This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/5lUQZsEUGyOae8g7ck1qxAKPHD8.roa File: 5lUQZsEUGyOae8g7ck1qxAKPHD8.roa (raw, json) Hash identifier: n4Xk9RLkEFoassK3zDhzjezu9B6KPSvljIoQuRXwbfs= Subject key identifier: E6:55:10:66:C1:14:1B:23:9A:7B:C8:3B:72:4D:6A:C4:02:8F:1C:3F Certificate issuer: /CN=f95d39e5b6890a46c8ce5c9037e6d26365e857bc Certificate serial: 019B78A36641F83290CF7FAD8106350633F5 Authority key identifier: F9:5D:39:E5:B6:89:0A:46:C8:CE:5C:90:37:E6:D2:63:65:E8:57:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-V055baJCkbIzlyQN-bSY2XoV7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/5lUQZsEUGyOae8g7ck1qxAKPHD8.roa Signing time: Thu 01 Jan 2026 08:18:53 +0000 ROA not before: Thu 01 Jan 2026 08:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213027 IP address blocks: 91.203.106.0/24 maxlen: 24 2001:678:f70::/48 maxlen: 48 2001:678:f74::/48 maxlen: 48 2a11:a00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.crl rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.mft rsync://rpki.ripe.net/repository/DEFAULT/1-V055baJCkbIzlyQN-bSY2XoV7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:66:41:f8:32:90:cf:7f:ad:81:06:35:06:33:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f95d39e5b6890a46c8ce5c9037e6d26365e857bc Validity Not Before: Jan 1 08:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e6551066c1141b239a7bc83b724d6ac4028f1c3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ff:25:cb:d4:fc:7d:93:ec:32:df:38:95:8f: e0:5a:79:75:4e:97:da:e7:b5:8e:81:dd:59:91:d9: dc:54:f8:40:a4:30:73:23:e3:5e:a4:1f:66:79:68: a1:cb:c9:87:3b:ff:bc:7a:70:ea:9b:00:2f:c0:56: b4:35:af:ea:ad:ed:67:88:49:45:a3:2f:c8:f0:30: 0f:50:94:8c:f7:00:9a:af:55:fc:d7:e4:f9:f8:87: 87:b0:a0:c7:b8:5e:48:a1:62:c5:10:54:c8:1d:2d: 39:ae:8c:95:39:f9:5c:8a:b1:b7:e0:53:a3:0f:1f: 8d:bc:83:83:97:0a:c4:46:bc:ed:5b:96:0b:fe:06: dc:25:3c:4e:f3:cd:34:68:b5:bf:27:78:4d:c4:ff: 60:46:97:c9:cb:10:1f:4c:c0:74:00:a1:56:94:31: 10:3a:a9:e1:21:f3:f4:da:e6:6f:bc:2c:d3:b5:03: 13:52:1a:b5:ea:7e:f1:77:bc:9c:b1:a4:11:7d:43: 79:f9:be:21:e5:d7:02:c3:8a:b9:d4:c7:13:b3:16: 14:85:94:d0:4d:c1:a7:3f:95:f4:39:46:5f:8a:e0: 87:9f:24:dd:29:24:ce:11:4d:34:1e:df:77:7c:52: 7d:0e:a2:c5:08:af:68:cb:07:a8:4c:8b:2f:3a:a5: 68:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:55:10:66:C1:14:1B:23:9A:7B:C8:3B:72:4D:6A:C4:02:8F:1C:3F X509v3 Authority Key Identifier: keyid:F9:5D:39:E5:B6:89:0A:46:C8:CE:5C:90:37:E6:D2:63:65:E8:57:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-V055baJCkbIzlyQN-bSY2XoV7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/5lUQZsEUGyOae8g7ck1qxAKPHD8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.203.106.0/24 IPv6: 2001:678:f70::/48 2001:678:f74::/48 2a11:a00::/29 Signature Algorithm: sha256WithRSAEncryption 94:32:5a:0b:1d:2d:86:9f:c7:89:8e:30:08:f5:e5:c5:b9:d7: 07:7d:6a:3d:26:49:57:2c:88:af:44:40:64:36:65:5f:78:0d: 02:60:aa:e7:1a:b7:dc:c9:22:5f:75:14:66:f2:22:e1:8e:ef: 2a:e0:e5:e9:08:d9:84:b3:6b:10:f8:3c:ed:32:a5:45:34:0c: c4:af:cf:ae:65:05:4b:57:3f:74:cf:52:e6:d2:fa:07:34:28: 78:00:8e:6d:19:8a:95:5d:a2:04:c4:6b:8d:1e:3d:03:c5:a6: ad:8b:7e:b8:5d:87:dc:a4:3d:2a:17:1b:17:89:a9:4e:6b:5b: cd:e5:59:02:13:2d:24:b6:f0:de:a5:cb:ba:0d:a0:76:7b:42: 25:c5:e1:54:07:94:d9:42:33:be:7c:20:a2:4b:32:2b:2c:29: b2:05:30:16:93:20:34:af:06:81:31:63:15:20:d1:e6:60:3b: 0b:1e:b8:0b:b6:7b:b9:88:ca:3c:be:a0:cc:7f:ce:98:da:1a: 01:ae:8e:d7:e4:24:25:40:5b:71:1e:49:19:f4:d5:a0:12:00: c1:74:05:cf:a1:df:0c:bb:fd:ea:0d:c8:5d:47:b9:4d:09:ec: f4:25:0c:2c:23:d2:6b:1a:d8:bf:36:e4:c6:2b:82:ac:a4:b3: 21:8c:ad:5e -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt4o2ZB+DKQz3+tgQY1BjP1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5NWQzOWU1YjY4OTBhNDZjOGNlNWM5MDM3ZTZkMjYzNjVl ODU3YmMwHhcNMjYwMTAxMDgxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjU1MTA2NmMxMTQxYjIzOWE3YmM4M2I3MjRkNmFjNDAyOGYxYzNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvf8ly9T8fZPsMt84lY/gWnl1Tpfa 57WOgd1ZkdncVPhApDBzI+NepB9meWihy8mHO/+8enDqmwAvwFa0Na/qre1niElF oy/I8DAPUJSM9wCar1X81+T5+IeHsKDHuF5IoWLFEFTIHS05royVOflcirG34FOj Dx+NvIODlwrERrztW5YL/gbcJTxO8800aLW/J3hNxP9gRpfJyxAfTMB0AKFWlDEQ OqnhIfP02uZvvCzTtQMTUhq16n7xd7ycsaQRfUN5+b4h5dcCw4q51McTsxYUhZTQ TcGnP5X0OUZfiuCHnyTdKSTOEU00Ht93fFJ9DqLFCK9oyweoTIsvOqVoyQIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFOZVEGbBFBsjmnvIO3JNasQCjxw/MB8GA1UdIwQY MBaAFPldOeW2iQpGyM5ckDfm0mNl6Fe8MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1WMDU1YmFKQ2tiSXpseVFOLWJTWTJYb1Y3dy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTcvYzMyMDZhLTljMTYtNDUyNy04Yjg5 LTZlOGRjYmFlYWY3Zi8xLzVsVVFac0VVR3lPYWU4ZzdjazFxeEFLUEhEOC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNTcvYzMyMDZhLTljMTYtNDUyNy04Yjg5LTZlOGRjYmFlYWY3 Zi8xLzEtVjA1NWJhSkNrYkl6bHlRTi1iU1kyWG9WN3cuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwQAYIKwYBBQUHAQcBAf8EMTAvMAwEAgABMAYDBABby2ow HwQCAAIwGQMHACABBngPcAMHACABBngPdAMFAyoRCgAwDQYJKoZIhvcNAQELBQAD ggEBAJQyWgsdLYafx4mOMAj15cW51wd9aj0mSVcsiK9EQGQ2ZV94DQJgqucat9zJ Il91FGbyIuGO7yrg5ekI2YSzaxD4PO0ypUU0DMSvz65lBUtXP3TPUubS+gc0KHgA jm0ZipVdogTEa40ePQPFpq2Lfrhdh9ykPSoXGxeJqU5rW83lWQITLSS28N6ly7oN oHZ7QiXF4VQHlNlCM758IKJLMissKbIFMBaTIDSvBoExYxUg0eZgOwseuAu2e7mI yjy+oMx/zpjaGgGujtfkJCVAW3EeSRn01aASAMF0Bc+h3wy7/eoNyF1HuU0J7PQl DCwj0msa2L825MYrgqyksyGMrV4= -----END CERTIFICATE-----Generated at Tue Feb 10 01:33:55 2026 by rpki-client