This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/5Exteqie3KsBngcWjYUU_zanfa8.roa File: 5Exteqie3KsBngcWjYUU_zanfa8.roa (raw, json) Hash identifier: PdNLvFWIBwQQSvbTJF82uHlbPL/7rLb8bBwlQCZrRe8= Subject key identifier: E4:4C:6D:7A:A8:9E:DC:AB:01:9E:07:16:8D:85:14:FF:36:A7:7D:AF Certificate issuer: /CN=0bd4ad95f17f397207a3fc0d186f2913df38eb93 Certificate serial: 019B7910BA549A0DE9E4C7E9D3DB37348075 Authority key identifier: 0B:D4:AD:95:F1:7F:39:72:07:A3:FC:0D:18:6F:29:13:DF:38:EB:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/5Exteqie3KsBngcWjYUU_zanfa8.roa Signing time: Thu 01 Jan 2026 10:18:18 +0000 ROA not before: Thu 01 Jan 2026 10:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48440 IP address blocks: 91.210.188.0/24 maxlen: 24 91.210.189.0/24 maxlen: 24 91.210.190.0/24 maxlen: 24 91.210.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 07:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:ba:54:9a:0d:e9:e4:c7:e9:d3:db:37:34:80:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bd4ad95f17f397207a3fc0d186f2913df38eb93 Validity Not Before: Jan 1 10:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e44c6d7aa89edcab019e07168d8514ff36a77daf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9f:d0:d9:31:17:33:52:47:5f:da:b5:99:11: d0:c6:2f:44:ca:f6:ee:d1:cf:ae:c6:d3:f3:a3:92: 80:03:8b:4f:46:c8:45:5a:0f:97:b3:be:57:cf:da: eb:ad:d3:1d:73:2c:af:66:e0:2c:7e:b6:4e:24:7f: a7:5d:4b:f3:91:aa:b2:20:7c:b7:a2:33:80:df:6e: 20:46:1c:d8:86:bd:47:21:eb:11:87:cb:00:40:76: 11:12:63:cc:d7:1f:3f:04:8e:fa:5e:97:82:0d:c5: 39:76:a3:3b:1e:5d:6d:9a:0f:ed:98:60:3e:36:fd: 7f:a5:e5:dd:1f:28:9d:ce:b1:60:c0:d7:da:0d:0c: 76:41:5e:01:7d:52:d7:ab:94:26:87:0b:4a:6b:bb: e1:c1:e6:e8:6b:c8:b3:fe:5a:74:4d:d8:6b:b2:96: 3b:f6:59:ef:01:5a:71:a1:99:ad:3e:7b:84:e2:b9: 61:f5:ce:40:cb:4e:63:b3:68:89:b4:ff:10:b5:86: d3:17:0e:07:94:5f:7e:42:21:9f:db:48:51:f3:f6: 34:d2:b2:f0:9a:ef:61:9f:bc:dc:03:61:e1:97:ba: 6a:bd:26:55:a7:dc:53:a1:3c:19:df:45:40:66:88: 5d:97:82:c6:11:db:fc:92:4f:ca:c6:bf:24:36:97: eb:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:4C:6D:7A:A8:9E:DC:AB:01:9E:07:16:8D:85:14:FF:36:A7:7D:AF X509v3 Authority Key Identifier: keyid:0B:D4:AD:95:F1:7F:39:72:07:A3:FC:0D:18:6F:29:13:DF:38:EB:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/5Exteqie3KsBngcWjYUU_zanfa8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.210.188.0/22 Signature Algorithm: sha256WithRSAEncryption 71:5e:e6:12:c2:6e:04:9b:63:37:7c:eb:0f:c5:a3:0f:82:63: b2:23:c0:b0:77:20:33:98:ec:c3:25:8a:6b:f0:0e:79:3b:7a: 21:9e:70:d2:d8:2e:dd:01:2e:f2:70:d7:bb:4b:69:4d:a3:bb: bb:df:52:0b:5b:67:31:56:76:06:5f:1f:84:66:ec:db:b0:e3: 03:69:8e:41:01:23:0a:b7:2f:e4:a5:af:71:6b:ad:74:b5:92: 9f:44:03:b9:73:76:3a:1d:bf:a2:6d:8a:6f:09:20:f4:a6:0c: a4:b3:55:23:00:d7:b9:8b:de:90:52:dc:0e:82:f9:e2:3d:c4: 2c:a0:a2:65:ab:19:68:e7:17:ef:38:0e:19:26:e5:a3:4a:ce: 93:8c:2f:a0:d4:7e:c0:19:62:30:5d:40:27:10:00:db:29:86: 4e:ec:17:67:d7:a6:4d:8c:35:24:69:68:fc:b3:55:5d:68:68: cf:c2:28:d4:a1:c3:46:d8:d7:ef:15:93:eb:bf:48:45:ab:0b: bb:3b:ed:82:4b:1d:c8:ce:05:ef:c7:da:03:95:f1:ce:b6:30: 1b:fe:81:30:d4:24:13:d2:3d:1e:0e:ef:cb:06:58:54:29:ec: 79:e5:2b:76:37:6f:5a:27:77:17:1a:62:fc:eb:5e:48:cf:c4: 4b:e2:ee:17 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ELpUmg3p5Mfp09s3NIB1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiZDRhZDk1ZjE3ZjM5NzIwN2EzZmMwZDE4NmYyOTEzZGYz OGViOTMwHhcNMjYwMTAxMTAxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDRjNmQ3YWE4OWVkY2FiMDE5ZTA3MTY4ZDg1MTRmZjM2YTc3ZGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJ/Q2TEXM1JHX9q1mRHQxi9Eyvbu 0c+uxtPzo5KAA4tPRshFWg+Xs75Xz9rrrdMdcyyvZuAsfrZOJH+nXUvzkaqyIHy3 ojOA324gRhzYhr1HIesRh8sAQHYREmPM1x8/BI76XpeCDcU5dqM7Hl1tmg/tmGA+ Nv1/peXdHyidzrFgwNfaDQx2QV4BfVLXq5QmhwtKa7vhweboa8iz/lp0TdhrspY7 9lnvAVpxoZmtPnuE4rlh9c5Ay05js2iJtP8QtYbTFw4HlF9+QiGf20hR8/Y00rLw mu9hn7zcA2Hhl7pqvSZVp9xToTwZ30VAZohdl4LGEdv8kk/Kxr8kNpfrMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFORMbXqontyrAZ4HFo2FFP82p32vMB8GA1UdIwQY MBaAFAvUrZXxfzlyB6P8DRhvKRPfOOuTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzlTdGxmRl9PWElIb193TkdHOHBFOTg0NjVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83NmQwODItYWMzMi00NzM4LTk5ZTYt YjJmNjA4NjM2OGM3LzEvNUV4dGVxaWUzS3NCbmdjV2pZVVVfemFuZmE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy83NmQwODItYWMzMi00NzM4LTk5ZTYtYjJmNjA4NjM2OGM3 LzEvQzlTdGxmRl9PWElIb193TkdHOHBFOTg0NjVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW9K8MA0G CSqGSIb3DQEBCwUAA4IBAQBxXuYSwm4Em2M3fOsPxaMPgmOyI8CwdyAzmOzDJYpr 8A55O3ohnnDS2C7dAS7ycNe7S2lNo7u731ILW2cxVnYGXx+EZuzbsOMDaY5BASMK ty/kpa9xa610tZKfRAO5c3Y6Hb+ibYpvCSD0pgyks1UjANe5i96QUtwOgvniPcQs oKJlqxlo5xfvOA4ZJuWjSs6TjC+g1H7AGWIwXUAnEADbKYZO7Bdn16ZNjDUkaWj8 s1VdaGjPwijUocNG2NfvFZPrv0hFqwu7O+2CSx3IzgXvx9oDlfHOtjAb/oEw1CQT 0j0eDu/LBlhUKex55St2N29aJ3cXGmL8615Iz8RL4u4X -----END CERTIFICATE-----Generated at Tue Jan 27 13:19:27 2026 by rpki-client