This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/5jRFXx1ApbMCAkc3y-N7KUeEteI.roa File: 5jRFXx1ApbMCAkc3y-N7KUeEteI.roa (raw, json) Hash identifier: 4Kl1WpfjuFNXDwihSKJPjcmtJlEstYcFbj9Sexw4Xcg= Subject key identifier: E6:34:45:5F:1D:40:A5:B3:02:02:47:37:CB:E3:7B:29:47:84:B5:E2 Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9 Certificate serial: 019B7E37E62B274BB20F585F3D2E796BD8A5 Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/5jRFXx1ApbMCAkc3y-N7KUeEteI.roa Signing time: Fri 02 Jan 2026 10:19:11 +0000 ROA not before: Fri 02 Jan 2026 10:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31674 IP address blocks: 212.133.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:e6:2b:27:4b:b2:0f:58:5f:3d:2e:79:6b:d8:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9 Validity Not Before: Jan 2 10:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e634455f1d40a5b302024737cbe37b294784b5e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:15:e0:b8:8c:b1:98:ad:53:10:3c:eb:8a:63: c2:df:52:11:42:e1:49:2e:39:63:54:ee:d8:ce:3b: 42:7a:fa:60:67:3d:d9:72:b7:98:7d:a0:cf:93:60: 4e:2d:ee:8c:eb:9d:47:6a:eb:9f:2b:f3:ad:dc:27: 5f:80:cf:36:24:f8:c9:26:fc:4f:a7:c0:f3:b0:02: bf:9d:02:f0:e4:ac:11:21:83:f3:5b:fe:45:5b:9f: 22:02:39:f0:6c:d1:a5:05:8d:42:7c:0e:66:49:f0: 48:88:94:88:bc:3e:71:e3:41:aa:f5:f2:ac:c8:70: 77:88:bc:47:fc:3c:cb:da:50:10:bf:2d:80:f9:a3: 5d:13:2d:0c:29:e0:69:70:59:f3:64:69:74:81:46: e1:8f:4c:44:f9:62:16:4e:a3:c5:a5:4b:49:c2:04: 85:cf:35:3d:b1:b5:ad:c9:6a:25:01:4b:31:dd:cd: 15:42:5b:66:e6:6b:9e:45:eb:49:6c:b7:cc:7c:de: 00:27:ff:6c:58:d7:37:71:b8:33:31:d4:2d:a4:59: f8:e3:a6:1c:8c:9b:3e:89:f8:e7:6a:2e:32:8c:56: 67:7d:ee:50:e5:08:26:af:ca:c4:4a:dc:4b:27:7f: dd:c0:86:02:9d:5a:eb:af:29:d3:12:40:2c:aa:f4: f7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:34:45:5F:1D:40:A5:B3:02:02:47:37:CB:E3:7B:29:47:84:B5:E2 X509v3 Authority Key Identifier: keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/5jRFXx1ApbMCAkc3y-N7KUeEteI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.133.164.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:fd:c3:d1:c6:96:ce:ba:10:d2:39:75:63:3f:3e:52:74:3a: f6:d4:10:ef:1e:f0:09:53:d9:97:0b:13:cb:56:1c:f0:ca:20: 90:9a:f9:c6:03:da:65:88:54:78:56:8e:73:f6:f5:f7:cc:74: 61:a6:38:23:8d:6c:cf:87:0b:68:be:48:67:fb:6f:6f:4a:1b: 20:28:95:e1:40:be:b3:74:43:d5:ec:dc:73:71:ef:c3:ac:99: 5f:fe:a1:a9:49:e0:e2:d8:26:6c:7e:07:d7:85:6c:90:07:44: 3d:d2:c7:97:0b:90:7c:ca:26:4a:46:ea:d8:ff:b8:d4:b6:ce: 3e:1d:0d:43:9c:27:39:38:57:ac:23:15:1a:41:98:92:cf:70: 66:4d:bc:19:cc:f1:43:6e:56:c6:6e:ca:b2:1f:37:f2:91:ce: 1c:66:69:ad:ce:59:74:22:cb:87:70:48:00:fb:fc:92:63:cb: 29:ee:77:ed:63:0c:a0:64:99:37:ff:4d:9e:92:49:44:2f:58: eb:25:a4:0a:c3:ac:e1:bf:56:40:f9:84:fe:36:c8:51:a9:48: 86:4a:d3:89:41:44:bc:35:81:a6:c5:07:b0:1e:f7:a8:9b:78: ff:df:50:53:79:74:7f:6d:4f:2e:f0:2e:c4:a2:8b:f4:05:be: 09:19:52:3c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N+YrJ0uyD1hfPS55a9ilMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2OGZlMzVjYzk2MjYzM2EyNzU3YWYxMGEwZTZlOGFiNmQw MWY0YzkwHhcNMjYwMTAyMTAxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjM0NDU1ZjFkNDBhNWIzMDIwMjQ3MzdjYmUzN2IyOTQ3ODRiNWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RXguIyxmK1TEDzrimPC31IRQuFJ LjljVO7YzjtCevpgZz3ZcreYfaDPk2BOLe6M651HauufK/Ot3CdfgM82JPjJJvxP p8DzsAK/nQLw5KwRIYPzW/5FW58iAjnwbNGlBY1CfA5mSfBIiJSIvD5x40Gq9fKs yHB3iLxH/DzL2lAQvy2A+aNdEy0MKeBpcFnzZGl0gUbhj0xE+WIWTqPFpUtJwgSF zzU9sbWtyWolAUsx3c0VQltm5mueRetJbLfMfN4AJ/9sWNc3cbgzMdQtpFn446Yc jJs+ifjnai4yjFZnfe5Q5Qgmr8rEStxLJ3/dwIYCnVrrrynTEkAsqvT3uwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOY0RV8dQKWzAgJHN8vjeylHhLXiMB8GA1UdIwQY MBaAFFaP41zJYmM6J1evEKDm6KttAfTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMt ODNkNjQ4Zjc5NzQ2LzEvNWpSRlh4MUFwYk1DQWtjM3ktTjdLVWVFdGVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMtODNkNjQ4Zjc5NzQ2 LzEvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1IWkMA0G CSqGSIb3DQEBCwUAA4IBAQAK/cPRxpbOuhDSOXVjPz5SdDr21BDvHvAJU9mXCxPL VhzwyiCQmvnGA9pliFR4Vo5z9vX3zHRhpjgjjWzPhwtovkhn+29vShsgKJXhQL6z dEPV7Nxzce/DrJlf/qGpSeDi2CZsfgfXhWyQB0Q90seXC5B8yiZKRurY/7jUts4+ HQ1DnCc5OFesIxUaQZiSz3BmTbwZzPFDblbGbsqyHzfykc4cZmmtzll0IsuHcEgA +/ySY8sp7nftYwygZJk3/02ekklEL1jrJaQKw6zhv1ZA+YT+NshRqUiGStOJQUS8 NYGmxQewHveom3j/31BTeXR/bU8u8C7Eoov0Bb4JGVI8 -----END CERTIFICATE-----Generated at Sun Jan 25 19:17:44 2026 by rpki-client