This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/m5c3Kp4r9aaG4JXnWoVgbW6fzLM.roa File: m5c3Kp4r9aaG4JXnWoVgbW6fzLM.roa (raw, json) Hash identifier: zFQk8P7qdiOsDme61W/zQfVewpw/uX39LK39s6ZU7J0= Subject key identifier: 9B:97:37:2A:9E:2B:F5:A6:86:E0:95:E7:5A:85:60:6D:6E:9F:CC:B3 Certificate issuer: /CN=3ca1fabe9f0b3e977f8e0829c0bf5f0878384668 Certificate serial: 019B7BA53EC6DE1A2D711AD122C9C651533F Authority key identifier: 3C:A1:FA:BE:9F:0B:3E:97:7F:8E:08:29:C0:BF:5F:08:78:38:46:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PKH6vp8LPpd_jggpwL9fCHg4Rmg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/m5c3Kp4r9aaG4JXnWoVgbW6fzLM.roa Signing time: Thu 01 Jan 2026 22:19:45 +0000 ROA not before: Thu 01 Jan 2026 22:19:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201160 IP address blocks: 91.235.64.0/24 maxlen: 24 185.11.212.0/24 maxlen: 24 185.11.213.0/24 maxlen: 24 185.11.214.0/24 maxlen: 24 185.11.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.crl rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft rsync://rpki.ripe.net/repository/DEFAULT/PKH6vp8LPpd_jggpwL9fCHg4Rmg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 10:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:3e:c6:de:1a:2d:71:1a:d1:22:c9:c6:51:53:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ca1fabe9f0b3e977f8e0829c0bf5f0878384668 Validity Not Before: Jan 1 22:19:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b97372a9e2bf5a686e095e75a85606d6e9fccb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3a:4d:68:6c:72:18:4a:09:8b:b1:da:5b:cc: ed:8e:fc:5c:97:78:d9:43:11:53:92:6f:e6:31:c5: 4f:ec:ef:42:82:f5:29:56:34:96:e7:ba:e2:7e:f3: cf:d9:cb:b8:1b:cd:0b:a9:b5:65:2c:32:56:39:7e: 1d:7a:06:f0:d4:25:c2:ba:cd:e9:99:f2:55:07:7e: e7:05:7f:3b:db:c8:bf:c6:ec:2e:c2:fe:1a:9b:9a: b3:25:ba:3e:d1:a8:f0:1d:ad:ff:bd:b2:50:7f:d8: b7:9d:da:e8:8c:88:2b:06:d9:15:77:6a:d5:b7:24: 30:c6:f0:be:37:f9:aa:2d:36:ee:ef:28:b4:91:fd: d4:54:39:e8:14:fb:c5:75:9d:f8:e7:7b:1e:53:8d: f3:77:a2:ed:6e:09:7f:a3:69:d7:79:49:82:be:a7: 2d:a2:3b:23:e5:90:1e:bc:c9:83:06:83:65:a4:7e: ae:2f:04:11:31:e4:40:38:31:00:6c:fe:bf:4a:60: 44:8b:fe:c1:c2:cc:a6:a7:e2:24:aa:5b:33:13:02: dc:d7:19:ed:9c:5e:f2:65:70:d9:31:94:aa:00:19: a5:93:56:2c:cd:55:3f:8e:20:09:e4:9f:02:21:57: d3:34:59:52:ad:37:95:1f:0f:7a:47:04:b0:7c:09: cb:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:97:37:2A:9E:2B:F5:A6:86:E0:95:E7:5A:85:60:6D:6E:9F:CC:B3 X509v3 Authority Key Identifier: keyid:3C:A1:FA:BE:9F:0B:3E:97:7F:8E:08:29:C0:BF:5F:08:78:38:46:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKH6vp8LPpd_jggpwL9fCHg4Rmg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/m5c3Kp4r9aaG4JXnWoVgbW6fzLM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.235.64.0/24 185.11.212.0/22 Signature Algorithm: sha256WithRSAEncryption 64:6c:a4:96:69:47:1f:db:d2:56:e2:6b:08:9e:72:52:d3:55: cc:85:40:d6:7d:85:0a:62:ba:3c:1c:46:04:68:83:36:a2:44: 6f:6d:c4:37:e5:f1:33:7d:4b:7c:d5:47:ef:3a:26:03:33:a3: bb:73:c6:c6:32:f1:32:51:b1:98:fa:6a:f4:da:38:76:3b:8d: d7:2f:66:c6:e0:46:62:78:b1:ea:c1:41:f1:7b:80:62:53:87: 2f:40:fd:81:69:d7:bb:2b:e9:64:d5:f7:f3:33:09:15:64:1b: 36:57:0c:0e:51:3a:b9:14:9c:74:e8:70:6a:10:fb:b4:77:a3: d1:4d:87:ba:70:7a:5c:72:8d:84:3e:d5:4a:a7:4e:1a:f3:50: 6b:dc:c0:f0:b1:ab:d0:0d:99:33:cc:f5:f4:94:1f:5b:06:3b: 3c:ce:ff:3a:50:6b:e2:84:da:ea:5b:d0:b9:24:84:e8:62:77: 2a:11:ca:8f:06:02:90:c1:e8:37:a4:98:85:07:61:5b:58:37: 77:7b:ad:84:0b:2a:6a:25:f6:8d:ec:b2:05:54:e5:65:bd:bb: 28:88:78:12:b1:3b:2c:f0:89:bb:7a:c8:1b:d1:cb:12:26:3f: a1:99:76:c1:dc:aa:27:d3:0d:6c:51:d8:ac:2c:d2:59:b6:15: 61:28:ee:8b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7pT7G3hotcRrRIsnGUVM/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjYTFmYWJlOWYwYjNlOTc3ZjhlMDgyOWMwYmY1ZjA4Nzgz ODQ2NjgwHhcNMjYwMTAxMjIxOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Yjk3MzcyYTllMmJmNWE2ODZlMDk1ZTc1YTg1NjA2ZDZlOWZjY2IzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDpNaGxyGEoJi7HaW8ztjvxcl3jZ QxFTkm/mMcVP7O9CgvUpVjSW57rifvPP2cu4G80LqbVlLDJWOX4degbw1CXCus3p mfJVB37nBX8728i/xuwuwv4am5qzJbo+0ajwHa3/vbJQf9i3ndrojIgrBtkVd2rV tyQwxvC+N/mqLTbu7yi0kf3UVDnoFPvFdZ3453seU43zd6Ltbgl/o2nXeUmCvqct ojsj5ZAevMmDBoNlpH6uLwQRMeRAODEAbP6/SmBEi/7Bwsymp+IkqlszEwLc1xnt nF7yZXDZMZSqABmlk1YszVU/jiAJ5J8CIVfTNFlSrTeVHw96RwSwfAnLnQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJuXNyqeK/WmhuCV51qFYG1un8yzMB8GA1UdIwQY MBaAFDyh+r6fCz6Xf44IKcC/Xwh4OEZoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEtINnZwOExQcGRfamdncHdMOWZDSGc0Um1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9mN2ZlOWItNjlhZS00MjA2LThkNjYt ZjY2MGE1N2UyZGQ1LzEvbTVjM0twNHI5YWFHNEpYbldvVmdiVzZmekxNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9mN2ZlOWItNjlhZS00MjA2LThkNjYtZjY2MGE1N2UyZGQ1 LzEvUEtINnZwOExQcGRfamdncHdMOWZDSGc0Um1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW+tAAwQC uQvUMA0GCSqGSIb3DQEBCwUAA4IBAQBkbKSWaUcf29JW4msInnJS01XMhUDWfYUK Yro8HEYEaIM2okRvbcQ35fEzfUt81UfvOiYDM6O7c8bGMvEyUbGY+mr02jh2O43X L2bG4EZieLHqwUHxe4BiU4cvQP2Bade7K+lk1ffzMwkVZBs2VwwOUTq5FJx06HBq EPu0d6PRTYe6cHpcco2EPtVKp04a81Br3MDwsavQDZkzzPX0lB9bBjs8zv86UGvi hNrqW9C5JIToYncqEcqPBgKQweg3pJiFB2FbWDd3e62ECypqJfaN7LIFVOVlvbso iHgSsTss8Im7esgb0csSJj+hmXbB3Kon0w1sUdisLNJZthVhKO6L -----END CERTIFICATE-----Generated at Wed Jan 21 17:18:32 2026 by rpki-client