This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/g5jXkTpT8rS4RDrTaaqiauLNaBc.roa File: g5jXkTpT8rS4RDrTaaqiauLNaBc.roa (raw, json) Hash identifier: isrTkqL/KrQh1HHr0NL5DuWGUHsje/NyVaTqgUAy9vE= Subject key identifier: 83:98:D7:91:3A:53:F2:B4:B8:44:3A:D3:69:AA:A2:6A:E2:CD:68:17 Certificate issuer: /CN=bc9f0b9ac1d5652f3dca1ef1623bf99ab29647df Certificate serial: 019B7C7FCA0FEA26BEE761B0344285FFBC3C Authority key identifier: BC:9F:0B:9A:C1:D5:65:2F:3D:CA:1E:F1:62:3B:F9:9A:B2:96:47:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJ8LmsHVZS89yh7xYjv5mrKWR98.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/g5jXkTpT8rS4RDrTaaqiauLNaBc.roa Signing time: Fri 02 Jan 2026 02:18:28 +0000 ROA not before: Fri 02 Jan 2026 02:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47674 IP address blocks: 5.206.224.0/21 maxlen: 24 185.38.140.0/22 maxlen: 24 185.236.228.0/24 maxlen: 24 185.236.229.0/24 maxlen: 24 185.236.230.0/24 maxlen: 24 185.236.231.0/24 maxlen: 24 188.93.232.0/21 maxlen: 24 2a00:1c60::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.crl rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.mft rsync://rpki.ripe.net/repository/DEFAULT/vJ8LmsHVZS89yh7xYjv5mrKWR98.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:ca:0f:ea:26:be:e7:61:b0:34:42:85:ff:bc:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc9f0b9ac1d5652f3dca1ef1623bf99ab29647df Validity Not Before: Jan 2 02:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8398d7913a53f2b4b8443ad369aaa26ae2cd6817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1e:2d:3f:f7:11:6e:b6:e3:46:dc:55:ed:8e: d6:96:0a:c4:2b:40:b1:94:ec:52:e6:11:c3:0c:3b: f4:ab:9b:0b:60:ef:b4:87:ec:b7:38:ca:cb:ce:0b: 95:ef:64:ea:68:75:f6:81:bb:c1:4e:c6:45:79:ae: 14:64:e9:a2:b0:b5:72:60:00:ed:26:22:32:ed:56: 33:91:08:8b:ca:7a:66:de:19:2a:43:16:84:8b:35: a7:4d:b1:7a:7b:2f:c5:28:f6:1a:1e:ee:3a:30:a6: 33:a6:92:bf:14:9d:a9:13:0c:2b:2f:06:4a:cb:c2: 93:21:1b:be:0e:f5:8a:b2:7b:77:d9:01:17:f5:da: 75:2d:35:87:f8:30:34:d7:9c:50:a6:1e:6d:46:f6: 4c:fb:31:61:7c:d0:95:8e:13:bc:18:0c:9d:69:d8: 1c:b2:7c:6c:b3:30:8e:71:c6:06:47:73:23:ec:28: 0a:41:a9:1b:73:81:73:3e:fb:9a:7c:c6:fb:30:bc: 69:57:ca:68:6b:e0:3a:c6:0c:b4:55:62:7e:64:8c: 09:6d:cd:c9:01:09:fd:dc:3b:92:3d:3a:d4:24:39: b3:ee:fc:91:14:41:0c:60:03:bd:08:d5:11:1e:a1: 6f:b2:96:32:3f:a8:e0:8b:7b:f5:9f:d9:57:8d:c7: a4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:98:D7:91:3A:53:F2:B4:B8:44:3A:D3:69:AA:A2:6A:E2:CD:68:17 X509v3 Authority Key Identifier: keyid:BC:9F:0B:9A:C1:D5:65:2F:3D:CA:1E:F1:62:3B:F9:9A:B2:96:47:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ8LmsHVZS89yh7xYjv5mrKWR98.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/g5jXkTpT8rS4RDrTaaqiauLNaBc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.206.224.0/21 185.38.140.0/22 185.236.228.0/22 188.93.232.0/21 IPv6: 2a00:1c60::/32 Signature Algorithm: sha256WithRSAEncryption e7:a1:d4:8d:56:13:c8:f6:5b:be:31:e6:76:9a:94:e7:b1:0a: 33:b0:29:c2:aa:5d:77:e1:9c:92:99:85:9f:c3:a6:ff:f3:17: 15:e2:59:58:ba:82:57:8c:c7:de:45:ee:01:c3:10:03:c2:87: 13:da:8e:c2:9a:6d:98:f7:d9:cf:87:e0:03:f4:4d:b2:f7:db: f6:40:cd:74:fc:25:a6:2d:2b:4f:86:a9:7c:b0:d7:96:e2:43: 75:65:dc:06:b6:3e:dc:95:90:67:55:a0:f7:40:a7:b9:21:04: 75:2d:b9:4c:eb:38:13:56:f5:d8:7d:a3:6e:8d:b2:94:19:0e: 12:c3:1a:f4:e2:45:27:a0:a4:6b:02:6f:45:21:a1:f2:47:11: 45:29:64:e3:69:74:2a:1e:5a:14:49:3f:b6:53:7d:fd:1d:5c: f6:97:6c:c5:ce:18:97:12:1e:b7:d4:76:17:c7:86:89:a1:12: 2d:cd:d2:fc:f9:32:a4:f0:60:3a:21:e4:2a:5c:f0:63:26:87: 3c:b5:57:d9:3d:a6:7c:a5:9e:07:87:69:45:fc:83:73:d0:48: a2:24:bd:ff:f9:d9:44:ad:e3:71:6a:e7:81:43:7b:e8:f6:70: a7:0e:38:b0:21:79:ee:c8:03:da:14:b5:75:af:e3:7c:04:7a: 45:a9:55:d9 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt8f8oP6ia+52GwNEKF/7w8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjOWYwYjlhYzFkNTY1MmYzZGNhMWVmMTYyM2JmOTlhYjI5 NjQ3ZGYwHhcNMjYwMTAyMDIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Mzk4ZDc5MTNhNTNmMmI0Yjg0NDNhZDM2OWFhYTI2YWUyY2Q2ODE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnh4tP/cRbrbjRtxV7Y7WlgrEK0Cx lOxS5hHDDDv0q5sLYO+0h+y3OMrLzguV72TqaHX2gbvBTsZFea4UZOmisLVyYADt JiIy7VYzkQiLynpm3hkqQxaEizWnTbF6ey/FKPYaHu46MKYzppK/FJ2pEwwrLwZK y8KTIRu+DvWKsnt32QEX9dp1LTWH+DA015xQph5tRvZM+zFhfNCVjhO8GAydadgc snxsszCOccYGR3Mj7CgKQakbc4FzPvuafMb7MLxpV8poa+A6xgy0VWJ+ZIwJbc3J AQn93DuSPTrUJDmz7vyRFEEMYAO9CNURHqFvspYyP6jgi3v1n9lXjcekhwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFIOY15E6U/K0uEQ602mqomrizWgXMB8GA1UdIwQY MBaAFLyfC5rB1WUvPcoe8WI7+ZqylkffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdko4TG1zSFZaUzg5eWg3eFlqdjVtcktXUjk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS80OTkyYjYtZmRhZS00YzlmLWJmM2Ut OTVjODk0MmRmNzI0LzEvZzVqWGtUcFQ4clM0UkRyVGFhcWlhdUxOYUJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS80OTkyYjYtZmRhZS00YzlmLWJmM2UtOTVjODk0MmRmNzI0 LzEvdko4TG1zSFZaUzg5eWg3eFlqdjVtcktXUjk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDBc7gAwQC uSaMAwQCuezkAwQDvF3oMA0EAgACMAcDBQAqABxgMA0GCSqGSIb3DQEBCwUAA4IB AQDnodSNVhPI9lu+MeZ2mpTnsQozsCnCql134ZySmYWfw6b/8xcV4llYuoJXjMfe Re4BwxADwocT2o7Cmm2Y99nPh+AD9E2y99v2QM10/CWmLStPhql8sNeW4kN1ZdwG tj7clZBnVaD3QKe5IQR1LblM6zgTVvXYfaNujbKUGQ4Swxr04kUnoKRrAm9FIaHy RxFFKWTjaXQqHloUST+2U339HVz2l2zFzhiXEh631HYXx4aJoRItzdL8+TKk8GA6 IeQqXPBjJoc8tVfZPaZ8pZ4Hh2lF/INz0EiiJL3/+dlEreNxaueBQ3vo9nCnDjiw IXnuyAPaFLV1r+N8BHpFqVXZ -----END CERTIFICATE-----Generated at Sun Jan 25 22:31:06 2026 by rpki-client