This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/peX6RxbNXkLdfShtgQrG6g51ciQ.roa File: peX6RxbNXkLdfShtgQrG6g51ciQ.roa (raw, json) Hash identifier: t35RzplxAHK22NGUYNXNYVd/NgW3fATfJr0K+NLyVmA= Subject key identifier: A5:E5:FA:47:16:CD:5E:42:DD:7D:28:6D:81:0A:C6:EA:0E:75:72:24 Certificate issuer: /CN=e41798a3ee49d523e88e1ad103e63e121d84d1b5 Certificate serial: 019B7F85191B9399B5EAFD6CDB1F7FD8D979 Authority key identifier: E4:17:98:A3:EE:49:D5:23:E8:8E:1A:D1:03:E6:3E:12:1D:84:D1:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/peX6RxbNXkLdfShtgQrG6g51ciQ.roa Signing time: Fri 02 Jan 2026 16:23:07 +0000 ROA not before: Fri 02 Jan 2026 16:23:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48314 IP address blocks: 91.214.8.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.crl rsync://rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.mft rsync://rpki.ripe.net/repository/DEFAULT/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:19:1b:93:99:b5:ea:fd:6c:db:1f:7f:d8:d9:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e41798a3ee49d523e88e1ad103e63e121d84d1b5 Validity Not Before: Jan 2 16:23:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a5e5fa4716cd5e42dd7d286d810ac6ea0e757224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a6:da:e4:19:09:64:4c:4e:eb:56:6f:a5:9c: d7:c9:b0:6d:ef:08:94:ad:b3:0e:47:7b:0d:66:07: 10:97:80:43:eb:5a:50:02:a0:76:4b:95:4b:3b:76: 99:2a:c6:1f:57:50:e9:3d:54:9d:5d:2c:aa:51:72: 23:b1:b6:86:2b:f2:7e:e3:5e:de:7a:c5:6e:27:c8: 3d:32:a0:e8:2f:02:72:0a:cb:6d:36:6b:aa:2e:ff: 87:1e:39:f5:3b:d7:11:85:32:91:9a:7b:56:8a:4b: af:fa:8f:13:be:a4:08:18:49:a5:58:d9:bd:23:ac: bc:0e:30:14:e4:42:9c:10:4c:f9:3a:fd:42:55:bf: 5f:55:6d:c3:b6:27:5b:4b:dd:f7:3a:9e:99:95:a3: 10:e5:6c:2e:4d:7d:2c:2d:6b:4d:84:36:3f:c2:92: 94:5b:ba:d3:36:8a:fd:52:ad:e9:86:77:3d:73:16: 41:8b:cf:7c:f6:b2:70:75:15:6d:82:dc:d4:41:82: 77:8c:3f:a0:83:33:e9:e1:a2:0e:97:25:ec:3f:33: d5:59:e5:12:1d:b3:00:94:dd:3a:86:e5:d2:76:92: 1d:d0:36:aa:4b:d6:d8:de:5f:89:1d:ed:68:a7:0e: 33:1b:19:23:d9:e6:9c:17:e3:d2:7d:ac:b2:d1:51: d7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:E5:FA:47:16:CD:5E:42:DD:7D:28:6D:81:0A:C6:EA:0E:75:72:24 X509v3 Authority Key Identifier: keyid:E4:17:98:A3:EE:49:D5:23:E8:8E:1A:D1:03:E6:3E:12:1D:84:D1:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/peX6RxbNXkLdfShtgQrG6g51ciQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.214.8.0/23 Signature Algorithm: sha256WithRSAEncryption 2b:16:74:5f:34:89:7c:c1:d5:7e:59:c8:06:7e:06:04:00:35: 31:5b:c8:48:66:6a:eb:d9:26:e8:74:56:a6:47:a6:a5:13:cd: 8a:0a:b8:6b:25:2c:d9:ca:59:93:46:f1:c2:0b:bd:65:51:1c: 0a:15:43:15:e8:31:67:1b:1a:99:0c:d4:61:f7:f6:87:28:5d: d1:c2:e7:b2:79:f4:d6:7a:68:b3:e5:5a:0e:fd:16:64:78:56: 39:de:3f:84:c8:c9:74:03:6f:e4:ea:71:69:a8:e2:c5:a1:4c: 0a:13:1c:74:3a:e5:dd:4b:a9:3d:a2:10:48:d0:d1:21:b8:f8: 62:be:ae:f9:18:a9:7e:80:60:6a:0c:66:2d:71:40:29:b1:57: 2d:f7:86:0d:63:4c:2e:38:a1:1b:31:5e:c7:c0:01:15:37:03: 2b:16:a1:03:16:8a:44:35:c1:a6:9d:31:72:d0:8f:f3:79:19: 15:3b:78:cb:45:db:c1:fa:3d:a7:cf:3a:de:9f:de:2d:2c:c8: f3:e7:01:db:e3:ad:39:44:0d:2f:9c:8b:c3:c7:a2:82:be:db: aa:a3:ff:c9:71:b6:78:5d:db:c2:4f:2c:4e:b2:51:22:a5:83: 4a:a3:4c:32:64:07:71:43:43:0d:a2:e0:4a:5c:68:93:7b:d4: 9a:e7:b5:10 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hRkbk5m16v1s2x9/2Nl5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0MTc5OGEzZWU0OWQ1MjNlODhlMWFkMTAzZTYzZTEyMWQ4 NGQxYjUwHhcNMjYwMTAyMTYyMzA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNWU1ZmE0NzE2Y2Q1ZTQyZGQ3ZDI4NmQ4MTBhYzZlYTBlNzU3MjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6ba5BkJZExO61ZvpZzXybBt7wiU rbMOR3sNZgcQl4BD61pQAqB2S5VLO3aZKsYfV1DpPVSdXSyqUXIjsbaGK/J+417e esVuJ8g9MqDoLwJyCsttNmuqLv+HHjn1O9cRhTKRmntWikuv+o8TvqQIGEmlWNm9 I6y8DjAU5EKcEEz5Ov1CVb9fVW3DtidbS933Op6ZlaMQ5WwuTX0sLWtNhDY/wpKU W7rTNor9Uq3phnc9cxZBi8989rJwdRVtgtzUQYJ3jD+ggzPp4aIOlyXsPzPVWeUS HbMAlN06huXSdpId0DaqS9bY3l+JHe1opw4zGxkj2eacF+PSfayy0VHXGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKXl+kcWzV5C3X0obYEKxuoOdXIkMB8GA1UdIwQY MBaAFOQXmKPuSdUj6I4a0QPmPhIdhNG1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUJlWW8tNUoxU1BvamhyUkEtWS1FaDJFMGJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8xY2E0NjktMjA4Ni00YzRjLWEwYjgt OGQwODU3YTFhNGQ3LzEvcGVYNlJ4Yk5Ya0xkZlNodGdRckc2ZzUxY2lRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC8xY2E0NjktMjA4Ni00YzRjLWEwYjgtOGQwODU3YTFhNGQ3 LzEvNUJlWW8tNUoxU1BvamhyUkEtWS1FaDJFMGJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW9YIMA0G CSqGSIb3DQEBCwUAA4IBAQArFnRfNIl8wdV+WcgGfgYEADUxW8hIZmrr2SbodFam R6alE82KCrhrJSzZylmTRvHCC71lURwKFUMV6DFnGxqZDNRh9/aHKF3RwueyefTW emiz5VoO/RZkeFY53j+EyMl0A2/k6nFpqOLFoUwKExx0OuXdS6k9ohBI0NEhuPhi vq75GKl+gGBqDGYtcUApsVct94YNY0wuOKEbMV7HwAEVNwMrFqEDFopENcGmnTFy 0I/zeRkVO3jLRdvB+j2nzzren94tLMjz5wHb4605RA0vnIvDx6KCvtuqo//JcbZ4 XdvCTyxOslEipYNKo0wyZAdxQ0MNouBKXGiTe9Sa57UQ -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:13 2026 by rpki-client