This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/5OuAtNn0l8oe2em-i-_BkRqZL7g.roa File: 5OuAtNn0l8oe2em-i-_BkRqZL7g.roa (raw, json) Hash identifier: vANhq4PdID8vPwTjDrBS+mXwABE8TzXjEn+JW1v5ExU= Subject key identifier: E4:EB:80:B4:D9:F4:97:CA:1E:D9:E9:BE:8B:EF:C1:91:1A:99:2F:B8 Certificate issuer: /CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c Certificate serial: 019B7DCB23C17E1C86CDFDC26F86830C248C Authority key identifier: 20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/5OuAtNn0l8oe2em-i-_BkRqZL7g.roa Signing time: Fri 02 Jan 2026 08:20:23 +0000 ROA not before: Fri 02 Jan 2026 08:20:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 91.194.218.0/24 maxlen: 24 185.1.122.0/24 maxlen: 24 193.239.116.0/22 maxlen: 24 2001:7f8:13::/48 maxlen: 48 2001:7f8:61::/48 maxlen: 48 2001:7f8:cd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 14:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:23:c1:7e:1c:86:cd:fd:c2:6f:86:83:0c:24:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c Validity Not Before: Jan 2 08:20:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4eb80b4d9f497ca1ed9e9be8befc1911a992fb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1b:d9:73:d9:83:b5:60:8f:9e:96:29:44:bc: 90:12:4f:56:bc:b3:b2:3b:ff:01:1a:fd:27:d1:3e: 6b:88:88:99:74:25:69:ed:75:be:a3:a2:f6:c8:d3: d0:16:b3:ce:46:68:08:82:ce:af:10:75:4e:af:1a: 63:df:e3:36:fd:75:a6:d9:8f:f9:9a:a3:59:6a:9b: f0:37:2e:1f:10:5b:cb:b4:7f:b9:b4:0e:3b:1b:44: 4c:e0:b1:92:36:30:22:57:9c:c7:34:d9:60:1c:cd: 44:f1:b6:c3:cf:dd:53:ee:c5:1f:ba:b2:aa:e7:b5: d9:0f:91:fa:bf:32:86:31:8f:c0:0f:b8:ac:b8:71: f9:5a:6d:18:d2:b4:82:52:dc:46:6b:e8:e7:65:d4: 08:df:5a:93:41:10:13:d5:36:2a:99:ee:66:e1:3f: a4:97:a7:2b:fb:00:ef:c6:8c:61:ee:f6:83:44:9e: b0:dc:f4:07:d2:05:61:15:03:fe:db:16:0d:1d:aa: 23:75:8c:c2:eb:21:6b:0f:5c:d6:b8:6b:17:b9:68: 6b:da:20:6b:a4:b8:a2:70:33:ab:4a:9e:bb:0c:c4: cf:73:f8:8e:0d:ee:00:a3:4a:83:be:d4:f9:53:e1: 37:ba:c9:c6:16:d8:5a:15:9f:3e:b5:8a:71:27:dc: dd:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:EB:80:B4:D9:F4:97:CA:1E:D9:E9:BE:8B:EF:C1:91:1A:99:2F:B8 X509v3 Authority Key Identifier: keyid:20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/5OuAtNn0l8oe2em-i-_BkRqZL7g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.194.218.0/24 185.1.122.0/24 193.239.116.0/22 IPv6: 2001:7f8:13::/48 2001:7f8:61::/48 2001:7f8:cd::/48 Signature Algorithm: sha256WithRSAEncryption 03:8b:8d:b8:1e:d7:f0:67:37:b2:fc:26:84:17:3c:96:38:90: 0c:e4:33:5c:af:cc:9c:f0:de:92:6d:05:58:e3:77:38:3d:3d: 60:07:5e:50:f6:97:56:ca:1a:d4:05:d6:3a:4c:93:b9:e5:35: f1:d8:3e:89:1c:c6:81:4c:59:05:71:a5:18:3d:67:28:e0:63: b5:4f:ab:06:4c:f6:2d:aa:cf:b0:b2:34:6f:e2:26:9d:68:8c: fb:84:8a:27:a2:c8:a3:4e:df:46:54:90:84:fa:42:53:ea:77: 28:3e:35:10:b2:af:ff:cf:14:1b:ed:8d:fa:ee:26:a7:e0:b1: 77:7d:e0:8f:3d:ed:29:cb:7b:22:87:36:70:41:38:9d:48:ef: 16:bf:5c:73:b9:1b:df:61:5c:2e:56:cd:b8:19:be:f5:21:2a: 1b:34:c3:fb:14:10:1c:fc:16:e1:7b:1b:21:3c:28:08:16:c2: cd:bb:96:6f:88:f2:ac:10:14:4e:9d:c9:fe:29:df:de:42:03: 06:b0:0f:76:9f:07:6f:52:0c:bc:f4:3b:1c:f3:4a:9a:05:2e: 11:64:f1:09:52:b2:cf:9b:91:e4:84:8b:0e:15:f6:0d:b1:8f: 89:62:b8:ce:e4:be:4d:f3:75:33:79:0e:37:cd:e9:6e:c1:cb: 40:2c:68:ba -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgISAZt9yyPBfhyGzf3Cb4aDDCSMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwMWZlMzBmYzZiNGIwZDBmNmRiNGUxYmZiYmQ1MDE5NWRj YTU3NWMwHhcNMjYwMTAyMDgyMDIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNGViODBiNGQ5ZjQ5N2NhMWVkOWU5YmU4YmVmYzE5MTFhOTkyZmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBvZc9mDtWCPnpYpRLyQEk9WvLOy O/8BGv0n0T5riIiZdCVp7XW+o6L2yNPQFrPORmgIgs6vEHVOrxpj3+M2/XWm2Y/5 mqNZapvwNy4fEFvLtH+5tA47G0RM4LGSNjAiV5zHNNlgHM1E8bbDz91T7sUfurKq 57XZD5H6vzKGMY/AD7isuHH5Wm0Y0rSCUtxGa+jnZdQI31qTQRAT1TYqme5m4T+k l6cr+wDvxoxh7vaDRJ6w3PQH0gVhFQP+2xYNHaojdYzC6yFrD1zWuGsXuWhr2iBr pLiicDOrSp67DMTPc/iODe4Ao0qDvtT5U+E3usnGFthaFZ8+tYpxJ9zdJQIDAQAB o4ICODCCAjQwHQYDVR0OBBYEFOTrgLTZ9JfKHtnpvovvwZEamS+4MB8GA1UdIwQY MBaAFCAf4w/GtLDQ9ttOG/u9UBldyldcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUJfakQ4YTBzTkQyMjA0Yi03MVFHVjNLVjF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My84ZDgwZjktNDk0ZS00YWJiLTk5NTYt ZmMxMjFjODAwYjMwLzEvNU91QXRObjBsOG9lMmVtLWktX0JrUnFaTDdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My84ZDgwZjktNDk0ZS00YWJiLTk5NTYtZmMxMjFjODAwYjMw LzEvSUJfakQ4YTBzTkQyMjA0Yi03MVFHVjNLVjF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAYBAIAATASAwQAW8LaAwQA uQF6AwQCwe90MCEEAgACMBsDBwAgAQf4ABMDBwAgAQf4AGEDBwAgAQf4AM0wDQYJ KoZIhvcNAQELBQADggEBAAOLjbge1/BnN7L8JoQXPJY4kAzkM1yvzJzw3pJtBVjj dzg9PWAHXlD2l1bKGtQF1jpMk7nlNfHYPokcxoFMWQVxpRg9ZyjgY7VPqwZM9i2q z7CyNG/iJp1ojPuEiieiyKNO30ZUkIT6QlPqdyg+NRCyr//PFBvtjfruJqfgsXd9 4I897SnLeyKHNnBBOJ1I7xa/XHO5G99hXC5WzbgZvvUhKhs0w/sUEBz8FuF7GyE8 KAgWws27lm+I8qwQFE6dyf4p395CAwawD3afB29SDLz0OxzzSpoFLhFk8QlSss+b keSEiw4V9g2xj4liuM7kvk3zdTN5DjfN6W7By0AsaLo= -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:57 2026 by rpki-client