This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/SudU71UvkOpYbLyB5oHg2RyZNWM.roa File: SudU71UvkOpYbLyB5oHg2RyZNWM.roa (raw, json) Hash identifier: xefx53ev5gZHT0Koi4CdtQgqvR9rIS+NoeeLgTHek6k= Subject key identifier: 4A:E7:54:EF:55:2F:90:EA:58:6C:BC:81:E6:81:E0:D9:1C:99:35:63 Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b Certificate serial: 019B791070FD72F6CC62E7EDFD71010DAFE2 Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/SudU71UvkOpYbLyB5oHg2RyZNWM.roa Signing time: Thu 01 Jan 2026 10:17:59 +0000 ROA not before: Thu 01 Jan 2026 10:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49791 IP address blocks: 5.39.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:70:fd:72:f6:cc:62:e7:ed:fd:71:01:0d:af:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b Validity Not Before: Jan 1 10:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ae754ef552f90ea586cbc81e681e0d91c993563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:96:33:73:15:71:05:37:85:a2:dc:54:a8:e3: 11:b0:9d:de:03:23:70:6d:e0:c7:0b:36:06:65:6e: 5f:a0:02:f2:8e:b8:c6:c6:ca:65:17:54:70:5a:7d: 3e:81:1f:15:f2:0a:76:26:c7:c1:57:23:8a:01:34: 2f:3f:20:34:a2:cf:23:4b:56:bb:13:89:a5:3a:3b: a7:9c:85:84:b1:84:d7:29:46:ec:08:ea:06:1a:c2: d7:42:e1:fa:27:01:e4:63:0a:de:4e:f8:39:85:c1: 05:45:0e:aa:05:d0:51:d7:84:7f:c2:a1:71:05:a7: 1d:a3:cb:42:3d:2e:61:b3:1a:d1:b8:8b:5b:f4:fe: b8:e0:5a:ff:e0:8d:b4:55:95:04:41:ce:d2:7f:6e: be:b8:fa:a3:c0:2a:6a:c6:ad:62:d6:a5:2e:93:83: 04:29:af:c1:aa:54:48:c5:dd:a9:c7:4a:4a:9f:52: 08:4c:b1:76:13:3e:2e:7d:be:64:e4:f1:75:75:f6: a9:71:fe:13:9f:9b:30:b6:94:96:11:10:2c:43:3f: 32:64:23:81:c4:39:59:9e:d6:77:84:5e:5b:0b:cc: 04:03:36:70:ef:e7:23:c4:8d:5f:fd:29:4d:86:85: e7:d8:dc:9a:a4:1f:b9:40:33:78:06:7f:e0:ca:f3: f4:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:E7:54:EF:55:2F:90:EA:58:6C:BC:81:E6:81:E0:D9:1C:99:35:63 X509v3 Authority Key Identifier: keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/SudU71UvkOpYbLyB5oHg2RyZNWM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.39.253.0/24 Signature Algorithm: sha256WithRSAEncryption 67:c5:d6:d3:ab:f6:b3:5c:c6:68:53:0d:58:24:ef:99:82:31: 5f:e7:6b:02:6f:28:68:b6:6f:ef:e1:ad:15:d2:97:d3:17:bd: cd:c3:51:49:01:f0:a0:c6:cc:5b:2f:90:27:5f:8e:f9:93:0c: 64:7b:d4:11:10:b3:59:df:29:ac:fd:65:9f:7e:d0:74:a4:b3: e6:cd:58:c9:c7:a9:c9:2c:3d:f4:67:8c:79:3e:a3:b7:9b:a1: be:de:d4:98:80:7a:5c:11:12:fc:ff:66:ce:39:dc:0e:3b:f1: 9d:da:78:68:e5:e8:29:96:e7:01:c4:96:a5:41:a5:ba:e1:cb: 12:fd:9e:5f:c8:3e:ba:7d:c2:0b:f4:a5:49:2d:85:c6:da:47: a1:74:cd:c7:9c:45:2c:29:a9:be:08:f8:ab:27:23:db:43:e6: 58:89:30:99:2a:5c:ea:36:d4:96:16:36:54:ef:fb:bd:90:91: 73:24:98:42:f4:7e:c6:3e:26:a8:4b:5e:44:27:f7:68:be:3a: 78:63:70:f9:9a:c5:2a:79:70:55:47:a6:08:35:dd:6f:12:48: 2a:23:2a:31:f1:c6:ef:d0:1e:29:76:f3:de:96:20:f1:a2:37: 36:0e:8b:49:42:43:6b:24:84:92:18:7a:b3:e9:fe:75:b2:d9: d8:fc:16:14 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EHD9cvbMYuft/XEBDa/iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzMTg4MTczMmEzZTI0NWE5NTliYzY3OWUwNDU4YzM5Zjg5 M2U0NmIwHhcNMjYwMTAxMTAxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YWU3NTRlZjU1MmY5MGVhNTg2Y2JjODFlNjgxZTBkOTFjOTkzNTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pYzcxVxBTeFotxUqOMRsJ3eAyNw beDHCzYGZW5foALyjrjGxsplF1RwWn0+gR8V8gp2JsfBVyOKATQvPyA0os8jS1a7 E4mlOjunnIWEsYTXKUbsCOoGGsLXQuH6JwHkYwreTvg5hcEFRQ6qBdBR14R/wqFx Bacdo8tCPS5hsxrRuItb9P644Fr/4I20VZUEQc7Sf26+uPqjwCpqxq1i1qUuk4ME Ka/BqlRIxd2px0pKn1IITLF2Ez4ufb5k5PF1dfapcf4Tn5swtpSWERAsQz8yZCOB xDlZntZ3hF5bC8wEAzZw7+cjxI1f/SlNhoXn2NyapB+5QDN4Bn/gyvP0fQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFErnVO9VL5DqWGy8geaB4NkcmTVjMB8GA1UdIwQY MBaAFBMYgXMqPiRalZvGeeBFjDn4k+RrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUt Y2Q2MTUyMjYxYzZmLzEvU3VkVTcxVXZrT3BZYkx5QjVvSGcyUnlaTldNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUtY2Q2MTUyMjYxYzZm LzEvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABSf9MA0G CSqGSIb3DQEBCwUAA4IBAQBnxdbTq/azXMZoUw1YJO+ZgjFf52sCbyhotm/v4a0V 0pfTF73Nw1FJAfCgxsxbL5AnX475kwxke9QRELNZ3yms/WWfftB0pLPmzVjJx6nJ LD30Z4x5PqO3m6G+3tSYgHpcERL8/2bOOdwOO/Gd2nho5egplucBxJalQaW64csS /Z5fyD66fcIL9KVJLYXG2kehdM3HnEUsKam+CPirJyPbQ+ZYiTCZKlzqNtSWFjZU 7/u9kJFzJJhC9H7GPiaoS15EJ/dovjp4Y3D5msUqeXBVR6YINd1vEkgqIyox8cbv 0B4pdvPeliDxojc2DotJQkNrJISSGHqz6f51stnY/BYU -----END CERTIFICATE-----Generated at Sun Jan 25 13:46:42 2026 by rpki-client