This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ds5L-nmZbsAF1MPdSY8tRjraU5Y.roa File: ds5L-nmZbsAF1MPdSY8tRjraU5Y.roa (raw, json) Hash identifier: fDpAtLsxJawEMxiSb4C7tAx2OdBkgN/gABVjU5t3l/s= Subject key identifier: 76:CE:4B:FA:79:99:6E:C0:05:D4:C3:DD:49:8F:2D:46:3A:DA:53:96 Certificate issuer: /CN=ced30c251141ddb648d05a2c284b33c87c517525 Certificate serial: 019B7D5CBE8F69ABFE76D86AEA56F939131D Authority key identifier: CE:D3:0C:25:11:41:DD:B6:48:D0:5A:2C:28:4B:33:C8:7C:51:75:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztMMJRFB3bZI0FosKEszyHxRdSU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ds5L-nmZbsAF1MPdSY8tRjraU5Y.roa Signing time: Fri 02 Jan 2026 06:19:48 +0000 ROA not before: Fri 02 Jan 2026 06:19:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51193 IP address blocks: 91.216.198.0/24 maxlen: 24 91.216.198.0/25 maxlen: 25 91.216.198.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft rsync://rpki.ripe.net/repository/DEFAULT/ztMMJRFB3bZI0FosKEszyHxRdSU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:be:8f:69:ab:fe:76:d8:6a:ea:56:f9:39:13:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ced30c251141ddb648d05a2c284b33c87c517525 Validity Not Before: Jan 2 06:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=76ce4bfa79996ec005d4c3dd498f2d463ada5396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:59:22:fe:dd:b6:48:29:91:6c:38:87:e0:ea: ac:0f:74:1b:50:e6:24:b9:d3:bf:25:3e:2d:d9:b6: 8b:94:51:68:b4:c4:af:6d:07:89:70:5c:36:0b:10: b2:a0:77:4d:c8:49:b8:39:14:b1:e8:13:a0:d3:c7: 69:78:d6:7f:55:e7:2c:1f:d0:4f:90:25:4d:2a:10: cb:a6:af:e2:00:ef:9c:13:eb:11:44:e4:81:95:61: 40:37:72:b2:1c:d8:87:c4:61:06:b8:d3:99:f3:49: 32:4e:35:d8:fe:cf:ad:d1:a1:43:fd:76:de:77:c9: df:4e:91:2f:a3:27:05:b7:f6:fa:f8:33:ee:a4:15: de:fe:7b:32:95:18:84:8b:51:cf:2f:62:c9:a9:dc: 5d:45:0b:1a:99:8b:27:0f:1e:40:2a:76:05:15:be: d1:af:7e:a3:89:dd:c2:e6:25:c9:cc:bc:e6:c2:8b: df:c0:25:84:56:2f:9b:82:19:12:51:7a:a0:7d:60: 54:b2:10:70:12:8c:d6:0b:63:5e:21:54:07:2d:ed: cc:2d:44:04:3f:39:a4:1e:d0:42:2d:bf:4b:84:16: fc:ef:c4:c5:ce:97:77:00:5c:92:90:b4:fc:25:74: a7:d6:e2:be:d8:b9:44:fe:a2:79:41:cc:22:8c:f6: 4b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:CE:4B:FA:79:99:6E:C0:05:D4:C3:DD:49:8F:2D:46:3A:DA:53:96 X509v3 Authority Key Identifier: keyid:CE:D3:0C:25:11:41:DD:B6:48:D0:5A:2C:28:4B:33:C8:7C:51:75:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztMMJRFB3bZI0FosKEszyHxRdSU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ds5L-nmZbsAF1MPdSY8tRjraU5Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.198.0/24 Signature Algorithm: sha256WithRSAEncryption d2:11:74:01:e1:03:f5:39:67:94:fa:b4:d7:b2:8a:19:86:86: 87:55:e4:35:96:35:e3:f3:09:bf:1a:fb:2c:f7:a0:b1:41:c9: 4e:fa:fd:18:03:d8:20:b8:24:58:b0:cf:13:07:87:fd:bf:06: fb:94:61:b3:3c:bf:83:78:ac:c1:1f:6a:16:1d:bd:55:e5:50: 58:a4:41:9d:30:7a:e2:66:da:31:2f:89:2c:47:b9:56:ab:fd: 6e:7c:cf:f6:8b:08:8b:42:c2:2b:19:fd:5a:b2:62:df:01:0d: ff:8c:9a:01:9d:04:a7:cb:c6:e5:d1:e5:c6:7d:c8:88:b5:9a: 01:af:bc:74:bf:8c:c8:91:a7:a4:4c:10:3a:45:f8:63:da:c4: 0b:aa:6f:ce:d0:7c:34:15:ab:08:2f:b0:02:71:11:09:c1:40: b2:99:30:c7:80:21:0b:a6:1e:df:5a:a3:32:d6:c3:53:ab:2f: c1:36:b2:bb:17:02:b1:91:9a:1c:98:91:a1:e1:47:a3:47:ef: a0:36:39:6a:a4:db:d7:36:2d:e1:63:fb:37:51:1d:ee:01:3b: 83:9c:60:5a:61:36:09:f3:1a:43:79:f9:9b:95:64:3e:24:76: 01:32:3c:8f:5a:91:7c:ed:c0:2b:83:1b:e0:03:ba:eb:c4:7e: 35:61:3d:12 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XL6Paav+dthq6lb5ORMdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlZDMwYzI1MTE0MWRkYjY0OGQwNWEyYzI4NGIzM2M4N2M1 MTc1MjUwHhcNMjYwMTAyMDYxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NmNlNGJmYTc5OTk2ZWMwMDVkNGMzZGQ0OThmMmQ0NjNhZGE1Mzk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVki/t22SCmRbDiH4OqsD3QbUOYk udO/JT4t2baLlFFotMSvbQeJcFw2CxCyoHdNyEm4ORSx6BOg08dpeNZ/VecsH9BP kCVNKhDLpq/iAO+cE+sRROSBlWFAN3KyHNiHxGEGuNOZ80kyTjXY/s+t0aFD/Xbe d8nfTpEvoycFt/b6+DPupBXe/nsylRiEi1HPL2LJqdxdRQsamYsnDx5AKnYFFb7R r36jid3C5iXJzLzmwovfwCWEVi+bghkSUXqgfWBUshBwEozWC2NeIVQHLe3MLUQE PzmkHtBCLb9LhBb878TFzpd3AFySkLT8JXSn1uK+2LlE/qJ5QcwijPZLMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHbOS/p5mW7ABdTD3UmPLUY62lOWMB8GA1UdIwQY MBaAFM7TDCURQd22SNBaLChLM8h8UXUlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenRNTUpSRkIzYlpJMEZvc0tFc3p5SHhSZFNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yNDMwZmItNDEyZS00NGM0LThmZDMt NTE2NmIzOWEzZTE4LzEvZHM1TC1ubVpic0FGMU1QZFNZOHRSanJhVTVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8yNDMwZmItNDEyZS00NGM0LThmZDMtNTE2NmIzOWEzZTE4 LzEvenRNTUpSRkIzYlpJMEZvc0tFc3p5SHhSZFNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9jGMA0G CSqGSIb3DQEBCwUAA4IBAQDSEXQB4QP1OWeU+rTXsooZhoaHVeQ1ljXj8wm/Gvss 96CxQclO+v0YA9gguCRYsM8TB4f9vwb7lGGzPL+DeKzBH2oWHb1V5VBYpEGdMHri ZtoxL4ksR7lWq/1ufM/2iwiLQsIrGf1asmLfAQ3/jJoBnQSny8bl0eXGfciItZoB r7x0v4zIkaekTBA6Rfhj2sQLqm/O0Hw0FasIL7ACcREJwUCymTDHgCELph7fWqMy 1sNTqy/BNrK7FwKxkZocmJGh4UejR++gNjlqpNvXNi3hY/s3UR3uATuDnGBaYTYJ 8xpDefmblWQ+JHYBMjyPWpF87cArgxvgA7rrxH41YT0S -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:25 2026 by rpki-client