This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/TeQy6kFDHKNYmWvI94KK1SajumM.roa File: TeQy6kFDHKNYmWvI94KK1SajumM.roa (raw, json) Hash identifier: 9uvICF7tqz4KyCQG2zRzp+9JspsGn3aZOu1Zg1a40nY= Subject key identifier: 4D:E4:32:EA:41:43:1C:A3:58:99:6B:C8:F7:82:8A:D5:26:A3:BA:63 Certificate issuer: /CN=5d82ca6f8eb685a573e5d1d91f8f06121ab02a37 Certificate serial: 019B7EA4F5C377DEF5CDB9566C0AC2233DFF Authority key identifier: 5D:82:CA:6F:8E:B6:85:A5:73:E5:D1:D9:1F:8F:06:12:1A:B0:2A:37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/TeQy6kFDHKNYmWvI94KK1SajumM.roa Signing time: Fri 02 Jan 2026 12:18:18 +0000 ROA not before: Fri 02 Jan 2026 12:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198114 IP address blocks: 91.231.192.0/22 maxlen: 22 91.231.192.0/24 maxlen: 24 91.231.193.0/24 maxlen: 24 91.231.194.0/24 maxlen: 24 91.231.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.crl rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:f5:c3:77:de:f5:cd:b9:56:6c:0a:c2:23:3d:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d82ca6f8eb685a573e5d1d91f8f06121ab02a37 Validity Not Before: Jan 2 12:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4de432ea41431ca358996bc8f7828ad526a3ba63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5d:b8:0c:9a:ba:8e:c5:57:89:ba:5c:50:59: 16:ee:da:c8:d7:4d:84:b6:67:4c:92:d7:8e:37:be: d4:0b:8e:a9:38:77:0b:ab:cd:37:2b:e0:11:d9:d5: 67:68:4f:23:20:b1:1c:96:b0:85:ee:42:44:38:dc: 78:6e:4b:44:d6:a7:3f:a3:f4:f7:43:39:65:b3:30: 7f:ff:be:af:2d:40:95:4b:32:d5:26:91:41:98:d0: ab:cb:b7:9c:8a:52:a3:fb:c0:b5:71:d5:c4:8a:c8: ff:c0:9b:0f:ac:86:85:a1:ab:17:d6:2e:b6:94:eb: 94:fe:76:32:f7:4a:92:1d:27:04:f6:17:fa:85:49: eb:92:96:3e:ed:cf:bd:3e:60:09:49:0f:cd:bd:74: 0e:01:43:a7:d9:d5:93:f8:ff:57:87:ee:f6:a1:d7: a3:68:e4:48:50:e2:4b:39:f1:84:5c:f4:c6:6b:05: f5:5b:48:53:d7:4f:53:57:54:3f:d6:ec:d8:fa:4d: 2d:3d:c3:a0:07:59:7b:a3:d5:49:75:f6:a4:fe:a6: 54:c8:5b:b4:8c:f1:cf:e9:62:82:cf:c1:f7:fe:b0: ab:13:e5:63:9b:f9:70:32:9c:56:27:b2:b6:76:12: 56:34:35:fc:e6:38:fa:09:83:dd:a4:c5:81:71:40: 3c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:E4:32:EA:41:43:1C:A3:58:99:6B:C8:F7:82:8A:D5:26:A3:BA:63 X509v3 Authority Key Identifier: keyid:5D:82:CA:6F:8E:B6:85:A5:73:E5:D1:D9:1F:8F:06:12:1A:B0:2A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/TeQy6kFDHKNYmWvI94KK1SajumM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.231.192.0/22 Signature Algorithm: sha256WithRSAEncryption 33:27:af:02:6b:5e:cd:73:a5:e5:a8:04:cf:8f:19:6d:84:c4: 46:92:10:7d:86:bd:24:b5:54:76:10:61:05:f6:b1:dc:f7:eb: d3:16:5d:8e:07:3e:2d:d6:05:c6:57:bc:f6:02:14:54:00:7d: 5a:09:65:2b:6f:63:ea:75:26:61:43:08:79:52:7b:f8:83:71: ce:b9:c3:7c:b4:a7:75:1a:58:9c:fc:d3:dc:a9:c3:8a:47:ff: d1:2a:1c:30:a0:05:ca:30:57:11:44:ae:c1:08:cf:5d:05:58: 2c:45:3f:6f:36:5b:49:b8:52:46:0f:97:f6:a5:e8:68:ff:4d: a5:d4:57:b4:e3:e2:87:a8:3e:8f:9a:90:80:a9:b3:30:43:8d: 3d:96:17:db:d0:54:f0:b3:8f:33:e1:34:43:ea:55:88:bf:3d: 12:b9:c5:62:cc:2d:bc:0e:d2:37:ae:ec:f9:15:d0:8f:0c:ce: 84:a5:d9:a2:aa:79:a0:46:f4:45:e7:4e:7a:e0:60:88:b9:29: cb:97:34:6d:84:a2:64:d7:e4:5b:cf:58:59:75:0f:85:90:bb: 82:40:be:f1:92:bf:29:13:99:de:ed:79:aa:c6:d6:de:7e:e5: e9:50:8d:6a:ff:c9:52:cf:06:4a:ce:f9:08:cc:e8:68:8d:b4: ee:de:7f:38 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pPXDd971zblWbArCIz3/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkODJjYTZmOGViNjg1YTU3M2U1ZDFkOTFmOGYwNjEyMWFi MDJhMzcwHhcNMjYwMTAyMTIxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZGU0MzJlYTQxNDMxY2EzNTg5OTZiYzhmNzgyOGFkNTI2YTNiYTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArF24DJq6jsVXibpcUFkW7trI102E tmdMkteON77UC46pOHcLq803K+AR2dVnaE8jILEclrCF7kJEONx4bktE1qc/o/T3 QzllszB//76vLUCVSzLVJpFBmNCry7ecilKj+8C1cdXEisj/wJsPrIaFoasX1i62 lOuU/nYy90qSHScE9hf6hUnrkpY+7c+9PmAJSQ/NvXQOAUOn2dWT+P9Xh+72odej aORIUOJLOfGEXPTGawX1W0hT109TV1Q/1uzY+k0tPcOgB1l7o9VJdfak/qZUyFu0 jPHP6WKCz8H3/rCrE+Vjm/lwMpxWJ7K2dhJWNDX85jj6CYPdpMWBcUA8RQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE3kMupBQxyjWJlryPeCitUmo7pjMB8GA1UdIwQY MBaAFF2Cym+OtoWlc+XR2R+PBhIasCo3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFlMS2I0NjJoYVZ6NWRIWkg0OEdFaHF3S2pjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9kNTRiYzAtZjc4MS00OGIwLTlmNmQt YjVmMGQyMTA1M2Y4LzEvVGVReTZrRkRIS05ZbVd2STk0S0sxU2FqdW1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9kNTRiYzAtZjc4MS00OGIwLTlmNmQtYjVmMGQyMTA1M2Y4 LzEvWFlMS2I0NjJoYVZ6NWRIWkg0OEdFaHF3S2pjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW+fAMA0G CSqGSIb3DQEBCwUAA4IBAQAzJ68Ca17Nc6XlqATPjxlthMRGkhB9hr0ktVR2EGEF 9rHc9+vTFl2OBz4t1gXGV7z2AhRUAH1aCWUrb2PqdSZhQwh5Unv4g3HOucN8tKd1 Glic/NPcqcOKR//RKhwwoAXKMFcRRK7BCM9dBVgsRT9vNltJuFJGD5f2peho/02l 1Fe04+KHqD6PmpCAqbMwQ409lhfb0FTws48z4TRD6lWIvz0SucVizC28DtI3ruz5 FdCPDM6EpdmiqnmgRvRF50564GCIuSnLlzRthKJk1+Rbz1hZdQ+FkLuCQL7xkr8p E5ne7XmqxtbefuXpUI1q/8lSzwZKzvkIzOhojbTu3n84 -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:07 2026 by rpki-client