This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/c5DnRDLkqQHroTq5n0KgAtfoiis.roa File: c5DnRDLkqQHroTq5n0KgAtfoiis.roa (raw, json) Hash identifier: DEZpLgUmjtEY6vgfLOjicPP3NwfNyFAYqmG1njt0jYs= Subject key identifier: 73:90:E7:44:32:E4:A9:01:EB:A1:3A:B9:9F:42:A0:02:D7:E8:8A:2B Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Certificate serial: 019B7F853E1AA265A6C862492CD7053B4DFD Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/c5DnRDLkqQHroTq5n0KgAtfoiis.roa Signing time: Fri 02 Jan 2026 16:23:17 +0000 ROA not before: Fri 02 Jan 2026 16:23:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57916 IP address blocks: 91.242.64.0/22 maxlen: 22 91.242.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:3e:1a:a2:65:a6:c8:62:49:2c:d7:05:3b:4d:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Validity Not Before: Jan 2 16:23:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7390e74432e4a901eba13ab99f42a002d7e88a2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:54:7e:40:1d:81:27:9d:0e:1a:0f:92:ac:28: e0:d3:91:e2:3b:ff:d2:01:2c:d6:79:9e:6d:47:19: cf:72:44:b6:68:0f:e4:0a:a9:88:e6:66:5f:02:6b: a4:a8:5f:59:78:42:21:6c:e1:19:eb:0c:a7:01:c5: 27:d2:d5:56:87:dd:96:79:5b:4f:05:f4:a2:55:1a: 56:8d:60:51:e9:65:5a:3b:69:d5:60:f7:70:70:07: be:a8:a2:06:b9:9d:38:01:59:95:52:53:74:f1:dc: c6:4e:16:6a:b3:40:0a:c7:3c:0b:0c:be:15:cd:ec: ae:79:a6:f9:f6:7c:9f:8a:0e:7f:a4:59:52:5f:8a: 73:2e:4e:87:57:e2:67:98:d5:1f:88:17:61:62:1c: 1e:02:1c:61:2d:60:23:7a:75:fd:83:fb:f2:45:0e: e6:0d:e1:b4:f3:ec:4c:3a:d1:16:a6:10:49:ac:99: dd:69:7e:ad:58:2d:6e:ba:b0:03:05:f6:3d:c8:26: e8:54:0a:99:92:31:5b:68:5b:72:59:d8:03:1b:33: 02:00:de:a5:68:e1:c9:8e:5f:92:03:25:ae:1e:8f: 34:de:c2:f7:3f:e0:d7:76:12:1d:29:81:a6:9c:16: 75:6b:94:7b:2b:76:1c:38:af:7b:c6:a8:35:02:14: 78:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:90:E7:44:32:E4:A9:01:EB:A1:3A:B9:9F:42:A0:02:D7:E8:8A:2B X509v3 Authority Key Identifier: keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/c5DnRDLkqQHroTq5n0KgAtfoiis.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.242.64.0/22 91.242.97.0/24 Signature Algorithm: sha256WithRSAEncryption ab:71:74:44:f7:9d:0d:ee:99:dd:04:0a:25:d2:93:4a:79:f7: ee:56:b1:1d:d2:5f:2b:cc:98:15:8e:23:48:33:8e:8e:ee:cb: 5a:1a:75:51:28:5f:f4:6c:6c:ef:f5:c7:80:96:69:b6:ee:a0: 46:ff:6d:5a:48:c2:58:00:46:53:62:21:59:d9:c5:14:d5:e9: 83:e6:4d:67:96:44:58:d8:e9:28:aa:db:92:47:98:0e:85:86: 52:90:56:a8:12:5d:aa:6e:e3:10:9c:49:c6:f8:97:d9:11:c0: 9c:da:49:e3:d4:7c:d5:f5:8f:2c:f0:26:c1:38:60:bd:12:53: 08:a0:41:26:41:6b:e1:f4:c5:e7:98:c2:6e:f9:be:a9:d7:58: 62:ad:f3:3e:17:1e:1b:d8:c6:c6:f8:45:70:3f:68:63:8f:50: 6d:e2:77:09:7a:87:8f:67:34:ca:db:a1:df:b7:aa:fe:fa:51: 15:5c:dc:c8:a3:59:bf:90:ae:8a:ab:0a:7b:bb:eb:89:bd:3e: 67:39:a9:75:4b:66:3c:65:db:d3:24:e8:00:c6:1d:be:06:80: 9d:f9:78:e8:b2:c1:3c:d4:3e:05:81:32:89:f1:2c:08:aa:00: 27:1a:72:81:51:00:6e:07:dd:2a:4a:1c:b6:2a:86:f2:5b:b1: 27:84:19:6b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hT4aomWmyGJJLNcFO039MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3 MWE5YTgwHhcNMjYwMTAyMTYyMzE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzkwZTc0NDMyZTRhOTAxZWJhMTNhYjk5ZjQyYTAwMmQ3ZTg4YTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31R+QB2BJ50OGg+SrCjg05HiO//S ASzWeZ5tRxnPckS2aA/kCqmI5mZfAmukqF9ZeEIhbOEZ6wynAcUn0tVWh92WeVtP BfSiVRpWjWBR6WVaO2nVYPdwcAe+qKIGuZ04AVmVUlN08dzGThZqs0AKxzwLDL4V zeyueab59nyfig5/pFlSX4pzLk6HV+JnmNUfiBdhYhweAhxhLWAjenX9g/vyRQ7m DeG08+xMOtEWphBJrJndaX6tWC1uurADBfY9yCboVAqZkjFbaFtyWdgDGzMCAN6l aOHJjl+SAyWuHo803sL3P+DXdhIdKYGmnBZ1a5R7K3YcOK97xqg1AhR4bwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHOQ50Qy5KkB66E6uZ9CoALX6IorMB8GA1UdIwQY MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt M2FjOWU1NmMzMDg5LzEvYzVEblJETGtxUUhyb1RxNW4wS2dBdGZvaWlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5 LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW/JAAwQA W/JhMA0GCSqGSIb3DQEBCwUAA4IBAQCrcXRE950N7pndBAol0pNKeffuVrEd0l8r zJgVjiNIM46O7staGnVRKF/0bGzv9ceAlmm27qBG/21aSMJYAEZTYiFZ2cUU1emD 5k1nlkRY2OkoqtuSR5gOhYZSkFaoEl2qbuMQnEnG+JfZEcCc2knj1HzV9Y8s8CbB OGC9ElMIoEEmQWvh9MXnmMJu+b6p11hirfM+Fx4b2MbG+EVwP2hjj1Bt4ncJeoeP ZzTK26Hft6r++lEVXNzIo1m/kK6Kqwp7u+uJvT5nOal1S2Y8ZdvTJOgAxh2+BoCd +XjossE81D4FgTKJ8SwIqgAnGnKBUQBuB90qShy2KobyW7EnhBlr -----END CERTIFICATE-----Generated at Sun Jan 25 21:27:21 2026 by rpki-client