This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/h5uKn8g9EKDrOSCjX6eMFupZ64Y.roa File: h5uKn8g9EKDrOSCjX6eMFupZ64Y.roa (raw, json) Hash identifier: qSSIAnAv4EJAYyJT2DsdReTrWjgda1IMNFZ6WGYfBOs= Subject key identifier: 87:9B:8A:9F:C8:3D:10:A0:EB:39:20:A3:5F:A7:8C:16:EA:59:EB:86 Certificate issuer: /CN=68dafd6360636a6327747a07080f7f2e5e32ce85 Certificate serial: 019B7C808669415B5B3FCC974F4AB0543464 Authority key identifier: 68:DA:FD:63:60:63:6A:63:27:74:7A:07:08:0F:7F:2E:5E:32:CE:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNr9Y2BjamMndHoHCA9_Ll4yzoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/h5uKn8g9EKDrOSCjX6eMFupZ64Y.roa Signing time: Fri 02 Jan 2026 02:19:16 +0000 ROA not before: Fri 02 Jan 2026 02:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204626 IP address blocks: 91.218.152.0/23 maxlen: 23 91.218.152.0/24 maxlen: 24 91.218.153.0/24 maxlen: 24 2001:678:5f4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.mft rsync://rpki.ripe.net/repository/DEFAULT/aNr9Y2BjamMndHoHCA9_Ll4yzoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:86:69:41:5b:5b:3f:cc:97:4f:4a:b0:54:34:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68dafd6360636a6327747a07080f7f2e5e32ce85 Validity Not Before: Jan 2 02:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=879b8a9fc83d10a0eb3920a35fa78c16ea59eb86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f2:3e:3f:76:62:0c:87:92:fb:fa:a3:42:a0: e0:da:8a:b4:da:20:98:52:a5:3f:50:00:3b:44:a9: 3f:c8:b8:47:c7:ee:ee:98:d4:52:ed:67:c5:93:21: 07:8f:f4:07:ec:66:55:95:50:ca:b6:26:5b:a4:37: d0:84:71:cb:e5:a0:c7:f9:7e:ae:01:22:f3:b3:2e: f6:c5:48:8f:6f:59:dc:7d:87:8f:e6:c2:84:64:50: 02:4d:58:74:3c:97:f7:3a:44:f0:35:da:65:cb:13: 8e:b0:bc:02:9d:e5:b7:a6:20:38:ee:29:d5:c8:1e: cf:bc:59:9e:4f:75:24:0b:b3:34:28:bb:db:55:94: 16:09:b9:e2:e0:b0:89:8e:9b:23:a4:62:ef:c7:01: 7a:00:d2:d7:d7:43:1f:9f:5d:7e:e5:47:09:f2:be: 12:70:2d:44:e6:e7:66:de:d5:1c:a6:94:ce:72:c1: a0:aa:a0:09:89:1b:84:ff:d2:87:a5:19:85:2b:5a: 20:78:55:ef:f3:76:23:21:b0:d4:f9:ba:a2:c1:48: 75:08:13:dd:7e:27:d9:84:88:e7:a9:89:3d:22:f2: cd:fc:df:36:5a:4d:94:d1:f7:1c:b0:88:c0:03:42: 01:05:75:4c:a2:0a:54:50:12:7f:cf:65:4e:8b:c6: 83:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:9B:8A:9F:C8:3D:10:A0:EB:39:20:A3:5F:A7:8C:16:EA:59:EB:86 X509v3 Authority Key Identifier: keyid:68:DA:FD:63:60:63:6A:63:27:74:7A:07:08:0F:7F:2E:5E:32:CE:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNr9Y2BjamMndHoHCA9_Ll4yzoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/h5uKn8g9EKDrOSCjX6eMFupZ64Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.218.152.0/23 IPv6: 2001:678:5f4::/48 Signature Algorithm: sha256WithRSAEncryption 30:b0:78:ed:8e:f3:a7:5b:19:15:10:48:e0:86:4d:40:e5:fd: 51:a7:24:ac:72:36:90:85:39:73:ed:ce:b7:44:3f:3c:c5:2c: d0:00:15:e3:c0:b6:98:fa:f1:41:f8:9e:5b:fb:67:a6:a5:8d: ce:3b:16:d3:55:57:9e:69:84:76:5a:cb:24:a0:21:6e:96:e3: ab:53:6a:6e:ad:ba:db:83:6b:6f:a5:cd:78:ae:ec:cd:b0:33: a0:33:56:eb:2e:8b:66:ee:30:6b:dd:e1:5f:5d:c7:46:b1:11: 46:88:22:c7:70:20:7e:19:2f:9d:40:23:ed:28:3b:27:6a:c9: 80:1d:1c:9b:73:7e:9c:5e:38:f8:1c:f0:8d:38:02:e8:0c:94: 27:c8:d4:6e:9c:c0:ab:5d:9e:bc:2d:ca:24:3a:04:ff:51:e1: 83:23:62:28:a3:2b:48:87:44:df:c8:16:b5:92:70:07:b1:51: 16:32:d7:86:14:60:21:72:3d:5c:20:73:f8:23:79:88:87:0e: 74:fa:31:a6:4b:87:04:60:4e:78:99:91:97:a7:b5:50:c5:3c: 64:ec:f6:8c:0a:bc:d6:7a:bf:d2:34:7d:55:57:f7:13:7a:52: 5a:e3:f4:5c:4f:b9:1f:35:e8:86:0b:f6:a3:07:5d:ee:f1:14: f5:4a:a0:71 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt8gIZpQVtbP8yXT0qwVDRkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4ZGFmZDYzNjA2MzZhNjMyNzc0N2EwNzA4MGY3ZjJlNWUz MmNlODUwHhcNMjYwMTAyMDIxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzliOGE5ZmM4M2QxMGEwZWIzOTIwYTM1ZmE3OGMxNmVhNTllYjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/I+P3ZiDIeS+/qjQqDg2oq02iCY UqU/UAA7RKk/yLhHx+7umNRS7WfFkyEHj/QH7GZVlVDKtiZbpDfQhHHL5aDH+X6u ASLzsy72xUiPb1ncfYeP5sKEZFACTVh0PJf3OkTwNdplyxOOsLwCneW3piA47inV yB7PvFmeT3UkC7M0KLvbVZQWCbni4LCJjpsjpGLvxwF6ANLX10Mfn11+5UcJ8r4S cC1E5udm3tUcppTOcsGgqqAJiRuE/9KHpRmFK1ogeFXv83YjIbDU+bqiwUh1CBPd fifZhIjnqYk9IvLN/N82Wk2U0fccsIjAA0IBBXVMogpUUBJ/z2VOi8aDKQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFIebip/IPRCg6zkgo1+njBbqWeuGMB8GA1UdIwQY MBaAFGja/WNgY2pjJ3R6BwgPfy5eMs6FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU5yOVkyQmphbU1uZEhvSENBOV9MbDR5em9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi82MDEzNjAtYWRiOS00Y2I1LTg2ZDkt MmJiMjM3N2U1YTFjLzEvaDV1S244ZzlFS0RyT1NDalg2ZU1GdXBaNjRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi82MDEzNjAtYWRiOS00Y2I1LTg2ZDktMmJiMjM3N2U1YTFj LzEvYU5yOVkyQmphbU1uZEhvSENBOV9MbDR5em9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBW9qYMA8E AgACMAkDBwAgAQZ4BfQwDQYJKoZIhvcNAQELBQADggEBADCweO2O86dbGRUQSOCG TUDl/VGnJKxyNpCFOXPtzrdEPzzFLNAAFePAtpj68UH4nlv7Z6aljc47FtNVV55p hHZayySgIW6W46tTam6tutuDa2+lzXiu7M2wM6AzVusui2buMGvd4V9dx0axEUaI IsdwIH4ZL51AI+0oOydqyYAdHJtzfpxeOPgc8I04AugMlCfI1G6cwKtdnrwtyiQ6 BP9R4YMjYiijK0iHRN/IFrWScAexURYy14YUYCFyPVwgc/gjeYiHDnT6MaZLhwRg TniZkZentVDFPGTs9owKvNZ6v9I0fVVX9xN6Ulrj9FxPuR816IYL9qMHXe7xFPVK oHE= -----END CERTIFICATE-----Generated at Mon Feb 9 22:17:07 2026 by rpki-client