This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/5nqAIjs4Map_dmOK-D_BzJ5dduI.roa File: 5nqAIjs4Map_dmOK-D_BzJ5dduI.roa (raw, json) Hash identifier: YmgmK05MQj5RQuP0mkk06fEYlISXZEUPrlooDAX79Gc= Subject key identifier: E6:7A:80:22:3B:38:31:AA:7F:76:63:8A:F8:3F:C1:CC:9E:5D:76:E2 Certificate issuer: /CN=23f21f7316e1bd78f86eea6425d5c229b980f9ac Certificate serial: 019B7DCA97E002D6EDE1A6777E4DED922B6B Authority key identifier: 23:F2:1F:73:16:E1:BD:78:F8:6E:EA:64:25:D5:C2:29:B9:80:F9:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_IfcxbhvXj4bupkJdXCKbmA-aw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/5nqAIjs4Map_dmOK-D_BzJ5dduI.roa Signing time: Fri 02 Jan 2026 08:19:47 +0000 ROA not before: Fri 02 Jan 2026 08:19:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51296 IP address blocks: 91.216.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.crl rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.mft rsync://rpki.ripe.net/repository/DEFAULT/I_IfcxbhvXj4bupkJdXCKbmA-aw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 17:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:97:e0:02:d6:ed:e1:a6:77:7e:4d:ed:92:2b:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23f21f7316e1bd78f86eea6425d5c229b980f9ac Validity Not Before: Jan 2 08:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e67a80223b3831aa7f76638af83fc1cc9e5d76e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6e:33:e2:ce:c7:cc:8b:ff:91:d0:9e:6d:43: 49:71:84:fe:40:72:4c:bf:1c:97:f5:be:17:e0:36: d4:88:3b:bf:e5:94:81:52:1b:65:3e:0b:76:b3:13: ac:d7:f5:42:6e:fb:ff:2a:03:bd:6d:6c:52:6c:05: d0:d7:9b:e8:a5:48:e1:69:e6:34:0d:60:c5:28:2a: b2:2a:26:e4:87:08:a4:9b:2f:75:34:dd:75:73:50: a5:47:35:e6:8e:a5:00:f2:fe:cf:3b:0b:ae:0f:7e: 47:d0:33:0d:52:89:e0:62:9f:0f:00:2a:58:5c:85: f0:0d:8c:35:2f:dd:11:33:96:7f:92:dd:18:11:29: fe:54:ed:95:83:3a:b1:a2:0c:14:c5:bb:76:c8:3b: 0b:44:af:1c:72:6e:77:c4:ab:b9:5e:70:b5:1a:4d: 56:1d:18:65:27:5b:9e:61:33:eb:b8:0a:a9:33:79: 23:4c:4f:fd:59:11:a2:c2:0e:96:65:7a:1b:60:81: cf:ae:68:67:b4:d0:6c:ad:17:d5:f6:0d:32:a1:d1: 71:ed:ea:b2:5f:e8:10:6f:97:19:86:11:ac:96:61: 08:1a:91:7f:68:b8:30:e2:3a:9c:45:30:63:21:57: 6a:a0:92:21:28:9f:38:b0:1a:4b:ec:fb:0f:82:7f: d9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:7A:80:22:3B:38:31:AA:7F:76:63:8A:F8:3F:C1:CC:9E:5D:76:E2 X509v3 Authority Key Identifier: keyid:23:F2:1F:73:16:E1:BD:78:F8:6E:EA:64:25:D5:C2:29:B9:80:F9:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_IfcxbhvXj4bupkJdXCKbmA-aw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/5nqAIjs4Map_dmOK-D_BzJ5dduI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.255.0/24 Signature Algorithm: sha256WithRSAEncryption 80:43:99:ed:31:81:78:ac:7e:12:8f:54:37:96:17:0d:74:b0: 4e:03:8a:f3:16:5b:89:11:17:05:d8:b2:eb:3f:75:7c:a9:5f: 8b:3a:6a:30:da:c9:81:99:10:84:a1:0c:0b:22:a2:13:97:ac: 13:18:c0:50:0b:55:d7:67:38:59:42:ec:33:5b:cc:13:5d:5c: 94:cf:0a:0f:96:63:df:32:f9:59:67:72:e8:0d:66:b2:e7:ff: 0a:c3:17:86:18:c7:89:29:5a:3c:43:5b:32:d2:3e:44:5e:fd: c9:7d:ae:20:db:2d:4a:8a:71:3f:7e:12:9d:10:2f:97:d3:c7: 17:48:c7:1b:c2:0f:48:89:fd:51:bf:8e:a8:c2:c9:82:5d:d0: c5:70:82:60:e6:a9:26:4b:7b:d7:dd:7d:d6:5c:11:b5:5b:26: e9:0a:7a:ff:7b:f4:cd:4b:d7:a6:0c:4c:c9:d0:10:02:48:06: 4f:52:c0:8b:0a:92:95:eb:55:59:da:2a:f1:c3:3e:f0:70:88: 06:40:aa:a0:df:91:c4:13:ea:61:b0:a5:8d:3e:fe:5e:fa:00: aa:6c:e6:4d:d0:0a:8f:00:aa:aa:84:9c:73:ef:64:8f:52:b6: 67:21:88:95:15:49:38:e9:0a:1b:e8:43:9a:68:bf:28:33:a1: 9f:90:11:17 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ypfgAtbt4aZ3fk3tkitrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZjIxZjczMTZlMWJkNzhmODZlZWE2NDI1ZDVjMjI5Yjk4 MGY5YWMwHhcNMjYwMTAyMDgxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjdhODAyMjNiMzgzMWFhN2Y3NjYzOGFmODNmYzFjYzllNWQ3NmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtm4z4s7HzIv/kdCebUNJcYT+QHJM vxyX9b4X4DbUiDu/5ZSBUhtlPgt2sxOs1/VCbvv/KgO9bWxSbAXQ15vopUjhaeY0 DWDFKCqyKibkhwikmy91NN11c1ClRzXmjqUA8v7POwuuD35H0DMNUongYp8PACpY XIXwDYw1L90RM5Z/kt0YESn+VO2VgzqxogwUxbt2yDsLRK8ccm53xKu5XnC1Gk1W HRhlJ1ueYTPruAqpM3kjTE/9WRGiwg6WZXobYIHPrmhntNBsrRfV9g0yodFx7eqy X+gQb5cZhhGslmEIGpF/aLgw4jqcRTBjIVdqoJIhKJ84sBpL7PsPgn/Z8wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOZ6gCI7ODGqf3Zjivg/wcyeXXbiMB8GA1UdIwQY MBaAFCPyH3MW4b14+G7qZCXVwim5gPmsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSV9JZmN4Ymh2WGo0YnVwa0pkWENLYm1BLWF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC84YTU5Y2YtNTA5Mi00NzRkLTgxY2Yt OTc0YzMxZjI2NjBiLzEvNW5xQUlqczRNYXBfZG1PSy1EX0J6SjVkZHVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC84YTU5Y2YtNTA5Mi00NzRkLTgxY2YtOTc0YzMxZjI2NjBi LzEvSV9JZmN4Ymh2WGo0YnVwa0pkWENLYm1BLWF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9j/MA0G CSqGSIb3DQEBCwUAA4IBAQCAQ5ntMYF4rH4Sj1Q3lhcNdLBOA4rzFluJERcF2LLr P3V8qV+LOmow2smBmRCEoQwLIqITl6wTGMBQC1XXZzhZQuwzW8wTXVyUzwoPlmPf MvlZZ3LoDWay5/8KwxeGGMeJKVo8Q1sy0j5EXv3Jfa4g2y1KinE/fhKdEC+X08cX SMcbwg9Iif1Rv46owsmCXdDFcIJg5qkmS3vX3X3WXBG1WybpCnr/e/TNS9emDEzJ 0BACSAZPUsCLCpKV61VZ2irxwz7wcIgGQKqg35HEE+phsKWNPv5e+gCqbOZN0AqP AKqqhJxz72SPUrZnIYiVFUk46Qob6EOaaL8oM6GfkBEX -----END CERTIFICATE-----Generated at Mon Jan 12 01:21:51 2026 by rpki-client