This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/643f86-636f-4c6e-9e60-a95b637afc8d/1/5Tr-A46rlsrct1a2T7fsA7Wj8sE.roa File: 5Tr-A46rlsrct1a2T7fsA7Wj8sE.roa (raw, json) Hash identifier: J9z4KJqT3zez3+Euk6pmUvH6T92V1tHwog0Mr9keWO8= Subject key identifier: E5:3A:FE:03:8E:AB:96:CA:DC:B7:56:B6:4F:B7:EC:03:B5:A3:F2:C1 Certificate issuer: /CN=835bf48f18527b2b3b59bfbf3fdff204492bce91 Certificate serial: 019B7AC883253FA056EAE50C821EAF1340AB Authority key identifier: 83:5B:F4:8F:18:52:7B:2B:3B:59:BF:BF:3F:DF:F2:04:49:2B:CE:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1v0jxhSeys7Wb-_P9_yBEkrzpE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/643f86-636f-4c6e-9e60-a95b637afc8d/1/5Tr-A46rlsrct1a2T7fsA7Wj8sE.roa Signing time: Thu 01 Jan 2026 18:18:39 +0000 ROA not before: Thu 01 Jan 2026 18:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50906 IP address blocks: 91.216.20.0/24 maxlen: 24 2001:67c:1cc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/643f86-636f-4c6e-9e60-a95b637afc8d/1/g1v0jxhSeys7Wb-_P9_yBEkrzpE.crl rsync://rpki.ripe.net/repository/DEFAULT/90/643f86-636f-4c6e-9e60-a95b637afc8d/1/g1v0jxhSeys7Wb-_P9_yBEkrzpE.mft rsync://rpki.ripe.net/repository/DEFAULT/g1v0jxhSeys7Wb-_P9_yBEkrzpE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:83:25:3f:a0:56:ea:e5:0c:82:1e:af:13:40:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=835bf48f18527b2b3b59bfbf3fdff204492bce91 Validity Not Before: Jan 1 18:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e53afe038eab96cadcb756b64fb7ec03b5a3f2c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ee:bb:24:b7:d2:5b:40:0f:e7:a7:3f:14:42: 66:46:24:48:57:f8:d9:01:c6:32:f4:7a:2d:b9:e0: 7f:43:ff:51:8e:a0:ee:7a:30:a1:ff:47:ca:79:eb: 72:ea:ba:7a:66:0f:05:14:dc:46:4c:ac:6f:49:7e: f5:a7:48:03:3e:cf:ac:8a:90:16:6d:f3:33:f5:77: d7:ee:c2:bb:ae:75:37:7e:3a:d2:69:a9:bc:91:9e: 62:25:e6:ee:dc:53:7b:e0:ca:1c:d3:f2:c7:85:6d: 37:b0:d0:48:b6:19:9d:85:de:35:4c:09:7f:f2:b0: 06:18:a0:2b:08:7a:2e:0b:b7:e2:c3:55:05:21:26: c2:ce:2d:4c:66:0f:81:b9:35:72:6d:74:d9:25:14: 4d:d5:0a:f7:d9:d5:4e:da:fd:2d:e2:d4:b8:23:08: 5e:23:35:c9:fd:44:bf:7c:04:be:f1:52:ad:65:2f: 21:9b:68:e9:2a:81:54:fe:ce:2f:b6:b8:76:42:77: c4:4e:ce:ff:83:fc:da:c6:63:ab:b6:12:44:dd:51: 07:b7:ff:b8:86:61:80:6a:29:a0:a5:9f:ed:ed:cc: 31:55:52:ad:3a:47:35:7e:6e:f8:37:db:8f:3c:4e: 04:34:eb:92:ca:0f:27:5a:2e:0e:fb:8c:6e:06:32: c3:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:3A:FE:03:8E:AB:96:CA:DC:B7:56:B6:4F:B7:EC:03:B5:A3:F2:C1 X509v3 Authority Key Identifier: keyid:83:5B:F4:8F:18:52:7B:2B:3B:59:BF:BF:3F:DF:F2:04:49:2B:CE:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1v0jxhSeys7Wb-_P9_yBEkrzpE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/643f86-636f-4c6e-9e60-a95b637afc8d/1/5Tr-A46rlsrct1a2T7fsA7Wj8sE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/643f86-636f-4c6e-9e60-a95b637afc8d/1/g1v0jxhSeys7Wb-_P9_yBEkrzpE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.20.0/24 IPv6: 2001:67c:1cc::/48 Signature Algorithm: sha256WithRSAEncryption ca:3d:c7:ec:a1:b9:55:6b:8f:cb:45:bb:d2:bd:73:67:4d:31: f3:94:6c:ed:31:dc:bd:70:29:32:c2:00:e4:97:d6:e8:61:e2: 54:7b:5f:65:72:98:bf:6d:ae:f2:c7:26:50:96:28:6a:15:0b: 00:99:5b:14:79:7e:8e:bf:e5:a0:92:d9:25:a6:5f:96:ce:42: 28:88:10:5a:27:eb:de:bf:59:cb:15:d4:85:cc:6e:04:52:64: 6c:f4:17:24:b3:39:4a:a9:f0:9d:12:be:29:4b:8e:8e:03:5e: a7:da:28:7c:2d:99:f3:5d:b4:0d:6f:bd:29:d0:0f:80:de:14: 88:b5:20:9d:4b:e4:ad:60:3f:74:42:27:53:12:36:a1:63:d2: 86:de:04:fb:be:7f:47:aa:34:1e:d7:a2:70:e6:94:88:7e:c0: 6b:0f:d9:e5:aa:a7:31:13:02:59:5a:0c:7a:08:1d:65:67:8c: b8:e6:88:af:ab:c1:c0:19:02:69:cb:84:eb:05:e2:d1:b3:7e: 89:56:ae:39:e1:41:64:57:a5:56:0e:28:1b:8d:3f:5b:3d:58: 93:89:d5:81:cc:80:84:76:e3:28:68:88:03:42:b3:0c:19:73: 39:6a:e7:8f:2e:bc:43:76:6b:50:12:90:bd:7f:1d:bb:61:2b: 10:8d:2e:3f -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt6yIMlP6BW6uUMgh6vE0CrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzNWJmNDhmMTg1MjdiMmIzYjU5YmZiZjNmZGZmMjA0NDky YmNlOTEwHhcNMjYwMTAxMTgxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTNhZmUwMzhlYWI5NmNhZGNiNzU2YjY0ZmI3ZWMwM2I1YTNmMmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0e67JLfSW0AP56c/FEJmRiRIV/jZ AcYy9HotueB/Q/9RjqDuejCh/0fKeety6rp6Zg8FFNxGTKxvSX71p0gDPs+sipAW bfMz9XfX7sK7rnU3fjrSaam8kZ5iJebu3FN74Moc0/LHhW03sNBIthmdhd41TAl/ 8rAGGKArCHouC7fiw1UFISbCzi1MZg+BuTVybXTZJRRN1Qr32dVO2v0t4tS4Iwhe IzXJ/US/fAS+8VKtZS8hm2jpKoFU/s4vtrh2QnfETs7/g/zaxmOrthJE3VEHt/+4 hmGAaimgpZ/t7cwxVVKtOkc1fm74N9uPPE4ENOuSyg8nWi4O+4xuBjLDewIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFOU6/gOOq5bK3LdWtk+37AO1o/LBMB8GA1UdIwQY MBaAFINb9I8YUnsrO1m/vz/f8gRJK86RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzF2MGp4aFNleXM3V2ItX1A5X3lCRWtyenBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC82NDNmODYtNjM2Zi00YzZlLTllNjAt YTk1YjYzN2FmYzhkLzEvNVRyLUE0NnJsc3JjdDFhMlQ3ZnNBN1dqOHNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC82NDNmODYtNjM2Zi00YzZlLTllNjAtYTk1YjYzN2FmYzhk LzEvZzF2MGp4aFNleXM3V2ItX1A5X3lCRWtyenBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW9gUMA8E AgACMAkDBwAgAQZ8AcwwDQYJKoZIhvcNAQELBQADggEBAMo9x+yhuVVrj8tFu9K9 c2dNMfOUbO0x3L1wKTLCAOSX1uhh4lR7X2VymL9trvLHJlCWKGoVCwCZWxR5fo6/ 5aCS2SWmX5bOQiiIEFon696/WcsV1IXMbgRSZGz0FySzOUqp8J0SvilLjo4DXqfa KHwtmfNdtA1vvSnQD4DeFIi1IJ1L5K1gP3RCJ1MSNqFj0obeBPu+f0eqNB7XonDm lIh+wGsP2eWqpzETAllaDHoIHWVnjLjmiK+rwcAZAmnLhOsF4tGzfolWrjnhQWRX pVYOKBuNP1s9WJOJ1YHMgIR24yhoiANCswwZczlq548uvEN2a1ASkL1/HbthKxCN Lj8= -----END CERTIFICATE-----Generated at Tue Feb 10 02:29:53 2026 by rpki-client