This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/Ro5FYTNVl_lnAyMdvuGnbsPkpGI.roa File: Ro5FYTNVl_lnAyMdvuGnbsPkpGI.roa (raw, json) Hash identifier: Rrtw6rU9+BgwK1Mhs6SeDqlpBkER/cCVfCVvQJ88CfE= Subject key identifier: 46:8E:45:61:33:55:97:F9:67:03:23:1D:BE:E1:A7:6E:C3:E4:A4:62 Certificate issuer: /CN=64d4e8723450d0a710c32d90ffea18529104e538 Certificate serial: 019B7FF1ADD43522F4728AE4BCE5A45F3376 Authority key identifier: 64:D4:E8:72:34:50:D0:A7:10:C3:2D:90:FF:EA:18:52:91:04:E5:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/Ro5FYTNVl_lnAyMdvuGnbsPkpGI.roa Signing time: Fri 02 Jan 2026 18:21:43 +0000 ROA not before: Fri 02 Jan 2026 18:21:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202656 IP address blocks: 91.216.155.0/24 maxlen: 24 91.217.90.0/24 maxlen: 24 91.226.212.0/24 maxlen: 24 91.226.213.0/24 maxlen: 24 176.111.44.0/24 maxlen: 24 193.203.50.0/23 maxlen: 23 193.203.50.0/24 maxlen: 24 193.203.51.0/24 maxlen: 24 195.211.40.0/23 maxlen: 23 2a13:f580::/48 maxlen: 48 2a13:f580:5::/48 maxlen: 48 2a13:f580:6::/48 maxlen: 48 2a13:f580:7::/48 maxlen: 48 2a13:f580:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:ad:d4:35:22:f4:72:8a:e4:bc:e5:a4:5f:33:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64d4e8723450d0a710c32d90ffea18529104e538 Validity Not Before: Jan 2 18:21:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=468e4561335597f96703231dbee1a76ec3e4a462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:12:9f:17:f4:fc:11:3a:04:f7:bc:7a:f1:a7: ac:db:19:d3:ff:b4:58:cd:b4:9b:c8:13:88:c6:dc: 89:5a:6a:45:0e:2b:fc:b7:7b:04:54:b5:06:74:b3: c3:c2:a5:0c:3f:a1:63:4f:56:2f:c1:43:13:61:29: 86:36:18:4d:f0:10:f3:a2:9f:7d:f1:9b:d7:a2:7c: c4:3d:87:b2:25:dc:09:f8:48:5b:66:fb:ce:b2:ac: 89:08:1f:60:c9:75:5b:e4:35:fe:72:73:c4:f2:d6: 1f:c4:55:df:09:60:8a:e8:ed:9c:4d:e9:9f:76:6b: 00:95:6f:72:60:70:06:54:77:a2:d9:11:78:bc:5f: 82:6c:7b:5b:f9:80:69:dc:e5:30:95:c1:d9:68:6e: 59:f9:90:6f:82:d3:0e:a2:b4:64:9c:f4:dd:1b:95: d1:01:17:88:f0:c3:d9:e8:78:5c:12:04:15:f1:fa: 11:ff:04:e2:76:03:28:7a:1f:74:f9:9d:21:a5:1f: d4:8e:05:53:d2:ff:06:8f:b4:92:26:97:a7:87:a3: 92:62:51:8c:c9:3c:19:c3:f0:33:82:0f:35:a5:8d: 4c:16:d4:e4:52:a3:18:64:cf:c0:3d:37:9a:66:77: bf:59:1e:68:e9:63:05:ce:48:8d:42:d4:f2:43:55: 01:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:8E:45:61:33:55:97:F9:67:03:23:1D:BE:E1:A7:6E:C3:E4:A4:62 X509v3 Authority Key Identifier: keyid:64:D4:E8:72:34:50:D0:A7:10:C3:2D:90:FF:EA:18:52:91:04:E5:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/Ro5FYTNVl_lnAyMdvuGnbsPkpGI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.155.0/24 91.217.90.0/24 91.226.212.0/23 176.111.44.0/24 193.203.50.0/23 195.211.40.0/23 IPv6: 2a13:f580::/48 2a13:f580:5::-2a13:f580:8:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 72:b2:d5:c3:5d:ee:26:b3:97:39:d6:27:a0:f6:ef:dc:75:96: 32:3b:d7:f1:4d:af:37:36:a3:b2:3f:02:b1:44:d0:5a:b9:6b: 8e:64:67:79:27:b2:e9:16:b4:af:c0:3b:bf:08:0d:14:bc:6f: 79:6d:e0:2d:56:89:05:52:84:c7:3e:15:45:37:48:62:d3:eb: 21:b4:7b:5e:5b:1e:30:19:84:7f:26:25:4c:ef:c4:73:57:dd: 8f:50:a2:20:9c:43:45:80:e7:33:59:3f:50:22:94:6a:c8:2d: a4:73:22:58:d5:5b:4f:da:9a:df:0d:8e:17:16:a1:77:50:1d: cb:db:81:50:f1:34:93:1e:04:fe:96:5a:64:d9:48:1e:4a:44: 2a:e9:b3:5c:14:c7:e0:3e:e0:76:67:42:39:6d:93:4b:13:ec: 5b:6e:d3:0d:c3:da:dc:7d:c3:cd:57:67:a6:4e:64:93:ae:8a: 24:e1:31:db:25:07:ed:8a:1c:0e:90:0d:3c:d3:e2:36:46:60: e9:09:d5:89:58:97:34:4f:a9:08:a1:57:de:bd:83:87:0f:c6: cf:7d:f9:36:43:78:e9:f9:93:7b:23:ae:6c:35:eb:5b:a9:4f: 9f:54:4c:10:06:5f:47:b6:81:af:ca:a5:d3:b4:ac:56:16:c2: bd:e2:e9:06 -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgISAZt/8a3UNSL0corkvOWkXzN2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZDRlODcyMzQ1MGQwYTcxMGMzMmQ5MGZmZWExODUyOTEw NGU1MzgwHhcNMjYwMTAyMTgyMTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjhlNDU2MTMzNTU5N2Y5NjcwMzIzMWRiZWUxYTc2ZWMzZTRhNDYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRKfF/T8EToE97x68aes2xnT/7RY zbSbyBOIxtyJWmpFDiv8t3sEVLUGdLPDwqUMP6FjT1YvwUMTYSmGNhhN8BDzop99 8ZvXonzEPYeyJdwJ+EhbZvvOsqyJCB9gyXVb5DX+cnPE8tYfxFXfCWCK6O2cTemf dmsAlW9yYHAGVHei2RF4vF+CbHtb+YBp3OUwlcHZaG5Z+ZBvgtMOorRknPTdG5XR AReI8MPZ6HhcEgQV8foR/wTidgMoeh90+Z0hpR/UjgVT0v8Gj7SSJpenh6OSYlGM yTwZw/Azgg81pY1MFtTkUqMYZM/APTeaZne/WR5o6WMFzkiNQtTyQ1UBnwIDAQAB o4ICTDCCAkgwHQYDVR0OBBYEFEaORWEzVZf5ZwMjHb7hp27D5KRiMB8GA1UdIwQY MBaAFGTU6HI0UNCnEMMtkP/qGFKRBOU4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWk5Ub2NqUlEwS2NRd3kyUV8tb1lVcEVFNVRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8yMzEwYjEtOTZhMS00OGU0LWFhNzIt NDIyYWVkM2E3NzAyLzEvUm81RllUTlZsX2xuQXlNZHZ1R25ic1BrcEdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC8yMzEwYjEtOTZhMS00OGU0LWFhNzItNDIyYWVkM2E3NzAy LzEvWk5Ub2NqUlEwS2NRd3kyUV8tb1lVcEVFNVRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGIGCCsGAQUFBwEHAQH/BFMwUTAqBAIAATAkAwQAW9ibAwQA W9laAwQBW+LUAwQAsG8sAwQBwcsyAwQBw9MoMCMEAgACMB0DBwAqE/WAAAAwEgMH ACoT9YAABQMHACoT9YAACDANBgkqhkiG9w0BAQsFAAOCAQEAcrLVw13uJrOXOdYn oPbv3HWWMjvX8U2vNzajsj8CsUTQWrlrjmRneSey6Ra0r8A7vwgNFLxveW3gLVaJ BVKExz4VRTdIYtPrIbR7XlseMBmEfyYlTO/Ec1fdj1CiIJxDRYDnM1k/UCKUasgt pHMiWNVbT9qa3w2OFxahd1Ady9uBUPE0kx4E/pZaZNlIHkpEKumzXBTH4D7gdmdC OW2TSxPsW27TDcPa3H3DzVdnpk5kk66KJOEx2yUH7YocDpANPNPiNkZg6QnViViX NE+pCKFX3r2Dhw/Gz335NkN46fmTeyOubDXrW6lPn1RMEAZfR7aBr8ql07SsVhbC veLpBg== -----END CERTIFICATE-----Generated at Tue Jan 20 00:55:58 2026 by rpki-client