This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/0r5SPMwwQhwPcbshlwcIfCDEXr8.roa File: 0r5SPMwwQhwPcbshlwcIfCDEXr8.roa (raw, json) Hash identifier: j7MHRykEtZZTjvX5TwuQVPzCfDiezC+//2YsaJiex/c= Subject key identifier: D2:BE:52:3C:CC:30:42:1C:0F:71:BB:21:97:07:08:7C:20:C4:5E:BF Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b Certificate serial: 019B7C7F5C203CF41B961F2E68015BA20148 Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/0r5SPMwwQhwPcbshlwcIfCDEXr8.roa Signing time: Fri 02 Jan 2026 02:18:00 +0000 ROA not before: Fri 02 Jan 2026 02:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200088 IP address blocks: 217.149.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.mft rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:5c:20:3c:f4:1b:96:1f:2e:68:01:5b:a2:01:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b Validity Not Before: Jan 2 02:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2be523ccc30421c0f71bb219707087c20c45ebf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d9:6a:1f:df:c0:35:a7:5c:37:9b:2d:32:fb: 55:f9:61:2a:0c:53:b4:be:ee:f1:33:5b:d3:57:8f: bd:0f:63:5b:3a:24:b4:99:28:c6:9f:30:4e:4d:9b: 7f:ac:46:5f:15:f0:4b:af:e9:30:8c:d7:af:23:55: c8:e0:1b:52:0f:59:9c:a3:64:51:ad:63:aa:1e:02: 78:23:b8:79:fc:f9:37:87:2f:9e:5e:fa:19:92:1c: da:e4:c5:ca:59:5a:9c:c0:4f:dc:c3:86:95:53:ed: 02:2d:59:42:88:17:5e:95:64:af:e1:54:0e:37:c2: 7d:1d:29:57:9c:e2:09:51:42:86:b4:d4:8f:9b:1d: 86:0b:7e:b5:ed:e1:b1:55:86:a8:12:e2:3d:b4:d2: 6f:b9:06:53:2b:b4:01:33:57:29:6d:d2:f5:78:0d: 9b:a5:92:6c:48:af:4d:73:0a:cf:70:14:38:87:df: 9f:46:45:6f:1f:3a:7f:a3:c2:7f:87:28:cb:04:4b: 9b:87:f0:95:b6:33:28:b6:aa:76:ec:f1:42:01:8f: 03:b4:dd:c4:8f:c5:84:b3:b4:4d:a2:5b:1a:52:61: 19:b5:35:21:e9:e9:68:0a:9c:38:97:c2:1b:1b:d7: 78:53:9b:4d:78:0f:4f:3b:0e:da:a4:ff:ee:6d:88: 21:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:BE:52:3C:CC:30:42:1C:0F:71:BB:21:97:07:08:7C:20:C4:5E:BF X509v3 Authority Key Identifier: keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/0r5SPMwwQhwPcbshlwcIfCDEXr8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.149.240.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:87:35:bd:6c:83:35:0e:30:be:c2:a8:df:03:be:a7:1e:6d: 83:90:51:f4:29:0e:e9:de:b2:19:82:2c:7b:2a:89:d5:08:bc: 3b:9d:b4:c9:a2:a6:8a:89:f4:c3:c7:31:c2:17:16:9f:b3:c5: 90:f8:5c:9a:60:fa:df:53:6d:a7:07:46:bd:c1:ba:45:9e:60: 46:bc:ff:c1:95:6c:0e:e7:bd:7b:03:21:03:74:ec:3e:cf:53: c4:52:38:68:8a:6a:07:c4:7a:95:cb:78:12:8d:6d:5b:3f:31: 81:0e:89:56:ca:9b:c4:d5:82:d3:cf:e2:bf:7b:cd:59:ca:34: ca:d5:79:14:8e:71:ac:b5:94:d5:f4:79:7a:94:ec:8d:f7:1c: 1f:cf:6e:d7:6c:4b:6a:c8:33:df:aa:4a:1b:49:93:d6:d5:07: 00:57:91:48:92:13:ad:c7:01:1b:eb:20:e3:75:9e:ac:0f:e9: f9:47:d4:99:e1:f4:c9:aa:e5:89:51:e1:22:ee:80:60:96:9d: 99:a5:2a:d6:ad:ba:2b:0e:3f:d5:3e:c0:58:e0:33:14:56:75: bf:8e:05:63:9b:b7:11:3f:9b:2e:b0:55:5c:05:37:b3:8e:38: 4a:7a:c7:91:1f:61:c3:05:aa:2d:b3:5d:07:45:8d:e5:71:33: f1:e7:2c:6d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f1wgPPQblh8uaAFbogFIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YzUxMGZjOWI4NjVkOTZlM2FmYzdjNTYwNTZlZmFkOWEz MzBjNWIwHhcNMjYwMTAyMDIxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmJlNTIzY2NjMzA0MjFjMGY3MWJiMjE5NzA3MDg3YzIwYzQ1ZWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydlqH9/ANadcN5stMvtV+WEqDFO0 vu7xM1vTV4+9D2NbOiS0mSjGnzBOTZt/rEZfFfBLr+kwjNevI1XI4BtSD1mco2RR rWOqHgJ4I7h5/Pk3hy+eXvoZkhza5MXKWVqcwE/cw4aVU+0CLVlCiBdelWSv4VQO N8J9HSlXnOIJUUKGtNSPmx2GC3617eGxVYaoEuI9tNJvuQZTK7QBM1cpbdL1eA2b pZJsSK9NcwrPcBQ4h9+fRkVvHzp/o8J/hyjLBEubh/CVtjMotqp27PFCAY8DtN3E j8WEs7RNolsaUmEZtTUh6eloCpw4l8IbG9d4U5tNeA9POw7apP/ubYgh0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNK+UjzMMEIcD3G7IZcHCHwgxF6/MB8GA1UdIwQY MBaAFGjFEPybhl2W46/HxWBW762aMwxbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEt NWQ2NjVlOTk4ZjZhLzEvMHI1U1BNd3dRaHdQY2JzaGx3Y0lmQ0RFWHI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEtNWQ2NjVlOTk4ZjZh LzEvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2ZXwMA0G CSqGSIb3DQEBCwUAA4IBAQBPhzW9bIM1DjC+wqjfA76nHm2DkFH0KQ7p3rIZgix7 KonVCLw7nbTJoqaKifTDxzHCFxafs8WQ+FyaYPrfU22nB0a9wbpFnmBGvP/BlWwO 5717AyEDdOw+z1PEUjhoimoHxHqVy3gSjW1bPzGBDolWypvE1YLTz+K/e81ZyjTK 1XkUjnGstZTV9Hl6lOyN9xwfz27XbEtqyDPfqkobSZPW1QcAV5FIkhOtxwEb6yDj dZ6sD+n5R9SZ4fTJquWJUeEi7oBglp2ZpSrWrborDj/VPsBY4DMUVnW/jgVjm7cR P5susFVcBTezjjhKeseRH2HDBaots10HRY3lcTPx5yxt -----END CERTIFICATE-----Generated at Sun Jan 25 14:31:07 2026 by rpki-client