This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/y5TDm0AbnF5uW1VYqN6HJrhTGH0.roa File: y5TDm0AbnF5uW1VYqN6HJrhTGH0.roa (raw, json) Hash identifier: lqxFRYQnP+n1wormol/wg9R3mZ0oBovnPQrrpsaBhek= Subject key identifier: CB:94:C3:9B:40:1B:9C:5E:6E:5B:55:58:A8:DE:87:26:B8:53:18:7D Certificate issuer: /CN=c5b1182d31796fa63ec3c1d9b97cb6aaac34fdd9 Certificate serial: 019B78345F9948EC3CCA6BA019518358A1A0 Authority key identifier: C5:B1:18:2D:31:79:6F:A6:3E:C3:C1:D9:B9:7C:B6:AA:AC:34:FD:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/y5TDm0AbnF5uW1VYqN6HJrhTGH0.roa Signing time: Thu 01 Jan 2026 06:17:36 +0000 ROA not before: Thu 01 Jan 2026 06:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44085 IP address blocks: 91.199.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft rsync://rpki.ripe.net/repository/DEFAULT/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:5f:99:48:ec:3c:ca:6b:a0:19:51:83:58:a1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5b1182d31796fa63ec3c1d9b97cb6aaac34fdd9 Validity Not Before: Jan 1 06:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb94c39b401b9c5e6e5b5558a8de8726b853187d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0f:97:72:78:ea:1e:5c:c6:36:76:17:33:61: 8c:7f:11:9f:f3:28:bc:e9:94:a0:74:13:e9:51:5b: 56:0a:13:6d:2b:b1:6e:ba:de:7b:d5:60:54:fa:c4: 03:b5:7e:0a:70:c7:8c:9b:05:62:ef:74:76:6b:74: da:4b:07:d6:01:80:e7:82:93:04:33:5a:c5:72:c1: af:e8:da:7c:5d:7d:1d:0d:5f:62:42:29:48:90:bc: e9:4b:98:15:60:e7:36:17:38:9a:87:02:78:45:14: 19:cc:bf:7e:40:01:c9:a1:fd:22:4c:d9:bf:4a:d5: 87:d6:0b:0a:04:fe:d9:44:e5:fe:ec:78:c7:31:1e: 77:c2:06:18:e4:fe:ae:98:7e:18:41:6c:d0:31:f2: be:84:cf:2a:db:91:fe:5f:e1:0b:11:2f:34:fa:3d: 64:16:8c:33:71:86:5f:0b:6a:87:b1:49:fa:a9:ff: da:1c:e1:d7:2f:0a:bd:e1:57:81:92:7d:4b:e2:47: 5d:a9:fb:24:07:ff:bb:06:25:b6:aa:18:58:97:16: e0:a7:27:b1:66:1e:22:35:e3:cc:82:94:24:7e:13: 89:cd:6a:07:13:f9:63:03:54:3c:d6:ee:74:eb:45: e6:d3:23:7e:65:51:ca:75:2d:2e:ab:46:6a:c1:eb: 21:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:94:C3:9B:40:1B:9C:5E:6E:5B:55:58:A8:DE:87:26:B8:53:18:7D X509v3 Authority Key Identifier: keyid:C5:B1:18:2D:31:79:6F:A6:3E:C3:C1:D9:B9:7C:B6:AA:AC:34:FD:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/y5TDm0AbnF5uW1VYqN6HJrhTGH0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.23.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:18:f9:36:4e:e3:b7:e9:48:31:e6:28:44:ce:fb:c5:bf:8e: e3:5f:15:02:cc:6b:c9:20:f3:8e:bb:8d:21:58:dc:c9:bc:a7: d2:7b:a3:ae:49:e6:82:39:67:81:3f:4e:ef:27:72:7a:ec:b3: 83:00:24:9e:93:c8:b4:31:14:ea:88:ac:6a:18:f7:d9:fe:08: 68:88:b8:5d:21:3d:2a:23:c2:ce:e7:e8:77:07:24:a4:d1:34: a1:60:35:4a:c7:81:f3:b2:6e:64:9f:47:36:51:64:f3:79:ab: 5f:d3:e0:81:c9:0d:d6:d2:04:c9:29:f5:2d:4c:f1:d1:c5:6e: 12:81:f1:7a:dc:26:f9:0b:c1:f5:6d:7f:69:01:9b:fa:16:b2: 0f:59:2d:46:61:77:5f:4d:26:3f:4c:fb:ee:2a:6d:cc:30:38: e8:f0:f8:90:37:6b:9a:82:b2:8c:0e:03:c0:94:03:86:f6:12: 9e:31:da:3e:e7:83:74:e3:17:1d:f1:dc:ad:67:71:9c:b5:fb: 74:c9:88:a9:6c:19:d3:5c:cf:51:cc:9b:49:9e:eb:0e:b5:6a: 05:95:31:12:af:3d:cd:22:52:e1:1d:b4:05:39:2a:84:07:21: 0f:5f:d0:71:8a:8b:cc:a3:bf:03:3b:80:f3:42:db:bf:28:71: 46:7d:32:98 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NF+ZSOw8ymugGVGDWKGgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1YjExODJkMzE3OTZmYTYzZWMzYzFkOWI5N2NiNmFhYWMz NGZkZDkwHhcNMjYwMTAxMDYxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjk0YzM5YjQwMWI5YzVlNmU1YjU1NThhOGRlODcyNmI4NTMxODdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArw+XcnjqHlzGNnYXM2GMfxGf8yi8 6ZSgdBPpUVtWChNtK7Fuut571WBU+sQDtX4KcMeMmwVi73R2a3TaSwfWAYDngpME M1rFcsGv6Np8XX0dDV9iQilIkLzpS5gVYOc2FziahwJ4RRQZzL9+QAHJof0iTNm/ StWH1gsKBP7ZROX+7HjHMR53wgYY5P6umH4YQWzQMfK+hM8q25H+X+ELES80+j1k FowzcYZfC2qHsUn6qf/aHOHXLwq94VeBkn1L4kddqfskB/+7BiW2qhhYlxbgpyex Zh4iNePMgpQkfhOJzWoHE/ljA1Q81u5060Xm0yN+ZVHKdS0uq0ZqweshlwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMuUw5tAG5xebltVWKjehya4Uxh9MB8GA1UdIwQY MBaAFMWxGC0xeW+mPsPB2bl8tqqsNP3ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGJFWUxURjViNlktdzhIWnVYeTJxcXcwX2RrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8wZDMwMzItYmRhNC00YzZiLTgxYzkt OTI0MTYwMDcxNThlLzEveTVURG0wQWJuRjV1VzFWWXFONkhKcmhUR0gwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8wZDMwMzItYmRhNC00YzZiLTgxYzktOTI0MTYwMDcxNThl LzEveGJFWUxURjViNlktdzhIWnVYeTJxcXcwX2RrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8cXMA0G CSqGSIb3DQEBCwUAA4IBAQAOGPk2TuO36Ugx5ihEzvvFv47jXxUCzGvJIPOOu40h WNzJvKfSe6OuSeaCOWeBP07vJ3J67LODACSek8i0MRTqiKxqGPfZ/ghoiLhdIT0q I8LO5+h3BySk0TShYDVKx4Hzsm5kn0c2UWTzeatf0+CByQ3W0gTJKfUtTPHRxW4S gfF63Cb5C8H1bX9pAZv6FrIPWS1GYXdfTSY/TPvuKm3MMDjo8PiQN2uagrKMDgPA lAOG9hKeMdo+54N04xcd8dytZ3Gctft0yYipbBnTXM9RzJtJnusOtWoFlTESrz3N IlLhHbQFOSqEByEPX9BxiovMo78DO4DzQtu/KHFGfTKY -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:49 2026 by rpki-client