This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/i-hrmAd6eP2UJtkk3SPMJzG0IR4.roa File: i-hrmAd6eP2UJtkk3SPMJzG0IR4.roa (raw, json) Hash identifier: B6teHj1AoVH0G/n45VB0pZwR7t3AJ0lfJJi8U5XTRvo= Subject key identifier: 8B:E8:6B:98:07:7A:78:FD:94:26:D9:24:DD:23:CC:27:31:B4:21:1E Certificate issuer: /CN=53cbd1477044a03404c7fc43961c2c83bba75bbc Certificate serial: 019B7EA4F80185F8C5FCFB472E6EB2ADA330 Authority key identifier: 53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/i-hrmAd6eP2UJtkk3SPMJzG0IR4.roa Signing time: Fri 02 Jan 2026 12:18:19 +0000 ROA not before: Fri 02 Jan 2026 12:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208552 IP address blocks: 91.211.24.0/24 maxlen: 24 193.254.222.0/24 maxlen: 24 193.254.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:f8:01:85:f8:c5:fc:fb:47:2e:6e:b2:ad:a3:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53cbd1477044a03404c7fc43961c2c83bba75bbc Validity Not Before: Jan 2 12:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8be86b98077a78fd9426d924dd23cc2731b4211e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:f5:75:d9:6e:86:52:e9:85:37:36:65:97:b4: 00:a2:45:1f:0a:45:e6:5c:43:58:b9:f2:c3:9d:0d: e6:81:4a:51:33:d9:50:0c:1d:74:57:e7:36:5d:af: a4:e5:07:06:76:e7:e7:33:93:7d:2a:f7:9d:6b:23: 35:9c:6e:af:a7:e2:01:19:b1:d7:20:a7:11:05:65: 3a:94:1e:18:db:c2:d2:e7:ee:43:5d:41:f2:3d:ce: 44:cc:e3:64:48:28:3d:6b:3b:45:9f:ff:0f:74:c1: 36:69:72:fe:1a:22:83:04:57:8c:03:8e:3c:fe:6a: 6f:cb:c1:f5:7c:a1:0d:5d:df:55:05:78:00:f0:b5: 10:a0:89:eb:b5:47:04:ef:61:2f:87:ed:0f:38:bd: 45:57:89:a7:8b:2a:8f:50:d6:8d:83:95:f6:60:4f: f2:2b:a4:9a:54:2b:c9:1a:a9:a3:1b:14:fd:87:f3: be:1d:4b:b7:29:ba:96:f5:42:2e:f0:b0:6f:21:d0: 1b:89:24:ed:a6:1b:e2:44:6c:53:f1:c3:c3:7f:12: dc:be:41:95:a1:5f:3e:10:cb:c4:0a:19:e2:1c:0d: e5:3a:34:d2:ce:30:3c:f8:46:1e:1e:c5:7f:df:63: 82:9f:dd:79:e6:c3:d2:70:a8:97:26:d3:bb:25:19: ab:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:E8:6B:98:07:7A:78:FD:94:26:D9:24:DD:23:CC:27:31:B4:21:1E X509v3 Authority Key Identifier: keyid:53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/i-hrmAd6eP2UJtkk3SPMJzG0IR4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.211.24.0/24 193.254.222.0/23 Signature Algorithm: sha256WithRSAEncryption 1a:6a:60:aa:ab:40:d6:d2:d5:ef:50:bd:46:d5:aa:01:52:7e: 59:4d:cf:7e:48:08:7d:98:42:f5:11:d6:6d:db:23:ee:7f:ba: d8:9c:a0:c6:2e:ed:ce:72:07:e3:11:0f:db:74:c4:0a:3c:66: 4c:63:ee:bc:9a:8c:d2:dd:28:c3:ed:24:60:06:b1:d2:6c:70: 28:43:ed:d2:c3:75:cc:50:4a:11:97:4a:e6:49:1e:a3:c9:6a: 18:7f:f2:d9:10:31:f6:4d:03:05:ee:0b:8f:a6:1b:86:3a:e7: 54:3c:f4:54:0b:8c:6e:22:b6:1d:c6:10:0e:b3:1f:cc:67:9b: 2a:45:f0:14:2f:69:a8:b1:ce:48:11:38:29:17:7f:e0:e0:8b: b7:20:b5:cd:74:d6:93:cf:6a:65:bb:5c:13:9a:6c:e5:dc:7a: a5:8c:08:f4:f8:54:f1:7c:2d:2d:5f:cf:06:2e:91:39:ab:74: 20:de:60:79:89:86:14:ce:06:d3:c5:96:38:f1:d1:76:7c:b5: e4:0c:74:f4:27:bb:01:68:6b:f6:bf:e6:c3:86:44:27:96:d3: c6:c0:63:cd:b0:51:f3:8a:ca:d7:8c:d0:fe:30:37:9c:ac:1b: 31:30:7f:fd:10:b5:66:99:7f:08:e1:3a:8c:e5:85:24:4c:2a: dd:f4:ff:c3 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+pPgBhfjF/PtHLm6yraMwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzY2JkMTQ3NzA0NGEwMzQwNGM3ZmM0Mzk2MWMyYzgzYmJh NzViYmMwHhcNMjYwMTAyMTIxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YmU4NmI5ODA3N2E3OGZkOTQyNmQ5MjRkZDIzY2MyNzMxYjQyMTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5vV12W6GUumFNzZll7QAokUfCkXm XENYufLDnQ3mgUpRM9lQDB10V+c2Xa+k5QcGdufnM5N9KvedayM1nG6vp+IBGbHX IKcRBWU6lB4Y28LS5+5DXUHyPc5EzONkSCg9aztFn/8PdME2aXL+GiKDBFeMA448 /mpvy8H1fKENXd9VBXgA8LUQoInrtUcE72Evh+0POL1FV4mniyqPUNaNg5X2YE/y K6SaVCvJGqmjGxT9h/O+HUu3KbqW9UIu8LBvIdAbiSTtphviRGxT8cPDfxLcvkGV oV8+EMvEChniHA3lOjTSzjA8+EYeHsV/32OCn9155sPScKiXJtO7JRmrtQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIvoa5gHenj9lCbZJN0jzCcxtCEeMB8GA1UdIwQY MBaAFFPL0UdwRKA0BMf8Q5YcLIO7p1u8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTh2UlIzQkVvRFFFeF94RGxod3NnN3VuVzd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kY2U0NGEtNGE5MC00M2VhLWIxZmIt YTJkMTE2NTYwYWNhLzEvaS1ocm1BZDZlUDJVSnRrazNTUE1KekcwSVI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9kY2U0NGEtNGE5MC00M2VhLWIxZmItYTJkMTE2NTYwYWNh LzEvVTh2UlIzQkVvRFFFeF94RGxod3NnN3VuVzd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9MYAwQB wf7eMA0GCSqGSIb3DQEBCwUAA4IBAQAaamCqq0DW0tXvUL1G1aoBUn5ZTc9+SAh9 mEL1EdZt2yPuf7rYnKDGLu3OcgfjEQ/bdMQKPGZMY+68mozS3SjD7SRgBrHSbHAo Q+3Sw3XMUEoRl0rmSR6jyWoYf/LZEDH2TQMF7guPphuGOudUPPRUC4xuIrYdxhAO sx/MZ5sqRfAUL2mosc5IETgpF3/g4Iu3ILXNdNaTz2plu1wTmmzl3HqljAj0+FTx fC0tX88GLpE5q3Qg3mB5iYYUzgbTxZY48dF2fLXkDHT0J7sBaGv2v+bDhkQnltPG wGPNsFHzisrXjND+MDecrBsxMH/9ELVmmX8I4TqM5YUkTCrd9P/D -----END CERTIFICATE-----Generated at Sat Jan 10 22:07:04 2026 by rpki-client