This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/b5tJsnlnSE6Xaiye0wcx51G5Jwk.roa File: b5tJsnlnSE6Xaiye0wcx51G5Jwk.roa (raw, json) Hash identifier: v9RBu20odxkvsGZtyEDAzqjRkkYtJXPNlrRBy/h0EkY= Subject key identifier: 6F:9B:49:B2:79:67:48:4E:97:6A:2C:9E:D3:07:31:E7:51:B9:27:09 Certificate issuer: /CN=533dfd6cc140c68a3d3bba86ba57cf3b8ba6a9b7 Certificate serial: 019B79101CA2B1DA5D40CE08A85AA21C2A3D Authority key identifier: 53:3D:FD:6C:C1:40:C6:8A:3D:3B:BA:86:BA:57:CF:3B:8B:A6:A9:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uz39bMFAxoo9O7qGulfPO4umqbc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/b5tJsnlnSE6Xaiye0wcx51G5Jwk.roa Signing time: Thu 01 Jan 2026 10:17:37 +0000 ROA not before: Thu 01 Jan 2026 10:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198701 IP address blocks: 91.238.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.mft rsync://rpki.ripe.net/repository/DEFAULT/Uz39bMFAxoo9O7qGulfPO4umqbc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:1c:a2:b1:da:5d:40:ce:08:a8:5a:a2:1c:2a:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=533dfd6cc140c68a3d3bba86ba57cf3b8ba6a9b7 Validity Not Before: Jan 1 10:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f9b49b27967484e976a2c9ed30731e751b92709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4b:e8:9d:75:d8:b0:cd:28:c6:b9:98:4f:a2: 0d:fe:a1:7a:cc:18:18:b6:ac:f8:6c:9e:51:79:38: 3b:7c:72:75:3e:75:d6:15:dd:1a:81:c0:5f:a8:a2: ed:da:18:24:63:58:f5:1d:10:a5:ca:09:1a:c4:17: 3f:74:f9:4c:6e:0b:46:59:85:53:3c:b1:a7:22:65: 09:de:b8:7c:19:af:66:64:59:27:ed:5c:37:b4:3d: 43:65:78:c2:5b:cc:a2:29:be:78:cd:fb:ab:ea:bc: e3:4e:26:a1:83:9f:8c:1a:d6:03:32:ff:61:6a:06: a7:e2:5b:c1:a3:76:6d:84:33:b2:52:82:5e:98:f6: 3b:63:4c:ac:46:58:f5:88:31:91:cd:a6:33:0a:58: f2:e2:d3:dd:93:4a:79:53:9e:64:c4:78:62:28:7f: e0:13:a1:b1:fe:ca:92:b2:d8:45:73:a2:19:36:59: 30:99:6f:74:e9:bb:55:2f:7c:3e:d0:bc:02:0a:c6: f1:2f:25:21:1d:f0:68:db:ca:b7:c8:65:a6:65:6b: b5:c7:cd:d3:73:95:5d:b4:18:8a:a2:94:25:12:d5: 51:db:37:1e:c3:c7:d6:19:38:17:a9:b0:00:7c:a5: 93:df:38:7d:e7:d1:de:6f:66:21:b7:b2:0b:62:2a: cf:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:9B:49:B2:79:67:48:4E:97:6A:2C:9E:D3:07:31:E7:51:B9:27:09 X509v3 Authority Key Identifier: keyid:53:3D:FD:6C:C1:40:C6:8A:3D:3B:BA:86:BA:57:CF:3B:8B:A6:A9:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uz39bMFAxoo9O7qGulfPO4umqbc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/b5tJsnlnSE6Xaiye0wcx51G5Jwk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.238.22.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:35:f0:a1:b3:f9:35:52:ea:f7:8d:c0:f7:df:b7:3c:ab:92: d9:03:b3:90:82:38:f7:f1:fa:e6:57:e0:e5:9a:ff:88:81:63: c9:04:df:42:bc:72:f8:82:db:f3:db:5d:45:d6:f2:35:dc:a6: 60:d3:ae:87:0e:de:0f:13:2f:b0:37:17:f2:99:dc:51:5e:3f: 50:fc:63:d1:3d:ad:9d:81:1a:d9:11:18:5c:e0:c2:c6:e6:80: de:08:f8:94:9e:2c:20:3c:66:dc:45:3a:68:9c:5d:2b:a8:ab: 15:21:a4:43:89:07:2c:bf:13:88:0e:1b:3c:26:50:6c:13:78: ff:0c:ff:1e:49:8b:b6:1c:87:0f:d6:6b:99:1f:a4:c3:4f:0c: ef:d2:94:16:9e:8b:09:fc:d1:b2:1a:cc:ad:98:08:59:5f:80: f2:65:c2:e5:06:b4:3e:57:75:d2:e9:0f:2a:13:4e:b2:76:67: 26:f2:9c:52:59:95:d7:fe:3e:4e:38:cf:1a:91:d4:ce:11:dd: 3c:3b:f2:6f:92:2b:6c:7f:4e:8d:ae:7e:67:01:ab:96:25:35: bb:48:26:2d:13:73:18:a7:08:aa:51:46:53:cc:85:06:a4:b2: 58:36:16:5e:e7:0b:83:82:00:eb:e2:8f:41:96:18:47:ca:1b: 41:1f:a7:44 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EByisdpdQM4IqFqiHCo9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzM2RmZDZjYzE0MGM2OGEzZDNiYmE4NmJhNTdjZjNiOGJh NmE5YjcwHhcNMjYwMTAxMTAxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjliNDliMjc5Njc0ODRlOTc2YTJjOWVkMzA3MzFlNzUxYjkyNzA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkvonXXYsM0oxrmYT6IN/qF6zBgY tqz4bJ5ReTg7fHJ1PnXWFd0agcBfqKLt2hgkY1j1HRClygkaxBc/dPlMbgtGWYVT PLGnImUJ3rh8Ga9mZFkn7Vw3tD1DZXjCW8yiKb54zfur6rzjTiahg5+MGtYDMv9h agan4lvBo3ZthDOyUoJemPY7Y0ysRlj1iDGRzaYzCljy4tPdk0p5U55kxHhiKH/g E6Gx/sqSsthFc6IZNlkwmW906btVL3w+0LwCCsbxLyUhHfBo28q3yGWmZWu1x83T c5VdtBiKopQlEtVR2zcew8fWGTgXqbAAfKWT3zh959Heb2Yht7ILYirP/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG+bSbJ5Z0hOl2osntMHMedRuScJMB8GA1UdIwQY MBaAFFM9/WzBQMaKPTu6hrpXzzuLpqm3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXozOWJNRkF4b285TzdxR3VsZlBPNHVtcWJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80Mjg4OGItYWEzZi00NjExLTgwM2Qt MmRiNDRjOTFhZTYwLzEvYjV0SnNubG5TRTZYYWl5ZTB3Y3g1MUc1SndrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi80Mjg4OGItYWEzZi00NjExLTgwM2QtMmRiNDRjOTFhZTYw LzEvVXozOWJNRkF4b285TzdxR3VsZlBPNHVtcWJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+4WMA0G CSqGSIb3DQEBCwUAA4IBAQAfNfChs/k1Uur3jcD337c8q5LZA7OQgjj38frmV+Dl mv+IgWPJBN9CvHL4gtvz211F1vI13KZg066HDt4PEy+wNxfymdxRXj9Q/GPRPa2d gRrZERhc4MLG5oDeCPiUniwgPGbcRTponF0rqKsVIaRDiQcsvxOIDhs8JlBsE3j/ DP8eSYu2HIcP1muZH6TDTwzv0pQWnosJ/NGyGsytmAhZX4DyZcLlBrQ+V3XS6Q8q E06ydmcm8pxSWZXX/j5OOM8akdTOEd08O/Jvkitsf06Nrn5nAauWJTW7SCYtE3MY pwiqUUZTzIUGpLJYNhZe5wuDggDr4o9BlhhHyhtBH6dE -----END CERTIFICATE-----Generated at Tue Feb 10 01:24:28 2026 by rpki-client