This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5O9Cs84ALzQYWShlYpzbuaAEl0U.roa File: 5O9Cs84ALzQYWShlYpzbuaAEl0U.roa (raw, json) Hash identifier: LQFehHDdF2EYE3Sk0E8gsAQFha6C352cj9Bb1p47hLI= Subject key identifier: E4:EF:42:B3:CE:00:2F:34:18:59:28:65:62:9C:DB:B9:A0:04:97:45 Certificate issuer: /CN=e686965509a649c508ab8ab72f7257bef35f7930 Certificate serial: 019B271F6D772666147C3488F02F3E1629FB Authority key identifier: E6:86:96:55:09:A6:49:C5:08:AB:8A:B7:2F:72:57:BE:F3:5F:79:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5oaWVQmmScUIq4q3L3JXvvNfeTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5O9Cs84ALzQYWShlYpzbuaAEl0U.roa Signing time: Tue 16 Dec 2025 12:25:29 +0000 ROA not before: Tue 16 Dec 2025 12:25:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16190 IP address blocks: 91.195.255.0/24 maxlen: 24 91.198.108.0/23 maxlen: 23 91.198.108.0/24 maxlen: 24 91.198.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.mft rsync://rpki.ripe.net/repository/DEFAULT/5oaWVQmmScUIq4q3L3JXvvNfeTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:1f:6d:77:26:66:14:7c:34:88:f0:2f:3e:16:29:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e686965509a649c508ab8ab72f7257bef35f7930 Validity Not Before: Dec 16 12:25:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e4ef42b3ce002f3418592865629cdbb9a0049745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:5e:c0:a3:9d:b0:97:74:79:2b:fa:d9:c1:f6: a8:79:b7:75:3c:19:38:47:5f:93:7c:bd:b7:58:92: b3:5a:77:5c:2c:22:43:05:7f:de:11:f9:0f:2d:4c: 5d:af:ff:6e:f1:47:e0:1b:7e:75:2d:2a:af:89:ba: 25:a5:1d:ef:97:74:a8:85:00:4b:50:9f:ad:1a:c9: b3:07:eb:4c:d9:78:37:48:a7:6b:ca:e1:1a:e8:99: 3b:e7:5a:5d:65:e5:35:4c:cd:c6:d8:9b:ba:f3:9f: 6e:0b:05:47:d1:fd:de:45:f4:50:7b:2b:3f:2a:28: 89:a9:c8:19:7d:83:5f:fc:fc:bf:b7:ca:99:09:1c: 4c:fa:0b:31:bc:4f:29:ed:d1:6e:d6:df:cd:2f:dc: d1:6f:2f:15:b6:8f:80:11:b4:f7:39:49:3a:80:cd: b4:74:75:3d:d7:df:b9:bb:fe:6d:37:49:de:14:fe: 60:9c:a8:f3:6e:92:6f:91:fa:76:8e:3a:36:a3:75: 47:83:7e:f0:6a:e7:b9:7a:68:31:1b:1f:69:4b:52: 57:7e:e8:4e:8c:ad:ee:f3:17:0b:5d:cf:d4:a3:a2: e6:26:1e:c9:10:1f:ea:23:c4:dc:f7:5d:49:f7:38: 5d:4e:2e:39:8e:b7:8f:c4:f1:3f:e0:b5:ea:f6:2d: 33:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:EF:42:B3:CE:00:2F:34:18:59:28:65:62:9C:DB:B9:A0:04:97:45 X509v3 Authority Key Identifier: keyid:E6:86:96:55:09:A6:49:C5:08:AB:8A:B7:2F:72:57:BE:F3:5F:79:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oaWVQmmScUIq4q3L3JXvvNfeTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5O9Cs84ALzQYWShlYpzbuaAEl0U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.195.255.0/24 91.198.108.0/23 Signature Algorithm: sha256WithRSAEncryption 53:19:53:f8:7a:4a:02:e6:6e:17:05:2d:87:75:ba:78:1a:b0: 91:eb:4d:36:11:f8:cf:65:a7:ec:e3:8a:43:cb:59:80:f0:60: fa:b6:1a:43:b5:58:f2:7b:07:83:a3:46:81:f9:d0:c6:9c:da: e6:2d:d1:93:b4:8b:dd:57:20:f2:62:27:f6:15:da:7f:c8:33: a7:34:df:c3:96:c1:c5:ea:4a:c9:f3:c6:f2:a1:e5:6e:48:0e: 64:fb:da:ab:74:7e:39:f0:6d:61:23:53:6f:73:e2:f4:19:6a: 97:18:a3:9b:43:a6:8b:2d:15:0d:02:53:d0:75:2d:b6:96:56: 3c:73:0b:48:45:70:69:fa:ee:0e:fe:5b:5d:13:60:29:d7:6e: 7f:ab:86:a2:59:77:18:fa:a7:94:c5:92:32:61:b9:2b:ab:95: 27:f2:09:d8:ed:10:62:ff:c7:ac:59:f9:22:4e:36:0e:0e:09: d7:2c:73:7d:1a:18:7b:93:84:2c:a6:71:ff:89:3f:75:ac:30: ad:63:8b:dc:d5:5d:25:2d:9c:8d:fe:b7:38:a5:9c:a8:da:ad: 4e:6c:1f:d6:25:4f:8a:7b:5a:e5:ae:fb:9a:4b:f4:fb:c7:f0: 71:fb:74:30:68:92:81:cd:35:63:a6:a3:3a:93:89:29:1b:25: 42:74:d4:bb -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsnH213JmYUfDSI8C8+Fin7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2ODY5NjU1MDlhNjQ5YzUwOGFiOGFiNzJmNzI1N2JlZjM1 Zjc5MzAwHhcNMjUxMjE2MTIyNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNGVmNDJiM2NlMDAyZjM0MTg1OTI4NjU2MjljZGJiOWEwMDQ5NzQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA017Ao52wl3R5K/rZwfaoebd1PBk4 R1+TfL23WJKzWndcLCJDBX/eEfkPLUxdr/9u8UfgG351LSqvibolpR3vl3SohQBL UJ+tGsmzB+tM2Xg3SKdryuEa6Jk751pdZeU1TM3G2Ju6859uCwVH0f3eRfRQeys/ KiiJqcgZfYNf/Py/t8qZCRxM+gsxvE8p7dFu1t/NL9zRby8Vto+AEbT3OUk6gM20 dHU919+5u/5tN0neFP5gnKjzbpJvkfp2jjo2o3VHg37waue5emgxGx9pS1JXfuhO jK3u8xcLXc/Uo6LmJh7JEB/qI8Tc911J9zhdTi45jrePxPE/4LXq9i0z8QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOTvQrPOAC80GFkoZWKc27mgBJdFMB8GA1UdIwQY MBaAFOaGllUJpknFCKuKty9yV77zX3kwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNW9hV1ZRbW1TY1VJcTRxM0wzSlh2dk5mZVRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS82OGJmZjYtN2IyYy00ZWNmLTgwMDYt ZWQxNGFmNmRiODg4LzEvNU85Q3M4NEFMelFZV1NobFlwemJ1YUFFbDBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS82OGJmZjYtN2IyYy00ZWNmLTgwMDYtZWQxNGFmNmRiODg4 LzEvNW9hV1ZRbW1TY1VJcTRxM0wzSlh2dk5mZVRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW8P/AwQB W8ZsMA0GCSqGSIb3DQEBCwUAA4IBAQBTGVP4ekoC5m4XBS2Hdbp4GrCR6002EfjP Zafs44pDy1mA8GD6thpDtVjyeweDo0aB+dDGnNrmLdGTtIvdVyDyYif2Fdp/yDOn NN/DlsHF6krJ88byoeVuSA5k+9qrdH458G1hI1Nvc+L0GWqXGKObQ6aLLRUNAlPQ dS22llY8cwtIRXBp+u4O/ltdE2Ap125/q4aiWXcY+qeUxZIyYbkrq5Un8gnY7RBi /8esWfkiTjYODgnXLHN9Ghh7k4QspnH/iT91rDCtY4vc1V0lLZyN/rc4pZyo2q1O bB/WJU+Ke1rlrvuaS/T7x/Bx+3QwaJKBzTVjpqM6k4kpGyVCdNS7 -----END CERTIFICATE-----Generated at Sat Dec 20 19:43:43 2025 by rpki-client