ed:2d:1b -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt9XMwBcoqZtB9dSwvJcpV8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NzJiOWZiNTQ2YjM2NWUzMjMyMzBkY2VhOWJhOGM5ZmJl ZGZlYjgwHhcNMjYwMTAyMDYxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjRjNDVlNGMyZjQ2ZGRiOTg1ZTllMGRjNDAzMDJhZTBhODE2NDIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwc3mNvAHmrhV4tiymc9jTgOaTc2B 97nC/ptw2kuBRAURy7wEPciIju18XuVG+z4INn2KUeAnB9g3sFNgA6YTf60tLUkh LOBDilj7u1OiY/Z10OiOCnB259V2utoq5SPc+l+SwSW7tXfIdHJOu0mlIEJCVZJH BGryn81PuxASKsh30wv1r/lsMri1BBvn2+1VyMiJ2m7MxUD2m6jKQjae0c5j4gnc fg9cH0NnzWsapNEdiJlo80uPQBQA8Kk5AU3L9h6rUGnW3xN0k+cLMMOiX7uJz2aC cTtXhLuhJIDEXHF8SrqHsEbY6N0v8zksyybGDnhPkz+1Ht/1IednuJGDcwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPtMReTC9G3bmF6eDcQDAq4KgWQhMB8GA1UdIwQY MBaAFCZyuftUazZeMjIw3OqbqMn77f64MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm5LNS0xUnJObDR5TWpEYzZwdW95ZnZ0X3JnLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9iMTNiNTUtMTI4OC00NWU2LTg4NzYt YTcwZGI1ODI4MGZjLzEvMS0weEY1TUwwYmR1WVhwNE54QU1DcmdxQlpDRS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZmQvYjEzYjU1LTEyODgtNDVlNi04ODc2LWE3MGRiNTgyODBm Yy8xL0puSzUtMVJyTmw0eU1qRGM2cHVveWZ2dF9yZy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFu+mDAN BgkqhkiG9w0BAQsFAAOCAQEAMc6cR/Jsfajm6cRGp0KQw1AgJO/4ELJwM0vL9EQ6 kR+8TlE8lmb+fXB48FoFC9ftHJrNf3j7KhcMQZ3ZAkALg8rASSZyXC2F8+Kt4fvN W4uww5ITH24LMTXxzvP3ZDaUf5GsOVoe5hg2hkUzWSaQlscWaZ7I4QRwOkTKQ0IS V1yVq6kACivhCXAvoSIY1HtHg63I976sUtzv9Unk83QwX7yo1Ud2yLulZynKlNrB dGSKx09C12nH0IMq7/T7ORU+wcsSPFvc0dqEPEYLooosWcn+ZymtRLl/Qyh/JZFU uGY7njh13SyeHrp3WzIV1CwMDTlRykhsqQhBJpBqcO0tGw== -----END CERTIFICATE-----Generated at Sun Jan 25 17:35:54 2026 by rpki-client