This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/X5cruhSfs-bcqraXt11JGdkkWoM.roa File: X5cruhSfs-bcqraXt11JGdkkWoM.roa (raw, json) Hash identifier: ZSQ2DG8b3yrrUNbqmElYxiRoLHUdomd9OU/pi5rywfU= Subject key identifier: 5F:97:2B:BA:14:9F:B3:E6:DC:AA:B6:97:B7:5D:49:19:D9:24:5A:83 Certificate issuer: /CN=2091a77f7c424e9127398473bfa3a2b9727ebb45 Certificate serial: 019B7AC7D3CF8A937725B1DC8EB8F161DFFB Authority key identifier: 20:91:A7:7F:7C:42:4E:91:27:39:84:73:BF:A3:A2:B9:72:7E:BB:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/X5cruhSfs-bcqraXt11JGdkkWoM.roa Signing time: Thu 01 Jan 2026 18:17:54 +0000 ROA not before: Thu 01 Jan 2026 18:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201434 IP address blocks: 91.194.138.0/24 maxlen: 24 146.255.190.0/24 maxlen: 24 185.75.36.0/22 maxlen: 22 193.29.207.0/24 maxlen: 24 194.126.238.0/24 maxlen: 24 2a03:4620::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft rsync://rpki.ripe.net/repository/DEFAULT/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:d3:cf:8a:93:77:25:b1:dc:8e:b8:f1:61:df:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2091a77f7c424e9127398473bfa3a2b9727ebb45 Validity Not Before: Jan 1 18:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f972bba149fb3e6dcaab697b75d4919d9245a83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f5:7f:a7:7e:a8:ba:06:45:21:05:1c:a1:9a: 40:6a:46:23:c0:74:6b:35:69:e8:bf:15:78:9f:6a: b2:ad:da:04:2b:26:78:b9:ac:e7:82:a8:e2:84:78: 20:9e:c8:c5:0c:e0:2f:a4:7f:76:45:d8:8c:50:7e: ae:75:98:79:30:31:8a:95:c5:80:4a:52:c6:0b:29: 0c:12:41:92:8d:89:46:9d:70:7d:b5:90:c0:8b:36: ee:53:86:11:b0:c7:88:ce:85:bf:0f:03:ce:e4:76: ed:bc:ab:9c:20:cd:4c:ff:8b:42:e9:b7:bc:16:fc: 39:2a:03:3b:82:9a:cf:5b:19:9e:ec:0d:59:18:12: e7:0b:67:6a:b5:f8:70:96:fb:64:a3:08:6c:66:68: a8:74:5f:5d:a4:40:07:01:25:06:bd:4a:d1:36:b4: 07:73:39:31:ee:69:79:ee:1c:fa:37:18:3c:65:16: f5:98:cd:71:92:d0:9d:fd:60:bd:05:55:d0:5b:5b: 76:24:cf:68:d8:61:95:90:5d:d1:2e:97:50:2e:dd: 73:5f:ab:df:21:01:39:9c:74:6f:2a:b6:7f:fc:66: 8b:45:65:c7:e7:27:8e:57:56:86:91:96:77:39:ad: 18:87:d2:e7:57:ec:a5:04:bb:42:65:4b:6a:81:b1: b3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:97:2B:BA:14:9F:B3:E6:DC:AA:B6:97:B7:5D:49:19:D9:24:5A:83 X509v3 Authority Key Identifier: keyid:20:91:A7:7F:7C:42:4E:91:27:39:84:73:BF:A3:A2:B9:72:7E:BB:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/X5cruhSfs-bcqraXt11JGdkkWoM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.194.138.0/24 146.255.190.0/24 185.75.36.0/22 193.29.207.0/24 194.126.238.0/24 IPv6: 2a03:4620::/32 Signature Algorithm: sha256WithRSAEncryption 7f:d4:f5:a5:23:91:3a:6f:f9:d1:df:af:2d:9f:34:b9:64:e0: f0:3c:bb:ef:e0:22:d6:f1:dd:82:34:57:16:8a:23:db:a3:33: 44:38:ba:48:23:d9:34:b7:ec:2f:75:0a:8f:fd:e8:6d:57:9a: 51:fd:e2:01:97:83:46:69:b7:ef:5b:8a:cd:c4:d4:14:ef:f7: bd:65:a0:b9:33:a0:49:5c:ce:e7:b5:a8:7b:2e:c0:00:61:39: 97:59:2f:61:e2:7d:51:c8:8a:91:48:24:ea:17:a2:03:96:96: cf:ed:f1:9b:a9:fb:fa:cd:c6:83:15:c2:2b:78:15:65:c3:ca: b3:25:45:79:db:22:6a:2d:ab:75:fd:14:e0:93:72:20:f9:8c: a4:1e:f6:0d:6c:a3:d1:95:5a:b0:5f:f0:1e:9f:0d:6a:69:01: ca:ce:6b:20:1c:05:dd:a3:ad:22:74:8c:7d:5a:c3:b1:bd:7d: 4a:ff:27:1a:ae:43:0c:27:d0:6f:c1:05:af:ce:0a:b6:1d:4d: 12:ba:eb:a1:2d:c1:9a:1d:a5:ea:41:6c:2c:b0:64:98:f4:e1: 63:92:b2:9d:d4:d0:2e:7b:e7:0a:f6:ec:62:29:6e:c2:ed:8c: 25:f9:6d:bb:72:a4:48:68:72:4e:0a:99:80:7a:06:c3:48:b5: d1:26:f8:a2 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt6x9PPipN3JbHcjrjxYd/7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwOTFhNzdmN2M0MjRlOTEyNzM5ODQ3M2JmYTNhMmI5NzI3 ZWJiNDUwHhcNMjYwMTAxMTgxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Zjk3MmJiYTE0OWZiM2U2ZGNhYWI2OTdiNzVkNDkxOWQ5MjQ1YTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvV/p36ougZFIQUcoZpAakYjwHRr NWnovxV4n2qyrdoEKyZ4uazngqjihHggnsjFDOAvpH92RdiMUH6udZh5MDGKlcWA SlLGCykMEkGSjYlGnXB9tZDAizbuU4YRsMeIzoW/DwPO5HbtvKucIM1M/4tC6be8 Fvw5KgM7gprPWxme7A1ZGBLnC2dqtfhwlvtkowhsZmiodF9dpEAHASUGvUrRNrQH czkx7ml57hz6Nxg8ZRb1mM1xktCd/WC9BVXQW1t2JM9o2GGVkF3RLpdQLt1zX6vf IQE5nHRvKrZ//GaLRWXH5yeOV1aGkZZ3Oa0Yh9LnV+ylBLtCZUtqgbGzOQIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFF+XK7oUn7Pm3Kq2l7ddSRnZJFqDMB8GA1UdIwQY MBaAFCCRp398Qk6RJzmEc7+jorlyfrtFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUpHbmYzeENUcEVuT1lSenY2T2l1WEotdTBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8wNmIzMTctOTExNC00MjZiLTk5ODMt OWEyMjk3ODBlMGJlLzEvWDVjcnVoU2ZzLWJjcXJhWHQxMUpHZGtrV29NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8wNmIzMTctOTExNC00MjZiLTk5ODMtOWEyMjk3ODBlMGJl LzEvSUpHbmYzeENUcEVuT1lSenY2T2l1WEotdTBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQAW8KKAwQA kv++AwQCuUskAwQAwR3PAwQAwn7uMA0EAgACMAcDBQAqA0YgMA0GCSqGSIb3DQEB CwUAA4IBAQB/1PWlI5E6b/nR368tnzS5ZODwPLvv4CLW8d2CNFcWiiPbozNEOLpI I9k0t+wvdQqP/ehtV5pR/eIBl4NGabfvW4rNxNQU7/e9ZaC5M6BJXM7ntah7LsAA YTmXWS9h4n1RyIqRSCTqF6IDlpbP7fGbqfv6zcaDFcIreBVlw8qzJUV52yJqLat1 /RTgk3Ig+YykHvYNbKPRlVqwX/Aenw1qaQHKzmsgHAXdo60idIx9WsOxvX1K/yca rkMMJ9BvwQWvzgq2HU0SuuuhLcGaHaXqQWwssGSY9OFjkrKd1NAue+cK9uxiKW7C 7Ywl+W27cqRIaHJOCpmAegbDSLXRJvii -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:30 2026 by rpki-client