This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/tXmcrXd1NSzKbyThyNVtW7ErlI4.roa File: tXmcrXd1NSzKbyThyNVtW7ErlI4.roa (raw, json) Hash identifier: Nfqw9jIsfvO/CcG3bEmL8y0/YqElSRYvepE+1sSTOrw= Subject key identifier: B5:79:9C:AD:77:75:35:2C:CA:6F:24:E1:C8:D5:6D:5B:B1:2B:94:8E Certificate issuer: /CN=f96a6a2032f96d7023722239c9fa5edd5596f863 Certificate serial: 019B79EC20E759E6CE3E4DC7FE9B7F872D89 Authority key identifier: F9:6A:6A:20:32:F9:6D:70:23:72:22:39:C9:FA:5E:DD:55:96:F8:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WpqIDL5bXAjciI5yfpe3VWW-GM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/tXmcrXd1NSzKbyThyNVtW7ErlI4.roa Signing time: Thu 01 Jan 2026 14:17:56 +0000 ROA not before: Thu 01 Jan 2026 14:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49843 IP address blocks: 91.213.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.crl rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-WpqIDL5bXAjciI5yfpe3VWW-GM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:20:e7:59:e6:ce:3e:4d:c7:fe:9b:7f:87:2d:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f96a6a2032f96d7023722239c9fa5edd5596f863 Validity Not Before: Jan 1 14:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b5799cad7775352cca6f24e1c8d56d5bb12b948e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e7:11:49:b9:61:57:95:02:df:18:56:db:ce: b3:39:b0:9c:38:c3:39:8a:08:5b:0e:f5:aa:71:15: 58:3f:b6:03:79:bb:4d:87:fb:52:bc:bc:4a:6c:75: fe:d5:18:af:b8:ed:09:da:8c:4a:8c:ad:75:a9:a2: e6:36:c8:09:2c:84:1b:79:5d:d7:0c:97:b1:be:55: c1:86:89:48:db:52:2f:67:7a:39:fc:05:97:b7:9a: cb:cd:f4:78:06:04:18:74:3a:f2:1f:f8:e4:eb:43: 6c:75:f9:d8:8f:7e:74:8b:fd:8c:b7:19:e4:76:f8: 71:fc:64:d1:2d:de:14:63:90:0a:9c:5f:7c:2e:86: 27:95:f7:9e:0f:54:b7:5f:ee:81:3e:9a:5c:f8:eb: 48:98:4d:dc:6e:13:f5:cc:d6:8d:ba:05:99:c7:ef: 0f:ed:b8:1e:db:5a:60:87:cc:c8:f1:9e:03:44:8f: bd:14:e3:48:ed:a5:65:65:e6:5d:42:f0:26:4d:19: dd:50:2c:c2:cc:e0:67:83:2c:40:ef:4d:02:10:9c: ca:07:63:71:72:3a:48:f4:39:ba:2e:6b:d2:b0:5e: 69:da:6b:20:dc:6c:41:09:0e:c2:63:ba:91:0f:14: 08:22:c2:22:66:52:6b:2a:c5:de:38:f2:45:7b:86: f5:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:79:9C:AD:77:75:35:2C:CA:6F:24:E1:C8:D5:6D:5B:B1:2B:94:8E X509v3 Authority Key Identifier: keyid:F9:6A:6A:20:32:F9:6D:70:23:72:22:39:C9:FA:5E:DD:55:96:F8:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WpqIDL5bXAjciI5yfpe3VWW-GM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/tXmcrXd1NSzKbyThyNVtW7ErlI4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.213.245.0/24 Signature Algorithm: sha256WithRSAEncryption 17:17:b4:bb:1b:59:b2:39:cf:b2:f1:0a:bc:5f:a1:fe:03:93: 88:5c:7c:c9:c6:42:e0:af:1c:a9:4a:ee:7c:17:19:f6:ae:27: 9a:50:a1:03:18:a1:07:82:3f:dc:fd:fe:e7:91:85:8f:20:d7: 09:2f:8f:96:36:e7:fb:37:b1:87:34:ec:c8:5c:26:ee:75:6d: ec:63:dc:2f:b4:83:34:b0:63:bf:e7:7a:65:a6:89:5c:05:58: 4f:51:11:f0:1e:5c:78:b4:c1:06:91:97:01:e5:74:54:b4:60: 17:f8:6c:63:7e:51:9f:a2:c1:ea:03:42:0e:24:31:ba:93:c2: 56:33:7f:12:e0:7b:7c:e9:96:8f:a3:54:e4:35:50:80:c9:bf: 93:a1:ba:67:69:93:07:61:e1:76:2d:ba:55:51:6e:e3:e2:3d: 0a:4a:b0:b8:96:ff:12:3e:6e:5f:4e:d8:d7:e3:68:88:af:bf: 68:37:d6:86:f4:e0:ae:3a:8e:8b:d2:b9:6a:df:81:aa:5a:4b: 23:03:f1:15:50:f1:a7:ee:2f:49:18:90:38:72:fd:42:5c:b4: 18:3e:b0:3f:28:42:c9:f3:fd:28:99:1f:7c:63:49:e8:df:6f: 8b:0d:8b:ca:dd:3d:c0:d8:05:2e:0d:a2:7d:12:53:6b:1e:ac: 0f:90:eb:ef -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt57CDnWebOPk3H/pt/hy2JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5NmE2YTIwMzJmOTZkNzAyMzcyMjIzOWM5ZmE1ZWRkNTU5 NmY4NjMwHhcNMjYwMTAxMTQxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTc5OWNhZDc3NzUzNTJjY2E2ZjI0ZTFjOGQ1NmQ1YmIxMmI5NDhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+cRSblhV5UC3xhW286zObCcOMM5 ighbDvWqcRVYP7YDebtNh/tSvLxKbHX+1RivuO0J2oxKjK11qaLmNsgJLIQbeV3X DJexvlXBholI21IvZ3o5/AWXt5rLzfR4BgQYdDryH/jk60NsdfnYj350i/2Mtxnk dvhx/GTRLd4UY5AKnF98LoYnlfeeD1S3X+6BPppc+OtImE3cbhP1zNaNugWZx+8P 7bge21pgh8zI8Z4DRI+9FONI7aVlZeZdQvAmTRndUCzCzOBngyxA700CEJzKB2Nx cjpI9Dm6LmvSsF5p2msg3GxBCQ7CY7qRDxQIIsIiZlJrKsXeOPJFe4b1jQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFLV5nK13dTUsym8k4cjVbVuxK5SOMB8GA1UdIwQY MBaAFPlqaiAy+W1wI3IiOcn6Xt1VlvhjMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1XcHFJREw1YlhBamNpSTV5ZnBlM1ZXVy1HTS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYvMzc2ZTFmLTk2YjEtNGZlMS04Yjdh LTEzZmY2YTBhZDQ0MS8xL3RYbWNyWGQxTlN6S2J5VGh5TlZ0VzdFcmxJNC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMTYvMzc2ZTFmLTk2YjEtNGZlMS04YjdhLTEzZmY2YTBhZDQ0 MS8xLzEtV3BxSURMNWJYQWpjaUk1eWZwZTNWV1ctR00uY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABb1fUw DQYJKoZIhvcNAQELBQADggEBABcXtLsbWbI5z7LxCrxfof4Dk4hcfMnGQuCvHKlK 7nwXGfauJ5pQoQMYoQeCP9z9/ueRhY8g1wkvj5Y25/s3sYc07MhcJu51bexj3C+0 gzSwY7/nemWmiVwFWE9REfAeXHi0wQaRlwHldFS0YBf4bGN+UZ+iweoDQg4kMbqT wlYzfxLge3zplo+jVOQ1UIDJv5Ohumdpkwdh4XYtulVRbuPiPQpKsLiW/xI+bl9O 2NfjaIivv2g31ob04K46jovSuWrfgapaSyMD8RVQ8afuL0kYkDhy/UJctBg+sD8o Qsnz/SiZH3xjSejfb4sNi8rdPcDYBS4Non0SU2serA+Q6+8= -----END CERTIFICATE-----Generated at Mon Feb 9 18:44:17 2026 by rpki-client