This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/A5HdI9sd0avbqwwj93f8oOO7Jug.roa File: A5HdI9sd0avbqwwj93f8oOO7Jug.roa (raw, json) Hash identifier: ZqMjfvk0psOHcEN6SFAY/1kMcf706tg5ZlDlSQN3qvs= Subject key identifier: 03:91:DD:23:DB:1D:D1:AB:DB:AB:0C:23:F7:77:FC:A0:E3:BB:26:E8 Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Certificate serial: 019B7D5B157CDE7D9B985347097A92E6947C Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/A5HdI9sd0avbqwwj93f8oOO7Jug.roa Signing time: Fri 02 Jan 2026 06:17:59 +0000 ROA not before: Fri 02 Jan 2026 06:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61996 IP address blocks: 91.148.136.0/24 maxlen: 24 91.148.137.0/24 maxlen: 24 91.148.138.0/24 maxlen: 24 91.148.139.0/24 maxlen: 24 91.148.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:15:7c:de:7d:9b:98:53:47:09:7a:92:e6:94:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Validity Not Before: Jan 2 06:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0391dd23db1dd1abdbab0c23f777fca0e3bb26e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:0e:1e:3d:04:e3:c7:7a:b4:cf:cb:e0:64:db: 6b:ef:e7:d2:29:f8:bc:b7:8a:64:cb:fd:c1:e6:17: cd:fd:3b:72:f4:93:5a:57:23:24:7e:70:44:10:88: b0:9a:80:6b:f2:99:ad:88:44:19:7f:bc:7d:02:7f: 59:1f:22:18:5f:46:70:5a:6d:67:b4:a7:60:55:b6: 53:9f:89:d5:9e:02:f9:6f:e2:f8:a9:db:88:e9:96: 44:11:de:f9:88:7b:ea:08:92:eb:31:d2:e2:e9:8e: 38:25:78:cc:c7:56:03:d6:41:69:5a:89:42:1d:40: cd:c4:d5:b7:ee:65:f5:04:77:70:66:90:55:27:ed: 13:71:05:0f:66:5b:d6:f8:23:8b:64:c7:a2:f3:b9: bd:b7:68:f6:f6:6e:39:1d:95:4e:00:65:bf:64:4a: 60:29:c2:0f:3d:c4:f1:ca:ef:43:b0:39:a8:5b:6d: be:b3:44:75:ea:36:48:a3:2f:3a:8b:27:cd:2f:bc: 67:39:41:d0:8f:0c:f8:cf:57:7e:ff:31:7b:f7:86: cb:c8:6d:2c:e4:ac:20:74:07:b9:a5:51:81:1d:e1: 29:8c:f8:a8:d9:77:22:21:2c:4c:dc:07:22:fc:50: 24:69:cf:7e:9c:68:63:28:92:0d:f4:87:fd:03:d0: 7c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:91:DD:23:DB:1D:D1:AB:DB:AB:0C:23:F7:77:FC:A0:E3:BB:26:E8 X509v3 Authority Key Identifier: keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/A5HdI9sd0avbqwwj93f8oOO7Jug.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.148.136.0/22 91.148.161.0/24 Signature Algorithm: sha256WithRSAEncryption 42:a9:5d:99:37:b0:a1:65:c5:33:80:4f:d3:1d:ae:1a:df:99: f7:8a:7d:3c:7c:1f:fb:46:32:0c:eb:bd:16:4f:12:36:3c:b5: 34:98:d4:1a:b4:bb:7e:8d:bb:4a:8c:2d:80:8b:ad:c2:1d:cf: c1:bd:2f:a5:85:d3:07:18:cc:36:a9:16:b6:86:59:f7:76:de: 63:94:ca:9a:03:f9:bb:c3:c5:8a:b8:0b:7d:29:74:b0:e9:7f: 69:87:d2:9c:be:68:a8:12:e4:4a:a3:41:e9:e9:ce:b9:02:15: cd:26:d7:f5:31:8a:6e:c5:3e:3c:6e:30:7b:19:4f:5c:d7:ef: 7d:45:dd:1b:4c:e8:9b:e2:b0:f7:eb:f6:8b:72:a3:cd:90:a4: 65:de:4b:3b:8c:f2:e2:aa:03:bf:c9:3f:3d:1c:e9:2b:f3:a8: 11:3b:09:2f:be:bd:ee:78:41:38:99:a8:f9:c3:65:d3:1b:d3: 42:91:d3:c7:63:32:6f:a7:0e:f1:fe:f5:46:61:71:d1:74:4e: 82:52:20:cf:a8:d8:ef:2e:39:83:7c:1b:eb:f0:a1:45:ad:4b: 79:ee:32:df:65:7e:c1:75:74:05:2d:29:c3:9a:04:f7:27:8b: ae:a4:d7:0a:17:fc:24:b3:87:bd:bb:86:d6:90:ce:5d:90:25: de:08:b8:ef -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9WxV83n2bmFNHCXqS5pR8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1 Y2IyYWEwHhcNMjYwMTAyMDYxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzkxZGQyM2RiMWRkMWFiZGJhYjBjMjNmNzc3ZmNhMGUzYmIyNmU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6g4ePQTjx3q0z8vgZNtr7+fSKfi8 t4pky/3B5hfN/Tty9JNaVyMkfnBEEIiwmoBr8pmtiEQZf7x9An9ZHyIYX0ZwWm1n tKdgVbZTn4nVngL5b+L4qduI6ZZEEd75iHvqCJLrMdLi6Y44JXjMx1YD1kFpWolC HUDNxNW37mX1BHdwZpBVJ+0TcQUPZlvW+COLZMei87m9t2j29m45HZVOAGW/ZEpg KcIPPcTxyu9DsDmoW22+s0R16jZIoy86iyfNL7xnOUHQjwz4z1d+/zF794bLyG0s 5KwgdAe5pVGBHeEpjPio2XciISxM3Aci/FAkac9+nGhjKJIN9If9A9B8swIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAOR3SPbHdGr26sMI/d3/KDjuyboMB8GA1UdIwQY MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt ZGFjYjVmMzU2ZWEzLzEvQTVIZEk5c2QwYXZicXd3ajkzZjhvT083SnVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW5SIAwQA W5ShMA0GCSqGSIb3DQEBCwUAA4IBAQBCqV2ZN7ChZcUzgE/THa4a35n3in08fB/7 RjIM670WTxI2PLU0mNQatLt+jbtKjC2Ai63CHc/BvS+lhdMHGMw2qRa2hln3dt5j lMqaA/m7w8WKuAt9KXSw6X9ph9KcvmioEuRKo0Hp6c65AhXNJtf1MYpuxT48bjB7 GU9c1+99Rd0bTOib4rD36/aLcqPNkKRl3ks7jPLiqgO/yT89HOkr86gROwkvvr3u eEE4maj5w2XTG9NCkdPHYzJvpw7x/vVGYXHRdE6CUiDPqNjvLjmDfBvr8KFFrUt5 7jLfZX7BdXQFLSnDmgT3J4uupNcKF/wks4e9u4bWkM5dkCXeCLjv -----END CERTIFICATE-----Generated at Fri Jan 23 18:47:56 2026 by rpki-client