This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/f5c6ba-170d-47c5-9c7c-1766a277d85b/1/R5RdCB9jBqc-I8sQkC7bDMJCJEM.roa File: R5RdCB9jBqc-I8sQkC7bDMJCJEM.roa (raw, json) Hash identifier: TI8xD7ZekXFKyUpXLrhp0xuP0vXKDHQ1CwoOHjH85AQ= Subject key identifier: 47:94:5D:08:1F:63:06:A7:3E:23:CB:10:90:2E:DB:0C:C2:42:24:43 Certificate issuer: /CN=4dd23422264a79c0315482ed4f27c751353f26bb Certificate serial: 019B7C80690F1C4A8CB3F074F23BACAAB2FD Authority key identifier: 4D:D2:34:22:26:4A:79:C0:31:54:82:ED:4F:27:C7:51:35:3F:26:BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdI0IiZKecAxVILtTyfHUTU_Jrs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/f5c6ba-170d-47c5-9c7c-1766a277d85b/1/R5RdCB9jBqc-I8sQkC7bDMJCJEM.roa Signing time: Fri 02 Jan 2026 02:19:08 +0000 ROA not before: Fri 02 Jan 2026 02:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43625 IP address blocks: 91.198.84.0/24 maxlen: 24 109.232.48.0/21 maxlen: 21 185.160.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/f5c6ba-170d-47c5-9c7c-1766a277d85b/1/TdI0IiZKecAxVILtTyfHUTU_Jrs.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/f5c6ba-170d-47c5-9c7c-1766a277d85b/1/TdI0IiZKecAxVILtTyfHUTU_Jrs.mft rsync://rpki.ripe.net/repository/DEFAULT/TdI0IiZKecAxVILtTyfHUTU_Jrs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:69:0f:1c:4a:8c:b3:f0:74:f2:3b:ac:aa:b2:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd23422264a79c0315482ed4f27c751353f26bb Validity Not Before: Jan 2 02:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=47945d081f6306a73e23cb10902edb0cc2422443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f0:1f:e4:9d:4e:72:3b:a6:8d:4d:b7:6c:3c: 55:02:9d:9a:0e:eb:07:e5:45:fe:2e:f3:45:d9:0b: 65:c3:82:dd:1f:4f:30:84:9e:44:92:af:5a:f7:22: 76:74:98:92:e7:01:17:7b:50:92:48:2e:fe:ba:79: 39:75:8a:cc:aa:3d:56:44:85:6a:69:d8:d3:1f:51: f3:e7:a8:6f:a7:d4:bf:25:d4:af:39:e3:ff:03:a7: c6:6d:cb:f3:ba:4f:06:02:93:fd:03:1d:f0:6a:b4: 93:43:63:99:fb:07:9b:55:44:05:6d:81:88:d7:5b: 88:aa:76:ef:8e:ca:e9:a1:8d:6c:ca:d2:a7:5e:0b: 21:f3:ec:22:43:28:c5:4c:ad:11:4c:1b:9e:5e:7d: 7a:8f:ac:4c:c0:6a:d1:75:d8:ec:a0:85:c7:df:6f: 5a:c2:84:aa:75:fd:89:0b:39:a5:e9:83:8b:f6:b4: 49:b2:06:c7:e2:e5:e0:0b:06:f6:bc:35:a9:89:70: 22:2f:40:0a:1b:ec:e7:a1:2c:fb:f1:3b:c8:8e:f3: 62:73:13:5c:77:00:45:dd:11:b9:da:40:5c:78:47: 76:6d:19:28:6f:0e:a2:cd:fb:29:ce:8e:f3:75:38: 60:25:ce:07:5a:4f:8e:92:a0:9b:df:cf:0f:fc:51: 57:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:94:5D:08:1F:63:06:A7:3E:23:CB:10:90:2E:DB:0C:C2:42:24:43 X509v3 Authority Key Identifier: keyid:4D:D2:34:22:26:4A:79:C0:31:54:82:ED:4F:27:C7:51:35:3F:26:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdI0IiZKecAxVILtTyfHUTU_Jrs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/f5c6ba-170d-47c5-9c7c-1766a277d85b/1/R5RdCB9jBqc-I8sQkC7bDMJCJEM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/f5c6ba-170d-47c5-9c7c-1766a277d85b/1/TdI0IiZKecAxVILtTyfHUTU_Jrs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.84.0/24 109.232.48.0/21 185.160.132.0/22 Signature Algorithm: sha256WithRSAEncryption 02:32:86:a5:0b:13:bf:12:30:c4:30:0a:3c:cf:e7:60:e8:9f: 55:b3:a4:d7:e3:51:71:dd:6b:e0:77:da:6e:9e:aa:c5:19:1c: 9d:6a:55:32:61:37:8d:54:9c:41:53:ec:52:3e:4b:23:8e:4d: fa:f1:3a:dd:9e:df:33:40:36:ba:ea:e9:96:e8:1b:38:5a:ae: 3f:d9:70:06:14:90:5a:38:a5:f8:93:81:59:1f:77:70:4f:b9: 41:6a:33:33:ba:ff:dd:95:00:fb:30:eb:29:60:6f:ae:c9:b1: 8a:3b:af:b0:8f:ce:85:aa:72:83:be:bc:76:9a:42:c7:3f:16: 45:91:c2:ea:54:8f:9a:85:e0:1b:0d:d6:98:95:65:a7:fd:22: 46:5d:1b:94:a2:82:f5:35:43:b0:2e:b6:45:6e:58:bc:e5:73: 80:0c:e7:b9:ec:5b:e7:47:fe:0b:30:2e:a7:49:47:a2:ad:e3: 70:88:f8:ff:18:e3:2d:85:ab:3f:2e:cb:08:89:04:a8:d4:0f: 39:f1:a7:e7:11:2c:ce:bd:58:4f:e6:7f:bc:7a:9d:f9:f0:77: d0:cb:57:79:05:37:43:7c:58:65:ef:79:7c:d5:cf:c6:dd:4e: 9e:99:18:0f:26:34:50:43:12:a3:ff:65:c3:0f:9b:50:31:89: 59:0a:52:18 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8gGkPHEqMs/B08jusqrL9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDIzNDIyMjY0YTc5YzAzMTU0ODJlZDRmMjdjNzUxMzUz ZjI2YmIwHhcNMjYwMTAyMDIxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Nzk0NWQwODFmNjMwNmE3M2UyM2NiMTA5MDJlZGIwY2MyNDIyNDQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vAf5J1OcjumjU23bDxVAp2aDusH 5UX+LvNF2Qtlw4LdH08whJ5Ekq9a9yJ2dJiS5wEXe1CSSC7+unk5dYrMqj1WRIVq adjTH1Hz56hvp9S/JdSvOeP/A6fGbcvzuk8GApP9Ax3warSTQ2OZ+webVUQFbYGI 11uIqnbvjsrpoY1sytKnXgsh8+wiQyjFTK0RTBueXn16j6xMwGrRddjsoIXH329a woSqdf2JCzml6YOL9rRJsgbH4uXgCwb2vDWpiXAiL0AKG+znoSz78TvIjvNicxNc dwBF3RG52kBceEd2bRkobw6izfspzo7zdThgJc4HWk+OkqCb388P/FFX8wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFEeUXQgfYwanPiPLEJAu2wzCQiRDMB8GA1UdIwQY MBaAFE3SNCImSnnAMVSC7U8nx1E1Pya7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRJMElpWktlY0F4VklMdFR5ZkhVVFVfSnJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9mNWM2YmEtMTcwZC00N2M1LTljN2Mt MTc2NmEyNzdkODViLzEvUjVSZENCOWpCcWMtSThzUWtDN2JETUpDSkVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9mNWM2YmEtMTcwZC00N2M1LTljN2MtMTc2NmEyNzdkODVi LzEvVGRJMElpWktlY0F4VklMdFR5ZkhVVFVfSnJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW8ZUAwQD begwAwQCuaCEMA0GCSqGSIb3DQEBCwUAA4IBAQACMoalCxO/EjDEMAo8z+dg6J9V s6TX41Fx3Wvgd9punqrFGRydalUyYTeNVJxBU+xSPksjjk368Trdnt8zQDa66umW 6Bs4Wq4/2XAGFJBaOKX4k4FZH3dwT7lBajMzuv/dlQD7MOspYG+uybGKO6+wj86F qnKDvrx2mkLHPxZFkcLqVI+aheAbDdaYlWWn/SJGXRuUooL1NUOwLrZFbli85XOA DOe57FvnR/4LMC6nSUeireNwiPj/GOMthas/LssIiQSo1A858afnESzOvVhP5n+8 ep358HfQy1d5BTdDfFhl73l81c/G3U6emRgPJjRQQxKj/2XDD5tQMYlZClIY -----END CERTIFICATE-----Generated at Mon Feb 9 23:45:59 2026 by rpki-client