This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/T5tca3eRSBXQYZ3SqJhOW7Yc8mQ.roa File: T5tca3eRSBXQYZ3SqJhOW7Yc8mQ.roa (raw, json) Hash identifier: cOn2EnZ6WvGENwI0qXwoWVZXLsqu0B3PPBV5nncT3Hs= Subject key identifier: 4F:9B:5C:6B:77:91:48:15:D0:61:9D:D2:A8:98:4E:5B:B6:1C:F2:64 Certificate issuer: /CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31 Certificate serial: 019B7D5AEDD666FE4E9746AF23E7DD15E020 Authority key identifier: 44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/T5tca3eRSBXQYZ3SqJhOW7Yc8mQ.roa Signing time: Fri 02 Jan 2026 06:17:49 +0000 ROA not before: Fri 02 Jan 2026 06:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55569 IP address blocks: 91.199.242.0/24 maxlen: 24 91.212.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:ed:d6:66:fe:4e:97:46:af:23:e7:dd:15:e0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31 Validity Not Before: Jan 2 06:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f9b5c6b77914815d0619dd2a8984e5bb61cf264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:3e:e6:63:12:7f:62:6d:78:d7:45:e5:70:69: e6:b4:b3:3e:3d:a2:86:84:37:18:d8:2e:de:2d:66: 44:b6:fe:eb:52:b5:aa:fe:52:76:23:74:18:0d:fb: e4:53:54:e5:b1:c7:25:38:96:f1:1d:5b:09:d3:c7: bb:bf:84:2a:a2:c7:4d:7a:17:a1:e9:3d:84:ed:00: 31:f3:08:03:94:be:0d:d5:71:cd:f0:d6:03:e0:1f: f0:ca:18:68:9a:a0:51:6a:a6:9f:6f:bf:ce:f6:04: d9:32:fd:35:06:3b:00:0c:02:34:1c:5e:2a:b7:a3: b1:9f:4d:d0:4b:0d:f0:c4:25:bc:40:72:46:bb:8e: 96:0d:68:58:57:d9:b3:58:90:aa:fd:5b:b5:02:ca: 12:9e:bc:f0:4b:6f:d2:0f:b9:ef:49:20:bc:c5:47: 95:a0:c6:91:66:c5:e4:33:55:f5:4c:00:88:92:d9: 5f:08:5e:9c:ad:54:13:25:fb:de:08:c8:93:80:0f: 0e:70:1a:c4:63:71:ea:3f:4f:14:91:f2:8e:b9:ba: 9e:1f:4f:99:a0:b9:2d:0d:4f:32:a5:df:15:76:13: 74:d9:a5:04:b5:78:d6:e8:a8:08:fa:eb:f1:61:8d: 78:99:a8:7b:cd:a0:05:76:34:4c:ab:d9:bc:2d:d1: 48:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:9B:5C:6B:77:91:48:15:D0:61:9D:D2:A8:98:4E:5B:B6:1C:F2:64 X509v3 Authority Key Identifier: keyid:44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/T5tca3eRSBXQYZ3SqJhOW7Yc8mQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.242.0/24 91.212.98.0/24 Signature Algorithm: sha256WithRSAEncryption 72:64:83:6c:30:f1:3c:e9:4d:65:b1:74:18:07:47:01:c9:eb: ae:a1:9d:c7:d8:6d:53:05:f3:8c:51:8b:3d:2b:43:e9:b0:22: 76:65:76:cc:14:d4:19:72:94:e3:8a:cc:b2:e7:d3:d3:4c:63: ca:3a:26:b1:42:42:86:40:98:5e:06:10:dc:98:ff:3c:f8:c0: cd:5b:af:f4:98:d4:cb:e7:36:64:a0:9b:b4:a5:5f:56:b9:1c: 88:f2:7d:83:0a:3e:c0:32:47:26:b7:f2:a5:78:e7:4f:0d:35: ec:43:19:aa:d0:00:ad:cc:b8:f2:72:dd:b2:aa:4d:fc:c5:10: c8:3a:38:5f:d3:43:e3:ba:2e:f2:27:76:00:fa:a1:79:cb:6f: 77:32:c3:c7:2f:42:36:8f:d0:cf:30:4b:12:8f:09:6b:9c:e1: 05:3e:6c:7a:05:0b:0a:cb:28:e5:3f:31:83:d1:a9:58:93:9b: 8c:fc:ca:d5:80:77:f9:48:8c:2b:2e:77:e2:67:ee:ac:7f:73: e0:3a:0f:8f:dd:95:c1:76:ec:0a:62:61:ca:58:bb:3b:08:df: 56:16:19:91:f8:84:e7:79:20:18:92:52:c6:72:c3:a3:31:f1: 6b:06:0b:bd:5f:cc:1a:aa:ec:6a:bd:d6:ea:19:c8:b0:a8:59: 66:fa:fb:a0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9Wu3WZv5Ol0avI+fdFeAgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NzI4ZmIzMWM0ZWJkZmI5YmYxMjk3NDViOTFiZDJlMmVl OGVmMzEwHhcNMjYwMTAyMDYxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjliNWM2Yjc3OTE0ODE1ZDA2MTlkZDJhODk4NGU1YmI2MWNmMjY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlT7mYxJ/Ym1410XlcGnmtLM+PaKG hDcY2C7eLWZEtv7rUrWq/lJ2I3QYDfvkU1TlscclOJbxHVsJ08e7v4QqosdNeheh 6T2E7QAx8wgDlL4N1XHN8NYD4B/wyhhomqBRaqafb7/O9gTZMv01BjsADAI0HF4q t6Oxn03QSw3wxCW8QHJGu46WDWhYV9mzWJCq/Vu1AsoSnrzwS2/SD7nvSSC8xUeV oMaRZsXkM1X1TACIktlfCF6crVQTJfveCMiTgA8OcBrEY3HqP08UkfKOubqeH0+Z oLktDU8ypd8VdhN02aUEtXjW6KgI+uvxYY14mah7zaAFdjRMq9m8LdFIiwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFE+bXGt3kUgV0GGd0qiYTlu2HPJkMB8GA1UdIwQY MBaAFERyj7McTr37m/EpdFuRvS4u6O8xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkhLUHN4eE92ZnViOFNsMFc1RzlMaTdvN3pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zYWM3NjEtOWFkOC00NTEzLThhMzIt MWY1NWQ5OTk5ZWViLzEvVDV0Y2EzZVJTQlhRWVozU3FKaE9XN1ljOG1RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8zYWM3NjEtOWFkOC00NTEzLThhMzItMWY1NWQ5OTk5ZWVi LzEvUkhLUHN4eE92ZnViOFNsMFc1RzlMaTdvN3pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW8fyAwQA W9RiMA0GCSqGSIb3DQEBCwUAA4IBAQByZINsMPE86U1lsXQYB0cByeuuoZ3H2G1T BfOMUYs9K0PpsCJ2ZXbMFNQZcpTjisyy59PTTGPKOiaxQkKGQJheBhDcmP88+MDN W6/0mNTL5zZkoJu0pV9WuRyI8n2DCj7AMkcmt/KleOdPDTXsQxmq0ACtzLjyct2y qk38xRDIOjhf00Pjui7yJ3YA+qF5y293MsPHL0I2j9DPMEsSjwlrnOEFPmx6BQsK yyjlPzGD0alYk5uM/MrVgHf5SIwrLnfiZ+6sf3PgOg+P3ZXBduwKYmHKWLs7CN9W FhmR+ITneSAYklLGcsOjMfFrBgu9X8waquxqvdbqGciwqFlm+vug -----END CERTIFICATE-----Generated at Mon Jan 26 18:53:41 2026 by rpki-client