This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/f1db36-665d-4d80-a1b2-515ee1570259/1/5N0vtDieER6JLHXCItm0SSiMncg.roa File: 5N0vtDieER6JLHXCItm0SSiMncg.roa (raw, json) Hash identifier: SGCzDUwLAus0ZQKT3w7xorMqefRunoszLUQViV8By+o= Subject key identifier: E4:DD:2F:B4:38:9E:11:1E:89:2C:75:C2:22:D9:B4:49:28:8C:9D:C8 Certificate issuer: /CN=1b54437c92c1e08b06e0776187c7884dd51c0e38 Certificate serial: 019B7E3755D7D79F42E8AC4C563238A06FA6 Authority key identifier: 1B:54:43:7C:92:C1:E0:8B:06:E0:77:61:87:C7:88:4D:D5:1C:0E:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G1RDfJLB4IsG4Hdhh8eITdUcDjg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/f1db36-665d-4d80-a1b2-515ee1570259/1/5N0vtDieER6JLHXCItm0SSiMncg.roa Signing time: Fri 02 Jan 2026 10:18:34 +0000 ROA not before: Fri 02 Jan 2026 10:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205291 IP address blocks: 91.235.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/f1db36-665d-4d80-a1b2-515ee1570259/1/G1RDfJLB4IsG4Hdhh8eITdUcDjg.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/f1db36-665d-4d80-a1b2-515ee1570259/1/G1RDfJLB4IsG4Hdhh8eITdUcDjg.mft rsync://rpki.ripe.net/repository/DEFAULT/G1RDfJLB4IsG4Hdhh8eITdUcDjg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:55:d7:d7:9f:42:e8:ac:4c:56:32:38:a0:6f:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b54437c92c1e08b06e0776187c7884dd51c0e38 Validity Not Before: Jan 2 10:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4dd2fb4389e111e892c75c222d9b449288c9dc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:04:f4:02:92:59:85:b7:5a:bd:ed:f9:17:51: 9d:89:00:01:06:81:e2:e5:97:f6:8d:f5:98:45:36: 63:3a:39:22:15:fd:30:2d:60:af:bf:a4:5e:65:e7: f9:64:cf:ae:c2:9b:0d:fc:07:dc:05:18:83:25:97: 9a:ee:08:d7:d4:bc:8b:34:dd:ef:36:97:e2:35:40: 60:a5:b6:8c:9a:32:e0:ba:cc:cc:40:88:35:98:7b: c5:e0:3c:cf:d3:ec:cf:42:c8:57:3f:f9:f8:b5:6c: d4:bd:29:85:8e:54:66:58:a1:ea:f5:91:13:31:b9: ca:56:e0:bc:34:8b:da:23:41:3e:6f:a3:c7:e1:82: a4:5b:68:55:f3:95:f1:cc:85:df:8d:03:b4:db:de: b9:8c:35:ca:04:12:a0:57:f6:aa:d2:3a:da:ae:63: 55:3f:05:3c:80:46:6d:86:06:16:eb:fc:75:25:70: 68:d6:05:27:99:66:01:34:c4:57:0f:6f:ea:75:5d: 82:56:32:62:ad:be:76:a9:2b:5b:33:93:9b:9e:c4: df:5c:6d:f3:7c:67:24:73:7e:7f:29:ba:ac:46:92: 00:50:c9:1b:a6:52:15:ac:b9:8c:cc:26:65:23:78: 62:43:5e:c8:77:46:bd:b0:a0:21:f7:27:fb:5d:89: 2e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:DD:2F:B4:38:9E:11:1E:89:2C:75:C2:22:D9:B4:49:28:8C:9D:C8 X509v3 Authority Key Identifier: keyid:1B:54:43:7C:92:C1:E0:8B:06:E0:77:61:87:C7:88:4D:D5:1C:0E:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G1RDfJLB4IsG4Hdhh8eITdUcDjg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/f1db36-665d-4d80-a1b2-515ee1570259/1/5N0vtDieER6JLHXCItm0SSiMncg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/f1db36-665d-4d80-a1b2-515ee1570259/1/G1RDfJLB4IsG4Hdhh8eITdUcDjg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.235.206.0/24 Signature Algorithm: sha256WithRSAEncryption 26:14:a6:f4:c1:0b:09:82:1c:ae:2e:f9:d5:8a:d0:ff:27:c0: e5:50:50:5e:6b:9d:6d:32:c6:a8:b1:d7:be:37:a5:97:eb:a6: b2:90:cf:19:a8:29:d4:ad:b0:96:63:95:71:3b:19:91:69:14: 55:14:55:21:46:ff:24:ac:0c:6f:e7:19:c3:2c:80:84:d4:3a: 92:57:74:65:20:7b:74:f3:61:8f:8e:8e:8d:f4:c4:55:98:fa: 4b:d9:8d:b0:7a:8b:90:d0:ea:7e:e2:64:3f:aa:5d:35:13:16: b6:42:2d:da:cb:9e:58:6f:ee:5b:40:56:77:15:96:d3:81:a0: ba:ed:72:b6:8b:68:41:e1:e2:ed:97:62:49:7e:e5:e8:d7:d7: d7:3e:d7:5f:25:84:3c:50:da:69:b3:12:cb:17:5a:83:46:e0: 54:e7:85:25:77:e3:39:ec:69:f4:f4:99:17:7e:b6:aa:b6:ed: 93:a1:2a:80:82:6b:b4:7d:0a:f4:4e:d8:41:61:6b:9f:de:55: fe:34:ca:f9:2d:02:93:b4:0f:dd:b0:fc:52:d5:7a:a2:60:25: 6d:9d:c7:90:50:b1:12:5c:1f:45:aa:b4:49:be:0e:2f:34:37: de:41:5e:7e:85:ae:a4:14:05:58:b3:30:6a:05:71:05:3f:b9: 90:43:80:37 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N1XX159C6KxMVjI4oG+mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiNTQ0MzdjOTJjMWUwOGIwNmUwNzc2MTg3Yzc4ODRkZDUx YzBlMzgwHhcNMjYwMTAyMTAxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNGRkMmZiNDM4OWUxMTFlODkyYzc1YzIyMmQ5YjQ0OTI4OGM5ZGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgT0ApJZhbdave35F1GdiQABBoHi 5Zf2jfWYRTZjOjkiFf0wLWCvv6ReZef5ZM+uwpsN/AfcBRiDJZea7gjX1LyLNN3v NpfiNUBgpbaMmjLguszMQIg1mHvF4DzP0+zPQshXP/n4tWzUvSmFjlRmWKHq9ZET MbnKVuC8NIvaI0E+b6PH4YKkW2hV85XxzIXfjQO02965jDXKBBKgV/aq0jrarmNV PwU8gEZthgYW6/x1JXBo1gUnmWYBNMRXD2/qdV2CVjJirb52qStbM5ObnsTfXG3z fGckc35/KbqsRpIAUMkbplIVrLmMzCZlI3hiQ17Id0a9sKAh9yf7XYku/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOTdL7Q4nhEeiSx1wiLZtEkojJ3IMB8GA1UdIwQY MBaAFBtUQ3ySweCLBuB3YYfHiE3VHA44MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzFSRGZKTEI0SXNHNEhkaGg4ZUlUZFVjRGpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9mMWRiMzYtNjY1ZC00ZDgwLWExYjIt NTE1ZWUxNTcwMjU5LzEvNU4wdnREaWVFUjZKTEhYQ0l0bTBTU2lNbmNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9mMWRiMzYtNjY1ZC00ZDgwLWExYjItNTE1ZWUxNTcwMjU5 LzEvRzFSRGZKTEI0SXNHNEhkaGg4ZUlUZFVjRGpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+vOMA0G CSqGSIb3DQEBCwUAA4IBAQAmFKb0wQsJghyuLvnVitD/J8DlUFBea51tMsaosde+ N6WX66aykM8ZqCnUrbCWY5VxOxmRaRRVFFUhRv8krAxv5xnDLICE1DqSV3RlIHt0 82GPjo6N9MRVmPpL2Y2weouQ0Op+4mQ/ql01Exa2Qi3ay55Yb+5bQFZ3FZbTgaC6 7XK2i2hB4eLtl2JJfuXo19fXPtdfJYQ8UNppsxLLF1qDRuBU54Uld+M57Gn09JkX fraqtu2ToSqAgmu0fQr0TthBYWuf3lX+NMr5LQKTtA/dsPxS1XqiYCVtnceQULES XB9FqrRJvg4vNDfeQV5+ha6kFAVYszBqBXEFP7mQQ4A3 -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:23 2026 by rpki-client