This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/5JP3EEY5bnKcvSQg_d_0jzLOuso.roa File: 5JP3EEY5bnKcvSQg_d_0jzLOuso.roa (raw, json) Hash identifier: nHWCClQokNNDpIYjG0ERFvivPbSmCZ+n7ir/zAxywpM= Subject key identifier: E4:93:F7:10:46:39:6E:72:9C:BD:24:20:FD:DF:F4:8F:32:CE:BA:CA Certificate issuer: /CN=68f83e2a34145ad47e0cc2b3c79fc6312bae2c71 Certificate serial: 019B7C7EF98F6FDEFAE92AA1A68C64074B9D Authority key identifier: 68:F8:3E:2A:34:14:5A:D4:7E:0C:C2:B3:C7:9F:C6:31:2B:AE:2C:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/5JP3EEY5bnKcvSQg_d_0jzLOuso.roa Signing time: Fri 02 Jan 2026 02:17:34 +0000 ROA not before: Fri 02 Jan 2026 02:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216074 IP address blocks: 185.116.112.0/24 maxlen: 24 2a14:600::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7e:f9:8f:6f:de:fa:e9:2a:a1:a6:8c:64:07:4b:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68f83e2a34145ad47e0cc2b3c79fc6312bae2c71 Validity Not Before: Jan 2 02:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e493f71046396e729cbd2420fddff48f32cebaca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:72:d0:3b:30:04:30:7d:0a:ab:35:87:df:cb: f8:21:1a:dc:1f:fb:45:60:1b:b5:ff:73:af:2e:c0: bb:a0:c7:f9:18:95:51:59:04:a2:09:49:0f:88:e1: b0:c3:fc:e5:fc:8a:b9:59:b9:f7:eb:0c:da:2e:f8: d4:fe:65:11:6f:83:06:49:6d:9c:9a:40:cf:01:91: 07:de:7b:88:b5:97:73:3a:9d:54:e8:9b:dc:a6:e8: a3:42:1a:56:98:25:ba:91:d4:22:c5:5c:7b:9e:9c: e4:80:ec:ce:95:c3:5a:52:39:24:8c:1c:3c:4b:68: b0:88:92:8d:b7:59:46:84:e4:64:d1:4a:7c:54:de: 7a:18:c4:3b:15:7a:cc:b0:9b:1b:bf:c2:37:be:c1: e2:c2:6c:1e:9f:3e:51:c7:b1:42:db:89:85:a3:25: 9a:e0:3f:5b:6f:e9:4b:09:33:6e:65:ad:8e:78:4e: 54:c4:fa:aa:10:c9:c6:ad:98:dc:02:69:df:73:01: e0:57:66:e9:07:ea:21:06:29:8d:16:44:ef:17:56: 02:aa:8d:1c:0f:79:71:5a:7a:0c:75:31:1e:65:73: c8:bd:19:23:8b:b6:00:88:02:2d:f6:11:ae:25:0a: 2b:c0:19:37:7b:84:59:8d:62:95:1e:2b:5e:98:7c: 48:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:93:F7:10:46:39:6E:72:9C:BD:24:20:FD:DF:F4:8F:32:CE:BA:CA X509v3 Authority Key Identifier: keyid:68:F8:3E:2A:34:14:5A:D4:7E:0C:C2:B3:C7:9F:C6:31:2B:AE:2C:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/5JP3EEY5bnKcvSQg_d_0jzLOuso.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.116.112.0/24 IPv6: 2a14:600::/29 Signature Algorithm: sha256WithRSAEncryption 22:5a:a2:4c:53:a0:dc:c2:76:d5:8d:05:0a:00:56:56:66:39: ae:18:6e:9e:4f:ad:3b:92:9d:3f:56:97:80:98:bc:ea:d1:12: d2:0b:38:df:56:aa:05:b4:cf:cf:94:2c:39:db:a8:d8:41:99: 4c:c2:7e:f9:39:41:59:1b:99:68:97:29:b7:0c:45:ab:0a:dc: 39:40:8f:28:a7:60:4b:1f:f6:5b:74:b0:0e:ce:e9:57:95:e2: b5:87:8f:09:d1:9b:b6:43:b5:f0:c9:36:e9:e5:db:63:bc:00: 9e:d6:2f:6f:3b:e2:72:0d:db:63:6a:23:72:ac:3d:e8:03:e9: e2:48:68:e2:1a:e3:90:3f:ad:d7:6c:f1:38:78:47:0d:07:a7: 00:17:bf:29:b0:b3:89:86:c6:60:0f:ee:35:e9:9f:2a:bd:6c: c4:30:41:13:20:f2:c8:62:8a:4e:1a:1b:07:8d:7e:89:b5:f8: f4:3e:81:76:4c:7c:91:34:bc:7b:e6:6b:f6:01:7b:22:d7:3a: e1:92:b9:02:49:83:49:63:31:08:89:6a:77:8f:b3:65:b6:25: ae:92:bc:6d:26:52:5b:0b:cc:c2:48:fd:9d:71:fa:30:ee:40: 47:0f:8a:e8:7e:e4:79:97:45:93:4d:66:d6:9c:8f:35:b3:ac: 3d:87:14:29 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8fvmPb9766SqhpoxkB0udMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4ZjgzZTJhMzQxNDVhZDQ3ZTBjYzJiM2M3OWZjNjMxMmJh ZTJjNzEwHhcNMjYwMTAyMDIxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDkzZjcxMDQ2Mzk2ZTcyOWNiZDI0MjBmZGRmZjQ4ZjMyY2ViYWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXLQOzAEMH0KqzWH38v4IRrcH/tF YBu1/3OvLsC7oMf5GJVRWQSiCUkPiOGww/zl/Iq5Wbn36wzaLvjU/mURb4MGSW2c mkDPAZEH3nuItZdzOp1U6JvcpuijQhpWmCW6kdQixVx7npzkgOzOlcNaUjkkjBw8 S2iwiJKNt1lGhORk0Up8VN56GMQ7FXrMsJsbv8I3vsHiwmwenz5Rx7FC24mFoyWa 4D9bb+lLCTNuZa2OeE5UxPqqEMnGrZjcAmnfcwHgV2bpB+ohBimNFkTvF1YCqo0c D3lxWnoMdTEeZXPIvRkji7YAiAIt9hGuJQorwBk3e4RZjWKVHitemHxI0wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOST9xBGOW5ynL0kIP3f9I8yzrrKMB8GA1UdIwQY MBaAFGj4Pio0FFrUfgzCs8efxjErrixxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVBnLUtqUVVXdFItRE1Leng1X0dNU3V1TEhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy81ZTlmOTAtYTZiMC00ZmQ4LWI4ZGQt NzkyODAyYzQzOTI1LzEvNUpQM0VFWTVibktjdlNRZ19kXzBqekxPdXNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy81ZTlmOTAtYTZiMC00ZmQ4LWI4ZGQtNzkyODAyYzQzOTI1 LzEvYVBnLUtqUVVXdFItRE1Leng1X0dNU3V1TEhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuXRwMA0E AgACMAcDBQMqFAYAMA0GCSqGSIb3DQEBCwUAA4IBAQAiWqJMU6DcwnbVjQUKAFZW ZjmuGG6eT607kp0/VpeAmLzq0RLSCzjfVqoFtM/PlCw526jYQZlMwn75OUFZG5lo lym3DEWrCtw5QI8op2BLH/ZbdLAOzulXleK1h48J0Zu2Q7XwyTbp5dtjvACe1i9v O+JyDdtjaiNyrD3oA+niSGjiGuOQP63XbPE4eEcNB6cAF78psLOJhsZgD+416Z8q vWzEMEETIPLIYopOGhsHjX6Jtfj0PoF2THyRNLx75mv2AXsi1zrhkrkCSYNJYzEI iWp3j7NltiWukrxtJlJbC8zCSP2dcfow7kBHD4rofuR5l0WTTWbWnI81s6w9hxQp -----END CERTIFICATE-----Generated at Mon Jan 26 08:39:07 2026 by rpki-client