This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/5DPQKVh7BOyXWi6HVipGuI-DbKI.roa File: 5DPQKVh7BOyXWi6HVipGuI-DbKI.roa (raw, json) Hash identifier: 7niXhQfcaYijhdxK0OqWBqiveT28StizLbsME/eXTCM= Subject key identifier: E4:33:D0:29:58:7B:04:EC:97:5A:2E:87:56:2A:46:B8:8F:83:6C:A2 Certificate issuer: /CN=b542bc0d8cc28f558615ed3fae53cace4a6ef081 Certificate serial: 019B7AC84FD215BA0077127502F9AC74F2CA Authority key identifier: B5:42:BC:0D:8C:C2:8F:55:86:15:ED:3F:AE:53:CA:CE:4A:6E:F0:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUK8DYzCj1WGFe0_rlPKzkpu8IE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/5DPQKVh7BOyXWi6HVipGuI-DbKI.roa Signing time: Thu 01 Jan 2026 18:18:26 +0000 ROA not before: Thu 01 Jan 2026 18:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204054 IP address blocks: 91.216.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.crl rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.mft rsync://rpki.ripe.net/repository/DEFAULT/tUK8DYzCj1WGFe0_rlPKzkpu8IE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:4f:d2:15:ba:00:77:12:75:02:f9:ac:74:f2:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b542bc0d8cc28f558615ed3fae53cace4a6ef081 Validity Not Before: Jan 1 18:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e433d029587b04ec975a2e87562a46b88f836ca2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2f:c2:fc:0a:bc:85:1e:7b:e3:8f:1b:e2:ed: f7:68:b5:b0:88:9c:5c:43:51:1c:41:ad:33:dd:42: ce:16:c1:15:cc:43:b2:e9:38:41:eb:6f:92:55:d2: ec:64:a3:8a:27:fc:1b:f4:d2:4a:c3:cd:bc:3a:af: 3b:4f:43:fa:26:73:8a:85:cf:e8:83:ff:09:db:69: d8:10:a3:63:0b:69:00:e2:6a:26:24:d3:7a:fd:6d: 76:d5:f2:e5:10:cc:91:31:5a:33:6f:53:53:24:0c: be:38:b8:aa:16:84:7e:c5:83:8a:92:43:24:e7:bd: 03:1c:ac:82:26:00:70:6c:4b:d1:52:d8:be:75:5e: d6:c6:05:66:7d:9b:db:13:14:3e:73:48:cf:d1:39: be:9b:ba:76:46:c7:68:d4:c3:6c:41:2d:68:e3:56: e3:3c:29:1d:6a:c8:aa:ab:b2:a5:7b:05:dc:e8:09: 91:14:b0:71:f4:20:8e:af:79:06:61:e3:65:c5:0c: ff:60:b0:96:97:0b:a5:8e:9c:99:a6:ee:86:19:79: 5b:5a:66:99:cd:e4:1a:30:f2:e3:34:f7:d4:bf:ff: 66:0b:2c:84:e1:81:20:ff:2c:6c:43:5d:1c:ca:5f: 2d:02:55:67:0d:94:43:c2:14:59:73:28:4b:91:99: 69:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:33:D0:29:58:7B:04:EC:97:5A:2E:87:56:2A:46:B8:8F:83:6C:A2 X509v3 Authority Key Identifier: keyid:B5:42:BC:0D:8C:C2:8F:55:86:15:ED:3F:AE:53:CA:CE:4A:6E:F0:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUK8DYzCj1WGFe0_rlPKzkpu8IE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/5DPQKVh7BOyXWi6HVipGuI-DbKI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.223.0/24 Signature Algorithm: sha256WithRSAEncryption 30:e5:bd:be:26:00:84:93:6b:05:45:fa:95:38:ef:8d:e8:97: d4:e2:1e:b6:b7:6e:72:8d:db:43:73:24:e6:eb:5e:0c:0e:ec: 7e:c4:63:45:d9:af:61:77:1e:1e:0b:8b:d6:b8:a9:f6:08:c1: 18:b5:ff:73:78:7c:9c:07:fd:da:69:8b:17:a9:b7:96:08:ef: 26:14:fe:a9:2f:4e:0f:67:af:9f:66:0d:01:72:c8:2f:4c:89: 2d:34:d2:97:1d:a4:1c:d5:74:3a:68:58:19:e0:46:95:c0:9a: a3:cc:bb:0d:32:e7:5a:ae:a2:06:b4:26:dc:bc:cd:c7:5f:cc: a8:7c:97:39:79:c1:f3:40:5a:28:9d:02:f9:6a:9d:d4:e4:4f: 26:2c:7c:d5:8b:bc:47:8a:fc:46:59:93:0c:d4:73:62:e2:81: ef:c6:a3:66:89:ce:a0:7c:8d:65:e6:95:ff:91:73:14:c0:41: 5b:11:ee:75:53:ce:8e:c7:92:f6:b0:6a:aa:20:a5:28:cf:62: a2:3a:96:08:0a:52:12:ee:e2:8f:22:2f:ad:0f:ce:b4:13:c3: b9:1b:14:42:df:52:2f:f2:a7:8e:ea:45:af:0d:bc:3c:3a:9e: 86:96:25:da:10:47:87:05:55:c3:1a:b6:c3:c8:9e:26:c8:13: b0:8f:7f:b4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yE/SFboAdxJ1AvmsdPLKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NDJiYzBkOGNjMjhmNTU4NjE1ZWQzZmFlNTNjYWNlNGE2 ZWYwODEwHhcNMjYwMTAxMTgxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDMzZDAyOTU4N2IwNGVjOTc1YTJlODc1NjJhNDZiODhmODM2Y2EyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApS/C/Aq8hR57448b4u33aLWwiJxc Q1EcQa0z3ULOFsEVzEOy6ThB62+SVdLsZKOKJ/wb9NJKw828Oq87T0P6JnOKhc/o g/8J22nYEKNjC2kA4momJNN6/W121fLlEMyRMVozb1NTJAy+OLiqFoR+xYOKkkMk 570DHKyCJgBwbEvRUti+dV7WxgVmfZvbExQ+c0jP0Tm+m7p2Rsdo1MNsQS1o41bj PCkdasiqq7KlewXc6AmRFLBx9CCOr3kGYeNlxQz/YLCWlwuljpyZpu6GGXlbWmaZ zeQaMPLjNPfUv/9mCyyE4YEg/yxsQ10cyl8tAlVnDZRDwhRZcyhLkZlp9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOQz0ClYewTsl1ouh1YqRriPg2yiMB8GA1UdIwQY MBaAFLVCvA2Mwo9VhhXtP65Tys5KbvCBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFVLOERZekNqMVdHRmUwX3JsUEt6a3B1OElFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9iMWUwZmYtOTY5Ni00YjYxLWJkNWUt N2Y2ZTQ5MzBmMjVhLzEvNURQUUtWaDdCT3lYV2k2SFZpcEd1SS1EYktJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9iMWUwZmYtOTY5Ni00YjYxLWJkNWUtN2Y2ZTQ5MzBmMjVh LzEvdFVLOERZekNqMVdHRmUwX3JsUEt6a3B1OElFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9jfMA0G CSqGSIb3DQEBCwUAA4IBAQAw5b2+JgCEk2sFRfqVOO+N6JfU4h62t25yjdtDcyTm 614MDux+xGNF2a9hdx4eC4vWuKn2CMEYtf9zeHycB/3aaYsXqbeWCO8mFP6pL04P Z6+fZg0BcsgvTIktNNKXHaQc1XQ6aFgZ4EaVwJqjzLsNMudarqIGtCbcvM3HX8yo fJc5ecHzQFoonQL5ap3U5E8mLHzVi7xHivxGWZMM1HNi4oHvxqNmic6gfI1l5pX/ kXMUwEFbEe51U86Ox5L2sGqqIKUoz2KiOpYIClIS7uKPIi+tD860E8O5GxRC31Iv 8qeO6kWvDbw8Op6GliXaEEeHBVXDGrbDyJ4myBOwj3+0 -----END CERTIFICATE-----Generated at Mon Feb 9 20:08:57 2026 by rpki-client