This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/5NmChmeBuoj5qqyguaEmk83cCxk.roa File: 5NmChmeBuoj5qqyguaEmk83cCxk.roa (raw, json) Hash identifier: BbcjOfuBwzNV6wuTxLpydwkAn2+Vyhp/J5GdkLgtY0U= Subject key identifier: E4:D9:82:86:67:81:BA:88:F9:AA:AC:A0:B9:A1:26:93:CD:DC:0B:19 Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a Certificate serial: 019B6041E55A694B0F0DFFEB2CB829F76A9E Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/5NmChmeBuoj5qqyguaEmk83cCxk.roa Signing time: Sat 27 Dec 2025 14:41:29 +0000 ROA not before: Sat 27 Dec 2025 14:41:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 91.109.40.0/24 maxlen: 24 91.109.41.0/24 maxlen: 24 91.109.42.0/24 maxlen: 24 91.109.46.0/24 maxlen: 24 147.185.196.0/24 maxlen: 24 147.185.197.0/24 maxlen: 24 193.168.200.0/24 maxlen: 24 207.244.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 14:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:60:41:e5:5a:69:4b:0f:0d:ff:eb:2c:b8:29:f7:6a:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a Validity Not Before: Dec 27 14:41:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e4d982866781ba88f9aaaca0b9a12693cddc0b19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:81:b7:bb:3e:9e:4b:db:33:20:9f:bc:10:72: 30:db:43:1f:79:6d:c6:4b:81:0a:b7:35:8c:89:d2: 47:e7:14:b6:98:ee:7e:59:6d:a0:5a:84:bb:46:7d: 50:4a:2f:0c:bd:57:04:ca:cc:41:d1:29:20:04:98: f8:ad:3b:3e:5b:db:e1:7d:3c:ea:97:a2:83:c2:00: b9:3b:a3:2c:ce:e2:cb:36:29:b3:55:1b:6d:62:4f: 30:7e:2e:67:d5:98:f6:d9:4b:1c:80:04:55:df:d0: 41:a2:2a:cb:2f:61:86:31:9c:84:1b:bc:f1:da:7b: 21:af:da:18:d3:e3:d4:67:8b:76:9a:7d:55:8e:7c: 7a:0f:b0:1f:2d:a5:05:60:a7:96:e9:c4:fe:b5:99: 44:1e:81:5a:29:2a:e3:25:27:50:0f:bc:11:5a:12: c4:f6:35:98:ca:e5:56:ff:33:2d:60:14:78:16:db: 1c:f6:2e:6e:5e:85:54:a6:88:30:83:4d:1b:e1:ea: bd:b0:ac:83:2d:15:cf:b6:24:87:3a:8f:a9:0d:c8: 13:23:fc:f7:55:84:3c:35:c9:79:80:f3:dd:c4:1a: 78:a0:26:2c:32:ed:42:17:ee:90:3f:68:8d:0b:53: 14:1e:ea:e5:cf:c3:13:23:98:5c:32:15:3a:43:1c: eb:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:D9:82:86:67:81:BA:88:F9:AA:AC:A0:B9:A1:26:93:CD:DC:0B:19 X509v3 Authority Key Identifier: keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/5NmChmeBuoj5qqyguaEmk83cCxk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.109.40.0-91.109.42.255 91.109.46.0/24 147.185.196.0/23 193.168.200.0/24 207.244.198.0/24 Signature Algorithm: sha256WithRSAEncryption 34:ed:44:09:a7:ea:b8:f4:2b:8e:a9:61:58:13:75:a5:59:b1: 94:36:98:8e:5f:e3:44:5d:eb:11:b7:8a:ed:b4:41:06:b5:15: 13:3d:24:ce:5b:de:86:15:28:7a:b4:3f:39:95:6a:8b:03:72: 99:7d:59:1e:68:d1:15:0e:29:5e:65:91:67:d4:0d:77:f4:c3: e8:44:28:5d:d9:61:9f:5f:b1:ee:eb:22:34:53:f8:e4:89:9d: 22:15:63:ff:c3:33:de:db:ca:20:0e:1f:26:c6:01:7c:5b:63: 62:63:bb:38:f5:70:23:81:71:70:2f:3c:46:a4:1c:53:c7:d8: f4:a1:fd:9d:ba:ac:03:89:68:2e:9f:1a:a7:5b:32:89:83:82: c8:c1:92:98:f6:dd:4b:8d:33:29:40:f8:60:1d:e8:db:8e:27: aa:5a:fd:9d:4c:0c:ca:7d:59:1e:3d:4a:ad:28:bd:7b:bd:cb: fb:35:f8:8c:b6:e6:5a:61:93:8a:21:14:97:a8:27:19:94:c8: e3:58:14:93:a3:37:f5:40:4f:98:42:10:2c:6b:c5:25:74:78: 98:54:7f:9e:8a:f1:c4:b4:af:08:9c:ad:a1:82:e5:80:73:12: 26:2f:f6:91:b1:cf:0d:95:29:13:64:e8:40:68:34:06:89:17: c6:77:63:31 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZtgQeVaaUsPDf/rLLgp92qeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwOGRhOWNmMDBkNGQ1OGI4NTRmZmM2MjAxMGYyMzViMDZk ZjM1NGEwHhcNMjUxMjI3MTQ0MTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNGQ5ODI4NjY3ODFiYTg4ZjlhYWFjYTBiOWExMjY5M2NkZGMwYjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYG3uz6eS9szIJ+8EHIw20MfeW3G S4EKtzWMidJH5xS2mO5+WW2gWoS7Rn1QSi8MvVcEysxB0SkgBJj4rTs+W9vhfTzq l6KDwgC5O6MszuLLNimzVRttYk8wfi5n1Zj22UscgARV39BBoirLL2GGMZyEG7zx 2nshr9oY0+PUZ4t2mn1Vjnx6D7AfLaUFYKeW6cT+tZlEHoFaKSrjJSdQD7wRWhLE 9jWYyuVW/zMtYBR4Ftsc9i5uXoVUpogwg00b4eq9sKyDLRXPtiSHOo+pDcgTI/z3 VYQ8Ncl5gPPdxBp4oCYsMu1CF+6QP2iNC1MUHurlz8MTI5hcMhU6Qxzr9QIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFOTZgoZngbqI+aqsoLmhJpPN3AsZMB8GA1UdIwQY MBaAFNCNqc8A1NWLhU/8YgEPI1sG3zVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYt MjBlMTk3ODBjYjJlLzEvNU5tQ2htZUJ1b2o1cXF5Z3VhRW1rODNjQ3hrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYtMjBlMTk3ODBjYjJl LzEvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmMAwDBANbbSgD BABbbSoDBABbbS4DBAGTucQDBADBqMgDBADP9MYwDQYJKoZIhvcNAQELBQADggEB ADTtRAmn6rj0K46pYVgTdaVZsZQ2mI5f40Rd6xG3iu20QQa1FRM9JM5b3oYVKHq0 PzmVaosDcpl9WR5o0RUOKV5lkWfUDXf0w+hEKF3ZYZ9fse7rIjRT+OSJnSIVY//D M97byiAOHybGAXxbY2Jjuzj1cCOBcXAvPEakHFPH2PSh/Z26rAOJaC6fGqdbMomD gsjBkpj23UuNMylA+GAd6NuOJ6pa/Z1MDMp9WR49Sq0ovXu9y/s1+Iy25lphk4oh FJeoJxmUyONYFJOjN/VAT5hCECxrxSV0eJhUf56K8cS0rwicraGC5YBzEiYv9pGx zw2VKRNk6EBoNAaJF8Z3YzE= -----END CERTIFICATE-----Generated at Tue Dec 30 21:06:01 2025 by rpki-client