This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/X91v8T4v3SGFy7I37g4wXveNq7Q.roa File: X91v8T4v3SGFy7I37g4wXveNq7Q.roa (raw, json) Hash identifier: WWeSP8Bv7bkntWr8c/ZwSbMkcIcKgP3z0XXfZzT3UxQ= Subject key identifier: 5F:DD:6F:F1:3E:2F:DD:21:85:CB:B2:37:EE:0E:30:5E:F7:8D:AB:B4 Certificate issuer: /CN=a3787d2be6eac36c1d2780f786b87c9e153e81f1 Certificate serial: 019B7F15798B97B77FEAF42639562BB122D3 Authority key identifier: A3:78:7D:2B:E6:EA:C3:6C:1D:27:80:F7:86:B8:7C:9E:15:3E:81:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/X91v8T4v3SGFy7I37g4wXveNq7Q.roa Signing time: Fri 02 Jan 2026 14:21:12 +0000 ROA not before: Fri 02 Jan 2026 14:21:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44539 IP address blocks: 5.57.212.0/24 maxlen: 24 212.66.32.0/20 maxlen: 24 212.66.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 08:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:79:8b:97:b7:7f:ea:f4:26:39:56:2b:b1:22:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3787d2be6eac36c1d2780f786b87c9e153e81f1 Validity Not Before: Jan 2 14:21:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5fdd6ff13e2fdd2185cbb237ee0e305ef78dabb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:59:a3:bd:ec:9e:37:7d:56:ec:4d:2f:3a:61: e2:85:3e:53:47:92:3a:0f:c7:66:16:9f:7d:5f:90: 18:13:db:e4:0c:4c:c0:7b:4b:c5:34:05:fd:49:6a: ea:2a:63:11:03:8d:3f:e7:ba:91:14:12:d7:75:ac: 87:b8:15:c7:0b:42:56:b8:99:0f:aa:ff:57:a8:51: c2:22:72:63:49:2d:50:a6:f2:3a:75:50:eb:8e:2e: cd:9a:a1:bf:4e:82:6d:e3:84:a5:f3:14:e6:0c:c0: 42:1e:bd:76:9b:a2:2c:f8:76:25:9c:82:3b:ea:1a: 1f:e8:6f:e9:a2:1d:0c:7c:15:3d:66:ec:e7:da:ad: c3:6c:8f:45:30:dc:60:6d:ef:32:71:44:1b:e9:15: 06:34:62:59:0c:e0:cb:12:6d:1f:ad:68:c1:b4:fb: 10:2a:55:00:80:47:9d:3b:f3:7a:b8:35:db:93:f2: b7:2f:81:73:5b:64:2f:66:23:a0:1c:05:4a:fb:d4: f3:38:44:84:55:75:1a:d0:9c:35:a2:a1:a7:0b:05: f0:b3:17:65:09:15:d1:96:ad:09:b3:a8:a6:30:ca: 0f:77:37:ec:94:c1:f6:3c:69:56:81:76:17:47:db: ae:9e:7c:7c:dd:23:76:34:25:7d:76:2f:a2:f1:dd: ae:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:DD:6F:F1:3E:2F:DD:21:85:CB:B2:37:EE:0E:30:5E:F7:8D:AB:B4 X509v3 Authority Key Identifier: keyid:A3:78:7D:2B:E6:EA:C3:6C:1D:27:80:F7:86:B8:7C:9E:15:3E:81:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/X91v8T4v3SGFy7I37g4wXveNq7Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.57.212.0/24 212.66.32.0/20 212.66.56.0/21 Signature Algorithm: sha256WithRSAEncryption 8a:d0:a1:c4:05:96:95:69:45:a7:1a:00:a7:10:45:f8:99:4b: 61:74:39:22:ab:f8:98:64:95:e1:f3:8e:e4:00:d2:ad:c1:1d: 31:bb:12:bc:46:0e:e5:ca:27:e7:3d:49:c4:5b:d6:ef:69:27: 65:0f:3f:8f:46:dd:06:55:30:fe:ec:ae:be:2d:db:53:dc:3c: fa:4b:02:4b:53:90:8e:3e:89:37:e2:f2:26:b0:5d:1a:8e:ab: 5c:8d:07:a5:2c:e8:50:46:5d:cb:9c:ba:8f:95:b8:8a:e0:b8: 5c:dd:4a:6e:64:26:84:1e:72:ed:8f:56:e8:d3:71:92:62:5a: 0f:6d:07:78:2a:17:9a:46:f5:3a:96:90:be:37:60:85:a6:82: 39:4f:3c:75:dc:9a:52:38:e9:be:fe:21:d8:43:7d:f8:0e:71: 28:8f:67:0a:a4:6f:8b:2a:be:3f:82:02:d3:8f:27:c3:98:9e: 0c:6d:c3:fc:2e:94:9a:95:ce:41:43:62:ac:2a:62:16:11:63: 3a:ae:17:e0:c5:81:a9:8d:25:1d:43:75:24:66:82:f9:77:59: ab:4d:be:ba:32:c6:f6:86:f1:2e:77:17:a8:42:77:01:cd:5d: fc:d3:dd:98:a2:8d:c7:27:e3:b9:27:56:12:1f:7f:84:bc:b6: b4:a9:9c:36 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/FXmLl7d/6vQmOVYrsSLTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNzg3ZDJiZTZlYWMzNmMxZDI3ODBmNzg2Yjg3YzllMTUz ZTgxZjEwHhcNMjYwMTAyMTQyMTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZmRkNmZmMTNlMmZkZDIxODVjYmIyMzdlZTBlMzA1ZWY3OGRhYmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1mjveyeN31W7E0vOmHihT5TR5I6 D8dmFp99X5AYE9vkDEzAe0vFNAX9SWrqKmMRA40/57qRFBLXdayHuBXHC0JWuJkP qv9XqFHCInJjSS1QpvI6dVDrji7NmqG/ToJt44Sl8xTmDMBCHr12m6Is+HYlnII7 6hof6G/poh0MfBU9Zuzn2q3DbI9FMNxgbe8ycUQb6RUGNGJZDODLEm0frWjBtPsQ KlUAgEedO/N6uDXbk/K3L4FzW2QvZiOgHAVK+9TzOESEVXUa0Jw1oqGnCwXwsxdl CRXRlq0Js6imMMoPdzfslMH2PGlWgXYXR9uunnx83SN2NCV9di+i8d2u8wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFF/db/E+L90hhcuyN+4OMF73jau0MB8GA1UdIwQY MBaAFKN4fSvm6sNsHSeA94a4fJ4VPoHxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzNoOUstYnF3MndkSjREM2hyaDhuaFUtZ2ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9mNTY1ZDctMzJhZi00YmUxLTgyYWMt YjYwMmNlZGFjMzZjLzEvWDkxdjhUNHYzU0dGeTdJMzdnNHdYdmVOcTdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9mNTY1ZDctMzJhZi00YmUxLTgyYWMtYjYwMmNlZGFjMzZj LzEvbzNoOUstYnF3MndkSjREM2hyaDhuaFUtZ2ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABTnUAwQE 1EIgAwQD1EI4MA0GCSqGSIb3DQEBCwUAA4IBAQCK0KHEBZaVaUWnGgCnEEX4mUth dDkiq/iYZJXh847kANKtwR0xuxK8Rg7lyifnPUnEW9bvaSdlDz+PRt0GVTD+7K6+ LdtT3Dz6SwJLU5COPok34vImsF0ajqtcjQelLOhQRl3LnLqPlbiK4Lhc3UpuZCaE HnLtj1bo03GSYloPbQd4KheaRvU6lpC+N2CFpoI5Tzx13JpSOOm+/iHYQ334DnEo j2cKpG+LKr4/ggLTjyfDmJ4MbcP8LpSalc5BQ2KsKmIWEWM6rhfgxYGpjSUdQ3Uk ZoL5d1mrTb66Msb2hvEudxeoQncBzV38092Yoo3HJ+O5J1YSH3+EvLa0qZw2 -----END CERTIFICATE-----Generated at Tue Jan 27 17:56:55 2026 by rpki-client