This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/5qnMhOIBTwB8o6XInGR4S35zi8o.roa File: 5qnMhOIBTwB8o6XInGR4S35zi8o.roa (raw, json) Hash identifier: y7FafzXY95fqgAjLfPP4p+mKq1OIvDb5CLfvYqhV8ro= Subject key identifier: E6:A9:CC:84:E2:01:4F:00:7C:A3:A5:C8:9C:64:78:4B:7E:73:8B:CA Certificate issuer: /CN=50aa99eb8c1b18b1aa7d4245ce481fb888fbf254 Certificate serial: 019B7F13C6AE8FC9783AA58C8281713ED5C4 Authority key identifier: 50:AA:99:EB:8C:1B:18:B1:AA:7D:42:45:CE:48:1F:B8:88:FB:F2:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/5qnMhOIBTwB8o6XInGR4S35zi8o.roa Signing time: Fri 02 Jan 2026 14:19:20 +0000 ROA not before: Fri 02 Jan 2026 14:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50401 IP address blocks: 91.222.112.0/22 maxlen: 22 91.242.192.0/23 maxlen: 23 91.242.192.0/24 maxlen: 24 91.242.193.0/24 maxlen: 24 91.242.194.0/23 maxlen: 23 91.242.194.0/24 maxlen: 24 91.242.195.0/24 maxlen: 24 91.242.196.0/23 maxlen: 23 91.242.196.0/24 maxlen: 24 91.242.197.0/24 maxlen: 24 91.242.198.0/23 maxlen: 23 91.242.198.0/24 maxlen: 24 91.242.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.crl rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft rsync://rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:c6:ae:8f:c9:78:3a:a5:8c:82:81:71:3e:d5:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50aa99eb8c1b18b1aa7d4245ce481fb888fbf254 Validity Not Before: Jan 2 14:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e6a9cc84e2014f007ca3a5c89c64784b7e738bca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:28:99:90:0a:fc:95:c4:8c:d6:c8:86:a0:36: fe:25:98:b7:b5:ee:ac:86:94:bd:dd:c6:8f:58:54: d8:52:d4:22:b9:2e:ed:a2:fe:7b:76:af:04:b3:0a: ca:11:a8:8f:68:95:d3:86:7d:95:28:ff:6b:1c:0b: 99:4d:e6:c7:fc:b3:30:04:05:d7:44:42:b6:a9:db: 16:eb:77:be:86:68:25:55:60:00:05:0e:c4:e9:46: 1d:4d:b3:c2:9d:8c:33:0c:f7:9f:c7:c7:b8:cd:a9: bd:35:d8:23:73:f0:2b:99:0b:eb:03:26:73:d2:f0: 27:18:22:2f:74:c9:84:4f:df:86:9f:3c:ca:31:9b: 93:a1:6c:9a:15:86:12:a4:d5:94:78:bf:db:27:90: 04:a2:a8:44:18:2c:76:c5:df:39:aa:28:4a:9c:4a: 83:7c:78:5d:be:fa:ed:b4:7c:5b:05:2a:ee:c0:77: 84:2d:76:ce:73:e1:ab:fd:d1:f7:8e:a2:4c:b9:40: 98:db:47:ed:34:49:2c:ee:3f:6a:01:91:2d:31:7f: f4:d1:8e:da:27:6c:da:62:e5:0d:1c:12:ba:ac:5b: 07:c5:e1:a3:c6:d5:8d:a5:47:53:5b:2d:d9:0c:83: f4:9c:ed:c6:a2:81:40:bf:27:95:6b:09:5b:0f:0e: dc:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:A9:CC:84:E2:01:4F:00:7C:A3:A5:C8:9C:64:78:4B:7E:73:8B:CA X509v3 Authority Key Identifier: keyid:50:AA:99:EB:8C:1B:18:B1:AA:7D:42:45:CE:48:1F:B8:88:FB:F2:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/5qnMhOIBTwB8o6XInGR4S35zi8o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.222.112.0/22 91.242.192.0/21 Signature Algorithm: sha256WithRSAEncryption 8c:bd:13:12:1b:d9:ed:ac:6a:08:31:d3:d8:19:f8:76:86:5c: 13:3c:c2:ab:7e:23:99:04:94:28:2e:13:17:cc:9c:af:1f:ce: f2:ab:86:70:35:42:79:3b:4f:75:5f:e2:f2:21:ac:9c:4e:a9: 88:60:2d:c1:5f:c3:69:97:05:38:9c:e4:67:29:5f:72:e9:73: 52:cd:29:7a:84:13:1a:a0:29:7a:ed:14:0e:bf:9d:8a:e4:a4: 21:0b:dd:dd:ff:fc:a3:67:f5:9a:e0:31:7b:4a:df:f6:02:73: 2f:86:51:ee:f4:7b:5a:3c:13:9f:a3:96:1e:bb:6a:80:72:c3: 28:59:f9:2d:9d:2a:c8:b7:85:59:a0:8b:fa:99:88:40:d9:1a: 28:94:ef:7a:6e:16:ee:8d:9b:3a:f2:e8:0d:77:f0:72:47:8a: 8c:22:c9:70:60:5e:70:e4:a9:cc:1a:7c:d8:d1:88:73:1f:a0: e8:47:c3:ba:20:ff:be:54:cf:70:e6:da:77:f3:69:99:da:48: 9f:37:24:e6:0a:dd:52:1c:48:54:c5:fd:c3:05:6b:a1:98:32: d4:6d:5c:be:4b:a1:91:8d:2c:49:fe:22:72:cf:11:26:73:47: b8:1f:bd:5b:c3:c9:61:36:2e:d8:35:e6:a7:8f:ae:45:35:7d: c1:b5:9b:9f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/E8auj8l4OqWMgoFxPtXEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwYWE5OWViOGMxYjE4YjFhYTdkNDI0NWNlNDgxZmI4ODhm YmYyNTQwHhcNMjYwMTAyMTQxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNmE5Y2M4NGUyMDE0ZjAwN2NhM2E1Yzg5YzY0Nzg0YjdlNzM4YmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiiZkAr8lcSM1siGoDb+JZi3te6s hpS93caPWFTYUtQiuS7tov57dq8EswrKEaiPaJXThn2VKP9rHAuZTebH/LMwBAXX REK2qdsW63e+hmglVWAABQ7E6UYdTbPCnYwzDPefx8e4zam9Ndgjc/ArmQvrAyZz 0vAnGCIvdMmET9+GnzzKMZuToWyaFYYSpNWUeL/bJ5AEoqhEGCx2xd85qihKnEqD fHhdvvrttHxbBSruwHeELXbOc+Gr/dH3jqJMuUCY20ftNEks7j9qAZEtMX/00Y7a J2zaYuUNHBK6rFsHxeGjxtWNpUdTWy3ZDIP0nO3GooFAvyeVawlbDw7cjQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOapzITiAU8AfKOlyJxkeEt+c4vKMB8GA1UdIwQY MBaAFFCqmeuMGxixqn1CRc5IH7iI+/JUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUtxWjY0d2JHTEdxZlVKRnprZ2Z1SWo3OGxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8wODg2NzctODBiZS00MTMwLWIzNjAt MWNmNmZkOWY4MGZhLzEvNXFuTWhPSUJUd0I4bzZYSW5HUjRTMzV6aThvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS8wODg2NzctODBiZS00MTMwLWIzNjAtMWNmNmZkOWY4MGZh LzEvVUtxWjY0d2JHTEdxZlVKRnprZ2Z1SWo3OGxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW95wAwQD W/LAMA0GCSqGSIb3DQEBCwUAA4IBAQCMvRMSG9ntrGoIMdPYGfh2hlwTPMKrfiOZ BJQoLhMXzJyvH87yq4ZwNUJ5O091X+LyIaycTqmIYC3BX8NplwU4nORnKV9y6XNS zSl6hBMaoCl67RQOv52K5KQhC93d//yjZ/Wa4DF7St/2AnMvhlHu9HtaPBOfo5Ye u2qAcsMoWfktnSrIt4VZoIv6mYhA2RoolO96bhbujZs68ugNd/ByR4qMIslwYF5w 5KnMGnzY0YhzH6DoR8O6IP++VM9w5tp382mZ2kifNyTmCt1SHEhUxf3DBWuhmDLU bVy+S6GRjSxJ/iJyzxEmc0e4H71bw8lhNi7YNeanj65FNX3BtZuf -----END CERTIFICATE-----Generated at Mon Jan 12 01:33:28 2026 by rpki-client