This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ca4471-34d0-4816-81d1-8bf5b1ed1209/1/T5RpUZaJxF7WS22xVaYfC5phh5w.roa File: T5RpUZaJxF7WS22xVaYfC5phh5w.roa (raw, json) Hash identifier: 1t4IgY5FT1qa56RFkPSefpzTePRTnBiDJZBSxg9HAjA= Subject key identifier: 4F:94:69:51:96:89:C4:5E:D6:4B:6D:B1:55:A6:1F:0B:9A:61:87:9C Certificate issuer: /CN=b93da91f1f53634272c5911087ce66cbad3614a3 Certificate serial: 019B7910C180210BCC93B8A1DE00136B0341 Authority key identifier: B9:3D:A9:1F:1F:53:63:42:72:C5:91:10:87:CE:66:CB:AD:36:14:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uT2pHx9TY0JyxZEQh85my602FKM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ca4471-34d0-4816-81d1-8bf5b1ed1209/1/T5RpUZaJxF7WS22xVaYfC5phh5w.roa Signing time: Thu 01 Jan 2026 10:18:19 +0000 ROA not before: Thu 01 Jan 2026 10:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50905 IP address blocks: 91.216.23.0/24 maxlen: 24 193.33.214.0/24 maxlen: 24 193.33.215.0/24 maxlen: 24 2001:67c:24b0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/ca4471-34d0-4816-81d1-8bf5b1ed1209/1/uT2pHx9TY0JyxZEQh85my602FKM.crl rsync://rpki.ripe.net/repository/DEFAULT/65/ca4471-34d0-4816-81d1-8bf5b1ed1209/1/uT2pHx9TY0JyxZEQh85my602FKM.mft rsync://rpki.ripe.net/repository/DEFAULT/uT2pHx9TY0JyxZEQh85my602FKM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:c1:80:21:0b:cc:93:b8:a1:de:00:13:6b:03:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b93da91f1f53634272c5911087ce66cbad3614a3 Validity Not Before: Jan 1 10:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f9469519689c45ed64b6db155a61f0b9a61879c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ac:1e:f7:b6:ba:43:38:29:63:3b:02:58:af: 95:fd:7d:85:a9:c0:d6:5f:fe:a3:f5:af:03:14:25: 31:80:6a:95:e1:ca:aa:ce:af:8d:dd:d3:d2:be:c8: e0:84:eb:02:30:05:eb:fb:6c:98:60:40:c4:01:ba: 6a:bc:75:9d:22:13:99:40:35:60:1f:22:a6:3b:46: 08:33:65:71:b6:5f:56:9f:4c:90:2f:18:09:2f:b0: db:c1:53:69:4f:b4:ce:df:c7:18:67:0a:5a:09:18: 7d:0f:fc:66:62:37:6b:e8:31:e4:cf:6a:cb:02:60: e1:cd:8a:f8:99:a3:28:f8:dc:64:d3:bf:c8:11:57: 97:16:48:d0:f2:97:3a:94:2b:38:7f:99:cd:ef:a0: 78:0f:41:67:fc:32:ee:7f:fc:7a:ab:f2:a7:b1:6e: 25:b7:a2:9c:0c:a7:5a:d4:82:2b:6f:bf:90:8f:1d: 31:ff:fe:0b:81:ed:32:24:ae:0f:c7:ed:04:f5:97: c7:1a:1b:44:d4:00:c1:2c:eb:2c:b2:5e:a8:68:42: 32:21:52:ff:98:3e:6d:48:56:02:62:c5:ad:67:67: 75:67:df:d0:19:b8:47:ac:c9:da:c1:bd:8f:93:ff: c4:2c:de:96:42:3e:1e:ab:27:32:b7:c7:4a:e7:34: 7e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:94:69:51:96:89:C4:5E:D6:4B:6D:B1:55:A6:1F:0B:9A:61:87:9C X509v3 Authority Key Identifier: keyid:B9:3D:A9:1F:1F:53:63:42:72:C5:91:10:87:CE:66:CB:AD:36:14:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uT2pHx9TY0JyxZEQh85my602FKM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ca4471-34d0-4816-81d1-8bf5b1ed1209/1/T5RpUZaJxF7WS22xVaYfC5phh5w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ca4471-34d0-4816-81d1-8bf5b1ed1209/1/uT2pHx9TY0JyxZEQh85my602FKM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.23.0/24 193.33.214.0/23 IPv6: 2001:67c:24b0::/48 Signature Algorithm: sha256WithRSAEncryption 20:fb:bd:c8:33:fb:18:2e:99:e8:ba:87:6c:62:ad:95:a6:18: 5f:10:a9:df:e3:f6:34:92:99:25:1e:ac:56:f8:1a:00:5f:27: 76:7e:c1:31:f6:44:38:2b:a9:5e:cf:dc:28:4d:17:57:ea:08: 8d:ca:1b:c9:d6:f0:b3:1b:1a:db:11:f1:6f:be:59:37:e9:90: 4c:58:82:8e:db:ed:35:76:09:ec:65:db:6e:6b:87:c7:6b:22: 18:61:10:d3:a9:e7:9d:91:83:2e:6b:79:49:07:3a:a3:5b:90: f6:d9:2f:f6:b3:db:d6:d5:49:cc:95:04:b6:61:23:fc:88:13: a7:34:b1:64:75:7e:cc:22:5d:5e:f6:87:ff:80:0d:df:30:0c: 51:b5:3e:3a:ad:25:c0:ca:d1:48:93:a3:dd:13:3d:bd:83:56: 8b:bc:9e:59:7c:b9:f4:ad:6b:1d:10:18:66:cf:0e:76:e7:3f: 91:88:05:28:01:22:68:30:7e:5c:ec:e3:58:d9:6f:2b:81:6a: 59:04:00:e0:eb:0f:47:9e:9e:a6:4c:2a:48:8a:38:23:77:82: 7a:77:81:c3:53:24:76:d8:4f:d1:bb:b4:ee:76:12:a6:21:e6: 32:c7:68:62:88:c3:dd:cc:b7:85:05:77:57:a7:d3:ed:1a:78: e3:ae:23:0a -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt5EMGAIQvMk7ih3gATawNBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5M2RhOTFmMWY1MzYzNDI3MmM1OTExMDg3Y2U2NmNiYWQz NjE0YTMwHhcNMjYwMTAxMTAxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Zjk0Njk1MTk2ODljNDVlZDY0YjZkYjE1NWE2MWYwYjlhNjE4NzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqwe97a6QzgpYzsCWK+V/X2FqcDW X/6j9a8DFCUxgGqV4cqqzq+N3dPSvsjghOsCMAXr+2yYYEDEAbpqvHWdIhOZQDVg HyKmO0YIM2Vxtl9Wn0yQLxgJL7DbwVNpT7TO38cYZwpaCRh9D/xmYjdr6DHkz2rL AmDhzYr4maMo+Nxk07/IEVeXFkjQ8pc6lCs4f5nN76B4D0Fn/DLuf/x6q/KnsW4l t6KcDKda1IIrb7+Qjx0x//4Lge0yJK4Px+0E9ZfHGhtE1ADBLOsssl6oaEIyIVL/ mD5tSFYCYsWtZ2d1Z9/QGbhHrMnawb2Pk//ELN6WQj4eqycyt8dK5zR+AQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFE+UaVGWicRe1kttsVWmHwuaYYecMB8GA1UdIwQY MBaAFLk9qR8fU2NCcsWREIfOZsutNhSjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVQycEh4OVRZMEp5eFpFUWg4NW15NjAyRktNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9jYTQ0NzEtMzRkMC00ODE2LTgxZDEt OGJmNWIxZWQxMjA5LzEvVDVScFVaYUp4RjdXUzIyeFZhWWZDNXBoaDV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9jYTQ0NzEtMzRkMC00ODE2LTgxZDEtOGJmNWIxZWQxMjA5 LzEvdVQycEh4OVRZMEp5eFpFUWg4NW15NjAyRktNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAW9gXAwQB wSHWMA8EAgACMAkDBwAgAQZ8JLAwDQYJKoZIhvcNAQELBQADggEBACD7vcgz+xgu mei6h2xirZWmGF8Qqd/j9jSSmSUerFb4GgBfJ3Z+wTH2RDgrqV7P3ChNF1fqCI3K G8nW8LMbGtsR8W++WTfpkExYgo7b7TV2Cexl225rh8drIhhhENOp552Rgy5reUkH OqNbkPbZL/az29bVScyVBLZhI/yIE6c0sWR1fswiXV72h/+ADd8wDFG1PjqtJcDK 0UiTo90TPb2DVou8nll8ufStax0QGGbPDnbnP5GIBSgBImgwflzs41jZbyuBalkE AODrD0eenqZMKkiKOCN3gnp3gcNTJHbYT9G7tO52EqYh5jLHaGKIw93Mt4UFd1en 0+0aeOOuIwo= -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:41 2026 by rpki-client