This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/5TB32dEiFrDCOhmncS_By-MXI5g.roa File: 5TB32dEiFrDCOhmncS_By-MXI5g.roa (raw, json) Hash identifier: nEn2khZ7HTIKhK7IdrNN/UAq+nwAT5kuCFekds2YcnY= Subject key identifier: E5:30:77:D9:D1:22:16:B0:C2:3A:19:A7:71:2F:C1:CB:E3:17:23:98 Certificate issuer: /CN=447f9143ea55358fbd62fa5644547460172e1afd Certificate serial: 019B7F84B1FA539CF888E4CDD0568EC8F80E Authority key identifier: 44:7F:91:43:EA:55:35:8F:BD:62:FA:56:44:54:74:60:17:2E:1A:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/5TB32dEiFrDCOhmncS_By-MXI5g.roa Signing time: Fri 02 Jan 2026 16:22:41 +0000 ROA not before: Fri 02 Jan 2026 16:22:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57419 IP address blocks: 91.199.204.0/24 maxlen: 24 185.207.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.mft rsync://rpki.ripe.net/repository/DEFAULT/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:b1:fa:53:9c:f8:88:e4:cd:d0:56:8e:c8:f8:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=447f9143ea55358fbd62fa5644547460172e1afd Validity Not Before: Jan 2 16:22:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e53077d9d12216b0c23a19a7712fc1cbe3172398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:22:40:46:13:2c:9c:55:78:14:89:a9:44:bb: f8:e5:02:6a:96:5e:f5:27:bf:82:77:e7:19:c6:9c: 12:a2:45:0f:51:c0:6b:77:ab:f6:bd:ab:ea:9e:87: bc:b2:90:32:16:a7:08:ed:42:7d:b6:10:bd:af:31: 06:74:dd:8f:c6:07:20:df:c1:a3:e0:de:ae:44:1f: da:34:94:00:2f:1f:f4:7d:9a:ff:a4:88:ba:da:d7: 03:ed:b1:c5:7c:83:5b:f8:3f:bb:b3:5c:2f:e9:4f: e4:35:43:91:c2:ee:b2:97:c1:f4:a0:9a:4f:74:3d: 15:ee:2f:6b:b1:8a:b0:24:e3:14:11:69:26:e8:04: c8:d4:88:ad:00:45:41:e2:f7:4a:4e:2b:35:21:92: ba:9f:e0:28:e2:f0:1c:56:0d:24:ad:a5:3e:19:39: dc:0d:c9:81:85:df:9c:6c:6e:07:7b:a6:ec:a5:43: 4f:bd:a3:75:67:69:d4:bf:79:c9:44:45:b6:ec:4e: d2:79:a7:cf:16:d0:c8:86:3a:ae:44:a9:a2:f0:f6: 30:a2:0b:90:e9:ad:3a:ca:34:52:bf:40:c3:8e:26: 2e:c6:85:78:47:93:eb:50:1d:cc:11:e4:35:d1:69: c3:4c:69:2d:76:45:e7:46:e5:a8:df:20:27:52:a7: ff:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:30:77:D9:D1:22:16:B0:C2:3A:19:A7:71:2F:C1:CB:E3:17:23:98 X509v3 Authority Key Identifier: keyid:44:7F:91:43:EA:55:35:8F:BD:62:FA:56:44:54:74:60:17:2E:1A:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/5TB32dEiFrDCOhmncS_By-MXI5g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.204.0/24 185.207.3.0/24 Signature Algorithm: sha256WithRSAEncryption 53:75:62:8a:2d:24:62:6c:d1:0d:93:68:ff:22:5c:47:b5:2a: bf:b3:f0:50:13:b4:c7:9f:83:da:7c:e7:5e:ac:f5:04:67:6c: ab:d5:4f:a5:bd:3a:32:fc:06:14:be:5b:22:d2:9b:38:86:b0: 99:67:c4:41:91:4f:2f:09:d5:7b:fc:3c:7c:8b:d5:9e:80:8b: 33:27:ab:56:8d:7e:60:ed:6c:b1:9b:75:65:57:38:01:3d:46: 6a:c0:15:71:15:cc:db:e3:bb:ca:59:e0:ff:76:f7:8f:63:56: b9:d7:bc:e7:86:9d:70:1b:c2:f8:d6:72:50:92:23:d5:52:25: 2a:1b:95:45:2f:9e:7d:2e:d2:8f:46:99:d0:af:e3:46:1f:0f: a8:09:1c:aa:0e:0b:55:fe:83:48:0b:fa:9b:91:86:52:3f:68: a5:07:32:30:60:a9:5b:bc:0c:10:31:56:0c:c9:81:9b:99:be: 8e:6d:ca:a3:c2:5c:2b:13:42:47:d3:73:eb:7d:75:75:f4:0b: 06:9b:83:9d:b8:93:fd:ae:71:20:0d:08:cc:f0:02:4b:ed:57: e5:99:1e:85:29:4e:5e:ba:b2:c9:76:04:24:72:a6:d1:93:38: de:e0:1e:19:e7:9d:a2:53:fa:89:79:33:5f:0b:33:84:9a:41: 07:25:c8:b4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hLH6U5z4iOTN0FaOyPgOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0N2Y5MTQzZWE1NTM1OGZiZDYyZmE1NjQ0NTQ3NDYwMTcy ZTFhZmQwHhcNMjYwMTAyMTYyMjQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTMwNzdkOWQxMjIxNmIwYzIzYTE5YTc3MTJmYzFjYmUzMTcyMzk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyJARhMsnFV4FImpRLv45QJqll71 J7+Cd+cZxpwSokUPUcBrd6v2vavqnoe8spAyFqcI7UJ9thC9rzEGdN2Pxgcg38Gj 4N6uRB/aNJQALx/0fZr/pIi62tcD7bHFfINb+D+7s1wv6U/kNUORwu6yl8H0oJpP dD0V7i9rsYqwJOMUEWkm6ATI1IitAEVB4vdKTis1IZK6n+Ao4vAcVg0kraU+GTnc DcmBhd+cbG4He6bspUNPvaN1Z2nUv3nJREW27E7SeafPFtDIhjquRKmi8PYwoguQ 6a06yjRSv0DDjiYuxoV4R5PrUB3MEeQ10WnDTGktdkXnRuWo3yAnUqf/twIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOUwd9nRIhawwjoZp3EvwcvjFyOYMB8GA1UdIwQY MBaAFER/kUPqVTWPvWL6VkRUdGAXLhr9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkgtUlEtcFZOWS05WXZwV1JGUjBZQmN1R3YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS85ZWEzNjktYTI4Yy00YzdlLTlhMTUt YzQyOTJmYWM5YmU4LzEvNVRCMzJkRWlGckRDT2htbmNTX0J5LU1YSTVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS85ZWEzNjktYTI4Yy00YzdlLTlhMTUtYzQyOTJmYWM5YmU4 LzEvUkgtUlEtcFZOWS05WXZwV1JGUjBZQmN1R3YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW8fMAwQA uc8DMA0GCSqGSIb3DQEBCwUAA4IBAQBTdWKKLSRibNENk2j/IlxHtSq/s/BQE7TH n4PafOderPUEZ2yr1U+lvToy/AYUvlsi0ps4hrCZZ8RBkU8vCdV7/Dx8i9WegIsz J6tWjX5g7Wyxm3VlVzgBPUZqwBVxFczb47vKWeD/dvePY1a517znhp1wG8L41nJQ kiPVUiUqG5VFL559LtKPRpnQr+NGHw+oCRyqDgtV/oNIC/qbkYZSP2ilBzIwYKlb vAwQMVYMyYGbmb6ObcqjwlwrE0JH03PrfXV19AsGm4OduJP9rnEgDQjM8AJL7Vfl mR6FKU5eurLJdgQkcqbRkzje4B4Z552iU/qJeTNfCzOEmkEHJci0 -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:32 2026 by rpki-client