This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/KD5Nzwe5gk1N-Rm3egJ-hjvwQnU.roa File: KD5Nzwe5gk1N-Rm3egJ-hjvwQnU.roa (raw, json) Hash identifier: 8YQQaqmVY0bXdQ+XjWYENgqQf0S4GzGtcS/OODIOYgQ= Subject key identifier: 28:3E:4D:CF:07:B9:82:4D:4D:F9:19:B7:7A:02:7E:86:3B:F0:42:75 Certificate issuer: /CN=d5956cb2e8bbb4d429728e01e20fd3c8e05f3328 Certificate serial: 019B76EB9B4F0F4B0690CBD88D39F5DFE300 Authority key identifier: D5:95:6C:B2:E8:BB:B4:D4:29:72:8E:01:E2:0F:D3:C8:E0:5F:33:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ZVssui7tNQpco4B4g_TyOBfMyg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/KD5Nzwe5gk1N-Rm3egJ-hjvwQnU.roa Signing time: Thu 01 Jan 2026 00:18:30 +0000 ROA not before: Thu 01 Jan 2026 00:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48617 IP address blocks: 91.209.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft rsync://rpki.ripe.net/repository/DEFAULT/1ZVssui7tNQpco4B4g_TyOBfMyg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:9b:4f:0f:4b:06:90:cb:d8:8d:39:f5:df:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5956cb2e8bbb4d429728e01e20fd3c8e05f3328 Validity Not Before: Jan 1 00:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=283e4dcf07b9824d4df919b77a027e863bf04275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c4:8b:d9:be:a0:c0:c3:ee:97:7c:8d:f1:e7: 22:d6:c3:f2:ca:88:40:f4:dc:a4:26:67:a8:09:25: 8f:10:54:d7:83:9e:ad:4c:d9:fe:53:6f:a0:02:09: 33:86:fc:d8:76:fc:82:4f:4d:88:08:b1:46:7b:75: d0:8f:ba:9e:86:77:72:63:11:2c:66:f0:7a:12:d5: 36:69:83:c2:89:fd:0e:3e:41:93:0a:38:da:61:8f: 82:2d:29:d7:66:ff:9d:f6:c5:17:8c:17:7a:73:8a: 47:7e:d8:a5:2f:bf:1e:a3:87:e1:2c:29:29:f0:93: a4:14:74:4d:af:aa:2b:e9:0e:ba:cd:5d:51:43:74: 6e:72:52:ff:42:ae:6e:34:d8:c5:5a:25:45:86:cc: bd:50:e7:c7:d2:04:4c:62:7e:94:fb:0d:48:c4:1d: 81:19:5c:d1:6d:03:9c:40:2b:77:b8:8d:22:c6:f2: e4:8e:a8:b8:d6:48:1b:bc:66:cc:57:5c:e4:82:3f: c7:c8:e7:52:d9:67:e3:96:d7:f1:0e:a6:b7:f4:73: 4c:e1:31:63:03:d7:f8:7a:25:33:1e:07:95:9d:67: c3:0e:36:57:26:c9:75:7a:97:c7:ca:f5:b3:fd:99: d7:26:76:b7:5f:33:14:cf:30:42:b5:16:69:6d:42: 4a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:3E:4D:CF:07:B9:82:4D:4D:F9:19:B7:7A:02:7E:86:3B:F0:42:75 X509v3 Authority Key Identifier: keyid:D5:95:6C:B2:E8:BB:B4:D4:29:72:8E:01:E2:0F:D3:C8:E0:5F:33:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ZVssui7tNQpco4B4g_TyOBfMyg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/KD5Nzwe5gk1N-Rm3egJ-hjvwQnU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.194.0/24 Signature Algorithm: sha256WithRSAEncryption 41:a4:09:a4:ca:a0:ea:a2:4d:56:58:35:cc:a1:d9:1c:fa:3f: be:4f:3f:9d:58:54:41:95:d8:88:d0:eb:d5:65:67:70:5c:d0: 42:ad:09:58:b3:fd:43:bd:ad:e3:ef:e3:65:de:4c:7c:68:0a: 79:c5:7f:04:e0:c7:a8:8a:a9:d0:82:05:97:dc:14:bf:60:83: f7:69:6e:47:5d:04:86:cb:96:3b:ae:a6:69:31:9d:f4:57:c0: 90:d8:66:51:a1:2e:44:bc:46:5f:48:9d:a2:b2:b2:8b:82:96: 73:05:e2:da:ca:f7:f8:1f:1e:8d:53:57:be:58:38:1a:fd:94: 0b:98:61:ca:46:87:c8:81:fe:e9:f2:13:66:7f:51:e1:be:2b: 55:30:b7:68:6a:74:aa:ff:cf:cd:c5:a4:53:4c:e4:9e:a3:2a: 72:c1:40:14:f3:de:5e:6f:92:cc:01:3f:08:9f:0e:e5:c1:f2: f9:52:f3:92:b5:56:42:c2:78:8b:bc:1c:4d:b0:4f:8a:47:c6: f1:9c:e7:53:b8:47:1b:bc:34:54:3c:f4:e8:84:d2:da:b2:bc: a9:79:a9:5d:c2:d7:b4:94:7f:3e:11:56:21:eb:4f:62:d4:8b: 01:40:d2:7b:ca:c2:20:8d:60:07:6d:6e:e6:92:d7:f1:5f:be: a3:51:f8:c3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt265tPD0sGkMvYjTn13+MAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1OTU2Y2IyZThiYmI0ZDQyOTcyOGUwMWUyMGZkM2M4ZTA1 ZjMzMjgwHhcNMjYwMTAxMDAxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyODNlNGRjZjA3Yjk4MjRkNGRmOTE5Yjc3YTAyN2U4NjNiZjA0Mjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4sSL2b6gwMPul3yN8eci1sPyyohA 9NykJmeoCSWPEFTXg56tTNn+U2+gAgkzhvzYdvyCT02ICLFGe3XQj7qehndyYxEs ZvB6EtU2aYPCif0OPkGTCjjaYY+CLSnXZv+d9sUXjBd6c4pHftilL78eo4fhLCkp 8JOkFHRNr6or6Q66zV1RQ3RuclL/Qq5uNNjFWiVFhsy9UOfH0gRMYn6U+w1IxB2B GVzRbQOcQCt3uI0ixvLkjqi41kgbvGbMV1zkgj/HyOdS2WfjltfxDqa39HNM4TFj A9f4eiUzHgeVnWfDDjZXJsl1epfHyvWz/ZnXJna3XzMUzzBCtRZpbUJKWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCg+Tc8HuYJNTfkZt3oCfoY78EJ1MB8GA1UdIwQY MBaAFNWVbLLou7TUKXKOAeIP08jgXzMoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVpWc3N1aTd0TlFwY280QjRnX1R5T0JmTXlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jYmE3MTgtYWE3My00ZDM3LTlhMDQt OThkYWJlM2UyNjYyLzEvS0Q1Tnp3ZTVnazFOLVJtM2VnSi1oanZ3UW5VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9jYmE3MTgtYWE3My00ZDM3LTlhMDQtOThkYWJlM2UyNjYy LzEvMVpWc3N1aTd0TlFwY280QjRnX1R5T0JmTXlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9HCMA0G CSqGSIb3DQEBCwUAA4IBAQBBpAmkyqDqok1WWDXModkc+j++Tz+dWFRBldiI0OvV ZWdwXNBCrQlYs/1Dva3j7+Nl3kx8aAp5xX8E4MeoiqnQggWX3BS/YIP3aW5HXQSG y5Y7rqZpMZ30V8CQ2GZRoS5EvEZfSJ2isrKLgpZzBeLayvf4Hx6NU1e+WDga/ZQL mGHKRofIgf7p8hNmf1HhvitVMLdoanSq/8/NxaRTTOSeoypywUAU895eb5LMAT8I nw7lwfL5UvOStVZCwniLvBxNsE+KR8bxnOdTuEcbvDRUPPTohNLasrypealdwte0 lH8+EVYh609i1IsBQNJ7ysIgjWAHbW7mktfxX76jUfjD -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:44 2026 by rpki-client