This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/cL3eqVwFCT6Rh-TqEfOR1Kf7y2M.roa File: cL3eqVwFCT6Rh-TqEfOR1Kf7y2M.roa (raw, json) Hash identifier: 0Bv9HdpH7Qy++hlTEaxUNhbsKypd+sp7NAroL6E2E/U= Subject key identifier: 70:BD:DE:A9:5C:05:09:3E:91:87:E4:EA:11:F3:91:D4:A7:FB:CB:63 Certificate issuer: /CN=c38c3a1c05c899ebfe15d2361909a63597c68078 Certificate serial: 019B7910FC2C90154EB8A798E50F82ED384E Authority key identifier: C3:8C:3A:1C:05:C8:99:EB:FE:15:D2:36:19:09:A6:35:97:C6:80:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4w6HAXImev-FdI2GQmmNZfGgHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/cL3eqVwFCT6Rh-TqEfOR1Kf7y2M.roa Signing time: Thu 01 Jan 2026 10:18:34 +0000 ROA not before: Thu 01 Jan 2026 10:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43771 IP address blocks: 91.198.148.0/24 maxlen: 24 185.202.4.0/23 maxlen: 23 185.202.6.0/24 maxlen: 24 2a0a:cdc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/w4w6HAXImev-FdI2GQmmNZfGgHg.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/w4w6HAXImev-FdI2GQmmNZfGgHg.mft rsync://rpki.ripe.net/repository/DEFAULT/w4w6HAXImev-FdI2GQmmNZfGgHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:fc:2c:90:15:4e:b8:a7:98:e5:0f:82:ed:38:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c38c3a1c05c899ebfe15d2361909a63597c68078 Validity Not Before: Jan 1 10:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70bddea95c05093e9187e4ea11f391d4a7fbcb63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e2:2a:03:dd:a3:a4:26:82:f5:5c:39:88:7b: 77:eb:0f:f7:80:96:70:1b:30:df:24:4b:59:6e:19: 50:ed:42:0d:07:01:5a:2c:5e:5a:6b:cf:de:59:dc: 92:cf:87:01:0f:a8:f5:18:f2:14:c0:e8:a1:54:95: 52:1f:d1:a5:8b:74:0b:d2:c9:a6:ee:b3:57:32:7b: b9:92:fb:87:e3:d7:95:f9:f6:ac:75:e5:47:c4:15: 17:93:a8:66:18:bc:04:45:14:56:5c:79:55:b6:bc: 4c:19:ea:62:40:c1:6b:d5:4a:93:25:8f:7d:c3:80: 45:17:a3:e8:5c:04:a4:e3:2f:cf:c6:ed:66:8f:e6: e9:a4:9b:78:69:ae:71:77:b5:c0:f9:40:e2:c7:7f: 16:51:3d:e7:38:e9:a1:6c:7f:26:a5:39:21:d4:ad: 53:e2:b3:c5:81:e4:82:ae:2b:2b:bb:82:96:7e:6e: 56:e3:2d:41:a1:c3:89:50:4c:c5:f5:bf:64:14:57: e6:ff:4c:8d:be:9a:81:1e:d7:25:73:56:3f:eb:58: 31:8d:fa:98:72:06:69:80:59:8d:62:59:3a:4a:21: 09:e7:f5:6e:6a:1f:e1:fe:e9:2d:5f:1e:1c:43:53: 50:33:01:39:e2:9d:a2:42:ab:ca:9e:de:d8:b9:8c: 50:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:BD:DE:A9:5C:05:09:3E:91:87:E4:EA:11:F3:91:D4:A7:FB:CB:63 X509v3 Authority Key Identifier: keyid:C3:8C:3A:1C:05:C8:99:EB:FE:15:D2:36:19:09:A6:35:97:C6:80:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4w6HAXImev-FdI2GQmmNZfGgHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/cL3eqVwFCT6Rh-TqEfOR1Kf7y2M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/w4w6HAXImev-FdI2GQmmNZfGgHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.148.0/24 185.202.4.0-185.202.6.255 IPv6: 2a0a:cdc0::/32 Signature Algorithm: sha256WithRSAEncryption 81:be:e3:5c:af:2f:c1:cd:e5:47:e0:30:7d:5a:8d:8f:e5:45: b9:30:4d:55:11:f2:00:88:16:58:09:d5:41:2e:fd:03:8d:6b: 10:bf:19:5b:99:e3:82:ba:ba:90:00:7c:30:d6:99:f6:d2:da: e9:dc:80:ef:fd:e6:a4:2e:a2:96:55:67:3e:92:00:f3:ea:98: 17:4c:bd:2e:c6:df:97:c3:6b:fc:3d:83:c4:1e:20:41:93:93: 42:9c:e1:1e:0a:8d:b9:0a:16:de:9b:c7:bc:6d:68:ef:03:56: 80:25:34:c7:77:a1:c1:e4:97:40:d9:98:f8:da:5d:d0:db:fb: eb:d0:ba:d4:87:19:08:50:25:f8:6f:9c:6f:e6:8e:06:db:1d: 52:e2:73:a1:28:17:80:b9:bd:89:2d:1f:3a:0b:9f:34:e1:a3: ff:38:d8:a9:9e:71:47:43:92:68:9e:43:1b:12:82:6f:3d:79: f3:58:07:d1:4e:ee:ae:76:95:82:63:7c:d5:3d:67:da:72:57: c5:b4:61:f4:7f:60:f8:67:49:61:7d:1f:3a:4b:e6:e6:ee:c5: e6:a7:3e:95:62:f4:22:d4:6f:71:77:5a:c9:03:16:b7:12:a8: dd:c6:06:25:f9:19:58:c7:c4:50:32:2f:11:0b:a9:3a:19:61: 55:ba:a4:8b -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt5EPwskBVOuKeY5Q+C7ThOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzOGMzYTFjMDVjODk5ZWJmZTE1ZDIzNjE5MDlhNjM1OTdj NjgwNzgwHhcNMjYwMTAxMTAxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MGJkZGVhOTVjMDUwOTNlOTE4N2U0ZWExMWYzOTFkNGE3ZmJjYjYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteIqA92jpCaC9Vw5iHt36w/3gJZw GzDfJEtZbhlQ7UINBwFaLF5aa8/eWdySz4cBD6j1GPIUwOihVJVSH9Gli3QL0smm 7rNXMnu5kvuH49eV+fasdeVHxBUXk6hmGLwERRRWXHlVtrxMGepiQMFr1UqTJY99 w4BFF6PoXASk4y/Pxu1mj+bppJt4aa5xd7XA+UDix38WUT3nOOmhbH8mpTkh1K1T 4rPFgeSCrisru4KWfm5W4y1BocOJUEzF9b9kFFfm/0yNvpqBHtclc1Y/61gxjfqY cgZpgFmNYlk6SiEJ5/Vuah/h/uktXx4cQ1NQMwE54p2iQqvKnt7YuYxQXQIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFHC93qlcBQk+kYfk6hHzkdSn+8tjMB8GA1UdIwQY MBaAFMOMOhwFyJnr/hXSNhkJpjWXxoB4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzR3NkhBWEltZXYtRmRJMkdRbW1OWmZHZ0hnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS85ZTg2YWItYmM3Zi00YmM0LWIxMjct NDIyNjIxNjFlOTQwLzEvY0wzZXFWd0ZDVDZSaC1UcUVmT1IxS2Y3eTJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS85ZTg2YWItYmM3Zi00YmM0LWIxMjctNDIyNjIxNjFlOTQw LzEvdzR3NkhBWEltZXYtRmRJMkdRbW1OWmZHZ0hnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUAwQAW8aUMAwD BAK5ygQDBAC5ygYwDQQCAAIwBwMFACoKzcAwDQYJKoZIhvcNAQELBQADggEBAIG+ 41yvL8HN5UfgMH1ajY/lRbkwTVUR8gCIFlgJ1UEu/QONaxC/GVuZ44K6upAAfDDW mfbS2uncgO/95qQuopZVZz6SAPPqmBdMvS7G35fDa/w9g8QeIEGTk0Kc4R4KjbkK Ft6bx7xtaO8DVoAlNMd3ocHkl0DZmPjaXdDb++vQutSHGQhQJfhvnG/mjgbbHVLi c6EoF4C5vYktHzoLnzTho/842KmecUdDkmieQxsSgm89efNYB9FO7q52lYJjfNU9 Z9pyV8W0YfR/YPhnSWF9HzpL5ubuxeanPpVi9CLUb3F3WskDFrcSqN3GBiX5GVjH xFAyLxELqToZYVW6pIs= -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:42 2026 by rpki-client