This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/5wUfqgVgRpBlXLIozAfDZ9LRMKU.roa File: 5wUfqgVgRpBlXLIozAfDZ9LRMKU.roa (raw, json) Hash identifier: ZZwhfnr+yN7d01rZdFJTGg24cKDxvgVBnw89crlNYww= Subject key identifier: E7:05:1F:AA:05:60:46:90:65:5C:B2:28:CC:07:C3:67:D2:D1:30:A5 Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Certificate serial: 019B7F8553074AD74256E30AEE9586910CAE Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/5wUfqgVgRpBlXLIozAfDZ9LRMKU.roa Signing time: Fri 02 Jan 2026 16:23:22 +0000 ROA not before: Fri 02 Jan 2026 16:23:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 399091 IP address blocks: 91.242.100.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:53:07:4a:d7:42:56:e3:0a:ee:95:86:91:0c:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Validity Not Before: Jan 2 16:23:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e7051faa05604690655cb228cc07c367d2d130a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b1:98:42:ee:eb:c5:65:e6:01:13:a8:14:3c: 38:85:6f:a0:13:ac:19:6d:80:e2:14:92:35:e3:2d: ba:eb:dd:0c:8f:7b:58:b1:33:85:ee:09:f6:cf:0d: a6:e9:0a:06:06:98:07:f6:f6:d4:6c:8c:b8:90:aa: 8a:8e:7d:48:53:b3:47:0b:ad:62:ae:8b:2f:a3:39: a2:a5:d1:4e:88:33:e7:a6:ce:32:b1:cf:e4:ed:43: c4:f9:ea:0c:f6:d5:fb:9c:a5:37:9e:76:57:4b:ae: 05:7f:00:75:f6:3a:90:22:ff:ca:c2:74:5e:e2:54: f2:17:93:bf:67:e7:61:de:e0:71:b9:db:4b:3b:fc: be:f9:21:56:32:34:db:35:20:42:9d:b1:b4:b1:9f: bc:87:d1:b4:5e:c8:70:d8:31:01:dc:8b:a4:7d:5c: 53:66:00:2e:50:36:36:11:8c:4e:89:79:2e:e7:a0: e9:1a:b4:4c:ae:a2:1d:c3:74:e6:12:3e:7d:c3:8e: f0:36:28:fa:f7:0e:68:6b:2c:96:42:ec:d8:8e:55: b5:c2:59:53:60:1b:8d:14:e0:28:cc:5d:b5:a6:28: f4:c0:08:af:e4:47:9f:cf:9a:61:e4:45:72:57:b5: e4:80:e8:a5:4e:9d:0b:1a:d2:87:17:6b:79:e2:5a: 55:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:05:1F:AA:05:60:46:90:65:5C:B2:28:CC:07:C3:67:D2:D1:30:A5 X509v3 Authority Key Identifier: keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/5wUfqgVgRpBlXLIozAfDZ9LRMKU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.242.100.0/23 Signature Algorithm: sha256WithRSAEncryption 69:09:35:a7:9c:3b:8a:4b:63:39:5d:b3:89:97:f0:2a:75:90: d7:8b:2c:5d:24:90:68:8b:ad:a7:c5:c1:91:8c:6c:7d:de:6d: ad:e0:95:ed:99:54:bd:5b:e2:80:55:3b:59:02:7e:72:dc:23: 34:c1:fa:99:db:44:de:09:1e:11:46:e1:33:ab:ca:d1:09:16: 92:6b:5d:38:fb:68:f6:65:56:f1:e0:a6:48:9d:84:97:2c:7b: 57:0d:90:28:57:df:cc:16:05:1a:1d:37:81:90:ff:5e:93:7c: 86:27:4d:95:b5:91:80:10:ab:29:96:bd:8a:12:a2:68:d1:b9: 97:67:e1:5e:25:6b:96:8b:c8:f4:ef:69:07:3b:c6:81:9b:af: e6:e4:94:3f:bc:a6:4b:69:24:c4:94:43:ff:ea:65:66:1a:c1: 86:0a:b4:49:fd:69:00:7f:53:6a:0d:1b:c1:ef:c6:79:48:41: 14:aa:36:63:65:c5:ba:c7:22:a3:38:66:eb:17:48:20:80:95: 86:f3:3a:45:2c:5a:ff:fc:9b:3c:a0:81:8b:b6:ce:42:6e:07: f2:49:78:2f:16:40:31:3d:0a:43:c3:97:cc:9e:e8:b3:91:2e: f6:a6:67:a4:04:a9:0f:82:6b:78:fc:35:c9:5f:57:82:44:b5: d9:07:0e:40 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hVMHStdCVuMK7pWGkQyuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3 MWE5YTgwHhcNMjYwMTAyMTYyMzIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzA1MWZhYTA1NjA0NjkwNjU1Y2IyMjhjYzA3YzM2N2QyZDEzMGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrGYQu7rxWXmAROoFDw4hW+gE6wZ bYDiFJI14y26690Mj3tYsTOF7gn2zw2m6QoGBpgH9vbUbIy4kKqKjn1IU7NHC61i rosvozmipdFOiDPnps4ysc/k7UPE+eoM9tX7nKU3nnZXS64FfwB19jqQIv/KwnRe 4lTyF5O/Z+dh3uBxudtLO/y++SFWMjTbNSBCnbG0sZ+8h9G0Xshw2DEB3IukfVxT ZgAuUDY2EYxOiXku56DpGrRMrqIdw3TmEj59w47wNij69w5oayyWQuzYjlW1wllT YBuNFOAozF21pij0wAiv5Eefz5ph5EVyV7XkgOilTp0LGtKHF2t54lpVbwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOcFH6oFYEaQZVyyKMwHw2fS0TClMB8GA1UdIwQY MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt M2FjOWU1NmMzMDg5LzEvNXdVZnFnVmdScEJsWExJb3pBZkRaOUxSTUtVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5 LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW/JkMA0G CSqGSIb3DQEBCwUAA4IBAQBpCTWnnDuKS2M5XbOJl/AqdZDXiyxdJJBoi62nxcGR jGx93m2t4JXtmVS9W+KAVTtZAn5y3CM0wfqZ20TeCR4RRuEzq8rRCRaSa104+2j2 ZVbx4KZInYSXLHtXDZAoV9/MFgUaHTeBkP9ek3yGJ02VtZGAEKsplr2KEqJo0bmX Z+FeJWuWi8j072kHO8aBm6/m5JQ/vKZLaSTElEP/6mVmGsGGCrRJ/WkAf1NqDRvB 78Z5SEEUqjZjZcW6xyKjOGbrF0gggJWG8zpFLFr//Js8oIGLts5CbgfySXgvFkAx PQpDw5fMnuizkS72pmekBKkPgmt4/DXJX1eCRLXZBw5A -----END CERTIFICATE-----Generated at Sun Jan 25 22:50:47 2026 by rpki-client