This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/I5fzdJCzLFrR9wNTsga_tOMPXh4.roa File: I5fzdJCzLFrR9wNTsga_tOMPXh4.roa (raw, json) Hash identifier: 0AweIDgWya6VM5E4CtElUS8whqXsBUXH8jRWGfH9rhs= Subject key identifier: 23:97:F3:74:90:B3:2C:5A:D1:F7:03:53:B2:06:BF:B4:E3:0F:5E:1E Certificate issuer: /CN=34bca94f6b61e10100dc3a7186ffa3f9b00c69dd Certificate serial: 019B7B3680045AE5E460AD55F8683CEA015D Authority key identifier: 34:BC:A9:4F:6B:61:E1:01:00:DC:3A:71:86:FF:A3:F9:B0:0C:69:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLypT2th4QEA3Dpxhv-j-bAMad0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/I5fzdJCzLFrR9wNTsga_tOMPXh4.roa Signing time: Thu 01 Jan 2026 20:18:47 +0000 ROA not before: Thu 01 Jan 2026 20:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51162 IP address blocks: 77.220.206.0/24 maxlen: 24 91.103.106.0/24 maxlen: 24 91.103.107.0/24 maxlen: 24 91.147.112.0/24 maxlen: 24 91.147.113.0/24 maxlen: 24 91.216.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.crl rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.mft rsync://rpki.ripe.net/repository/DEFAULT/NLypT2th4QEA3Dpxhv-j-bAMad0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:80:04:5a:e5:e4:60:ad:55:f8:68:3c:ea:01:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34bca94f6b61e10100dc3a7186ffa3f9b00c69dd Validity Not Before: Jan 1 20:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2397f37490b32c5ad1f70353b206bfb4e30f5e1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:fc:9a:bb:d5:67:dc:79:70:f1:4c:91:24:b6: 05:8f:a2:06:ec:85:b4:80:3a:0b:c8:ca:36:92:c0: 13:b7:ac:40:59:ae:9e:35:f0:22:e4:8f:a1:ee:29: 65:d2:9f:b3:c7:4e:2b:fe:fc:01:70:ee:7d:66:31: 00:b9:b0:32:4a:c1:6f:78:38:d0:3c:21:54:e5:35: ac:0b:3e:46:5a:31:7c:4d:48:63:40:55:c3:73:0c: f5:36:33:4a:94:17:fb:dc:dd:3d:79:8c:eb:86:ed: 22:55:ae:57:a3:d1:5a:62:72:af:b0:45:37:50:4b: 52:5a:30:8a:54:1d:b3:f6:32:8d:e6:76:15:b3:60: c4:e0:48:5a:0b:81:0a:d2:9d:d8:ab:5c:62:52:d9: 33:fa:30:56:bd:9a:b4:b9:83:31:06:e1:95:60:0e: a3:0e:22:0e:8a:07:53:79:4d:a8:4b:a9:36:e6:05: 0c:f3:d9:df:72:3a:ad:08:13:e1:60:8c:31:a0:a3: 91:06:d2:03:85:a8:1f:32:94:ab:0e:b3:7b:26:54: 1e:ce:24:37:c7:26:6f:5a:da:b6:ce:06:7c:22:cd: 66:41:8d:ae:c7:9a:19:f5:2e:01:36:75:2c:da:d3: ac:4c:05:61:61:c6:95:b9:c2:f2:ae:e7:df:a6:2d: b3:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:97:F3:74:90:B3:2C:5A:D1:F7:03:53:B2:06:BF:B4:E3:0F:5E:1E X509v3 Authority Key Identifier: keyid:34:BC:A9:4F:6B:61:E1:01:00:DC:3A:71:86:FF:A3:F9:B0:0C:69:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLypT2th4QEA3Dpxhv-j-bAMad0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/I5fzdJCzLFrR9wNTsga_tOMPXh4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.220.206.0/24 91.103.106.0/23 91.147.112.0/23 91.216.178.0/24 Signature Algorithm: sha256WithRSAEncryption c9:4f:46:a8:6f:11:31:de:d7:54:98:6f:4c:b7:cd:90:8c:1c: ee:45:fe:0f:bd:7f:b6:58:f1:05:0a:98:b3:6b:ce:03:d3:ce: aa:ad:04:88:65:a2:d9:7a:53:3a:1c:d1:48:50:3c:49:47:db: e0:de:9e:c9:ed:40:e7:0f:be:35:6d:d1:38:7e:bc:d9:0d:6e: ea:db:d7:28:9e:3f:72:90:88:46:cc:60:54:4e:79:b8:5f:bb: 20:89:58:d2:2b:12:c1:37:ab:fe:e3:72:a2:e6:86:02:0d:df: fb:8f:26:e1:55:19:ff:a8:b2:21:5f:1f:d8:10:5f:92:9e:0a: c2:19:69:fd:ec:35:60:3c:5c:76:a8:6e:10:fa:b1:aa:8a:68: f0:2d:6e:d2:53:8c:ab:0d:08:0b:43:4f:5d:66:4a:89:cc:0a: e5:29:e3:6e:cb:90:96:54:80:3d:2d:61:62:22:c2:46:19:32: ed:36:ad:45:e8:a9:92:2e:d5:e3:1f:22:bf:83:18:fa:8b:84: b5:f4:ad:25:86:c9:61:3d:07:53:d6:0f:64:0f:ba:8a:01:20: aa:04:23:80:46:c2:c0:4b:58:a0:5e:a5:5a:9a:06:e8:8d:28: 30:3d:26:8d:6b:3a:25:59:aa:d0:8c:fd:60:bb:1e:5a:da:09: ba:8f:80:6e -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt7NoAEWuXkYK1V+Gg86gFdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0YmNhOTRmNmI2MWUxMDEwMGRjM2E3MTg2ZmZhM2Y5YjAw YzY5ZGQwHhcNMjYwMTAxMjAxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzk3ZjM3NDkwYjMyYzVhZDFmNzAzNTNiMjA2YmZiNGUzMGY1ZTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfyau9Vn3Hlw8UyRJLYFj6IG7IW0 gDoLyMo2ksATt6xAWa6eNfAi5I+h7ill0p+zx04r/vwBcO59ZjEAubAySsFveDjQ PCFU5TWsCz5GWjF8TUhjQFXDcwz1NjNKlBf73N09eYzrhu0iVa5Xo9FaYnKvsEU3 UEtSWjCKVB2z9jKN5nYVs2DE4EhaC4EK0p3Yq1xiUtkz+jBWvZq0uYMxBuGVYA6j DiIOigdTeU2oS6k25gUM89nfcjqtCBPhYIwxoKORBtIDhagfMpSrDrN7JlQeziQ3 xyZvWtq2zgZ8Is1mQY2ux5oZ9S4BNnUs2tOsTAVhYcaVucLyruffpi2zQQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFCOX83SQsyxa0fcDU7IGv7TjD14eMB8GA1UdIwQY MBaAFDS8qU9rYeEBANw6cYb/o/mwDGndMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkx5cFQydGg0UUVBM0RweGh2LWotYkFNYWQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9mNGVhNTktMTgxMC00MjEwLTk4ZjMt NzA5ZjAzNjI0ZTdlLzEvSTVmemRKQ3pMRnJSOXdOVHNnYV90T01QWGg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9mNGVhNTktMTgxMC00MjEwLTk4ZjMtNzA5ZjAzNjI0ZTdl LzEvTkx5cFQydGg0UUVBM0RweGh2LWotYkFNYWQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQATdzOAwQB W2dqAwQBW5NwAwQAW9iyMA0GCSqGSIb3DQEBCwUAA4IBAQDJT0aobxEx3tdUmG9M t82QjBzuRf4PvX+2WPEFCpiza84D086qrQSIZaLZelM6HNFIUDxJR9vg3p7J7UDn D741bdE4frzZDW7q29conj9ykIhGzGBUTnm4X7sgiVjSKxLBN6v+43Ki5oYCDd/7 jybhVRn/qLIhXx/YEF+SngrCGWn97DVgPFx2qG4Q+rGqimjwLW7SU4yrDQgLQ09d ZkqJzArlKeNuy5CWVIA9LWFiIsJGGTLtNq1F6KmSLtXjHyK/gxj6i4S19K0lhslh PQdT1g9kD7qKASCqBCOARsLAS1igXqVamgbojSgwPSaNazolWarQjP1gux5a2gm6 j4Bu -----END CERTIFICATE-----Generated at Mon Feb 9 22:17:13 2026 by rpki-client