This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/5d9WvtqIsOCyvbUcr5D_FRPH5Yk.roa File: 5d9WvtqIsOCyvbUcr5D_FRPH5Yk.roa (raw, json) Hash identifier: yErbq7mA/v1CRRXIibE2b1jcvOm0eNRkCuG1G2/AujI= Subject key identifier: E5:DF:56:BE:DA:88:B0:E0:B2:BD:B5:1C:AF:90:FF:15:13:C7:E5:89 Certificate issuer: /CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46 Certificate serial: 019B76EBA0495C82ADC3DB1A61AE54477448 Authority key identifier: E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/5d9WvtqIsOCyvbUcr5D_FRPH5Yk.roa Signing time: Thu 01 Jan 2026 00:18:32 +0000 ROA not before: Thu 01 Jan 2026 00:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64437 IP address blocks: 5.104.141.0/24 maxlen: 24 5.104.142.0/24 maxlen: 24 5.104.143.0/24 maxlen: 24 37.143.35.0/24 maxlen: 24 37.143.38.0/24 maxlen: 24 37.143.39.0/24 maxlen: 24 37.156.228.0/24 maxlen: 24 37.156.252.0/22 maxlen: 24 89.38.160.0/24 maxlen: 24 176.126.232.0/24 maxlen: 24 176.126.233.0/24 maxlen: 24 176.126.234.0/24 maxlen: 24 185.107.36.0/24 maxlen: 24 185.107.38.0/24 maxlen: 24 185.107.100.0/24 maxlen: 24 185.107.101.0/24 maxlen: 24 185.107.102.0/24 maxlen: 24 185.107.103.0/24 maxlen: 24 212.92.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:a0:49:5c:82:ad:c3:db:1a:61:ae:54:47:74:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46 Validity Not Before: Jan 1 00:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e5df56beda88b0e0b2bdb51caf90ff1513c7e589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:47:d2:0d:2c:06:e1:5a:c0:8e:f2:a3:41:02: d5:90:7e:17:13:f8:e6:0d:e3:f2:75:1e:a5:15:f2: c0:4e:d6:c3:ac:e5:63:70:53:84:20:70:ab:3d:37: 1d:26:ac:a3:2d:1b:74:fe:41:3f:df:23:61:a4:e3: 52:1f:46:d5:e2:40:75:3b:2c:a6:35:cb:b0:20:f1: 5d:ae:78:d8:ef:50:16:e3:5e:e0:13:dd:7a:de:88: e8:ee:32:f2:ef:d8:4b:8c:06:ce:a8:2f:93:5c:c8: 09:f6:cd:73:a3:58:3f:45:85:58:69:c0:a4:c1:38: ec:90:79:d1:a8:05:bd:2f:97:b7:e4:87:60:9f:c5: a7:b8:62:02:18:79:dc:66:b0:8a:dc:3e:39:f6:74: 76:a5:28:d2:68:b8:ad:ad:02:4e:6a:58:bf:af:80: 74:b7:a5:54:30:24:4b:6f:a7:f3:5e:2d:f5:44:ba: a8:cc:74:1d:3e:4e:6d:6b:8b:8c:a0:d6:f7:7b:7a: 3a:01:5b:55:0c:46:19:78:29:ef:34:f8:52:19:07: ea:ec:69:5c:e5:ec:f5:de:6b:63:e0:f8:b1:c2:15: bc:7a:a9:76:61:a4:da:26:bc:2a:3b:5d:29:84:fd: 8a:cd:dc:f8:53:c7:af:4b:7a:fd:15:2a:8c:c2:a7: 98:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:DF:56:BE:DA:88:B0:E0:B2:BD:B5:1C:AF:90:FF:15:13:C7:E5:89 X509v3 Authority Key Identifier: keyid:E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/5d9WvtqIsOCyvbUcr5D_FRPH5Yk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.104.141.0-5.104.143.255 37.143.35.0/24 37.143.38.0/23 37.156.228.0/24 37.156.252.0/22 89.38.160.0/24 176.126.232.0-176.126.234.255 185.107.36.0/24 185.107.38.0/24 185.107.100.0/22 212.92.124.0/23 Signature Algorithm: sha256WithRSAEncryption 25:c0:49:63:d5:ba:83:af:b7:8b:c3:bb:16:69:9c:f2:66:d5: 1d:0e:a3:b4:f5:26:78:2d:be:ec:fc:12:0b:61:b9:79:64:4f: 91:d6:d5:0b:ca:61:b9:63:89:f7:05:4d:e9:12:41:0b:f4:e9: 16:70:06:6b:34:66:9e:3e:a5:3a:97:1e:97:50:e4:58:1e:72: 60:93:b7:55:de:0d:cd:12:fa:a5:46:99:14:fb:0c:53:27:76: f9:e5:9a:86:02:d9:36:77:f7:73:eb:43:3b:95:9a:ef:2c:20: 35:a2:fd:79:6e:96:23:df:9f:52:07:47:99:ec:1a:ab:7b:8a: a1:82:47:8d:79:07:2f:0e:da:0d:d3:3d:39:74:83:48:0f:14: 25:e0:93:ee:e8:e1:26:97:7d:a9:9f:48:f6:fc:4d:19:12:71: e9:7a:a1:1a:11:f0:67:47:9d:85:de:77:96:af:59:8f:94:f8: f3:c2:f7:b1:1d:03:cd:da:9d:4e:a8:c9:67:d9:19:f7:8c:d4: 6d:b4:c7:08:36:a4:00:4c:9d:c0:53:69:4f:9e:2a:ac:b5:34: 1e:e9:e7:67:53:fa:57:c6:8c:76:d2:24:b9:0f:a8:5b:50:8a: a0:58:39:46:32:f7:65:af:5a:6b:36:36:05:20:3d:65:89:27: 76:94:b8:63 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgISAZt266BJXIKtw9saYa5UR3RIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMzhlYzI0MmE0M2U5YzlkNGNlYjI1ZGM5MGU1NDUzMzcz ZDNmNDYwHhcNMjYwMTAxMDAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNWRmNTZiZWRhODhiMGUwYjJiZGI1MWNhZjkwZmYxNTEzYzdlNTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEfSDSwG4VrAjvKjQQLVkH4XE/jm DePydR6lFfLATtbDrOVjcFOEIHCrPTcdJqyjLRt0/kE/3yNhpONSH0bV4kB1Oyym NcuwIPFdrnjY71AW417gE9163ojo7jLy79hLjAbOqC+TXMgJ9s1zo1g/RYVYacCk wTjskHnRqAW9L5e35Idgn8WnuGICGHncZrCK3D459nR2pSjSaLitrQJOali/r4B0 t6VUMCRLb6fzXi31RLqozHQdPk5ta4uMoNb3e3o6AVtVDEYZeCnvNPhSGQfq7Glc 5ez13mtj4PixwhW8eql2YaTaJrwqO10phP2Kzdz4U8evS3r9FSqMwqeY9QIDAQAB o4ICVTCCAlEwHQYDVR0OBBYEFOXfVr7aiLDgsr21HK+Q/xUTx+WJMB8GA1UdIwQY MBaAFOE47CQqQ+nJ1M6yXckOVFM3PT9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wYjdmZDMtOTBmMC00NWQxLThhNTgt Njc4NWNkNDU2ODcxLzEvNWQ5V3Z0cUlzT0N5dmJVY3I1RF9GUlBINVlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8wYjdmZDMtOTBmMC00NWQxLThhNTgtNjc4NWNkNDU2ODcx LzEvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGsGCCsGAQUFBwEHAQH/BFwwWjBYBAIAATBSMAwDBAAFaI0D BAQFaIADBAAljyMDBAEljyYDBAAlnOQDBAIlnPwDBABZJqAwDAMEA7B+6AMEALB+ 6gMEALlrJAMEALlrJgMEArlrZAMEAdRcfDANBgkqhkiG9w0BAQsFAAOCAQEAJcBJ Y9W6g6+3i8O7Fmmc8mbVHQ6jtPUmeC2+7PwSC2G5eWRPkdbVC8phuWOJ9wVN6RJB C/TpFnAGazRmnj6lOpcel1DkWB5yYJO3Vd4NzRL6pUaZFPsMUyd2+eWahgLZNnf3 c+tDO5Wa7ywgNaL9eW6WI9+fUgdHmewaq3uKoYJHjXkHLw7aDdM9OXSDSA8UJeCT 7ujhJpd9qZ9I9vxNGRJx6XqhGhHwZ0edhd53lq9Zj5T488L3sR0DzdqdTqjJZ9kZ 94zUbbTHCDakAEydwFNpT54qrLU0HunnZ1P6V8aMdtIkuQ+oW1CKoFg5RjL3Za9a azY2BSA9ZYkndpS4Yw== -----END CERTIFICATE-----Generated at Sun Jan 25 18:51:29 2026 by rpki-client