This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/56tuRDz3a2YTFgeWS1NrR18OXkg.roa File: 56tuRDz3a2YTFgeWS1NrR18OXkg.roa (raw, json) Hash identifier: 1nNgHHZdgSddhmbVFpAOLV/4EiXUghshKvJclDsKVmQ= Subject key identifier: E7:AB:6E:44:3C:F7:6B:66:13:16:07:96:4B:53:6B:47:5F:0E:5E:48 Certificate issuer: /CN=297c508d23b38315bbf45b726d22050a46127b8c Certificate serial: 019B797EF02943E7BD1CEEDEFCEFA6B24B00 Authority key identifier: 29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/56tuRDz3a2YTFgeWS1NrR18OXkg.roa Signing time: Thu 01 Jan 2026 12:18:40 +0000 ROA not before: Thu 01 Jan 2026 12:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56844 IP address blocks: 5.133.68.0/23 maxlen: 23 5.133.68.0/24 maxlen: 24 5.133.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:f0:29:43:e7:bd:1c:ee:de:fc:ef:a6:b2:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297c508d23b38315bbf45b726d22050a46127b8c Validity Not Before: Jan 1 12:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e7ab6e443cf76b66131607964b536b475f0e5e48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4f:ee:2f:4e:c3:00:31:05:11:9f:eb:de:1c: 0c:de:78:6d:df:47:ac:a4:73:8c:a9:52:63:ac:6d: 27:09:0a:8c:c5:fd:f8:9a:b3:15:33:d5:5a:4a:86: f3:b8:ea:3d:a0:99:c0:3d:ee:d1:48:9f:cc:87:e3: f1:c4:31:c3:fd:e0:17:98:79:a5:2b:14:1f:79:a6: 31:33:a9:07:8f:cc:f1:24:7c:87:df:0e:9e:9c:97: b5:7e:48:5d:d8:7a:59:0f:a3:fc:b0:a0:25:25:36: 39:b1:32:c5:14:f9:17:32:21:7b:39:3f:53:74:1f: f3:fd:d4:84:ff:5f:71:d2:32:80:a9:e2:53:75:7d: 0a:15:e2:85:98:ce:83:e1:89:b1:5e:9b:52:07:aa: e7:11:ef:7e:6d:29:21:72:5d:59:d5:f9:c4:f2:24: c4:37:f5:93:d8:37:8d:d5:99:75:e9:7c:39:96:71: 09:51:63:ce:06:08:c2:1d:f6:ae:10:f9:92:79:c1: f5:98:ff:e0:59:91:67:fc:b8:63:8c:fd:15:9b:3d: 47:b3:35:0f:52:9e:6c:aa:07:3a:0d:4a:9c:3a:5c: 6e:72:62:33:bb:82:4e:b1:f5:67:e1:b4:2f:c2:22: 4d:b9:e0:0c:71:23:fc:56:0a:11:f5:92:53:af:70: 8f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:AB:6E:44:3C:F7:6B:66:13:16:07:96:4B:53:6B:47:5F:0E:5E:48 X509v3 Authority Key Identifier: keyid:29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/56tuRDz3a2YTFgeWS1NrR18OXkg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.133.68.0-5.133.70.255 Signature Algorithm: sha256WithRSAEncryption 2f:da:7a:81:9c:d0:59:d8:9f:02:1e:eb:2b:d1:32:3e:f7:e2: 70:c0:37:83:c7:91:c0:26:27:5a:99:f5:e0:e5:53:b0:4c:7e: 67:d5:1d:8c:8b:75:5b:e9:93:b5:de:12:1b:30:49:f6:55:df: 8f:cf:88:45:1f:68:ca:32:2c:46:96:9b:4c:55:94:57:f5:dc: 92:33:23:71:80:3f:5d:e1:e8:05:8e:9a:e5:4f:03:e5:a1:a1: 0f:28:af:43:d8:80:ff:20:32:98:27:51:45:4f:d4:c3:19:15: 5d:0b:05:d4:2d:bf:ff:07:96:06:f4:8d:90:61:59:ea:e4:a9: b1:48:52:11:8c:5b:7e:fe:1f:fe:8a:1e:47:9d:2f:d6:31:5c: 6c:b8:15:31:58:fa:41:65:2e:4b:de:ba:9a:24:d2:e1:0e:4e: a7:30:ee:a0:f6:98:d4:84:2d:6d:36:04:09:7d:50:84:a4:d8: d5:6d:e1:c6:a1:9a:75:2f:f6:fd:87:e8:fa:ef:3b:63:81:a3: 57:32:e0:e8:b8:99:c4:bf:2e:96:38:c5:80:45:e4:50:55:bc: 1a:b6:37:2a:4c:ca:74:76:19:a3:94:c5:a4:a5:17:ea:71:7a: 8e:a9:51:ed:40:ef:2d:ba:8e:3a:db:b9:b0:3b:76:12:ae:f3: a7:8a:28:4a -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt5fvApQ+e9HO7e/O+msksAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2M1MDhkMjNiMzgzMTViYmY0NWI3MjZkMjIwNTBhNDYx MjdiOGMwHhcNMjYwMTAxMTIxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlN2FiNmU0NDNjZjc2YjY2MTMxNjA3OTY0YjUzNmI0NzVmMGU1ZTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApU/uL07DADEFEZ/r3hwM3nht30es pHOMqVJjrG0nCQqMxf34mrMVM9VaSobzuOo9oJnAPe7RSJ/Mh+PxxDHD/eAXmHml KxQfeaYxM6kHj8zxJHyH3w6enJe1fkhd2HpZD6P8sKAlJTY5sTLFFPkXMiF7OT9T dB/z/dSE/19x0jKAqeJTdX0KFeKFmM6D4YmxXptSB6rnEe9+bSkhcl1Z1fnE8iTE N/WT2DeN1Zl16Xw5lnEJUWPOBgjCHfauEPmSecH1mP/gWZFn/LhjjP0Vmz1HszUP Up5sqgc6DUqcOlxucmIzu4JOsfVn4bQvwiJNueAMcSP8VgoR9ZJTr3CPZwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFOerbkQ892tmExYHlktTa0dfDl5IMB8GA1UdIwQY MBaAFCl8UI0js4MVu/Rbcm0iBQpGEnuMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTIt MzZlOWE3OWJkOTUwLzEvNTZ0dVJEejNhMllURmdlV1MxTnJSMThPWGtnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTItMzZlOWE3OWJkOTUw LzEvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAIFhUQD BAAFhUYwDQYJKoZIhvcNAQELBQADggEBAC/aeoGc0FnYnwIe6yvRMj734nDAN4PH kcAmJ1qZ9eDlU7BMfmfVHYyLdVvpk7XeEhswSfZV34/PiEUfaMoyLEaWm0xVlFf1 3JIzI3GAP13h6AWOmuVPA+WhoQ8or0PYgP8gMpgnUUVP1MMZFV0LBdQtv/8Hlgb0 jZBhWerkqbFIUhGMW37+H/6KHkedL9YxXGy4FTFY+kFlLkveupok0uEOTqcw7qD2 mNSELW02BAl9UISk2NVt4cahmnUv9v2H6PrvO2OBo1cy4Oi4mcS/LpY4xYBF5FBV vBq2NypMynR2GaOUxaSlF+pxeo6pUe1A7y26jjrbubA7dhKu86eKKEo= -----END CERTIFICATE-----Generated at Mon Jan 26 13:46:28 2026 by rpki-client