This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/5yKICj_2gDXyLaLptV_QQPobwBA.roa File: 5yKICj_2gDXyLaLptV_QQPobwBA.roa (raw, json) Hash identifier: ymCwe5qZ4XyCaC4waTVSNvK53llzEbvyfIqHPUqq7zU= Subject key identifier: E7:22:88:0A:3F:F6:80:35:F2:2D:A2:E9:B5:5F:D0:40:FA:1B:C0:10 Certificate issuer: /CN=571cb51cba68eb7ef9867a75d17ab28018196aa1 Certificate serial: 019B2CA2419D54A06098DCF7DE591155F6BD Authority key identifier: 57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/5yKICj_2gDXyLaLptV_QQPobwBA.roa Signing time: Wed 17 Dec 2025 14:06:29 +0000 ROA not before: Wed 17 Dec 2025 14:06:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 2914 IP address blocks: 91.200.136.0/23 maxlen: 23 91.202.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:a2:41:9d:54:a0:60:98:dc:f7:de:59:11:55:f6:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=571cb51cba68eb7ef9867a75d17ab28018196aa1 Validity Not Before: Dec 17 14:06:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e722880a3ff68035f22da2e9b55fd040fa1bc010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a7:23:46:18:ae:e9:25:50:98:1e:e0:b7:96: 3c:13:2c:41:44:8e:72:02:dc:2f:4c:9a:dd:b4:57: 82:d8:bf:60:84:7e:27:16:0d:72:05:91:e7:1f:89: b3:1e:97:5c:01:c0:f0:1a:fc:9f:39:5d:ce:36:ea: 78:7a:af:eb:ec:07:3d:51:e4:de:62:92:96:68:20: 9f:81:d9:4a:12:ed:c0:9f:4c:56:8f:22:1d:70:50: 34:90:9d:3c:88:d8:84:98:c3:bb:1a:e3:90:32:e8: 95:c9:b0:c4:f4:81:13:f0:b8:20:44:ef:09:11:4e: 11:4d:06:9a:67:67:ae:0d:22:67:43:44:a2:da:c9: 29:12:cf:a5:61:ce:c0:fb:fa:0e:ce:70:9f:de:b8: 53:bb:17:74:26:1a:e7:b0:ba:c9:42:45:27:cd:92: 1c:84:84:0f:43:43:f7:b8:8f:56:e0:06:16:1d:d4: 5c:18:69:f6:32:31:23:ba:bd:64:d4:ed:a1:dc:52: d3:5a:dd:0f:84:0d:5b:31:d4:96:66:b8:89:55:98: 0a:2a:2c:d9:44:8c:70:b3:be:47:81:9e:a5:8c:f3: 6f:f9:fe:00:5f:a2:8e:96:5e:28:13:39:37:c4:64: b9:bf:87:f9:1d:c5:e6:75:b0:1a:6d:b2:db:92:e4: 3d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:22:88:0A:3F:F6:80:35:F2:2D:A2:E9:B5:5F:D0:40:FA:1B:C0:10 X509v3 Authority Key Identifier: keyid:57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/5yKICj_2gDXyLaLptV_QQPobwBA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.200.136.0/23 91.202.56.0/22 Signature Algorithm: sha256WithRSAEncryption 4c:7f:a5:11:3b:f8:e6:92:22:a2:87:42:18:4d:d2:dc:c0:55: 87:d4:85:e5:97:a8:3c:38:b0:3b:cc:0b:34:45:c8:31:52:51: be:89:f5:bb:87:02:d4:57:2d:2e:3c:30:58:e3:fd:44:c3:4f: 50:f5:7e:b1:6b:8f:32:f5:4e:fa:f7:83:f9:99:3b:f3:a4:d4: 5e:f0:3c:ab:49:65:42:8f:bf:75:e3:a8:b8:8a:15:58:4c:15: bc:6e:b9:85:7d:8c:49:4e:c0:12:7c:22:5e:58:c2:60:70:a1: 14:37:cc:a2:a4:24:4a:25:f5:6e:f1:05:df:e3:7e:19:81:d9: fc:70:83:04:cd:b3:c2:40:01:9a:1f:e5:e9:02:7a:36:c2:b3: 7a:11:4c:86:c9:f2:06:bb:4d:07:0e:7d:13:9d:63:c0:06:fb: 70:2d:e7:3b:8f:b3:80:88:24:9f:6b:74:2c:7b:a2:40:d1:21: 76:a1:81:0b:cf:b4:36:98:bf:38:b2:06:bc:aa:07:c5:45:93: 5c:98:16:f9:96:62:d9:0a:19:c4:c2:70:41:1d:5c:1b:92:be: b3:dc:9a:e4:b6:96:fe:10:34:db:01:25:68:65:37:dd:41:c7: d1:c2:e7:4f:d5:19:04:a7:87:aa:73:d7:69:88:63:56:19:ca: 6e:03:56:ce -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZssokGdVKBgmNz33lkRVfa9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MWNiNTFjYmE2OGViN2VmOTg2N2E3NWQxN2FiMjgwMTgx OTZhYTEwHhcNMjUxMjE3MTQwNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzIyODgwYTNmZjY4MDM1ZjIyZGEyZTliNTVmZDA0MGZhMWJjMDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6cjRhiu6SVQmB7gt5Y8EyxBRI5y AtwvTJrdtFeC2L9ghH4nFg1yBZHnH4mzHpdcAcDwGvyfOV3ONup4eq/r7Ac9UeTe YpKWaCCfgdlKEu3An0xWjyIdcFA0kJ08iNiEmMO7GuOQMuiVybDE9IET8LggRO8J EU4RTQaaZ2euDSJnQ0Si2skpEs+lYc7A+/oOznCf3rhTuxd0JhrnsLrJQkUnzZIc hIQPQ0P3uI9W4AYWHdRcGGn2MjEjur1k1O2h3FLTWt0PhA1bMdSWZriJVZgKKizZ RIxws75HgZ6ljPNv+f4AX6KOll4oEzk3xGS5v4f5HcXmdbAabbLbkuQ9nwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOciiAo/9oA18i2i6bVf0ED6G8AQMB8GA1UdIwQY MBaAFFcctRy6aOt++YZ6ddF6soAYGWqhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnh5MUhMcG82Mzc1aG5wMTBYcXlnQmdaYXFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9iOGQyYTgtNTNhOS00MmMwLWI3Yzkt ZGQ4NjI3NzRhMDkyLzEvNXlLSUNqXzJnRFh5TGFMcHRWX1FRUG9id0JBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9iOGQyYTgtNTNhOS00MmMwLWI3YzktZGQ4NjI3NzRhMDky LzEvVnh5MUhMcG82Mzc1aG5wMTBYcXlnQmdaYXFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW8iIAwQC W8o4MA0GCSqGSIb3DQEBCwUAA4IBAQBMf6URO/jmkiKih0IYTdLcwFWH1IXll6g8 OLA7zAs0RcgxUlG+ifW7hwLUVy0uPDBY4/1Ew09Q9X6xa48y9U7694P5mTvzpNRe 8DyrSWVCj79146i4ihVYTBW8brmFfYxJTsASfCJeWMJgcKEUN8yipCRKJfVu8QXf 434Zgdn8cIMEzbPCQAGaH+XpAno2wrN6EUyGyfIGu00HDn0TnWPABvtwLec7j7OA iCSfa3Qse6JA0SF2oYELz7Q2mL84sga8qgfFRZNcmBb5lmLZChnEwnBBHVwbkr6z 3Jrktpb+EDTbASVoZTfdQcfRwudP1RkEp4eqc9dpiGNWGcpuA1bO -----END CERTIFICATE-----Generated at Sat Dec 20 06:11:26 2025 by rpki-client