This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/Q9htSrwG6pkTTK4J8GAyJuvwEME.roa File: Q9htSrwG6pkTTK4J8GAyJuvwEME.roa (raw, json) Hash identifier: X86U45F7zuolSOXKOHxqC0QODorNzo7dvfR/mN9i/fw= Subject key identifier: 43:D8:6D:4A:BC:06:EA:99:13:4C:AE:09:F0:60:32:26:EB:F0:10:C1 Certificate issuer: /CN=1d8b9323cd4c92c75d83d346f0d269e5c2d5a808 Certificate serial: 019B791047B169EA90786D6F8F23ECE08167 Authority key identifier: 1D:8B:93:23:CD:4C:92:C7:5D:83:D3:46:F0:D2:69:E5:C2:D5:A8:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYuTI81Mksddg9NG8NJp5cLVqAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/Q9htSrwG6pkTTK4J8GAyJuvwEME.roa Signing time: Thu 01 Jan 2026 10:17:48 +0000 ROA not before: Thu 01 Jan 2026 10:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200438 IP address blocks: 5.183.192.0/23 maxlen: 24 5.183.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.crl rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft rsync://rpki.ripe.net/repository/DEFAULT/HYuTI81Mksddg9NG8NJp5cLVqAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:47:b1:69:ea:90:78:6d:6f:8f:23:ec:e0:81:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d8b9323cd4c92c75d83d346f0d269e5c2d5a808 Validity Not Before: Jan 1 10:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=43d86d4abc06ea99134cae09f0603226ebf010c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:97:4f:49:b7:b3:b8:09:4f:ed:81:eb:30:d3: c5:e7:ad:f4:2b:8c:aa:17:e8:0c:df:f5:ec:52:5f: a2:40:f3:ee:f9:e1:b8:40:7f:55:72:ab:0d:c9:f9: ad:ae:b5:e4:88:00:b0:2a:af:18:0a:a9:f9:c2:27: 61:04:2b:0c:b1:5f:6c:0d:f5:52:fc:f7:c3:b4:75: 32:a9:6b:72:d1:3c:12:9d:da:00:2e:eb:95:1d:7a: fa:08:c6:31:ad:97:47:17:3b:60:d4:f5:ed:58:25: eb:aa:54:67:d1:86:6a:75:0c:af:99:b0:cf:1d:2d: e3:db:2c:ef:8b:cb:e7:11:05:ed:93:8e:27:fd:04: f3:c5:8f:1e:3b:74:7e:c9:4f:be:33:4a:eb:c4:05: 0b:c7:01:ee:48:4c:a5:64:e3:64:57:67:34:5b:7e: 4f:66:0e:26:37:56:fe:cb:00:45:77:9b:bd:77:c3: 47:7f:a8:67:03:da:90:90:ee:75:33:f2:8e:d0:32: 81:98:b3:51:a7:3d:c7:87:23:ad:43:b7:f1:21:a2: ae:eb:c5:49:2e:c7:ec:da:69:36:fd:66:de:0e:40: 31:3e:44:ea:d5:40:a0:25:08:86:ad:69:87:a3:09: 18:87:df:61:20:67:5c:53:39:93:7e:3a:9e:05:92: 65:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D8:6D:4A:BC:06:EA:99:13:4C:AE:09:F0:60:32:26:EB:F0:10:C1 X509v3 Authority Key Identifier: keyid:1D:8B:93:23:CD:4C:92:C7:5D:83:D3:46:F0:D2:69:E5:C2:D5:A8:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYuTI81Mksddg9NG8NJp5cLVqAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/Q9htSrwG6pkTTK4J8GAyJuvwEME.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.183.192.0-5.183.194.255 Signature Algorithm: sha256WithRSAEncryption 14:e8:c7:d3:49:6f:35:b5:43:b9:59:d4:53:f6:04:dc:17:60: c0:a3:ea:a2:10:99:e8:1e:ce:4c:5c:29:8e:8e:b4:5a:8c:83: 08:94:24:03:3a:c5:32:99:c8:c3:50:f3:f1:d5:a6:f2:1e:af: 3c:23:d8:f7:ad:14:02:8c:d2:f3:98:f6:ef:a6:45:a5:da:f2: 4e:eb:d3:ef:b6:33:5f:7c:a0:aa:fa:44:fe:9a:88:93:1a:0b: 40:dd:07:8d:c1:cb:98:e4:b3:f6:65:c2:ce:92:53:4b:a4:b8: 5f:6f:41:46:4c:9c:a3:22:c2:68:5b:82:87:93:6b:7b:fb:de: 48:49:56:16:bf:9b:ab:62:72:42:45:bc:d8:1e:1f:72:41:7e: 99:78:12:3a:db:f0:0b:41:4f:94:4e:48:3e:85:d8:b4:50:d8: f0:8a:48:64:77:e0:cf:e3:eb:fc:62:83:af:0a:c1:f9:8a:cc: 0a:be:59:26:41:56:59:be:61:11:b2:cd:c9:e8:06:97:b7:53: 5b:2c:08:d4:7b:5a:46:2a:f7:92:45:54:8c:27:7b:ca:cf:25: 97:45:19:03:f4:2a:05:56:6c:3e:ce:d6:4a:8c:5f:0c:fe:2a: 87:3a:04:01:ef:42:9d:c0:fb:ba:e6:66:47:cd:eb:bd:af:80: 4a:93:3d:1a -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt5EEexaeqQeG1vjyPs4IFnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkOGI5MzIzY2Q0YzkyYzc1ZDgzZDM0NmYwZDI2OWU1YzJk NWE4MDgwHhcNMjYwMTAxMTAxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0M2Q4NmQ0YWJjMDZlYTk5MTM0Y2FlMDlmMDYwMzIyNmViZjAxMGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZdPSbezuAlP7YHrMNPF5630K4yq F+gM3/XsUl+iQPPu+eG4QH9VcqsNyfmtrrXkiACwKq8YCqn5widhBCsMsV9sDfVS /PfDtHUyqWty0TwSndoALuuVHXr6CMYxrZdHFztg1PXtWCXrqlRn0YZqdQyvmbDP HS3j2yzvi8vnEQXtk44n/QTzxY8eO3R+yU++M0rrxAULxwHuSEylZONkV2c0W35P Zg4mN1b+ywBFd5u9d8NHf6hnA9qQkO51M/KO0DKBmLNRpz3HhyOtQ7fxIaKu68VJ Lsfs2mk2/WbeDkAxPkTq1UCgJQiGrWmHowkYh99hIGdcUzmTfjqeBZJljwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFEPYbUq8BuqZE0yuCfBgMibr8BDBMB8GA1UdIwQY MBaAFB2LkyPNTJLHXYPTRvDSaeXC1agIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFl1VEk4MU1rc2RkZzlORzhOSnA1Y0xWcUFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS84YzdhMzQtNTM4ZC00MzE0LWFhZjQt MDRkZDgwZDViNzJkLzEvUTlodFNyd0c2cGtUVEs0SjhHQXlKdXZ3RU1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS84YzdhMzQtNTM4ZC00MzE0LWFhZjQtMDRkZDgwZDViNzJk LzEvSFl1VEk4MU1rc2RkZzlORzhOSnA1Y0xWcUFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAYFt8AD BAAFt8IwDQYJKoZIhvcNAQELBQADggEBABTox9NJbzW1Q7lZ1FP2BNwXYMCj6qIQ megezkxcKY6OtFqMgwiUJAM6xTKZyMNQ8/HVpvIerzwj2PetFAKM0vOY9u+mRaXa 8k7r0++2M198oKr6RP6aiJMaC0DdB43By5jks/Zlws6SU0ukuF9vQUZMnKMiwmhb goeTa3v73khJVha/m6tickJFvNgeH3JBfpl4Ejrb8AtBT5ROSD6F2LRQ2PCKSGR3 4M/j6/xig68KwfmKzAq+WSZBVlm+YRGyzcnoBpe3U1ssCNR7WkYq95JFVIwne8rP JZdFGQP0KgVWbD7O1kqMXwz+Koc6BAHvQp3A+7rmZkfN672vgEqTPRo= -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:06 2026 by rpki-client