This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/5nKxR0LJgs98nQ711prCkE12LNA.roa File: 5nKxR0LJgs98nQ711prCkE12LNA.roa (raw, json) Hash identifier: JIisZ4jB4MLoM1hM7ofWzH6YaAn+TmQso/C3gjZUBsg= Subject key identifier: E6:72:B1:47:42:C9:82:CF:7C:9D:0E:F5:D6:9A:C2:90:4D:76:2C:D0 Certificate issuer: /CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Certificate serial: 019B797DE23138E63FC12891465C9B4C4FB1 Authority key identifier: 5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/5nKxR0LJgs98nQ711prCkE12LNA.roa Signing time: Thu 01 Jan 2026 12:17:31 +0000 ROA not before: Thu 01 Jan 2026 12:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43531 IP address blocks: 31.217.128.0/19 maxlen: 24 31.217.128.0/24 maxlen: 24 31.217.129.0/24 maxlen: 24 31.217.130.0/24 maxlen: 24 46.18.168.0/21 maxlen: 24 83.243.16.0/21 maxlen: 24 89.30.0.0/17 maxlen: 24 89.30.68.0/22 maxlen: 24 91.196.184.0/22 maxlen: 24 185.55.16.0/22 maxlen: 24 185.143.244.0/22 maxlen: 22 2a01:8200::/32 maxlen: 48 2a02:27f0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:e2:31:38:e6:3f:c1:28:91:46:5c:9b:4c:4f:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Validity Not Before: Jan 1 12:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e672b14742c982cf7c9d0ef5d69ac2904d762cd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b6:10:32:9a:88:62:2a:34:d1:80:8a:4b:d5: db:1e:00:54:45:9b:7f:a7:5a:be:ad:39:94:dc:4f: 06:d6:6d:b6:fc:b6:90:d9:27:ea:bd:87:75:60:2e: 12:8c:a4:9d:b4:6a:b5:b8:57:a8:7d:3d:08:71:8f: 2e:e6:39:b0:83:c3:92:75:5d:c1:74:c5:95:a4:97: 41:e5:0a:38:e5:2f:02:6f:19:65:4c:08:6d:91:62: 81:c3:22:6b:97:21:b3:4c:62:22:08:3b:26:67:89: 8b:21:fc:bf:28:4c:67:85:43:3c:ea:fe:79:a0:a8: ab:a8:61:f3:e9:cd:e9:21:06:32:34:23:1b:6e:21: 49:c1:32:61:0c:2c:d1:7e:92:22:f6:59:55:aa:a0: 37:77:2c:81:67:69:e0:94:0e:f4:c1:c7:5b:a8:b4: 85:1d:1f:ed:bd:ce:77:e2:17:9f:d4:75:0f:8f:33: 4c:5d:75:fe:58:b0:48:19:60:c3:24:44:c2:50:aa: c1:1a:23:a6:24:38:45:01:bc:32:f2:71:1e:1c:b3: e3:57:0b:26:2b:71:01:0e:3c:b5:6c:de:04:67:d1: 46:aa:20:06:76:66:0e:7d:ef:8a:22:87:57:35:0c: b5:91:c2:af:e6:b1:05:e7:9c:00:9f:87:5b:89:e7: c0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:72:B1:47:42:C9:82:CF:7C:9D:0E:F5:D6:9A:C2:90:4D:76:2C:D0 X509v3 Authority Key Identifier: keyid:5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/5nKxR0LJgs98nQ711prCkE12LNA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.217.128.0/19 46.18.168.0/21 83.243.16.0/21 89.30.0.0/17 91.196.184.0/22 185.55.16.0/22 185.143.244.0/22 IPv6: 2a01:8200::/32 2a02:27f0::/32 Signature Algorithm: sha256WithRSAEncryption 8a:12:66:f3:d6:4c:7b:dc:92:13:80:07:9a:7d:1d:23:09:d3: e5:e0:bf:cd:28:b3:b4:62:13:5b:bd:97:c6:06:60:f9:87:cc: 21:a2:20:fe:ae:72:a1:5e:c5:8c:09:99:4f:57:85:2a:33:56: 0e:4a:a2:5d:e2:17:ea:eb:91:3f:05:7a:14:54:17:c7:c8:f7: e6:13:5f:0e:1e:5f:13:19:0f:90:bb:61:41:85:a9:7d:c8:ec: f5:07:c2:88:29:9c:69:bb:bc:dc:51:32:98:b7:47:94:4a:99: 4d:e8:0f:f5:cc:2f:d1:c3:4c:a4:39:fb:41:eb:b1:b5:ae:ce: ec:1b:47:35:4e:33:2f:1a:07:34:5b:50:26:8c:c9:ef:6b:aa: 3f:ea:a4:49:ab:5c:7f:57:a5:a6:ff:82:79:4d:fb:c9:bd:99: ef:7c:a1:6c:2c:e1:ad:5f:df:e0:3f:9b:c9:34:c8:f6:e5:7f: f6:97:1a:86:9c:1b:2f:e5:c9:fa:3d:90:23:d0:c4:11:8b:db: 62:47:02:79:e4:47:30:f6:e1:4b:e5:40:cf:58:7d:ff:3b:47: da:b1:08:39:4a:83:c1:3b:fe:b4:08:c8:6b:24:a0:c4:ce:1c: cf:3a:f1:40:e0:e5:7a:79:fe:09:8b:86:49:57:2b:14:fe:fe: 98:02:c7:e4 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgISAZt5feIxOOY/wSiRRlybTE+xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNDAwYWMyMzk2YWUyMjhkMmIyZTU2ZjRiMDY3Mzk5Njkz NzllNDQwHhcNMjYwMTAxMTIxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjcyYjE0NzQyYzk4MmNmN2M5ZDBlZjVkNjlhYzI5MDRkNzYyY2QwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37YQMpqIYio00YCKS9XbHgBURZt/ p1q+rTmU3E8G1m22/LaQ2SfqvYd1YC4SjKSdtGq1uFeofT0IcY8u5jmwg8OSdV3B dMWVpJdB5Qo45S8CbxllTAhtkWKBwyJrlyGzTGIiCDsmZ4mLIfy/KExnhUM86v55 oKirqGHz6c3pIQYyNCMbbiFJwTJhDCzRfpIi9llVqqA3dyyBZ2nglA70wcdbqLSF HR/tvc534hef1HUPjzNMXXX+WLBIGWDDJETCUKrBGiOmJDhFAbwy8nEeHLPjVwsm K3EBDjy1bN4EZ9FGqiAGdmYOfe+KIodXNQy1kcKv5rEF55wAn4dbiefAlwIDAQAB o4ICQzCCAj8wHQYDVR0OBBYEFOZysUdCyYLPfJ0O9daawpBNdizQMB8GA1UdIwQY MBaAFF5ACsI5auIo0rLlb0sGc5lpN55EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYt ZGZlZDEyZjFhMDFlLzEvNW5LeFIwTEpnczk4blE3MTFwckNrRTEyTE5BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYtZGZlZDEyZjFhMDFl LzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDAwBAIAATAqAwQFH9mAAwQD LhKoAwQDU/MQAwQHWR4AAwQCW8S4AwQCuTcQAwQCuY/0MBQEAgACMA4DBQAqAYIA AwUAKgIn8DANBgkqhkiG9w0BAQsFAAOCAQEAihJm89ZMe9ySE4AHmn0dIwnT5eC/ zSiztGITW72XxgZg+YfMIaIg/q5yoV7FjAmZT1eFKjNWDkqiXeIX6uuRPwV6FFQX x8j35hNfDh5fExkPkLthQYWpfcjs9QfCiCmcabu83FEymLdHlEqZTegP9cwv0cNM pDn7Qeuxta7O7BtHNU4zLxoHNFtQJozJ72uqP+qkSatcf1elpv+CeU37yb2Z73yh bCzhrV/f4D+byTTI9uV/9pcahpwbL+XJ+j2QI9DEEYvbYkcCeeRHMPbhS+VAz1h9 /ztH2rEIOUqDwTv+tAjIaySgxM4czzrxQODlenn+CYuGSVcrFP7+mALH5A== -----END CERTIFICATE-----Generated at Mon Jan 26 00:26:05 2026 by rpki-client