This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/5Tkq8wpHcpeGz-f1egqNaUaEly4.roa File: 5Tkq8wpHcpeGz-f1egqNaUaEly4.roa (raw, json) Hash identifier: UEQegGsLWicDIfmpSCpj13D1XKHb5j/U85IT8bxJWfc= Subject key identifier: E5:39:2A:F3:0A:47:72:97:86:CF:E7:F5:7A:0A:8D:69:46:84:97:2E Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03 Certificate serial: 019B7D5C47812DDD2991E617BFC3F18348AC Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/5Tkq8wpHcpeGz-f1egqNaUaEly4.roa Signing time: Fri 02 Jan 2026 06:19:18 +0000 ROA not before: Fri 02 Jan 2026 06:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204300 IP address blocks: 94.131.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:47:81:2d:dd:29:91:e6:17:bf:c3:f1:83:48:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03 Validity Not Before: Jan 2 06:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e5392af30a47729786cfe7f57a0a8d694684972e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:61:5f:df:cc:b0:69:97:f1:95:5f:a5:c9:f6: 2b:d3:71:fe:77:a3:de:a0:ac:5a:df:af:12:2f:96: a7:96:63:33:3e:d8:3f:bd:38:cf:39:5d:d9:33:04: d3:b7:85:74:37:09:cd:2f:84:46:6b:6f:81:e5:a3: 98:55:dd:7d:86:69:1c:18:ce:79:6f:3c:78:6c:02: 82:24:2d:c1:b1:00:02:b6:64:47:9b:fc:4d:75:bd: 70:0b:2a:ba:09:7d:0b:9e:86:dd:a7:3b:ed:69:95: d5:da:8f:cb:63:e4:9e:21:f3:bb:31:22:54:7c:1a: 86:b3:5c:ca:ad:44:20:ca:ca:b4:3a:5c:5a:77:8a: 35:28:5f:50:74:16:ac:65:9c:83:99:d4:f0:69:9e: c1:c1:f4:78:7c:10:a0:cf:22:51:81:4c:d3:02:45: d0:17:71:13:04:2f:6b:83:93:f6:fa:9e:11:9c:19: bc:fb:2f:a5:5f:ae:ce:1b:f1:95:7a:e4:7f:c6:6d: bf:bb:1d:7b:80:bd:19:30:a5:5b:9e:e8:c9:ef:4e: 39:44:d6:26:50:ce:d8:b0:e6:76:c4:a3:1a:b7:f8: e2:4c:34:0d:9a:14:ae:00:9f:a5:38:af:b6:54:aa: 2c:56:61:cd:75:00:6c:6f:65:03:31:73:82:2c:9f: 47:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:39:2A:F3:0A:47:72:97:86:CF:E7:F5:7A:0A:8D:69:46:84:97:2E X509v3 Authority Key Identifier: keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/5Tkq8wpHcpeGz-f1egqNaUaEly4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.131.28.0/22 Signature Algorithm: sha256WithRSAEncryption 61:22:92:4d:0d:f2:97:0e:aa:9e:b0:92:3e:f8:f0:29:d9:40: b2:d9:da:0e:b8:07:3d:8a:cf:47:74:07:45:4f:4f:e3:fd:bf: 23:45:3b:f2:09:b0:f0:e2:9b:00:72:3a:c1:cf:08:b6:e1:5a: 8c:23:b8:44:b6:b8:bb:74:af:4d:61:5f:ce:a8:26:54:86:bf: f8:70:0f:60:10:44:20:0f:81:79:2d:98:cb:26:f5:4e:21:65: c3:3f:98:9d:d6:54:7c:47:c1:68:95:05:9a:97:35:08:62:8d: 72:a1:87:67:cb:64:e7:6a:eb:16:29:df:4f:1d:2d:59:84:05: 5d:6f:7d:25:99:3d:02:09:8e:cc:9d:3d:4a:2f:8c:e7:2a:93: 5d:21:26:b7:86:8c:fc:eb:2f:3c:4f:ef:4b:4c:d8:1f:4c:8d: 31:b1:b2:02:be:1f:08:d7:50:79:4b:e3:84:82:13:db:2c:e8: 95:07:48:f6:a3:63:04:1c:18:f1:17:5c:3b:a4:0f:da:f4:3f: d6:8a:85:c3:79:44:68:92:65:fe:2c:dd:65:96:96:74:76:65: 92:7d:40:2b:c1:00:ea:43:31:5f:87:9a:88:ca:77:19:fe:4a: 93:07:60:e1:ff:e2:a1:ae:6f:66:b8:1d:6f:33:f5:bc:b5:47: 97:9d:45:13 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XEeBLd0pkeYXv8Pxg0isMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNzQzZWQ2M2U4NjhlZjUwZjZkODRjMDAwM2E4MzQ4M2Zj NjJhMDMwHhcNMjYwMTAyMDYxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTM5MmFmMzBhNDc3Mjk3ODZjZmU3ZjU3YTBhOGQ2OTQ2ODQ5NzJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4mFf38ywaZfxlV+lyfYr03H+d6Pe oKxa368SL5anlmMzPtg/vTjPOV3ZMwTTt4V0NwnNL4RGa2+B5aOYVd19hmkcGM55 bzx4bAKCJC3BsQACtmRHm/xNdb1wCyq6CX0LnobdpzvtaZXV2o/LY+SeIfO7MSJU fBqGs1zKrUQgysq0Olxad4o1KF9QdBasZZyDmdTwaZ7BwfR4fBCgzyJRgUzTAkXQ F3ETBC9rg5P2+p4RnBm8+y+lX67OG/GVeuR/xm2/ux17gL0ZMKVbnujJ7045RNYm UM7YsOZ2xKMat/jiTDQNmhSuAJ+lOK+2VKosVmHNdQBsb2UDMXOCLJ9HqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOU5KvMKR3KXhs/n9XoKjWlGhJcuMB8GA1UdIwQY MBaAFG10PtY+ho71D22EwAA6g0g/xioDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQt ZTk3MjRhN2E2YmM4LzEvNVRrcTh3cEhjcGVHei1mMWVncU5hVWFFbHk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQtZTk3MjRhN2E2YmM4 LzEvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXoMcMA0G CSqGSIb3DQEBCwUAA4IBAQBhIpJNDfKXDqqesJI++PAp2UCy2doOuAc9is9HdAdF T0/j/b8jRTvyCbDw4psAcjrBzwi24VqMI7hEtri7dK9NYV/OqCZUhr/4cA9gEEQg D4F5LZjLJvVOIWXDP5id1lR8R8FolQWalzUIYo1yoYdny2TnausWKd9PHS1ZhAVd b30lmT0CCY7MnT1KL4znKpNdISa3hoz86y88T+9LTNgfTI0xsbICvh8I11B5S+OE ghPbLOiVB0j2o2MEHBjxF1w7pA/a9D/WioXDeURokmX+LN1llpZ0dmWSfUArwQDq QzFfh5qIyncZ/kqTB2Dh/+Khrm9muB1vM/W8tUeXnUUT -----END CERTIFICATE-----Generated at Mon Jan 26 03:58:29 2026 by rpki-client