This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/5sXzjnKS3JRs5_PkjVDa27eoC-M.roa File: 5sXzjnKS3JRs5_PkjVDa27eoC-M.roa (raw, json) Hash identifier: 2V+6XQqLf/lpOVZXMep8bSqQydoN+IRrPy2YYET6j4Q= Subject key identifier: E6:C5:F3:8E:72:92:DC:94:6C:E7:F3:E4:8D:50:DA:DB:B7:A8:0B:E3 Certificate issuer: /CN=fedae68910398c9d8ee756e168201dd9e8989b52 Certificate serial: 019B797ED71E336513AE2900DDE1E79C7D9B Authority key identifier: FE:DA:E6:89:10:39:8C:9D:8E:E7:56:E1:68:20:1D:D9:E8:98:9B:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_trmiRA5jJ2O51bhaCAd2eiYm1I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/5sXzjnKS3JRs5_PkjVDa27eoC-M.roa Signing time: Thu 01 Jan 2026 12:18:34 +0000 ROA not before: Thu 01 Jan 2026 12:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198133 IP address blocks: 91.246.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft rsync://rpki.ripe.net/repository/DEFAULT/_trmiRA5jJ2O51bhaCAd2eiYm1I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:d7:1e:33:65:13:ae:29:00:dd:e1:e7:9c:7d:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fedae68910398c9d8ee756e168201dd9e8989b52 Validity Not Before: Jan 1 12:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e6c5f38e7292dc946ce7f3e48d50dadbb7a80be3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e6:c8:b6:e9:ad:3a:19:26:bc:63:6a:3f:44: 2f:9b:08:32:45:d9:7c:24:36:10:9e:9c:c8:64:cb: d4:92:eb:d5:f6:00:44:4c:93:e1:8a:00:8b:59:f3: e6:89:e7:fa:68:9d:bd:b8:2a:0b:43:95:b3:29:24: 96:f2:9f:eb:04:a6:4a:65:e9:69:ad:91:29:5f:1f: f7:b3:fc:32:c3:a8:a0:e8:9d:8b:5c:85:51:7e:07: 74:81:31:5f:f9:cf:d3:ba:78:78:3c:6b:c3:f6:c7: 70:b2:20:56:0f:97:56:e4:54:d9:cc:ae:c7:bb:e2: 2d:5f:4d:2d:00:ae:f6:6b:04:b1:92:52:94:81:28: cb:6f:e4:47:f5:84:7c:53:4a:95:f8:a2:6c:28:8f: 6b:13:91:7a:7f:36:34:b6:48:4a:a7:51:a5:6d:15: 8b:cf:b4:61:1b:df:eb:f8:24:f8:96:fc:46:72:fa: f4:3d:8b:8d:0a:3f:1d:1b:4f:83:08:26:42:5c:b7: 38:11:45:ad:88:78:c0:25:e2:6a:80:74:76:bb:50: bf:09:9a:bc:80:0f:9c:54:2e:9d:59:5a:74:1a:e6: 64:4a:35:0d:6b:5e:b9:bf:c6:bf:c4:2d:7c:cb:7b: 5b:63:77:6b:86:1a:7f:fe:d1:06:5f:91:9f:a3:da: d0:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:C5:F3:8E:72:92:DC:94:6C:E7:F3:E4:8D:50:DA:DB:B7:A8:0B:E3 X509v3 Authority Key Identifier: keyid:FE:DA:E6:89:10:39:8C:9D:8E:E7:56:E1:68:20:1D:D9:E8:98:9B:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_trmiRA5jJ2O51bhaCAd2eiYm1I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/5sXzjnKS3JRs5_PkjVDa27eoC-M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.246.208.0/21 Signature Algorithm: sha256WithRSAEncryption 99:da:12:73:75:74:72:36:c8:85:57:66:26:69:e8:20:bc:3f: 53:1e:2b:bb:5c:c9:86:6e:8f:1e:3c:a3:50:fb:99:f9:88:26: ca:ea:72:5e:05:a3:a8:4c:b3:43:21:06:10:56:9d:2f:74:bd: b4:06:70:ca:20:54:e0:12:61:db:9e:c1:3a:b5:f4:fb:3a:a1: b1:73:5a:39:1c:33:85:94:53:a0:92:db:00:31:f9:45:d1:80: 7b:77:84:84:01:44:f7:9c:51:17:d5:68:c0:f6:79:38:f6:cd: 14:81:39:28:1f:d6:26:21:3d:50:0e:72:4d:6c:a2:38:08:8a: 47:ad:84:79:f4:84:14:84:cb:c5:7e:aa:1d:a1:b2:0d:2f:04: e9:d9:9b:4b:36:bb:df:e0:5b:01:2f:7f:45:0f:93:9b:c6:2c: bc:37:aa:07:06:5e:27:7f:a6:1e:21:a6:ba:30:a0:e2:cc:15: 35:96:a9:e0:e4:e6:64:86:d4:7a:b8:25:3f:45:e1:41:89:e0: 73:8c:ff:11:5f:53:05:ef:6e:34:d3:d2:72:86:c6:fa:5d:c2: 99:37:77:8b:2a:d5:5d:4d:02:41:9a:b8:22:fc:de:bf:42:34: ba:30:88:4f:91:68:99:70:b1:3a:80:d9:cc:96:3f:7a:74:d5: be:71:4d:7d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ftceM2UTrikA3eHnnH2bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlZGFlNjg5MTAzOThjOWQ4ZWU3NTZlMTY4MjAxZGQ5ZTg5 ODliNTIwHhcNMjYwMTAxMTIxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNmM1ZjM4ZTcyOTJkYzk0NmNlN2YzZTQ4ZDUwZGFkYmI3YTgwYmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlubItumtOhkmvGNqP0QvmwgyRdl8 JDYQnpzIZMvUkuvV9gBETJPhigCLWfPmief6aJ29uCoLQ5WzKSSW8p/rBKZKZelp rZEpXx/3s/wyw6ig6J2LXIVRfgd0gTFf+c/Tunh4PGvD9sdwsiBWD5dW5FTZzK7H u+ItX00tAK72awSxklKUgSjLb+RH9YR8U0qV+KJsKI9rE5F6fzY0tkhKp1GlbRWL z7RhG9/r+CT4lvxGcvr0PYuNCj8dG0+DCCZCXLc4EUWtiHjAJeJqgHR2u1C/CZq8 gA+cVC6dWVp0GuZkSjUNa165v8a/xC18y3tbY3drhhp//tEGX5Gfo9rQJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFObF845yktyUbOfz5I1Q2tu3qAvjMB8GA1UdIwQY MBaAFP7a5okQOYydjudW4WggHdnomJtSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3RybWlSQTVqSjJPNTFiaGFDQWQyZWlZbTFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS81ZjUzYTMtMjI2MC00MWIwLWEzNDEt NTAwNDMyNTAxNzQzLzEvNXNYempuS1MzSlJzNV9Qa2pWRGEyN2VvQy1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS81ZjUzYTMtMjI2MC00MWIwLWEzNDEtNTAwNDMyNTAxNzQz LzEvX3RybWlSQTVqSjJPNTFiaGFDQWQyZWlZbTFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDW/bQMA0G CSqGSIb3DQEBCwUAA4IBAQCZ2hJzdXRyNsiFV2YmaeggvD9THiu7XMmGbo8ePKNQ +5n5iCbK6nJeBaOoTLNDIQYQVp0vdL20BnDKIFTgEmHbnsE6tfT7OqGxc1o5HDOF lFOgktsAMflF0YB7d4SEAUT3nFEX1WjA9nk49s0UgTkoH9YmIT1QDnJNbKI4CIpH rYR59IQUhMvFfqodobINLwTp2ZtLNrvf4FsBL39FD5Obxiy8N6oHBl4nf6YeIaa6 MKDizBU1lqng5OZkhtR6uCU/ReFBieBzjP8RX1MF724009Jyhsb6XcKZN3eLKtVd TQJBmrgi/N6/QjS6MIhPkWiZcLE6gNnMlj96dNW+cU19 -----END CERTIFICATE-----Generated at Mon Feb 9 22:30:42 2026 by rpki-client