This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/5-dugcBchtXNBoxU8gQHmgyF3EY.roa File: 5-dugcBchtXNBoxU8gQHmgyF3EY.roa (raw, json) Hash identifier: d7JZa0tOh8DLsFD86kEU0q/71M3EzBvkFJCRMhMKG4c= Subject key identifier: E7:E7:6E:81:C0:5C:86:D5:CD:06:8C:54:F2:04:07:9A:0C:85:DC:46 Certificate issuer: /CN=23f8c999b30ce248e6c468c784d64d72f963e938 Certificate serial: 019B7F83802311BE6552C26C983494B1BB3D Authority key identifier: 23:F8:C9:99:B3:0C:E2:48:E6:C4:68:C7:84:D6:4D:72:F9:63:E9:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/5-dugcBchtXNBoxU8gQHmgyF3EY.roa Signing time: Fri 02 Jan 2026 16:21:22 +0000 ROA not before: Fri 02 Jan 2026 16:21:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198948 IP address blocks: 91.239.248.0/22 maxlen: 24 178.218.193.0/24 maxlen: 24 185.129.112.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft rsync://rpki.ripe.net/repository/DEFAULT/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:80:23:11:be:65:52:c2:6c:98:34:94:b1:bb:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23f8c999b30ce248e6c468c784d64d72f963e938 Validity Not Before: Jan 2 16:21:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e7e76e81c05c86d5cd068c54f204079a0c85dc46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:76:b6:79:16:76:5e:8e:c4:d3:f3:cd:e8:21: 8c:2e:b2:fb:b8:af:b2:cc:58:be:40:2f:e9:b4:8a: e3:97:1e:48:a1:92:12:66:a9:86:99:02:52:42:e8: 6b:ab:06:ec:56:00:9d:f5:44:f4:e4:35:4a:7a:d0: e4:bd:95:57:32:63:77:c2:4f:6b:cb:28:d9:11:70: 4f:a5:c8:c7:76:fa:7a:80:f8:21:e6:9b:c1:b6:b8: 90:0f:18:cb:2f:8f:26:59:68:d8:17:c7:59:c8:27: 8b:96:32:60:5f:ac:60:a8:56:76:b8:66:97:2f:33: aa:4f:cc:c1:a9:55:36:c5:95:ca:8c:a4:65:c5:99: 79:39:24:72:41:02:23:96:b4:f6:e1:fa:5e:9d:16: 57:a7:37:1b:7c:e6:ee:81:8b:1b:53:8c:6a:90:05: 80:39:ae:0c:fa:ac:97:a8:9b:07:85:03:97:97:99: ef:e9:26:51:be:0a:ff:84:e5:16:4d:a2:24:6b:d5: 28:ce:5d:70:b2:ce:37:c4:f8:2f:97:94:97:2c:b8: 25:9b:b3:ef:bb:20:e1:1d:6d:5c:a7:ac:b0:7f:5d: e6:68:57:96:90:5f:53:74:bd:ce:cd:90:db:fc:b3: c9:d5:7e:63:e5:25:46:9f:b3:46:20:bf:c9:03:46: 11:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:E7:6E:81:C0:5C:86:D5:CD:06:8C:54:F2:04:07:9A:0C:85:DC:46 X509v3 Authority Key Identifier: keyid:23:F8:C9:99:B3:0C:E2:48:E6:C4:68:C7:84:D6:4D:72:F9:63:E9:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/5-dugcBchtXNBoxU8gQHmgyF3EY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.239.248.0/22 178.218.193.0/24 185.129.112.0/22 Signature Algorithm: sha256WithRSAEncryption 97:77:5e:36:18:4a:2c:4c:9e:81:cc:85:81:e2:b6:49:6d:38: cd:15:06:88:13:73:64:1c:68:27:28:4b:2d:c5:2c:d3:a3:9b: 61:4b:32:d7:4d:b7:8b:35:06:5b:d6:75:bf:36:a7:1e:0d:df: ed:91:89:a7:81:f5:4d:f3:2f:f4:1c:d8:fa:b4:ea:88:a4:18: 1c:dc:40:1b:30:c3:79:5a:6c:01:7f:e7:55:5c:a1:5d:30:00: 0f:b6:7f:62:ba:55:c3:c1:ae:bf:74:cb:26:01:e7:fe:a6:9a: 23:64:63:1c:01:be:b9:c8:97:b3:d3:c2:f9:25:2d:e8:d4:86: 48:b2:8a:2f:4a:54:86:00:da:e0:1c:f6:00:48:e2:76:0f:c8: 49:ec:21:4e:0b:06:ff:ca:85:93:56:85:d0:02:8e:fc:53:1d: 73:7e:06:c5:4a:e4:cb:70:36:5c:8f:2d:1d:66:f5:b1:ee:ec: b4:7b:3a:3d:02:dc:e6:e1:a1:1f:6d:f2:ed:5f:7b:26:c9:5a: 4e:41:1c:9c:b8:77:f1:e4:d8:1d:ad:84:6f:53:82:e0:3a:a2: 13:1f:bc:9c:b4:3d:33:6f:1a:61:13:ac:b4:22:df:c3:d3:dd: 44:dc:68:99:67:a3:c1:16:17:8f:16:3d:3c:a5:2d:31:d3:ac: 91:1a:de:f9 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/g4AjEb5lUsJsmDSUsbs9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZjhjOTk5YjMwY2UyNDhlNmM0NjhjNzg0ZDY0ZDcyZjk2 M2U5MzgwHhcNMjYwMTAyMTYyMTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlN2U3NmU4MWMwNWM4NmQ1Y2QwNjhjNTRmMjA0MDc5YTBjODVkYzQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3a2eRZ2Xo7E0/PN6CGMLrL7uK+y zFi+QC/ptIrjlx5IoZISZqmGmQJSQuhrqwbsVgCd9UT05DVKetDkvZVXMmN3wk9r yyjZEXBPpcjHdvp6gPgh5pvBtriQDxjLL48mWWjYF8dZyCeLljJgX6xgqFZ2uGaX LzOqT8zBqVU2xZXKjKRlxZl5OSRyQQIjlrT24fpenRZXpzcbfObugYsbU4xqkAWA Oa4M+qyXqJsHhQOXl5nv6SZRvgr/hOUWTaIka9Uozl1wss43xPgvl5SXLLglm7Pv uyDhHW1cp6ywf13maFeWkF9TdL3OzZDb/LPJ1X5j5SVGn7NGIL/JA0YR4QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFOfnboHAXIbVzQaMVPIEB5oMhdxGMB8GA1UdIwQY MBaAFCP4yZmzDOJI5sRox4TWTXL5Y+k4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSV9qSm1iTU00a2pteEdqSGhOWk5jdmxqNlRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS84NTMyMTgtYWM2ZS00ZjljLWE5NTkt M2RmNTQ5YTA2ZDViLzEvNS1kdWdjQmNodFhOQm94VThnUUhtZ3lGM0VZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS84NTMyMTgtYWM2ZS00ZjljLWE5NTktM2RmNTQ5YTA2ZDVi LzEvSV9qSm1iTU00a2pteEdqSGhOWk5jdmxqNlRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCW+/4AwQA strBAwQCuYFwMA0GCSqGSIb3DQEBCwUAA4IBAQCXd142GEosTJ6BzIWB4rZJbTjN FQaIE3NkHGgnKEstxSzTo5thSzLXTbeLNQZb1nW/NqceDd/tkYmngfVN8y/0HNj6 tOqIpBgc3EAbMMN5WmwBf+dVXKFdMAAPtn9iulXDwa6/dMsmAef+ppojZGMcAb65 yJez08L5JS3o1IZIsoovSlSGANrgHPYASOJ2D8hJ7CFOCwb/yoWTVoXQAo78Ux1z fgbFSuTLcDZcjy0dZvWx7uy0ezo9Atzm4aEfbfLtX3smyVpOQRycuHfx5NgdrYRv U4LgOqITH7yctD0zbxphE6y0It/D091E3GiZZ6PBFhePFj08pS0x06yRGt75 -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:41 2026 by rpki-client