This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/5DvFWn8hN7piazN1T8HIXkNFc8w.roa File: 5DvFWn8hN7piazN1T8HIXkNFc8w.roa (raw, json) Hash identifier: XsihtnWpKZygkLBke+BN9JF5neJLF/Mp9MsWC2DKCb8= Subject key identifier: E4:3B:C5:5A:7F:21:37:BA:62:6B:33:75:4F:C1:C8:5E:43:45:73:CC Certificate issuer: /CN=bd68c1dad91a4101c7153c0f6d0156238ad746bb Certificate serial: 019B78A2258CF8BB929FFE156CA3BEBF10CD Authority key identifier: BD:68:C1:DA:D9:1A:41:01:C7:15:3C:0F:6D:01:56:23:8A:D7:46:BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWjB2tkaQQHHFTwPbQFWI4rXRrs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/5DvFWn8hN7piazN1T8HIXkNFc8w.roa Signing time: Thu 01 Jan 2026 08:17:30 +0000 ROA not before: Thu 01 Jan 2026 08:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8937 IP address blocks: 192.109.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft rsync://rpki.ripe.net/repository/DEFAULT/vWjB2tkaQQHHFTwPbQFWI4rXRrs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 17:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:25:8c:f8:bb:92:9f:fe:15:6c:a3:be:bf:10:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd68c1dad91a4101c7153c0f6d0156238ad746bb Validity Not Before: Jan 1 08:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e43bc55a7f2137ba626b33754fc1c85e434573cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a4:d2:f9:74:b9:f4:90:28:1b:ee:fd:25:35: e7:09:ee:56:d6:18:41:02:99:6f:2b:ba:64:80:38: 32:f7:4c:86:e4:75:85:9f:14:2b:a4:de:0e:37:f7: da:45:08:76:9f:a4:74:1b:df:8b:86:2b:6f:c2:cf: df:4e:86:88:30:d6:92:93:32:70:a7:2e:b6:16:a6: 38:00:56:30:1c:db:4e:99:db:4b:60:f1:e7:f1:b3: a4:ff:b0:5f:6f:1b:cc:04:06:89:f9:6e:07:cd:e8: 3f:eb:f0:cd:e4:91:3e:90:52:a6:19:0e:c2:4e:ce: e9:48:44:35:9e:81:90:7f:62:6d:43:60:33:87:9f: ec:6b:85:bd:c5:7b:a7:df:14:cb:23:e5:82:0d:03: 0b:8d:09:ae:93:8f:a7:fe:38:12:4c:02:9e:42:be: bd:5d:b3:94:2c:19:78:77:b9:46:4a:20:a6:74:e1: 1a:44:7c:63:53:e6:f6:84:3c:0f:c3:a3:d0:73:56: 2b:4a:47:62:9d:df:47:69:0f:8d:0a:ed:02:c4:48: 12:94:da:66:f6:b5:4a:e0:6a:ed:42:4a:ba:cb:0b: 8e:d0:d3:ec:cc:f0:a3:5a:fe:54:5a:83:ea:0c:46: cc:3a:ef:bd:61:07:82:63:43:4e:1c:e4:03:b1:aa: d8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:3B:C5:5A:7F:21:37:BA:62:6B:33:75:4F:C1:C8:5E:43:45:73:CC X509v3 Authority Key Identifier: keyid:BD:68:C1:DA:D9:1A:41:01:C7:15:3C:0F:6D:01:56:23:8A:D7:46:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWjB2tkaQQHHFTwPbQFWI4rXRrs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/5DvFWn8hN7piazN1T8HIXkNFc8w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.109.199.0/24 Signature Algorithm: sha256WithRSAEncryption 50:92:f3:b3:26:b5:87:f9:09:4c:ce:e0:8c:08:5a:aa:5f:12: 21:e6:fa:7e:31:c2:23:cf:3e:77:94:21:d5:c0:0b:8c:0c:76: 1a:8d:dc:1e:49:bb:bb:98:13:8f:d8:f2:9f:27:13:09:bb:bd: ef:4f:fe:c2:fe:19:e9:fc:17:e8:fc:13:cf:ba:2c:75:f2:69: 15:0b:23:ed:ec:1f:bc:d9:56:f9:9d:65:c8:ca:55:d8:53:09: 97:e8:14:38:75:61:38:c5:75:6d:82:0d:e4:f9:d6:a8:23:43: 3b:9a:5c:0a:bb:b1:6c:13:34:be:2e:0b:d6:00:36:70:f9:5c: 0b:4e:29:d0:1c:80:8b:ba:a2:39:e7:cc:52:10:65:ac:4f:2d: 09:82:00:3e:5c:f1:c5:c1:f8:9b:f2:f1:da:ce:6a:d3:e1:7a: 80:7a:36:60:f8:1b:f5:63:98:fb:f0:82:3c:32:58:09:b0:dd: db:3a:fc:e0:73:e1:b6:f8:54:6a:c4:a2:f2:da:95:61:b7:7d: 9b:36:fe:e9:80:bc:d5:20:f8:dd:80:56:60:96:3a:1d:5e:03: ea:d8:56:a2:9c:6b:1c:8b:f8:cb:9e:c8:23:fa:f3:85:e1:3b: 01:a2:a0:3b:04:86:0f:ac:9a:4b:8c:c0:4f:a9:f6:b3:b5:fb: 7c:a6:10:dd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oiWM+LuSn/4VbKO+vxDNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkNjhjMWRhZDkxYTQxMDFjNzE1M2MwZjZkMDE1NjIzOGFk NzQ2YmIwHhcNMjYwMTAxMDgxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDNiYzU1YTdmMjEzN2JhNjI2YjMzNzU0ZmMxYzg1ZTQzNDU3M2NjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKTS+XS59JAoG+79JTXnCe5W1hhB AplvK7pkgDgy90yG5HWFnxQrpN4ON/faRQh2n6R0G9+Lhitvws/fToaIMNaSkzJw py62FqY4AFYwHNtOmdtLYPHn8bOk/7BfbxvMBAaJ+W4Hzeg/6/DN5JE+kFKmGQ7C Ts7pSEQ1noGQf2JtQ2Azh5/sa4W9xXun3xTLI+WCDQMLjQmuk4+n/jgSTAKeQr69 XbOULBl4d7lGSiCmdOEaRHxjU+b2hDwPw6PQc1YrSkdind9HaQ+NCu0CxEgSlNpm 9rVK4GrtQkq6ywuO0NPszPCjWv5UWoPqDEbMOu+9YQeCY0NOHOQDsarYEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOQ7xVp/ITe6YmszdU/ByF5DRXPMMB8GA1UdIwQY MBaAFL1owdrZGkEBxxU8D20BViOK10a7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdldqQjJ0a2FRUUhIRlR3UGJRRldJNHJYUnJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi80ZjRlZmYtYWY1NC00ZGIwLTkxY2Qt MTM2OWNlZjdhNGNhLzEvNUR2RlduOGhON3BpYXpOMVQ4SElYa05GYzh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi80ZjRlZmYtYWY1NC00ZGIwLTkxY2QtMTM2OWNlZjdhNGNh LzEvdldqQjJ0a2FRUUhIRlR3UGJRRldJNHJYUnJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwG3HMA0G CSqGSIb3DQEBCwUAA4IBAQBQkvOzJrWH+QlMzuCMCFqqXxIh5vp+McIjzz53lCHV wAuMDHYajdweSbu7mBOP2PKfJxMJu73vT/7C/hnp/Bfo/BPPuix18mkVCyPt7B+8 2Vb5nWXIylXYUwmX6BQ4dWE4xXVtgg3k+daoI0M7mlwKu7FsEzS+LgvWADZw+VwL TinQHICLuqI558xSEGWsTy0JggA+XPHFwfib8vHazmrT4XqAejZg+Bv1Y5j78II8 MlgJsN3bOvzgc+G2+FRqxKLy2pVht32bNv7pgLzVIPjdgFZgljodXgPq2FainGsc i/jLnsgj+vOF4TsBoqA7BIYPrJpLjMBPqfaztft8phDd -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:34 2026 by rpki-client