This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/Ts5PqWGJj2W9EIosEAfizgq213Q.roa File: Ts5PqWGJj2W9EIosEAfizgq213Q.roa (raw, json) Hash identifier: CTqIT1awwqBKy53JmlWWx69BitjHGxp4vFXWpWSK68A= Subject key identifier: 4E:CE:4F:A9:61:89:8F:65:BD:10:8A:2C:10:07:E2:CE:0A:B6:D7:74 Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a Certificate serial: 019B9D795A648B6DC29D741E9316CEE8C8A9 Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/Ts5PqWGJj2W9EIosEAfizgq213Q.roa Signing time: Thu 08 Jan 2026 11:58:54 +0000 ROA not before: Thu 08 Jan 2026 11:58:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25198 IP address blocks: 91.109.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 05:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9d:79:5a:64:8b:6d:c2:9d:74:1e:93:16:ce:e8:c8:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a Validity Not Before: Jan 8 11:58:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ece4fa961898f65bd108a2c1007e2ce0ab6d774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a6:bf:ad:9e:9a:2c:97:e8:67:6f:94:e2:a0: 2f:8b:fc:ff:f9:09:f0:b7:64:5d:7a:76:50:e0:31: 8c:75:c0:fa:fb:ac:e8:55:90:37:26:10:26:dc:6b: f9:9a:9f:99:d7:52:9b:1c:d3:31:3d:5d:33:f9:7e: 10:29:e0:fd:af:6a:57:fa:e2:4a:ab:f4:39:b5:33: 09:e2:f0:d6:e3:5b:56:31:e5:e4:74:86:dc:83:be: 90:a3:42:56:3a:d9:80:17:51:8d:c8:bf:10:c0:24: 31:41:83:a2:9d:ca:d2:3b:02:3d:d6:96:b7:36:e6: 2f:9b:bf:d7:15:3b:a7:1a:c7:13:c5:88:3c:18:06: f6:de:21:8f:ee:4d:8a:a9:16:87:20:0e:25:7d:48: 53:30:89:e8:c4:74:bb:88:27:4a:88:a4:7f:7c:40: 60:7b:1f:e7:ef:55:67:bb:cd:4b:d8:00:b9:53:ce: 5f:14:6a:e6:98:7c:bb:c3:d6:f3:01:01:14:c6:db: e7:3f:94:67:3c:e3:f3:40:dd:83:fd:8b:1b:8a:8b: 8d:75:f7:3c:bd:4c:11:34:b6:1d:a4:16:59:ca:3f: 47:a0:ed:1b:f7:b3:0d:5b:c2:f3:4d:63:05:a0:75: 61:fe:f2:f8:7f:f9:54:0b:01:ea:ce:a5:ae:78:1c: 91:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:CE:4F:A9:61:89:8F:65:BD:10:8A:2C:10:07:E2:CE:0A:B6:D7:74 X509v3 Authority Key Identifier: keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/Ts5PqWGJj2W9EIosEAfizgq213Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.109.46.0/24 Signature Algorithm: sha256WithRSAEncryption 00:dc:3d:31:ca:aa:6e:16:b6:41:7f:57:7a:b4:5a:f8:85:89: 02:71:f9:8b:9d:d4:03:de:30:3a:80:ed:2d:39:ca:d7:8d:1e: 3b:fa:91:5b:5e:ad:4c:54:c1:60:87:b3:3f:5c:9d:91:97:0f: ee:3a:76:04:18:17:88:a9:85:51:09:0d:6b:a7:fc:17:df:0d: 00:46:ef:d7:dc:f2:03:b9:57:63:f0:ce:04:60:ed:8a:e6:36: d8:69:de:26:d5:dc:bb:92:6f:9b:2c:4c:33:02:77:fa:4e:65: 2f:2e:49:75:0c:2e:5c:35:56:6c:24:d1:87:83:bf:67:c3:8a: f9:05:7f:9f:d4:36:10:2f:2c:f8:f4:97:51:f4:a7:67:b6:6a: bd:6b:74:3c:e7:c4:1a:6b:bd:58:09:79:9c:e8:ec:63:c0:85: 62:9e:18:08:08:13:84:86:db:a1:bf:1d:b1:60:47:24:f6:31: 11:e9:e2:37:54:f5:4c:88:ce:c0:70:34:eb:0d:87:b6:bb:d5: b2:c5:49:83:06:8f:17:69:80:68:31:3c:85:f2:2f:96:8d:67: cf:18:71:1b:cb:10:52:1b:9b:f5:c8:4f:e8:0d:5a:f0:4a:2a: cc:ce:d6:cc:f1:a4:24:2a:f3:6a:c4:42:4a:5b:9e:e7:13:a1: 18:bd:18:ff -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZudeVpki23CnXQekxbO6MipMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwOGRhOWNmMDBkNGQ1OGI4NTRmZmM2MjAxMGYyMzViMDZk ZjM1NGEwHhcNMjYwMTA4MTE1ODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZWNlNGZhOTYxODk4ZjY1YmQxMDhhMmMxMDA3ZTJjZTBhYjZkNzc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaa/rZ6aLJfoZ2+U4qAvi/z/+Qnw t2RdenZQ4DGMdcD6+6zoVZA3JhAm3Gv5mp+Z11KbHNMxPV0z+X4QKeD9r2pX+uJK q/Q5tTMJ4vDW41tWMeXkdIbcg76Qo0JWOtmAF1GNyL8QwCQxQYOincrSOwI91pa3 NuYvm7/XFTunGscTxYg8GAb23iGP7k2KqRaHIA4lfUhTMInoxHS7iCdKiKR/fEBg ex/n71Vnu81L2AC5U85fFGrmmHy7w9bzAQEUxtvnP5RnPOPzQN2D/YsbiouNdfc8 vUwRNLYdpBZZyj9HoO0b97MNW8LzTWMFoHVh/vL4f/lUCwHqzqWueByR0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE7OT6lhiY9lvRCKLBAH4s4Kttd0MB8GA1UdIwQY MBaAFNCNqc8A1NWLhU/8YgEPI1sG3zVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYt MjBlMTk3ODBjYjJlLzEvVHM1UHFXR0pqMlc5RUlvc0VBZml6Z3EyMTNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYtMjBlMTk3ODBjYjJl LzEvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW20uMA0G CSqGSIb3DQEBCwUAA4IBAQAA3D0xyqpuFrZBf1d6tFr4hYkCcfmLndQD3jA6gO0t OcrXjR47+pFbXq1MVMFgh7M/XJ2Rlw/uOnYEGBeIqYVRCQ1rp/wX3w0ARu/X3PID uVdj8M4EYO2K5jbYad4m1dy7km+bLEwzAnf6TmUvLkl1DC5cNVZsJNGHg79nw4r5 BX+f1DYQLyz49JdR9Kdntmq9a3Q858Qaa71YCXmc6OxjwIVinhgICBOEhtuhvx2x YEck9jER6eI3VPVMiM7AcDTrDYe2u9WyxUmDBo8XaYBoMTyF8i+WjWfPGHEbyxBS G5v1yE/oDVrwSirMztbM8aQkKvNqxEJKW57nE6EYvRj/ -----END CERTIFICATE-----Generated at Mon Jan 19 14:43:30 2026 by rpki-client