This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/5SPOOAFTV5wB0v8bOqbqxdbSbOQ.roa File: 5SPOOAFTV5wB0v8bOqbqxdbSbOQ.roa (raw, json) Hash identifier: mgFPEV4LAu92g1S2eIdHABLNocI2JnL7lnfnPbZr274= Subject key identifier: E5:23:CE:38:01:53:57:9C:01:D2:FF:1B:3A:A6:EA:C5:D6:D2:6C:E4 Certificate issuer: /CN=268f501bbf9e13cdd2eb899d97121f669aa29135 Certificate serial: 019B7C7FF942E3BE01DA524BD87841064F0D Authority key identifier: 26:8F:50:1B:BF:9E:13:CD:D2:EB:89:9D:97:12:1F:66:9A:A2:91:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/5SPOOAFTV5wB0v8bOqbqxdbSbOQ.roa Signing time: Fri 02 Jan 2026 02:18:40 +0000 ROA not before: Fri 02 Jan 2026 02:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 91.234.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 10:48:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:f9:42:e3:be:01:da:52:4b:d8:78:41:06:4f:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=268f501bbf9e13cdd2eb899d97121f669aa29135 Validity Not Before: Jan 2 02:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e523ce380153579c01d2ff1b3aa6eac5d6d26ce4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7c:b8:a8:f9:6c:55:d0:e2:aa:50:61:6d:da: 62:bd:ea:a6:d0:9c:a0:25:ab:71:ad:6a:ad:c1:44: b0:23:6b:ce:b9:a8:8f:23:29:66:bd:de:4c:58:5d: 83:1b:eb:d6:13:2c:5a:a0:a6:61:c5:81:4c:6f:cb: d2:b6:6b:03:20:e5:c8:b3:dc:1e:61:e2:6b:97:ea: 90:c2:1a:b6:45:ed:4d:fd:6e:41:65:42:76:d3:35: d4:08:d3:a4:dc:d4:d3:a6:24:8b:24:e8:43:9f:d7: 84:8c:6f:78:a8:17:28:9a:9c:51:5b:3f:68:e1:03: cb:0b:ea:ab:94:bf:47:27:71:eb:91:75:7c:a8:8c: ea:e6:67:5b:60:a3:f3:cf:d6:9a:f8:d9:d8:81:cb: 6f:7e:44:2a:f9:6d:f6:2f:72:a8:e1:27:0f:89:b4: 90:4b:b4:a5:87:0a:34:76:28:08:41:6d:e4:1a:23: 11:17:60:ab:a0:44:2d:dc:a0:b7:a4:e0:8f:3d:4e: 2a:63:0b:68:13:52:c3:30:0b:ce:5b:8c:14:c0:6e: 43:47:f0:eb:cd:e1:7b:08:ab:96:db:33:fc:55:cd: 07:25:ee:94:e8:fb:fe:24:64:d2:b6:98:37:aa:96: 7e:9c:62:b2:56:3f:4e:d6:56:dc:20:dd:c0:bb:c5: f7:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:23:CE:38:01:53:57:9C:01:D2:FF:1B:3A:A6:EA:C5:D6:D2:6C:E4 X509v3 Authority Key Identifier: keyid:26:8F:50:1B:BF:9E:13:CD:D2:EB:89:9D:97:12:1F:66:9A:A2:91:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/5SPOOAFTV5wB0v8bOqbqxdbSbOQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.234.36.0/24 Signature Algorithm: sha256WithRSAEncryption c4:40:52:e3:b6:d7:96:fc:c9:8a:b6:95:db:ea:4a:51:70:47: c7:a5:7e:52:30:97:9a:23:31:65:f3:b4:db:17:52:e4:c0:00: aa:3f:c0:4a:c5:ac:8d:48:df:af:36:6f:97:cb:7e:ed:77:90: fb:f0:a1:d8:59:20:8b:69:69:1b:0f:68:3c:4c:d5:3a:dc:4c: 49:65:9d:df:2d:14:72:a6:3c:86:92:73:e1:07:d4:2d:bc:72: 83:9e:d8:85:bf:e2:16:b6:3d:ef:1f:df:42:d1:cd:bb:7c:22: a3:da:6b:11:14:b9:30:f2:4c:3c:28:a4:1b:7c:49:f7:3c:0a: 1a:0f:fd:c2:2e:bf:d6:c1:43:c6:6d:33:3d:7b:a3:89:ec:34: 51:4c:3f:c1:cd:65:6d:30:aa:10:7d:22:b5:28:b1:0a:59:59: 5a:5e:f6:63:63:2e:9f:2f:4b:df:c3:ec:f3:ce:c2:d9:8e:22: 0d:c7:61:ad:1d:9f:26:b3:3a:a3:e1:92:ef:b3:1d:07:a6:3b: 19:78:43:af:9d:cd:35:08:43:da:44:eb:b1:3d:71:9e:a1:4b: 64:9b:81:b2:0d:68:14:8a:c1:c5:c0:f3:01:6c:07:4d:47:d0: b5:a7:e0:e9:3d:0b:a9:d8:46:d4:b1:0d:0b:d1:bb:72:9d:0d: 76:03:57:16 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f/lC474B2lJL2HhBBk8NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2OGY1MDFiYmY5ZTEzY2RkMmViODk5ZDk3MTIxZjY2OWFh MjkxMzUwHhcNMjYwMTAyMDIxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTIzY2UzODAxNTM1NzljMDFkMmZmMWIzYWE2ZWFjNWQ2ZDI2Y2U0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHy4qPlsVdDiqlBhbdpiveqm0Jyg JatxrWqtwUSwI2vOuaiPIylmvd5MWF2DG+vWEyxaoKZhxYFMb8vStmsDIOXIs9we YeJrl+qQwhq2Re1N/W5BZUJ20zXUCNOk3NTTpiSLJOhDn9eEjG94qBcompxRWz9o 4QPLC+qrlL9HJ3HrkXV8qIzq5mdbYKPzz9aa+NnYgctvfkQq+W32L3Ko4ScPibSQ S7Slhwo0digIQW3kGiMRF2CroEQt3KC3pOCPPU4qYwtoE1LDMAvOW4wUwG5DR/Dr zeF7CKuW2zP8Vc0HJe6U6Pv+JGTStpg3qpZ+nGKyVj9O1lbcIN3Au8X3OQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOUjzjgBU1ecAdL/Gzqm6sXW0mzkMB8GA1UdIwQY MBaAFCaPUBu/nhPN0uuJnZcSH2aaopE1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm85UUc3LWVFODNTNjRtZGx4SWZacHFpa1RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82ZDdmMGQtN2U0ZS00N2Q2LWI5ZGIt Y2EwYzc3MmI3MjlmLzEvNVNQT09BRlRWNXdCMHY4Yk9xYnF4ZGJTYk9RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82ZDdmMGQtN2U0ZS00N2Q2LWI5ZGItY2EwYzc3MmI3Mjlm LzEvSm85UUc3LWVFODNTNjRtZGx4SWZacHFpa1RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+okMA0G CSqGSIb3DQEBCwUAA4IBAQDEQFLjtteW/MmKtpXb6kpRcEfHpX5SMJeaIzFl87Tb F1LkwACqP8BKxayNSN+vNm+Xy37td5D78KHYWSCLaWkbD2g8TNU63ExJZZ3fLRRy pjyGknPhB9QtvHKDntiFv+IWtj3vH99C0c27fCKj2msRFLkw8kw8KKQbfEn3PAoa D/3CLr/WwUPGbTM9e6OJ7DRRTD/BzWVtMKoQfSK1KLEKWVlaXvZjYy6fL0vfw+zz zsLZjiINx2GtHZ8mszqj4ZLvsx0HpjsZeEOvnc01CEPaROuxPXGeoUtkm4GyDWgU isHFwPMBbAdNR9C1p+DpPQup2EbUsQ0L0btynQ12A1cW -----END CERTIFICATE-----Generated at Sat Feb 14 17:24:13 2026 by rpki-client