This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/snDtm5EPq4bt8uwg0uwMS4ldr3M.roa File: snDtm5EPq4bt8uwg0uwMS4ldr3M.roa (raw, json) Hash identifier: Re/iBzYv9n7wH6AvwpA38RzBVI5qHPbHIdU0N2m905E= Subject key identifier: B2:70:ED:9B:91:0F:AB:86:ED:F2:EC:20:D2:EC:0C:4B:89:5D:AF:73 Certificate issuer: /CN=b4c814ffca5310862a2224f0afd90caa96ac0b54 Certificate serial: 019B79EC545B4F43F1D0820BD3517BFC768F Authority key identifier: B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/snDtm5EPq4bt8uwg0uwMS4ldr3M.roa Signing time: Thu 01 Jan 2026 14:18:09 +0000 ROA not before: Thu 01 Jan 2026 14:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215497 IP address blocks: 5.159.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:54:5b:4f:43:f1:d0:82:0b:d3:51:7b:fc:76:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4c814ffca5310862a2224f0afd90caa96ac0b54 Validity Not Before: Jan 1 14:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b270ed9b910fab86edf2ec20d2ec0c4b895daf73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:39:e2:90:7f:5d:20:08:d9:55:12:8e:eb:aa: 15:91:32:d6:e1:58:60:7a:d8:84:77:5a:fa:79:0a: 7c:6a:b1:87:e9:91:e0:cd:75:d0:9d:ef:73:88:a2: 96:33:4f:be:77:86:4b:33:2b:18:b8:0a:77:6e:87: 1c:08:59:87:b4:e0:a7:b3:10:39:eb:35:0a:a8:bc: 18:6f:d9:54:5d:75:a0:7b:8c:73:f9:31:97:f0:98: f9:0c:83:95:25:f1:bc:2f:40:f5:e6:7c:1e:17:d8: 80:ce:54:a2:bb:bd:03:0b:48:a1:0f:73:5f:06:1a: d5:94:b4:7c:42:45:1e:7f:cf:ff:5c:54:c2:2c:e6: e9:7a:59:97:c7:41:03:04:dc:e0:1e:24:32:51:5d: 42:d3:b4:03:6d:a1:fb:12:94:a9:e0:22:8b:43:f0: f5:15:d7:a5:10:30:78:89:fe:3e:2d:41:46:bd:03: 76:63:50:d2:ce:48:aa:cf:5b:01:23:cc:df:af:a0: e0:c9:f2:a9:3c:13:b0:52:ce:2e:71:9c:57:ea:1e: ac:40:91:90:cb:18:78:18:75:8a:08:d1:a7:58:ab: c7:da:52:87:2e:66:45:9b:b6:9a:cb:a3:6d:47:41: 36:90:5c:c5:4e:69:c4:e8:62:48:07:7e:37:9b:14: 57:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:70:ED:9B:91:0F:AB:86:ED:F2:EC:20:D2:EC:0C:4B:89:5D:AF:73 X509v3 Authority Key Identifier: keyid:B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/snDtm5EPq4bt8uwg0uwMS4ldr3M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.159.197.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:bd:4d:c4:07:27:34:15:e3:7f:76:e8:b9:b4:e2:2d:29:d1: 5a:b5:d5:f4:c0:f2:62:11:86:09:5f:56:19:02:f4:1d:5e:3c: 25:e0:16:9d:01:ed:0e:90:5e:a1:5c:ec:70:9b:38:95:6f:21: df:70:e1:cb:73:54:c4:98:2a:47:66:f5:27:e4:33:e2:52:c0: aa:10:62:ef:40:7c:5a:e1:7c:2c:89:26:36:84:b3:65:9d:2b: 72:8a:5c:5c:94:8e:fb:c3:88:bc:d0:f0:70:a8:28:a2:34:cf: c6:1b:63:12:1c:52:08:c1:2d:45:ea:f0:21:73:ed:db:61:dc: 4d:4f:18:57:40:b5:bb:e4:66:df:f7:75:22:b3:f3:a7:2a:c7: 7a:4a:fa:53:ba:3c:69:27:53:73:36:6f:b2:55:a6:08:a5:1c: a5:39:db:ac:e1:eb:65:a9:2d:b9:0e:a5:91:16:0a:41:fe:7f: f4:3c:fe:a6:32:5e:66:25:f3:7f:e5:f8:69:9b:38:87:5c:d6: 62:9c:7a:62:29:0a:a3:bb:0e:e6:bf:41:49:30:ad:65:34:e0: ed:ea:7a:34:91:cb:c9:ab:83:6b:6c:a2:35:4f:de:27:77:49: 61:33:f6:2d:8d:37:aa:d0:25:53:de:87:ce:87:1c:00:0e:e8: ab:47:fc:91 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57FRbT0Px0IIL01F7/HaPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0YzgxNGZmY2E1MzEwODYyYTIyMjRmMGFmZDkwY2FhOTZh YzBiNTQwHhcNMjYwMTAxMTQxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjcwZWQ5YjkxMGZhYjg2ZWRmMmVjMjBkMmVjMGM0Yjg5NWRhZjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DnikH9dIAjZVRKO66oVkTLW4Vhg etiEd1r6eQp8arGH6ZHgzXXQne9ziKKWM0++d4ZLMysYuAp3boccCFmHtOCnsxA5 6zUKqLwYb9lUXXWge4xz+TGX8Jj5DIOVJfG8L0D15nweF9iAzlSiu70DC0ihD3Nf BhrVlLR8QkUef8//XFTCLObpelmXx0EDBNzgHiQyUV1C07QDbaH7EpSp4CKLQ/D1 FdelEDB4if4+LUFGvQN2Y1DSzkiqz1sBI8zfr6DgyfKpPBOwUs4ucZxX6h6sQJGQ yxh4GHWKCNGnWKvH2lKHLmZFm7aay6NtR0E2kFzFTmnE6GJIB343mxRX8wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLJw7ZuRD6uG7fLsINLsDEuJXa9zMB8GA1UdIwQY MBaAFLTIFP/KUxCGKiIk8K/ZDKqWrAtUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdE1nVV84cFRFSVlxSWlUd3I5a01xcGFzQzFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8xYWFlNDUtZjZiZS00MDFjLWIzZDAt ZjQ2N2IyZjQyYWY2LzEvc25EdG01RVBxNGJ0OHV3ZzB1d01TNGxkcjNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS8xYWFlNDUtZjZiZS00MDFjLWIzZDAtZjQ2N2IyZjQyYWY2 LzEvdE1nVV84cFRFSVlxSWlUd3I5a01xcGFzQzFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABZ/FMA0G CSqGSIb3DQEBCwUAA4IBAQBfvU3EByc0FeN/dui5tOItKdFatdX0wPJiEYYJX1YZ AvQdXjwl4BadAe0OkF6hXOxwmziVbyHfcOHLc1TEmCpHZvUn5DPiUsCqEGLvQHxa 4XwsiSY2hLNlnStyilxclI77w4i80PBwqCiiNM/GG2MSHFIIwS1F6vAhc+3bYdxN TxhXQLW75Gbf93Uis/OnKsd6SvpTujxpJ1NzNm+yVaYIpRylOdus4etlqS25DqWR FgpB/n/0PP6mMl5mJfN/5fhpmziHXNZinHpiKQqjuw7mv0FJMK1lNODt6no0kcvJ q4NrbKI1T94nd0lhM/YtjTeq0CVT3ofOhxwADuirR/yR -----END CERTIFICATE-----Generated at Mon Jan 26 06:33:07 2026 by rpki-client