This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/M5PnGpQYm028ws30MJtZnTaTcpo.roa File: M5PnGpQYm028ws30MJtZnTaTcpo.roa (raw, json) Hash identifier: /Y8TDD+fi7yLoYjDRGZ16k+8Sg/nu7LlsqZTmrtMrIE= Subject key identifier: 33:93:E7:1A:94:18:9B:4D:BC:C2:CD:F4:30:9B:59:9D:36:93:72:9A Certificate issuer: /CN=0d980d8ca464ae44330c02d6097d1b3e3467e085 Certificate serial: 019B7A5B2C39B37E3D6542CF8586D815E1D4 Authority key identifier: 0D:98:0D:8C:A4:64:AE:44:33:0C:02:D6:09:7D:1B:3E:34:67:E0:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/M5PnGpQYm028ws30MJtZnTaTcpo.roa Signing time: Thu 01 Jan 2026 16:19:14 +0000 ROA not before: Thu 01 Jan 2026 16:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196880 IP address blocks: 91.226.147.0/24 maxlen: 24 193.104.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:2c:39:b3:7e:3d:65:42:cf:85:86:d8:15:e1:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d980d8ca464ae44330c02d6097d1b3e3467e085 Validity Not Before: Jan 1 16:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3393e71a94189b4dbcc2cdf4309b599d3693729a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:8f:a4:5b:f8:7e:3c:fa:74:6f:77:c6:21:f9: c7:89:23:10:57:fe:ae:df:09:2e:4b:cb:a5:f6:b4: f8:9d:96:c3:1b:f2:59:63:be:d9:b2:34:b3:a5:e3: 03:39:cd:30:a2:c5:c4:b0:24:4f:38:07:ef:12:7b: 7d:67:26:87:97:42:f1:33:da:ed:91:a2:09:2a:8a: 38:1f:0b:00:6b:fd:d6:65:b3:0a:05:87:12:e4:2e: a8:1e:ae:b8:43:95:a6:51:6a:4f:dc:bb:01:3d:30: 91:21:52:e4:2e:45:fb:64:1a:78:da:bb:eb:2b:21: 0b:3d:8e:26:0e:d2:31:1d:8a:d0:d1:65:fc:7c:67: 4f:37:8f:a7:00:9c:ef:97:e8:75:85:bb:93:5c:c0: 47:e0:0a:1b:9f:17:28:32:da:08:1c:71:22:be:e3: 0d:13:db:2e:09:da:17:8f:5f:9f:e0:91:71:23:99: b3:b5:50:84:40:51:e6:99:69:01:2c:75:42:aa:72: 51:9a:d5:a1:bf:e3:87:fa:a8:6a:69:e6:be:fb:da: 94:e7:9b:3d:85:51:9f:fb:e9:3a:da:66:d8:99:42: 79:85:66:43:66:e2:1c:5f:42:71:ce:f7:8e:7c:ef: 9a:d9:b8:7f:57:13:79:20:20:c4:bb:e9:a6:66:83: 5a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:93:E7:1A:94:18:9B:4D:BC:C2:CD:F4:30:9B:59:9D:36:93:72:9A X509v3 Authority Key Identifier: keyid:0D:98:0D:8C:A4:64:AE:44:33:0C:02:D6:09:7D:1B:3E:34:67:E0:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/M5PnGpQYm028ws30MJtZnTaTcpo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.226.147.0/24 193.104.223.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:e1:da:5f:0c:81:0e:21:c2:b5:5e:2e:42:ac:98:9e:4d:71: 24:ac:be:d8:43:62:1e:8a:2f:86:83:c6:6a:a1:4f:02:87:db: 52:7d:c7:18:77:35:e1:73:2e:da:04:5f:6d:a2:61:38:d4:b3: fc:cd:24:2a:ff:f0:96:77:56:4c:fa:61:ff:77:c8:99:8e:6a: 0d:2d:2e:5c:51:31:f1:72:f5:86:69:3e:3a:58:e3:5e:8e:95: 08:4e:ad:b7:79:d8:bd:d6:57:78:5c:d6:5d:45:a5:29:74:ea: 4f:da:8c:d9:73:a2:ad:ae:6d:c0:13:d2:3a:e3:3c:b9:54:63: 89:86:7e:d6:0b:81:fb:03:45:2b:52:64:fb:ec:00:d7:18:c9: 12:2d:7d:72:c0:b8:a2:46:bc:15:28:25:30:ca:ab:f6:dc:a8: a9:03:1a:b6:a7:74:5a:3f:cf:fa:37:6d:4a:a0:58:b7:30:8f: c5:18:89:41:3b:8c:4b:6a:d8:d8:8a:d2:48:a0:d9:ff:29:cd: 40:88:44:e5:9a:a2:35:16:b7:3f:02:2b:fc:81:20:74:0f:e4: 09:13:8d:7a:29:65:46:1a:ec:ff:22:40:b7:69:d0:a3:ac:d0: 9f:d8:d6:c4:29:71:27:2a:aa:9d:3e:64:47:99:34:53:c1:94: b0:ac:31:5e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6Wyw5s349ZULPhYbYFeHUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkOTgwZDhjYTQ2NGFlNDQzMzBjMDJkNjA5N2QxYjNlMzQ2 N2UwODUwHhcNMjYwMTAxMTYxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzkzZTcxYTk0MTg5YjRkYmNjMmNkZjQzMDliNTk5ZDM2OTM3MjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44+kW/h+PPp0b3fGIfnHiSMQV/6u 3wkuS8ul9rT4nZbDG/JZY77ZsjSzpeMDOc0wosXEsCRPOAfvEnt9ZyaHl0LxM9rt kaIJKoo4HwsAa/3WZbMKBYcS5C6oHq64Q5WmUWpP3LsBPTCRIVLkLkX7ZBp42rvr KyELPY4mDtIxHYrQ0WX8fGdPN4+nAJzvl+h1hbuTXMBH4AobnxcoMtoIHHEivuMN E9suCdoXj1+f4JFxI5mztVCEQFHmmWkBLHVCqnJRmtWhv+OH+qhqaea++9qU55s9 hVGf++k62mbYmUJ5hWZDZuIcX0JxzveOfO+a2bh/VxN5ICDEu+mmZoNa7wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDOT5xqUGJtNvMLN9DCbWZ02k3KaMB8GA1UdIwQY MBaAFA2YDYykZK5EMwwC1gl9Gz40Z+CFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFpnTmpLUmtya1F6REFMV0NYMGJQalJuNElVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS82MzU2OWUtZjQ1OC00NDY3LWE0MTUt ZjZmZjI4MWZiYzMyLzEvTTVQbkdwUVltMDI4d3MzME1KdFpuVGFUY3BvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS82MzU2OWUtZjQ1OC00NDY3LWE0MTUtZjZmZjI4MWZiYzMy LzEvRFpnTmpLUmtya1F6REFMV0NYMGJQalJuNElVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW+KTAwQA wWjfMA0GCSqGSIb3DQEBCwUAA4IBAQAN4dpfDIEOIcK1Xi5CrJieTXEkrL7YQ2Ie ii+Gg8ZqoU8Ch9tSfccYdzXhcy7aBF9tomE41LP8zSQq//CWd1ZM+mH/d8iZjmoN LS5cUTHxcvWGaT46WONejpUITq23edi91ld4XNZdRaUpdOpP2ozZc6Ktrm3AE9I6 4zy5VGOJhn7WC4H7A0UrUmT77ADXGMkSLX1ywLiiRrwVKCUwyqv23KipAxq2p3Ra P8/6N21KoFi3MI/FGIlBO4xLatjYitJIoNn/Kc1AiETlmqI1Frc/Aiv8gSB0D+QJ E416KWVGGuz/IkC3adCjrNCf2NbEKXEnKqqdPmRHmTRTwZSwrDFe -----END CERTIFICATE-----Generated at Mon Feb 9 18:44:57 2026 by rpki-client