This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/5U0lt8-7U6Bnh1gjv-dlcNeKeTY.roa File: 5U0lt8-7U6Bnh1gjv-dlcNeKeTY.roa (raw, json) Hash identifier: UBIs7KWUwprkJo3madxcKdCqiT7JAPNDlFNCNOeuufY= Subject key identifier: E5:4D:25:B7:CF:BB:53:A0:67:87:58:23:BF:E7:65:70:D7:8A:79:36 Certificate issuer: /CN=70cb96543f7e195723e6d122c29478bfdda03ecc Certificate serial: 019B7C808C0176E31DA5A7181D648EDADBD8 Authority key identifier: 70:CB:96:54:3F:7E:19:57:23:E6:D1:22:C2:94:78:BF:DD:A0:3E:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMuWVD9-GVcj5tEiwpR4v92gPsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/5U0lt8-7U6Bnh1gjv-dlcNeKeTY.roa Signing time: Fri 02 Jan 2026 02:19:17 +0000 ROA not before: Fri 02 Jan 2026 02:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197395 IP address blocks: 91.239.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.mft rsync://rpki.ripe.net/repository/DEFAULT/cMuWVD9-GVcj5tEiwpR4v92gPsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:8c:01:76:e3:1d:a5:a7:18:1d:64:8e:da:db:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70cb96543f7e195723e6d122c29478bfdda03ecc Validity Not Before: Jan 2 02:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e54d25b7cfbb53a067875823bfe76570d78a7936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:62:46:8e:3c:53:f0:46:88:46:f6:99:b5:c6: db:77:41:e9:45:5d:c4:8f:4c:86:5e:2f:7f:73:e4: 89:11:3c:2d:70:fa:0a:5e:5c:cf:d5:c9:1e:0a:8c: 9c:48:05:fe:89:3d:04:85:bb:d3:3d:98:f4:5b:03: 8c:8e:bb:85:f1:e8:d7:f1:07:0a:cc:d2:d6:64:10: 32:60:da:bb:a6:b3:08:5a:e2:3a:81:db:8c:ff:f1: 57:f7:9f:43:f9:64:bd:b9:80:98:3c:3b:99:5a:ac: fc:4f:ab:28:ca:89:46:51:57:6f:35:8b:d5:e8:72: 20:71:8e:b7:cb:17:bb:22:77:50:cb:53:a7:dd:e8: b5:f3:fe:bc:cb:7e:c1:3e:dd:b7:7c:f8:63:86:bd: 03:f1:33:7a:64:cb:3c:06:c3:3b:62:4a:d6:a6:71: c9:0a:a8:1e:07:95:a5:8b:5e:5b:f1:99:0f:df:2b: f0:d4:f5:c5:bc:4e:a4:1d:6d:0a:98:be:91:2f:6d: f2:54:c4:d2:e7:be:09:ea:ee:c6:e4:a5:95:81:00: 73:2e:f0:c2:4d:9d:6c:43:79:48:66:09:e0:64:69: b5:84:be:48:70:d6:9c:61:fe:a9:cd:22:42:d5:6f: 4a:45:3e:7c:fc:7e:35:02:b3:64:7b:60:07:90:46: 6b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:4D:25:B7:CF:BB:53:A0:67:87:58:23:BF:E7:65:70:D7:8A:79:36 X509v3 Authority Key Identifier: keyid:70:CB:96:54:3F:7E:19:57:23:E6:D1:22:C2:94:78:BF:DD:A0:3E:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMuWVD9-GVcj5tEiwpR4v92gPsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/5U0lt8-7U6Bnh1gjv-dlcNeKeTY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.239.186.0/24 Signature Algorithm: sha256WithRSAEncryption 39:df:4f:47:32:05:6d:a4:bd:28:15:a2:50:43:c9:cb:7e:71: 47:3a:c1:ec:10:47:25:2c:be:2f:41:ee:02:97:78:84:aa:04: ef:d5:93:e5:9b:22:1b:ab:28:09:6c:5b:f4:7c:3a:20:5f:04: 54:df:d7:81:75:d3:64:ec:3b:fd:b4:5d:72:34:8c:62:c4:9b: 3e:f9:f8:4a:24:63:5c:6d:5e:e9:7f:56:0c:39:ef:b7:28:ba: 70:44:53:9f:80:5b:51:a4:3c:3b:a9:ff:d3:dc:6a:02:de:c6: f8:a9:7a:81:9e:60:70:f4:98:58:21:5b:3d:80:c7:16:13:69: 55:96:82:5f:52:70:30:25:9f:2f:30:64:4e:29:f6:91:bf:2b: 52:2a:ed:26:b2:4e:e5:da:4a:21:b1:b8:a3:3d:17:78:93:c3: e0:85:eb:6f:70:05:31:51:3a:75:4b:d0:e5:6d:28:27:f9:98: e7:cf:4a:c4:60:1f:8a:cf:2f:56:f9:22:a1:7a:f9:05:0f:e2: 15:5e:ce:15:b0:71:31:80:67:4a:3a:2c:21:52:48:87:82:ed: ce:7e:9d:0b:63:0e:11:a4:55:ce:85:d9:8b:a4:f9:1a:d3:95: e2:d8:e9:ed:5f:22:6c:ef:96:65:f5:22:3b:a1:6c:90:8c:2c: 69:5e:8b:a6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gIwBduMdpacYHWSO2tvYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwY2I5NjU0M2Y3ZTE5NTcyM2U2ZDEyMmMyOTQ3OGJmZGRh MDNlY2MwHhcNMjYwMTAyMDIxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTRkMjViN2NmYmI1M2EwNjc4NzU4MjNiZmU3NjU3MGQ3OGE3OTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2JGjjxT8EaIRvaZtcbbd0HpRV3E j0yGXi9/c+SJETwtcPoKXlzP1ckeCoycSAX+iT0EhbvTPZj0WwOMjruF8ejX8QcK zNLWZBAyYNq7prMIWuI6gduM//FX959D+WS9uYCYPDuZWqz8T6soyolGUVdvNYvV 6HIgcY63yxe7IndQy1On3ei18/68y37BPt23fPhjhr0D8TN6ZMs8BsM7YkrWpnHJ CqgeB5Wli15b8ZkP3yvw1PXFvE6kHW0KmL6RL23yVMTS574J6u7G5KWVgQBzLvDC TZ1sQ3lIZgngZGm1hL5IcNacYf6pzSJC1W9KRT58/H41ArNke2AHkEZraQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOVNJbfPu1OgZ4dYI7/nZXDXink2MB8GA1UdIwQY MBaAFHDLllQ/fhlXI+bRIsKUeL/doD7MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY011V1ZEOS1HVmNqNXRFaXdwUjR2OTJnUHN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9iN2U0YWMtODUwOC00ZDZiLWEyYmMt Mjc0Y2Q2Y2FhM2YzLzEvNVUwbHQ4LTdVNkJuaDFnanYtZGxjTmVLZVRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9iN2U0YWMtODUwOC00ZDZiLWEyYmMtMjc0Y2Q2Y2FhM2Yz LzEvY011V1ZEOS1HVmNqNXRFaXdwUjR2OTJnUHN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW++6MA0G CSqGSIb3DQEBCwUAA4IBAQA5309HMgVtpL0oFaJQQ8nLfnFHOsHsEEclLL4vQe4C l3iEqgTv1ZPlmyIbqygJbFv0fDogXwRU39eBddNk7Dv9tF1yNIxixJs++fhKJGNc bV7pf1YMOe+3KLpwRFOfgFtRpDw7qf/T3GoC3sb4qXqBnmBw9JhYIVs9gMcWE2lV loJfUnAwJZ8vMGROKfaRvytSKu0msk7l2kohsbijPRd4k8PghetvcAUxUTp1S9Dl bSgn+Zjnz0rEYB+Kzy9W+SKhevkFD+IVXs4VsHExgGdKOiwhUkiHgu3Ofp0LYw4R pFXOhdmLpPka05Xi2OntXyJs75Zl9SI7oWyQjCxpXoum -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:47 2026 by rpki-client