This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/5u5zeseIIAH3rUGwZvq3TcUwkp4.roa File: 5u5zeseIIAH3rUGwZvq3TcUwkp4.roa (raw, json) Hash identifier: TkiEDmRqN7mva7bSv299QA1BJ0MJDg4yMGlz2EkHVWc= Subject key identifier: E6:EE:73:7A:C7:88:20:01:F7:AD:41:B0:66:FA:B7:4D:C5:30:92:9E Certificate issuer: /CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224 Certificate serial: 019B7A5B038D380E2D73599D4EF69C235124 Authority key identifier: A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/5u5zeseIIAH3rUGwZvq3TcUwkp4.roa Signing time: Thu 01 Jan 2026 16:19:03 +0000 ROA not before: Thu 01 Jan 2026 16:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61977 IP address blocks: 193.0.232.0/24 maxlen: 24 2a13:1500::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:03:8d:38:0e:2d:73:59:9d:4e:f6:9c:23:51:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224 Validity Not Before: Jan 1 16:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e6ee737ac7882001f7ad41b066fab74dc530929e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:93:34:dc:ae:d0:cc:b5:93:1a:73:54:26:00: 39:bc:72:09:3a:03:ed:f2:38:a3:06:66:f2:20:81: 83:99:c5:9c:09:09:20:29:86:7f:33:97:dc:f5:a0: 0e:04:82:85:c5:92:aa:b8:88:ff:d2:06:78:0c:a2: 5b:f6:2f:0b:1f:02:2c:58:70:73:a9:21:54:58:df: 42:d7:7e:e4:dc:29:33:14:11:25:15:1a:77:3c:2f: ea:6d:1a:88:51:00:e5:a1:22:72:ec:81:87:9e:66: 97:b0:2c:40:cf:1b:df:51:77:65:61:e7:75:16:73: 3b:82:05:31:df:cc:4f:3a:90:04:12:b9:b2:a5:11: 13:b0:32:69:4f:d1:51:38:f1:71:8e:3b:38:6e:7b: 4d:76:7f:c9:d4:10:36:e5:84:44:85:a2:4a:2f:bb: ac:a0:ae:63:13:5b:38:05:b6:0b:17:89:36:40:76: c3:61:b4:8d:84:aa:97:db:5b:76:7b:26:a1:6b:23: b2:14:0f:26:61:85:42:47:45:d0:03:c2:11:f9:f2: 05:4a:44:c9:2f:44:f0:45:52:2e:2f:93:54:2d:df: 34:f0:63:25:8c:68:60:fe:b8:cf:17:d6:c4:92:f0: 7c:89:9d:09:7e:98:e2:6a:8e:56:4c:1b:e5:11:80: 40:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:EE:73:7A:C7:88:20:01:F7:AD:41:B0:66:FA:B7:4D:C5:30:92:9E X509v3 Authority Key Identifier: keyid:A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/5u5zeseIIAH3rUGwZvq3TcUwkp4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.232.0/24 IPv6: 2a13:1500::/29 Signature Algorithm: sha256WithRSAEncryption 75:4a:e1:b0:c5:31:35:f6:51:34:1f:db:b1:cd:e7:be:4e:94: 87:f6:cf:2f:5d:fa:b6:0f:54:8d:1e:83:91:98:67:bc:fa:12: 85:e0:3b:a7:ec:d1:d1:a4:c5:40:23:28:55:57:63:fb:58:27: 79:7f:05:2e:e3:84:1d:4d:50:e1:64:4a:2b:4f:a8:69:12:e1: fa:cb:4d:18:98:0b:f0:d0:b2:00:c2:9c:f5:c8:8b:3c:50:34: 70:b1:9b:24:d6:c5:ed:24:5e:91:3d:a4:c6:cf:67:65:4b:33: 8e:4f:52:87:61:51:88:60:51:1d:92:38:f8:d3:55:9f:73:06: 27:0d:f3:e9:5d:f7:e9:ed:6e:bf:34:ef:be:9e:a6:e9:b0:a8: 04:c4:dd:92:b1:b4:15:10:72:02:49:17:5f:6c:ec:68:75:5d: e6:a5:7f:fe:a6:07:75:86:21:97:4b:21:7e:d9:59:af:d3:d1: c1:f0:11:97:e4:ed:75:2e:06:44:93:91:26:5a:6e:b8:81:6f: a6:58:f3:93:34:ce:1c:d0:f6:b7:b2:36:ea:ab:20:c0:23:5f: f8:13:cc:24:53:75:44:3d:0e:c2:c7:40:9a:1e:16:c2:71:7f: c9:9b:49:26:c4:4e:72:e1:86:d6:39:4d:9a:32:ee:1d:2a:d7: 6c:f1:66:18 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6WwONOA4tc1mdTvacI1EkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzOGIxNzZhN2Q5MmU1MDFlZWRhZWY2YzYwZThjZTNhNjhk NzUyMjQwHhcNMjYwMTAxMTYxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNmVlNzM3YWM3ODgyMDAxZjdhZDQxYjA2NmZhYjc0ZGM1MzA5MjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pM03K7QzLWTGnNUJgA5vHIJOgPt 8jijBmbyIIGDmcWcCQkgKYZ/M5fc9aAOBIKFxZKquIj/0gZ4DKJb9i8LHwIsWHBz qSFUWN9C137k3CkzFBElFRp3PC/qbRqIUQDloSJy7IGHnmaXsCxAzxvfUXdlYed1 FnM7ggUx38xPOpAEErmypRETsDJpT9FROPFxjjs4bntNdn/J1BA25YREhaJKL7us oK5jE1s4BbYLF4k2QHbDYbSNhKqX21t2eyahayOyFA8mYYVCR0XQA8IR+fIFSkTJ L0TwRVIuL5NULd808GMljGhg/rjPF9bEkvB8iZ0Jfpjiao5WTBvlEYBAuwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFObuc3rHiCAB961BsGb6t03FMJKeMB8GA1UdIwQY MBaAFKOLF2p9kuUB7trvbGDozjpo11IkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzRzWGFuMlM1UUh1MnU5c1lPak9PbWpYVWlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi84MTAwZGItNDQzYS00YzdlLWJiZTIt ZWZlNzljMjU0ZTI1LzEvNXU1emVzZUlJQUgzclVHd1p2cTNUY1V3a3A0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi84MTAwZGItNDQzYS00YzdlLWJiZTItZWZlNzljMjU0ZTI1 LzEvbzRzWGFuMlM1UUh1MnU5c1lPak9PbWpYVWlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwQDoMA0E AgACMAcDBQMqExUAMA0GCSqGSIb3DQEBCwUAA4IBAQB1SuGwxTE19lE0H9uxzee+ TpSH9s8vXfq2D1SNHoORmGe8+hKF4Dun7NHRpMVAIyhVV2P7WCd5fwUu44QdTVDh ZEorT6hpEuH6y00YmAvw0LIAwpz1yIs8UDRwsZsk1sXtJF6RPaTGz2dlSzOOT1KH YVGIYFEdkjj401WfcwYnDfPpXffp7W6/NO++nqbpsKgExN2SsbQVEHICSRdfbOxo dV3mpX/+pgd1hiGXSyF+2Vmv09HB8BGX5O11LgZEk5EmWm64gW+mWPOTNM4c0Pa3 sjbqqyDAI1/4E8wkU3VEPQ7Cx0CaHhbCcX/Jm0kmxE5y4YbWOU2aMu4dKtds8WYY -----END CERTIFICATE-----Generated at Sun Jan 25 16:37:08 2026 by rpki-client