This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/5A-xAaitVd-Z-3EM0tcDIKZtoa0.roa File: 5A-xAaitVd-Z-3EM0tcDIKZtoa0.roa (raw, json) Hash identifier: rvE7dA9kE2RGdYWQzFMr+Rr8fFZi5luB0pquTynO3s8= Subject key identifier: E4:0F:B1:01:A8:AD:55:DF:99:FB:71:0C:D2:D7:03:20:A6:6D:A1:AD Certificate issuer: /CN=b6f3db35659133315d2fcf93058dce350a4cb17a Certificate serial: 019B7E3892204E229A91FA92EDD746195432 Authority key identifier: B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/5A-xAaitVd-Z-3EM0tcDIKZtoa0.roa Signing time: Fri 02 Jan 2026 10:19:55 +0000 ROA not before: Fri 02 Jan 2026 10:19:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57519 IP address blocks: 194.44.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:92:20:4e:22:9a:91:fa:92:ed:d7:46:19:54:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6f3db35659133315d2fcf93058dce350a4cb17a Validity Not Before: Jan 2 10:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e40fb101a8ad55df99fb710cd2d70320a66da1ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:bf:a4:e3:8e:e4:84:5a:7a:74:14:45:02:6e: e6:ae:3f:d3:8f:d9:4e:0d:5b:b8:21:05:ae:22:0b: 27:26:52:01:64:57:c2:ea:21:cc:00:ff:d1:ab:86: 65:a7:a5:22:9c:9e:3c:5a:ff:db:e0:98:27:20:51: d7:6a:88:08:de:62:12:af:ea:bb:2e:b3:c3:ea:45: 5a:f8:64:34:1c:97:d4:07:43:d8:39:7a:b4:eb:7d: 2e:83:b5:c3:f4:79:78:d2:ad:67:76:66:b9:a6:83: 1f:62:71:d5:54:d2:01:b6:c5:9c:10:0e:7d:89:46: 75:ef:d4:56:6f:3b:3e:48:d9:4a:4d:a2:32:65:86: 30:5c:93:e1:14:85:79:f8:c8:01:d2:a5:2b:24:95: 97:a0:f3:d7:eb:0a:a1:bb:cf:95:3c:87:28:c4:7a: f2:37:20:52:07:67:5a:99:52:8b:c2:55:9a:70:7e: 22:2d:dc:89:e8:0f:08:0d:9d:f2:35:f7:14:c6:cf: 1e:2a:9f:cb:c7:9d:b3:fe:fa:d0:4c:b1:aa:10:b7: 77:c7:46:70:07:e9:80:23:5b:f7:29:70:99:fa:11: 88:c0:4a:6e:2a:73:1c:20:c1:63:9e:cf:b5:c9:69: 21:ec:6f:b9:c5:af:76:6a:ef:ad:1f:3b:01:e0:df: 41:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:0F:B1:01:A8:AD:55:DF:99:FB:71:0C:D2:D7:03:20:A6:6D:A1:AD X509v3 Authority Key Identifier: keyid:B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/5A-xAaitVd-Z-3EM0tcDIKZtoa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.44.101.0/24 Signature Algorithm: sha256WithRSAEncryption ad:cb:2a:7e:35:82:c3:3c:97:24:f5:c4:ea:50:4b:5c:f1:a2: 57:20:f5:7b:06:4f:c1:b9:8d:20:2f:07:1d:9c:97:b0:13:84: 7f:7c:74:39:fc:e5:1c:81:d8:e5:ba:20:71:a2:59:2b:ab:87: f3:bc:e2:9a:cd:5e:03:63:68:6c:eb:ea:c4:fa:f3:62:a7:bb: cd:53:88:f7:40:f6:8d:50:b4:07:fc:61:ae:67:17:96:a3:75: f9:1c:df:87:1d:6e:fd:76:98:92:8a:89:ca:2a:4f:16:54:49: 5a:79:6c:32:f1:c0:35:3c:26:72:61:ba:e9:1e:dc:d2:e2:49: ee:98:c9:3b:bd:18:e5:ab:e4:cf:c9:27:fb:30:c7:5e:0c:c7: c6:24:d4:5b:f6:15:04:57:79:9f:d6:d3:62:9d:9b:3c:69:bc: 87:a0:0e:af:23:c8:43:0b:e2:55:92:0a:cc:ff:fd:8b:a9:e7: 98:9d:a0:dd:f7:58:73:72:ef:7d:8d:e6:38:59:69:e6:b5:36: ef:19:d4:39:1c:ee:23:72:c0:3f:6e:7d:f4:fd:80:d8:47:d6: 4d:34:d0:cc:55:20:95:6b:ba:cc:99:88:7e:24:80:14:99:4b: 14:a5:82:9a:57:a1:c5:b3:2e:57:fb:2a:e4:a5:cf:ec:bf:a2: c6:66:96:cd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OJIgTiKakfqS7ddGGVQyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2ZjNkYjM1NjU5MTMzMzE1ZDJmY2Y5MzA1OGRjZTM1MGE0 Y2IxN2EwHhcNMjYwMTAyMTAxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDBmYjEwMWE4YWQ1NWRmOTlmYjcxMGNkMmQ3MDMyMGE2NmRhMWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7+k447khFp6dBRFAm7mrj/Tj9lO DVu4IQWuIgsnJlIBZFfC6iHMAP/Rq4Zlp6UinJ48Wv/b4JgnIFHXaogI3mISr+q7 LrPD6kVa+GQ0HJfUB0PYOXq0630ug7XD9Hl40q1ndma5poMfYnHVVNIBtsWcEA59 iUZ179RWbzs+SNlKTaIyZYYwXJPhFIV5+MgB0qUrJJWXoPPX6wqhu8+VPIcoxHry NyBSB2damVKLwlWacH4iLdyJ6A8IDZ3yNfcUxs8eKp/Lx52z/vrQTLGqELd3x0Zw B+mAI1v3KXCZ+hGIwEpuKnMcIMFjns+1yWkh7G+5xa92au+tHzsB4N9BRwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOQPsQGorVXfmftxDNLXAyCmbaGtMB8GA1UdIwQY MBaAFLbz2zVlkTMxXS/PkwWNzjUKTLF6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHZQYk5XV1JNekZkTDgtVEJZM09OUXBNc1hvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83MGJmZmUtYjRmMy00NDllLTgxZWQt NTQ5ZWU2ZDMwZmI2LzEvNUEteEFhaXRWZC1aLTNFTTB0Y0RJS1p0b2EwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC83MGJmZmUtYjRmMy00NDllLTgxZWQtNTQ5ZWU2ZDMwZmI2 LzEvdHZQYk5XV1JNekZkTDgtVEJZM09OUXBNc1hvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwixlMA0G CSqGSIb3DQEBCwUAA4IBAQCtyyp+NYLDPJck9cTqUEtc8aJXIPV7Bk/BuY0gLwcd nJewE4R/fHQ5/OUcgdjluiBxolkrq4fzvOKazV4DY2hs6+rE+vNip7vNU4j3QPaN ULQH/GGuZxeWo3X5HN+HHW79dpiSionKKk8WVElaeWwy8cA1PCZyYbrpHtzS4knu mMk7vRjlq+TPySf7MMdeDMfGJNRb9hUEV3mf1tNinZs8abyHoA6vI8hDC+JVkgrM //2LqeeYnaDd91hzcu99jeY4WWnmtTbvGdQ5HO4jcsA/bn30/YDYR9ZNNNDMVSCV a7rMmYh+JIAUmUsUpYKaV6HFsy5X+yrkpc/sv6LGZpbN -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:41 2026 by rpki-client