This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/56h_M05P3VWtF4abBfFXhKeCkH4.roa File: 56h_M05P3VWtF4abBfFXhKeCkH4.roa (raw, json) Hash identifier: 7Nq6KrLeGp+ZQIhNZCissdd0NJHYZ52VNgjUFLYcYEE= Subject key identifier: E7:A8:7F:33:4E:4F:DD:55:AD:17:86:9B:05:F1:57:84:A7:82:90:7E Certificate issuer: /CN=f17f6957fc23b8d46b9d3dc8bc7db122859876f0 Certificate serial: 019B31318DDCC7E0760857AE9E4BF330252D Authority key identifier: F1:7F:69:57:FC:23:B8:D4:6B:9D:3D:C8:BC:7D:B1:22:85:98:76:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8X9pV_wjuNRrnT3IvH2xIoWYdvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/56h_M05P3VWtF4abBfFXhKeCkH4.roa Signing time: Thu 18 Dec 2025 11:21:29 +0000 ROA not before: Thu 18 Dec 2025 11:21:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 64445 IP address blocks: 91.199.211.0/24 maxlen: 24 91.199.223.0/24 maxlen: 24 91.199.248.0/24 maxlen: 24 91.203.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.crl rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.mft rsync://rpki.ripe.net/repository/DEFAULT/8X9pV_wjuNRrnT3IvH2xIoWYdvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:31:8d:dc:c7:e0:76:08:57:ae:9e:4b:f3:30:25:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f17f6957fc23b8d46b9d3dc8bc7db122859876f0 Validity Not Before: Dec 18 11:21:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e7a87f334e4fdd55ad17869b05f15784a782907e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b7:2b:26:a9:cf:4e:8d:a9:64:92:e1:a0:05: 4d:b0:56:12:98:13:3d:3c:93:63:ff:f3:fb:c8:4c: ed:4d:46:20:11:f2:77:6d:de:36:93:2a:0d:6c:88: 20:6e:c7:24:8f:a2:8e:e3:42:2c:89:b8:d3:21:6a: 54:03:ec:58:4d:1d:2a:80:3f:ce:e9:c4:53:10:7d: b3:9b:fd:35:07:c0:e8:ce:32:12:10:4e:c5:fe:13: ac:1b:7e:b2:1b:8b:08:af:6b:ca:77:ab:75:1e:90: 40:4f:27:44:98:50:bd:cd:f3:cf:9b:0d:ef:69:3b: 21:b0:fc:a3:42:6a:2f:f5:8b:c5:41:cd:1f:c5:76: 29:55:fe:cf:8b:34:44:f3:83:38:24:26:85:8f:54: 05:61:35:c1:99:92:03:af:42:c8:6a:06:42:d8:37: e6:7a:26:30:67:ed:fe:5b:b0:22:a6:f2:22:46:0d: 70:43:14:50:28:e1:61:e3:71:b0:fb:ce:6b:5a:3c: b4:b9:6d:3a:e3:c8:9b:dd:fe:f5:7d:95:b0:6a:a3: 47:c8:2d:d7:3d:8d:c8:93:c6:45:18:e8:74:bb:be: fe:94:4e:aa:8a:02:42:90:36:45:85:14:8d:9c:a0: d8:54:07:e2:32:56:1a:bc:a4:f9:ce:9a:17:8f:e7: 43:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:A8:7F:33:4E:4F:DD:55:AD:17:86:9B:05:F1:57:84:A7:82:90:7E X509v3 Authority Key Identifier: keyid:F1:7F:69:57:FC:23:B8:D4:6B:9D:3D:C8:BC:7D:B1:22:85:98:76:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8X9pV_wjuNRrnT3IvH2xIoWYdvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/56h_M05P3VWtF4abBfFXhKeCkH4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.211.0/24 91.199.223.0/24 91.199.248.0/24 91.203.220.0/24 Signature Algorithm: sha256WithRSAEncryption c3:1c:5d:b2:99:62:9f:b2:c8:e9:e2:c2:8a:ca:3c:50:9e:ea: 5a:ff:69:ca:9b:e5:f1:22:af:eb:81:6d:2c:91:7c:44:21:6c: 33:d7:52:19:f4:25:0b:d5:7c:52:f8:21:5b:74:74:0c:de:6b: 56:c0:24:e1:19:8b:b9:1f:0f:63:11:ba:19:ad:50:51:3d:9d: b1:ec:c2:08:b1:2e:91:52:39:e2:be:17:7f:5c:a3:d9:38:e7: 53:2f:29:ba:8b:2a:37:97:b7:8f:c1:c1:55:13:f0:7e:cb:7a: 8f:5e:15:c9:e6:45:e7:8b:e9:23:5f:af:1a:59:0d:e5:5f:b5: 6d:06:09:ef:c1:72:6f:78:6f:40:3b:40:c0:9d:95:dc:b3:44: b0:2a:e2:53:c0:9c:90:67:3e:7d:14:43:c3:06:fd:bc:1a:ac: 9d:77:2b:17:11:0e:8f:96:74:f0:42:8d:1e:eb:d5:0b:66:3d: 4a:b4:e5:bf:26:01:21:2e:1b:2e:63:e2:e4:11:9f:0b:f1:d1: 03:a2:f9:f2:8b:ba:41:39:a8:1e:92:ef:2a:5f:70:26:21:9c: 11:8c:12:9a:33:cb:6c:1d:f4:d8:21:84:76:39:72:8b:27:4c: 24:4e:a9:b1:20:22:f1:f4:82:0f:6f:52:93:52:e1:18:15:a3: a4:cd:3c:01 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZsxMY3cx+B2CFeunkvzMCUtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxN2Y2OTU3ZmMyM2I4ZDQ2YjlkM2RjOGJjN2RiMTIyODU5 ODc2ZjAwHhcNMjUxMjE4MTEyMTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlN2E4N2YzMzRlNGZkZDU1YWQxNzg2OWIwNWYxNTc4NGE3ODI5MDdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbcrJqnPTo2pZJLhoAVNsFYSmBM9 PJNj//P7yEztTUYgEfJ3bd42kyoNbIggbsckj6KO40IsibjTIWpUA+xYTR0qgD/O 6cRTEH2zm/01B8DozjISEE7F/hOsG36yG4sIr2vKd6t1HpBATydEmFC9zfPPmw3v aTshsPyjQmov9YvFQc0fxXYpVf7PizRE84M4JCaFj1QFYTXBmZIDr0LIagZC2Dfm eiYwZ+3+W7AipvIiRg1wQxRQKOFh43Gw+85rWjy0uW0648ib3f71fZWwaqNHyC3X PY3Ik8ZFGOh0u77+lE6qigJCkDZFhRSNnKDYVAfiMlYavKT5zpoXj+dDgQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFOeofzNOT91VrReGmwXxV4SngpB+MB8GA1UdIwQY MBaAFPF/aVf8I7jUa509yLx9sSKFmHbwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFg5cFZfd2p1TlJyblQzSXZIMnhJb1dZZHZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8yMDI2ZDMtOWYzMy00NjNlLTg0MTAt NzI2ZGE0ZTkzODZiLzEvNTZoX00wNVAzVld0RjRhYkJmRlhoS2VDa0g0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny8yMDI2ZDMtOWYzMy00NjNlLTg0MTAtNzI2ZGE0ZTkzODZi LzEvOFg5cFZfd2p1TlJyblQzSXZIMnhJb1dZZHZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAW8fTAwQA W8ffAwQAW8f4AwQAW8vcMA0GCSqGSIb3DQEBCwUAA4IBAQDDHF2ymWKfssjp4sKK yjxQnupa/2nKm+XxIq/rgW0skXxEIWwz11IZ9CUL1XxS+CFbdHQM3mtWwCThGYu5 Hw9jEboZrVBRPZ2x7MIIsS6RUjnivhd/XKPZOOdTLym6iyo3l7ePwcFVE/B+y3qP XhXJ5kXni+kjX68aWQ3lX7VtBgnvwXJveG9AO0DAnZXcs0SwKuJTwJyQZz59FEPD Bv28GqyddysXEQ6PlnTwQo0e69ULZj1KtOW/JgEhLhsuY+LkEZ8L8dEDovnyi7pB Oageku8qX3AmIZwRjBKaM8tsHfTYIYR2OXKLJ0wkTqmxICLx9IIPb1KTUuEYFaOk zTwB -----END CERTIFICATE-----Generated at Fri Dec 19 16:18:27 2025 by rpki-client