This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6c0b54-b06e-4d44-8120-370b8688feaf/1/5a8JGJ3id4PxFvxqeLBMFMn4dRw.roa File: 5a8JGJ3id4PxFvxqeLBMFMn4dRw.roa (raw, json) Hash identifier: CUVPemRn0SVvUqbZxOWY0VPVfqwjNH4J3L61ApQCXYM= Subject key identifier: E5:AF:09:18:9D:E2:77:83:F1:16:FC:6A:78:B0:4C:14:C9:F8:75:1C Certificate issuer: /CN=b5449b08ea6a267df7366a6895c7c924c2f1926d Certificate serial: 019B791144B01CFEA174A6D0D07A1304E288 Authority key identifier: B5:44:9B:08:EA:6A:26:7D:F7:36:6A:68:95:C7:C9:24:C2:F1:92:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUSbCOpqJn33NmpolcfJJMLxkm0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6c0b54-b06e-4d44-8120-370b8688feaf/1/5a8JGJ3id4PxFvxqeLBMFMn4dRw.roa Signing time: Thu 01 Jan 2026 10:18:53 +0000 ROA not before: Thu 01 Jan 2026 10:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30891 IP address blocks: 91.245.223.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6c0b54-b06e-4d44-8120-370b8688feaf/1/tUSbCOpqJn33NmpolcfJJMLxkm0.crl rsync://rpki.ripe.net/repository/DEFAULT/37/6c0b54-b06e-4d44-8120-370b8688feaf/1/tUSbCOpqJn33NmpolcfJJMLxkm0.mft rsync://rpki.ripe.net/repository/DEFAULT/tUSbCOpqJn33NmpolcfJJMLxkm0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:44:b0:1c:fe:a1:74:a6:d0:d0:7a:13:04:e2:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5449b08ea6a267df7366a6895c7c924c2f1926d Validity Not Before: Jan 1 10:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e5af09189de27783f116fc6a78b04c14c9f8751c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ce:55:36:25:b9:cb:03:bf:87:0d:cb:57:21: a6:1b:ba:bf:98:82:2a:bb:f7:48:65:dc:9a:04:dd: 43:3d:98:4a:83:a3:1a:f8:fb:56:ee:e0:d0:33:4b: 73:06:24:bf:e3:a0:7c:f9:1a:60:0c:1c:b8:79:e8: cd:c1:9c:6e:86:07:17:31:ef:6f:19:68:a1:9f:5a: d5:36:23:98:3c:e0:d6:ef:c7:63:0d:d2:5f:29:3c: ec:28:ca:26:f0:e1:4f:6b:88:85:59:34:2f:ff:8b: 96:03:dc:7a:18:25:1a:3d:bc:64:5b:3d:ca:d7:82: 48:2e:b8:21:54:bb:cc:5d:7e:70:2d:ae:98:4a:eb: 52:86:6b:d1:3d:14:62:e4:cb:4d:53:a4:87:a2:62: 53:2b:9b:d2:10:ab:d5:4a:a8:57:10:bb:93:e9:91: 4f:fe:5a:f2:6e:f0:b8:c2:e6:b4:99:4e:5f:4b:19: be:91:79:57:aa:b4:75:38:a3:4c:60:2f:98:17:80: b5:b6:47:b6:1a:9c:cc:86:d0:f1:5d:7f:6c:5d:21: 2a:5e:2c:f9:e3:15:12:40:cd:ea:c7:ff:70:e1:e0: 11:df:bb:30:d8:fe:f4:00:d5:41:59:86:26:7e:51: 96:6b:8c:1c:62:2c:7d:0a:44:9a:25:61:c0:d0:43: 0d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:AF:09:18:9D:E2:77:83:F1:16:FC:6A:78:B0:4C:14:C9:F8:75:1C X509v3 Authority Key Identifier: keyid:B5:44:9B:08:EA:6A:26:7D:F7:36:6A:68:95:C7:C9:24:C2:F1:92:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUSbCOpqJn33NmpolcfJJMLxkm0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6c0b54-b06e-4d44-8120-370b8688feaf/1/5a8JGJ3id4PxFvxqeLBMFMn4dRw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6c0b54-b06e-4d44-8120-370b8688feaf/1/tUSbCOpqJn33NmpolcfJJMLxkm0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.245.223.0/24 Signature Algorithm: sha256WithRSAEncryption 69:80:a8:6d:98:60:7b:61:67:b2:58:fd:f6:d3:33:8e:57:da: 63:0e:95:a2:2a:da:d6:2b:84:73:02:bc:53:5e:d7:7c:fd:22: b3:76:ac:f1:2a:8e:6f:61:72:8a:8a:36:a3:70:97:00:4a:22: 4b:6f:34:c9:c2:44:c1:2e:53:4e:22:7a:11:cb:24:b7:ee:77: 7b:2e:53:37:36:de:61:8d:f1:36:a4:2e:85:fb:4a:b6:44:b2: 2a:05:e6:46:91:0d:e8:c1:d1:bb:25:dc:1c:f5:36:5e:da:24: b1:f8:a6:fd:82:dd:88:ed:d4:d8:30:7d:78:82:31:85:c3:8a: 5b:f2:28:57:90:03:ce:53:ab:7b:af:23:c6:6b:df:8f:eb:18: f2:fe:bb:87:9a:73:16:09:b4:ed:26:19:0d:7c:d2:72:1a:56: 1d:84:bf:1d:dd:48:5d:f1:82:f3:0e:b1:9d:ad:72:d7:96:52: 3e:2a:d3:86:c6:18:c0:17:25:74:d6:bb:e0:6e:43:fe:ec:3b: 8a:a3:96:5c:11:e0:5f:03:44:13:cd:5a:6c:a4:7e:c8:b3:13: b7:a1:25:8e:7d:cc:d7:f7:b7:3e:3a:88:99:20:88:a0:46:5f: 22:cf:4e:c4:ae:66:ae:fe:83:c6:c5:0e:06:75:4d:7f:fa:97: 94:cc:c1:e2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EUSwHP6hdKbQ0HoTBOKIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NDQ5YjA4ZWE2YTI2N2RmNzM2NmE2ODk1YzdjOTI0YzJm MTkyNmQwHhcNMjYwMTAxMTAxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNWFmMDkxODlkZTI3NzgzZjExNmZjNmE3OGIwNGMxNGM5Zjg3NTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAic5VNiW5ywO/hw3LVyGmG7q/mIIq u/dIZdyaBN1DPZhKg6Ma+PtW7uDQM0tzBiS/46B8+RpgDBy4eejNwZxuhgcXMe9v GWihn1rVNiOYPODW78djDdJfKTzsKMom8OFPa4iFWTQv/4uWA9x6GCUaPbxkWz3K 14JILrghVLvMXX5wLa6YSutShmvRPRRi5MtNU6SHomJTK5vSEKvVSqhXELuT6ZFP /lrybvC4wua0mU5fSxm+kXlXqrR1OKNMYC+YF4C1tke2GpzMhtDxXX9sXSEqXiz5 4xUSQM3qx/9w4eAR37sw2P70ANVBWYYmflGWa4wcYix9CkSaJWHA0EMNkwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOWvCRid4neD8Rb8aniwTBTJ+HUcMB8GA1UdIwQY MBaAFLVEmwjqaiZ99zZqaJXHySTC8ZJtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFVTYkNPcHFKbjMzTm1wb2xjZkpKTUx4a20wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy82YzBiNTQtYjA2ZS00ZDQ0LTgxMjAt MzcwYjg2ODhmZWFmLzEvNWE4SkdKM2lkNFB4RnZ4cWVMQk1GTW40ZFJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy82YzBiNTQtYjA2ZS00ZDQ0LTgxMjAtMzcwYjg2ODhmZWFm LzEvdFVTYkNPcHFKbjMzTm1wb2xjZkpKTUx4a20wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/XfMA0G CSqGSIb3DQEBCwUAA4IBAQBpgKhtmGB7YWeyWP320zOOV9pjDpWiKtrWK4RzArxT Xtd8/SKzdqzxKo5vYXKKijajcJcASiJLbzTJwkTBLlNOInoRyyS37nd7LlM3Nt5h jfE2pC6F+0q2RLIqBeZGkQ3owdG7Jdwc9TZe2iSx+Kb9gt2I7dTYMH14gjGFw4pb 8ihXkAPOU6t7ryPGa9+P6xjy/ruHmnMWCbTtJhkNfNJyGlYdhL8d3Uhd8YLzDrGd rXLXllI+KtOGxhjAFyV01rvgbkP+7DuKo5ZcEeBfA0QTzVpspH7IsxO3oSWOfczX 97c+OoiZIIigRl8iz07Ermau/oPGxQ4GdU1/+peUzMHi -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:15 2026 by rpki-client