This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/bdc9d1-e59e-4d1e-ba85-190afa2c1361/1/b5dBtRyuxV_76XQT5zCb2IptxQg.roa File: b5dBtRyuxV_76XQT5zCb2IptxQg.roa (raw, json) Hash identifier: ZIiiQL589xbOcUnaVnMrAVTBKomhOu2PlrOUGtP7qkY= Subject key identifier: 6F:97:41:B5:1C:AE:C5:5F:FB:E9:74:13:E7:30:9B:D8:8A:6D:C5:08 Certificate issuer: /CN=98752d18667dbff8422f97e1e3890e99381d09d4 Certificate serial: 019B797DD532A2029504429CC858AD160D84 Authority key identifier: 98:75:2D:18:66:7D:BF:F8:42:2F:97:E1:E3:89:0E:99:38:1D:09:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/bdc9d1-e59e-4d1e-ba85-190afa2c1361/1/b5dBtRyuxV_76XQT5zCb2IptxQg.roa Signing time: Thu 01 Jan 2026 12:17:28 +0000 ROA not before: Thu 01 Jan 2026 12:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43582 IP address blocks: 91.198.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/bdc9d1-e59e-4d1e-ba85-190afa2c1361/1/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/bdc9d1-e59e-4d1e-ba85-190afa2c1361/1/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.mft rsync://rpki.ripe.net/repository/DEFAULT/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:d5:32:a2:02:95:04:42:9c:c8:58:ad:16:0d:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98752d18667dbff8422f97e1e3890e99381d09d4 Validity Not Before: Jan 1 12:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f9741b51caec55ffbe97413e7309bd88a6dc508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6b:51:18:d0:63:82:ef:77:7c:f3:46:20:e1: e7:83:8a:65:94:a6:15:e5:ee:5b:63:df:9b:9c:65: 62:26:05:3b:df:b2:c8:9b:db:0a:78:ff:6e:c1:67: ff:3e:a5:3b:17:a4:ce:2d:e4:97:87:7d:7e:bd:bb: c4:86:52:07:b6:e4:af:31:94:22:9d:5b:8f:22:00: 78:74:0f:e9:2a:63:76:3e:91:fe:bf:8d:52:e1:75: 91:e9:d5:2f:83:a5:6d:1c:74:d1:17:81:d4:d2:44: 22:de:c5:57:1b:d6:02:aa:e5:ad:23:66:9b:aa:b6: 0c:f8:37:63:9a:89:c8:3b:3c:25:ea:ec:22:a5:69: b9:fa:56:ef:3c:2e:7c:e0:96:ea:43:c3:2e:39:be: 5d:11:7b:20:23:68:bc:c4:3c:ce:fe:82:b2:3c:e8: bb:0d:50:dc:b0:e8:3f:b4:95:c7:7c:6f:45:f4:8f: cc:89:37:bc:69:11:72:df:bf:b9:55:58:1a:50:b4: 4c:49:6b:1f:f9:9e:40:08:83:b8:6e:03:b6:35:01: c1:37:8a:38:9d:00:71:c5:e2:34:f3:cf:ca:b0:96: a8:d2:15:c5:11:86:90:83:49:4d:a1:8e:af:0a:ab: a6:25:cf:59:b5:7a:62:9f:8e:b1:0a:82:60:df:51: 10:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:97:41:B5:1C:AE:C5:5F:FB:E9:74:13:E7:30:9B:D8:8A:6D:C5:08 X509v3 Authority Key Identifier: keyid:98:75:2D:18:66:7D:BF:F8:42:2F:97:E1:E3:89:0E:99:38:1D:09:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bdc9d1-e59e-4d1e-ba85-190afa2c1361/1/b5dBtRyuxV_76XQT5zCb2IptxQg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bdc9d1-e59e-4d1e-ba85-190afa2c1361/1/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.61.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:d6:48:a2:38:13:40:69:54:99:11:6c:60:3f:03:d3:d6:66: 8b:f6:50:6d:62:e5:eb:f2:81:f6:c4:fb:81:89:4f:98:b1:92: f4:e6:1e:bb:74:33:3e:f7:cc:78:05:ff:47:35:26:8b:0f:18: 71:dd:62:97:85:d1:a6:29:13:00:be:40:39:05:f0:23:16:63: 68:73:88:57:ef:69:eb:e4:46:c4:1b:c0:0f:86:93:8a:c6:c0: 09:37:b6:33:cd:8c:47:63:62:fa:59:ea:42:57:c0:9f:96:89: 73:34:25:fc:c8:25:d5:66:44:ec:02:b9:ad:39:02:e8:da:dc: a3:45:da:ad:b6:b6:19:5a:73:74:63:b9:31:25:b6:a1:ce:41: dc:f4:13:5a:e5:41:2b:1a:05:c7:f8:17:20:0b:72:fd:85:91: 51:80:58:5e:11:2a:c5:19:de:0f:9c:62:54:b0:0a:3d:d4:b8: 6b:02:65:72:50:76:94:a8:e5:9f:3c:3f:3b:17:b7:27:51:35: ec:ca:7b:59:e1:25:8a:9c:b1:81:52:7d:96:11:bf:6b:36:c7: 85:24:29:44:19:8e:c6:2b:a2:17:79:a3:81:82:f4:23:98:fc: e9:26:51:70:42:f7:e4:59:a7:7c:9e:4f:54:d0:5d:2a:2c:dd: 9a:dc:5c:9e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fdUyogKVBEKcyFitFg2EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NzUyZDE4NjY3ZGJmZjg0MjJmOTdlMWUzODkwZTk5Mzgx ZDA5ZDQwHhcNMjYwMTAxMTIxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Zjk3NDFiNTFjYWVjNTVmZmJlOTc0MTNlNzMwOWJkODhhNmRjNTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmtRGNBjgu93fPNGIOHng4pllKYV 5e5bY9+bnGViJgU737LIm9sKeP9uwWf/PqU7F6TOLeSXh31+vbvEhlIHtuSvMZQi nVuPIgB4dA/pKmN2PpH+v41S4XWR6dUvg6VtHHTRF4HU0kQi3sVXG9YCquWtI2ab qrYM+DdjmonIOzwl6uwipWm5+lbvPC584JbqQ8MuOb5dEXsgI2i8xDzO/oKyPOi7 DVDcsOg/tJXHfG9F9I/MiTe8aRFy37+5VVgaULRMSWsf+Z5ACIO4bgO2NQHBN4o4 nQBxxeI088/KsJao0hXFEYaQg0lNoY6vCqumJc9ZtXpin46xCoJg31EQLwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG+XQbUcrsVf++l0E+cwm9iKbcUIMB8GA1UdIwQY MBaAFJh1LRhmfb/4Qi+X4eOJDpk4HQnUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUhVdEdHWjl2X2hDTDVmaDQ0a09tVGdkQ2RRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9iZGM5ZDEtZTU5ZS00ZDFlLWJhODUt MTkwYWZhMmMxMzYxLzEvYjVkQnRSeXV4Vl83NlhRVDV6Q2IySXB0eFFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9iZGM5ZDEtZTU5ZS00ZDFlLWJhODUtMTkwYWZhMmMxMzYx LzEvbUhVdEdHWjl2X2hDTDVmaDQ0a09tVGdkQ2RRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8Y9MA0G CSqGSIb3DQEBCwUAA4IBAQAd1kiiOBNAaVSZEWxgPwPT1maL9lBtYuXr8oH2xPuB iU+YsZL05h67dDM+98x4Bf9HNSaLDxhx3WKXhdGmKRMAvkA5BfAjFmNoc4hX72nr 5EbEG8APhpOKxsAJN7YzzYxHY2L6WepCV8CflolzNCX8yCXVZkTsArmtOQLo2tyj RdqttrYZWnN0Y7kxJbahzkHc9BNa5UErGgXH+BcgC3L9hZFRgFheESrFGd4PnGJU sAo91LhrAmVyUHaUqOWfPD87F7cnUTXsyntZ4SWKnLGBUn2WEb9rNseFJClEGY7G K6IXeaOBgvQjmPzpJlFwQvfkWad8nk9U0F0qLN2a3Fye -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:12 2026 by rpki-client