This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/5yHtrBRoK5Q4zbFAHbMdThNdZIE.roa File: 5yHtrBRoK5Q4zbFAHbMdThNdZIE.roa (raw, json) Hash identifier: uoMSiABNR17F9m6eX/S3mZE2twR2jgvrbl3hf1Zk98s= Subject key identifier: E7:21:ED:AC:14:68:2B:94:38:CD:B1:40:1D:B3:1D:4E:13:5D:64:81 Certificate issuer: /CN=d330dcad1e35324549c1c9a19417ab6a4d09ade0 Certificate serial: 019B7834EEDEA7BCF1E4BB90696AEBC4622F Authority key identifier: D3:30:DC:AD:1E:35:32:45:49:C1:C9:A1:94:17:AB:6A:4D:09:AD:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/5yHtrBRoK5Q4zbFAHbMdThNdZIE.roa Signing time: Thu 01 Jan 2026 06:18:13 +0000 ROA not before: Thu 01 Jan 2026 06:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51195 IP address blocks: 91.216.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:ee:de:a7:bc:f1:e4:bb:90:69:6a:eb:c4:62:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d330dcad1e35324549c1c9a19417ab6a4d09ade0 Validity Not Before: Jan 1 06:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e721edac14682b9438cdb1401db31d4e135d6481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:53:b6:25:47:5e:3a:fb:0d:d5:92:4f:82:df: a0:4d:dd:2a:94:f9:24:31:26:97:0e:06:89:4a:53: f8:12:2b:51:8a:5e:01:95:4e:6a:2e:66:4e:08:35: e3:1a:4b:a5:92:0b:07:65:3b:7f:bc:cd:81:a3:ea: 56:cc:78:22:6d:ba:cb:68:bd:b2:5b:e3:63:30:9d: d2:b4:f1:a3:a5:01:f3:0c:1f:af:fa:59:de:db:d4: 8e:28:e7:20:06:0c:e5:2f:ff:f3:a1:6e:84:bd:58: 9f:cd:42:05:5b:40:95:25:8c:03:f0:30:6a:c5:9c: be:bc:29:8c:02:6d:de:a9:46:fe:2e:eb:ed:90:6a: 67:c0:d0:d1:c5:3d:b4:51:48:32:6d:6d:3a:29:de: bf:96:04:17:b3:0d:e2:81:3e:e7:1b:67:f2:3b:00: 1a:31:f1:e9:82:17:a5:17:f1:6e:6d:af:57:a4:e7: db:79:de:ec:88:5f:ca:e4:c3:2e:f7:89:c8:f4:75: fb:60:e5:fa:2a:92:6c:a6:15:3f:3e:42:b2:58:a0: f9:93:26:88:a9:73:b1:11:42:7f:fb:0f:c4:81:bb: 0a:55:55:06:0e:d3:70:67:48:e7:0e:93:79:82:69: 21:c9:fd:63:f4:fe:72:69:72:51:d9:8d:9b:89:42: ef:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:21:ED:AC:14:68:2B:94:38:CD:B1:40:1D:B3:1D:4E:13:5D:64:81 X509v3 Authority Key Identifier: keyid:D3:30:DC:AD:1E:35:32:45:49:C1:C9:A1:94:17:AB:6A:4D:09:AD:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/5yHtrBRoK5Q4zbFAHbMdThNdZIE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.199.0/24 Signature Algorithm: sha256WithRSAEncryption 88:bc:82:71:92:a2:02:1e:a1:c6:69:12:61:74:57:dd:a8:f5: ba:96:2d:79:17:8e:85:04:95:11:7c:44:89:05:54:c6:fe:79: 1e:78:34:c4:b0:b6:a5:2a:35:79:e7:11:04:17:91:43:9c:ca: 2c:6d:c3:25:c2:fc:d3:3f:5b:18:01:2a:f4:23:d8:d2:f5:02: 62:c0:3b:12:4f:df:50:a3:1f:8d:a3:91:e0:bb:3e:e2:74:df: c8:4a:05:50:65:1a:90:c8:59:32:de:03:60:b9:40:c2:02:b9: 76:69:9e:47:8f:2c:46:76:9d:68:22:e3:5a:39:fe:d0:92:00: 22:70:92:cd:61:76:a7:74:19:d1:76:4c:ef:73:dd:11:7d:73: 8c:04:b2:d1:38:65:46:90:d4:94:56:ad:ff:a9:2d:03:7f:42: 74:b7:ee:48:ee:14:1c:5c:31:95:dd:01:e6:b7:e6:cf:0c:b5: 7a:5b:57:d6:b2:c4:94:ce:a8:c2:1d:44:94:9e:b1:02:67:a6: bb:31:15:e9:81:e6:ab:9f:1d:ba:54:d2:44:c7:c0:66:1e:ec: 69:e8:6f:08:d5:5a:24:b6:d4:de:03:a1:57:4d:cc:a4:39:52: 69:82:8a:1b:4d:fc:8a:ba:4d:29:37:f9:f3:07:79:27:52:a6: 54:b3:56:e5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NO7ep7zx5LuQaWrrxGIvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzMzBkY2FkMWUzNTMyNDU0OWMxYzlhMTk0MTdhYjZhNGQw OWFkZTAwHhcNMjYwMTAxMDYxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzIxZWRhYzE0NjgyYjk0MzhjZGIxNDAxZGIzMWQ0ZTEzNWQ2NDgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1O2JUdeOvsN1ZJPgt+gTd0qlPkk MSaXDgaJSlP4EitRil4BlU5qLmZOCDXjGkulkgsHZTt/vM2Bo+pWzHgibbrLaL2y W+NjMJ3StPGjpQHzDB+v+lne29SOKOcgBgzlL//zoW6EvVifzUIFW0CVJYwD8DBq xZy+vCmMAm3eqUb+LuvtkGpnwNDRxT20UUgybW06Kd6/lgQXsw3igT7nG2fyOwAa MfHpghelF/Fuba9XpOfbed7siF/K5MMu94nI9HX7YOX6KpJsphU/PkKyWKD5kyaI qXOxEUJ/+w/EgbsKVVUGDtNwZ0jnDpN5gmkhyf1j9P5yaXJR2Y2biULvawIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOch7awUaCuUOM2xQB2zHU4TXWSBMB8GA1UdIwQY MBaAFNMw3K0eNTJFScHJoZQXq2pNCa3gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHpEY3JSNDFNa1ZKd2NtaGxCZXJhazBKcmVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9mODBkZDQtZjE4NC00NWE4LWI1OGQt NjY1MTdhM2FjMTlkLzEvNXlIdHJCUm9LNVE0emJGQUhiTWRUaE5kWklFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9mODBkZDQtZjE4NC00NWE4LWI1OGQtNjY1MTdhM2FjMTlk LzEvMHpEY3JSNDFNa1ZKd2NtaGxCZXJhazBKcmVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9jHMA0G CSqGSIb3DQEBCwUAA4IBAQCIvIJxkqICHqHGaRJhdFfdqPW6li15F46FBJURfESJ BVTG/nkeeDTEsLalKjV55xEEF5FDnMosbcMlwvzTP1sYASr0I9jS9QJiwDsST99Q ox+No5Hguz7idN/ISgVQZRqQyFky3gNguUDCArl2aZ5HjyxGdp1oIuNaOf7QkgAi cJLNYXandBnRdkzvc90RfXOMBLLROGVGkNSUVq3/qS0Df0J0t+5I7hQcXDGV3QHm t+bPDLV6W1fWssSUzqjCHUSUnrECZ6a7MRXpgearnx26VNJEx8BmHuxp6G8I1Vok ttTeA6FXTcykOVJpgoobTfyKuk0pN/nzB3knUqZUs1bl -----END CERTIFICATE-----Generated at Mon Feb 9 18:44:24 2026 by rpki-client