This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/n5-SbGgTWlbW_C1J7zQnQwhdk_I.roa File: n5-SbGgTWlbW_C1J7zQnQwhdk_I.roa (raw, json) Hash identifier: 20MmpTiNHIRI615LwLOcDmRN7JohlEVDp5KlQ4ApT5Q= Subject key identifier: 9F:9F:92:6C:68:13:5A:56:D6:FC:2D:49:EF:34:27:43:08:5D:93:F2 Certificate issuer: /CN=f4e7174c6f74fa9a22b0adee251a8d64312313f2 Certificate serial: 019B7F82B5BF6931CFD0381F770AB8D64865 Authority key identifier: F4:E7:17:4C:6F:74:FA:9A:22:B0:AD:EE:25:1A:8D:64:31:23:13:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OcXTG90-poisK3uJRqNZDEjE_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/n5-SbGgTWlbW_C1J7zQnQwhdk_I.roa Signing time: Fri 02 Jan 2026 16:20:31 +0000 ROA not before: Fri 02 Jan 2026 16:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15830 IP address blocks: 91.233.52.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft rsync://rpki.ripe.net/repository/DEFAULT/9OcXTG90-poisK3uJRqNZDEjE_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:b5:bf:69:31:cf:d0:38:1f:77:0a:b8:d6:48:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4e7174c6f74fa9a22b0adee251a8d64312313f2 Validity Not Before: Jan 2 16:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f9f926c68135a56d6fc2d49ef342743085d93f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:5f:62:7a:b8:d1:70:a4:fd:b1:ba:18:8f:56: 57:2c:11:b6:fa:f7:b9:33:7f:1a:01:c9:87:5d:eb: cb:bf:ec:33:74:0e:3b:26:66:86:32:59:a7:e4:38: bb:eb:b8:24:96:57:c3:cd:9c:b8:37:bd:90:9e:79: 19:b4:c3:ed:0f:94:91:45:18:04:59:fb:0f:ba:d6: a6:3f:d7:19:88:f2:a2:78:68:5d:02:66:d0:9e:2d: 40:af:54:10:7a:10:2c:a1:28:a2:90:81:de:a7:b8: 7e:49:3b:ed:e3:7b:f5:86:8c:af:6b:90:00:f2:f2: 45:41:7c:da:d8:04:b1:88:c0:27:88:54:7b:7c:ac: 26:6b:46:81:53:53:70:19:84:39:1c:49:9d:2f:94: 6f:80:8f:f6:65:27:4e:7e:45:12:ca:f1:16:f7:46: cb:55:6a:80:2e:94:3c:e0:07:d1:36:10:6d:79:61: 8d:09:1a:be:70:a6:76:ac:8f:d1:e3:b0:78:b9:50: 21:dc:f5:51:ad:c6:1f:df:3d:fb:83:e1:d0:ee:c6: 91:f6:9b:25:ba:e8:da:e7:55:34:45:df:be:e5:8b: 86:3d:bc:8a:e1:b0:44:dd:53:e6:78:d6:84:32:35: ac:b1:be:88:ca:d0:8a:29:fc:25:89:fa:12:7d:2b: ac:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:9F:92:6C:68:13:5A:56:D6:FC:2D:49:EF:34:27:43:08:5D:93:F2 X509v3 Authority Key Identifier: keyid:F4:E7:17:4C:6F:74:FA:9A:22:B0:AD:EE:25:1A:8D:64:31:23:13:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OcXTG90-poisK3uJRqNZDEjE_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/n5-SbGgTWlbW_C1J7zQnQwhdk_I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.233.52.0/23 Signature Algorithm: sha256WithRSAEncryption 9f:56:02:11:90:0f:fb:b4:92:a5:54:30:a3:d0:8b:b4:9b:56: c7:45:94:b5:f3:f8:62:df:fe:bc:2c:b2:19:f9:23:93:84:a4: e3:4e:9b:bf:73:c3:c2:b3:31:67:f0:f9:de:39:95:ef:fd:5f: 64:7e:02:d1:3d:58:11:4f:02:8f:24:ba:be:0a:46:f6:a4:5e: 38:ed:ab:a7:04:aa:b6:05:35:dd:1d:c1:1d:1b:97:85:83:da: 94:f3:b8:69:c1:58:6a:39:48:68:36:ca:52:88:04:1b:50:35: 21:16:1d:9c:b9:10:fa:45:3b:9f:ad:6e:da:46:6a:da:91:8e: c8:fc:bf:d5:b7:dd:75:4d:0c:ae:d6:17:2e:b6:44:7c:cc:d6: 6d:bc:cd:14:49:f3:74:74:ea:cd:64:5b:d3:78:67:82:60:ba: d1:9e:70:af:48:7c:6a:7d:4b:3b:54:5b:da:60:bf:ed:62:82: 26:ca:5c:be:81:e3:de:75:92:76:ff:e6:7f:26:38:6e:fb:71: 58:7f:00:d8:67:fa:38:18:ad:57:63:8f:e5:37:6f:5d:6c:a2: 43:02:92:cd:90:e0:d3:99:d8:d9:cd:33:3e:5d:25:0f:80:50: 94:0b:bf:45:95:07:1f:66:f6:aa:42:f6:02:cb:9d:35:75:eb: 56:75:45:5e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/grW/aTHP0Dgfdwq41khlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZTcxNzRjNmY3NGZhOWEyMmIwYWRlZTI1MWE4ZDY0MzEy MzEzZjIwHhcNMjYwMTAyMTYyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjlmOTI2YzY4MTM1YTU2ZDZmYzJkNDllZjM0Mjc0MzA4NWQ5M2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA319ierjRcKT9sboYj1ZXLBG2+ve5 M38aAcmHXevLv+wzdA47JmaGMlmn5Di767gkllfDzZy4N72QnnkZtMPtD5SRRRgE WfsPutamP9cZiPKieGhdAmbQni1Ar1QQehAsoSiikIHep7h+STvt43v1hoyva5AA 8vJFQXza2ASxiMAniFR7fKwma0aBU1NwGYQ5HEmdL5RvgI/2ZSdOfkUSyvEW90bL VWqALpQ84AfRNhBteWGNCRq+cKZ2rI/R47B4uVAh3PVRrcYf3z37g+HQ7saR9psl uuja51U0Rd++5YuGPbyK4bBE3VPmeNaEMjWssb6IytCKKfwlifoSfSusaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ+fkmxoE1pW1vwtSe80J0MIXZPyMB8GA1UdIwQY MBaAFPTnF0xvdPqaIrCt7iUajWQxIxPyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU9jWFRHOTAtcG9pc0szdUpScU5aREVqRV9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi84NmVmYjMtZWYxZS00NjljLWFlYjQt Mjg5NzhjM2M3ZWM1LzEvbjUtU2JHZ1RXbGJXX0MxSjd6UW5Rd2hka19JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi84NmVmYjMtZWYxZS00NjljLWFlYjQtMjg5NzhjM2M3ZWM1 LzEvOU9jWFRHOTAtcG9pc0szdUpScU5aREVqRV9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+k0MA0G CSqGSIb3DQEBCwUAA4IBAQCfVgIRkA/7tJKlVDCj0Iu0m1bHRZS18/hi3/68LLIZ +SOThKTjTpu/c8PCszFn8PneOZXv/V9kfgLRPVgRTwKPJLq+Ckb2pF447aunBKq2 BTXdHcEdG5eFg9qU87hpwVhqOUhoNspSiAQbUDUhFh2cuRD6RTufrW7aRmrakY7I /L/Vt911TQyu1hcutkR8zNZtvM0USfN0dOrNZFvTeGeCYLrRnnCvSHxqfUs7VFva YL/tYoImyly+gePedZJ2/+Z/Jjhu+3FYfwDYZ/o4GK1XY4/lN29dbKJDApLNkODT mdjZzTM+XSUPgFCUC79FlQcfZvaqQvYCy501detWdUVe -----END CERTIFICATE-----Generated at Sat Jan 3 04:59:30 2026 by rpki-client