This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/5FnusIit9uaVrldhOS_f_neDWgs.roa File: 5FnusIit9uaVrldhOS_f_neDWgs.roa (raw, json) Hash identifier: Ipdoz4T//FSaZhmjoZKN6wB6EyXA0tHqJzEOkgjKWOo= Subject key identifier: E4:59:EE:B0:88:AD:F6:E6:95:AE:57:61:39:2F:DF:FE:77:83:5A:0B Certificate issuer: /CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73 Certificate serial: 019B79ED356173825855E25E64BA930D4F1D Authority key identifier: E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/5FnusIit9uaVrldhOS_f_neDWgs.roa Signing time: Thu 01 Jan 2026 14:19:07 +0000 ROA not before: Thu 01 Jan 2026 14:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 764 IP address blocks: 194.211.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:35:61:73:82:58:55:e2:5e:64:ba:93:0d:4f:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73 Validity Not Before: Jan 1 14:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e459eeb088adf6e695ae5761392fdffe77835a0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:46:37:15:fb:2e:76:56:17:e3:26:d7:fe:51: c2:97:69:ba:83:9a:59:c9:ee:b4:ab:32:34:37:c6: bf:c8:3a:78:c0:b8:b3:4d:0e:c6:24:3b:55:a9:c6: 0b:80:7a:ae:2d:15:e7:77:05:20:24:20:a1:1f:04: b7:7e:df:58:84:3d:3b:01:c7:f8:99:32:a1:31:db: a6:ba:a7:be:db:d9:ed:a0:45:85:ee:4e:4b:80:a6: e9:07:33:9d:67:cc:4b:a5:c8:09:14:58:57:9c:6e: 76:6f:0b:5d:9d:66:bd:e2:ac:1f:67:02:13:0d:85: d5:16:7b:32:17:73:e7:a0:36:ee:9a:0b:2e:57:fc: ed:5f:58:12:02:e2:3e:b9:38:9e:85:37:7f:18:59: e1:1a:a2:b1:15:ac:4c:af:9b:83:91:c3:af:34:d1: c0:ca:71:5f:52:b9:0c:53:67:eb:23:6c:90:3d:9f: 3c:80:c6:ff:ab:76:a5:55:a2:9c:26:0c:f1:80:52: 88:f5:02:33:b2:55:fc:7c:54:31:24:1a:21:fe:b5: ed:f0:32:c3:73:40:2e:e0:31:c5:4b:f8:fc:1f:b2: c6:82:ae:0f:77:bf:3a:27:c9:37:c2:95:85:73:db: 78:4e:a2:50:df:d8:30:98:7d:29:c9:b4:ed:90:d5: f3:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:59:EE:B0:88:AD:F6:E6:95:AE:57:61:39:2F:DF:FE:77:83:5A:0B X509v3 Authority Key Identifier: keyid:E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/5FnusIit9uaVrldhOS_f_neDWgs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.211.231.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:6c:13:93:5f:f3:72:5c:49:8d:f0:f0:e4:f4:7f:9b:f1:0d: 62:8f:d2:37:96:a6:93:76:5c:74:2e:23:ba:56:2f:41:3a:89: bb:1d:d7:98:fd:6d:f4:25:d3:d1:c4:51:13:82:b0:8c:5b:16: 4f:b0:60:19:b5:a8:9e:0a:86:d3:8b:a4:a3:dd:2f:64:12:86: 96:c4:e3:ab:81:3e:5f:25:3c:d6:ea:f0:c2:e7:e9:4c:a7:59: 22:30:55:47:6b:05:dd:45:75:f1:18:c7:d6:e0:97:0a:60:f0: 89:f7:89:13:ab:a4:0a:46:29:bb:c8:01:4f:b2:d4:ee:66:06: 47:45:04:a1:76:ee:4f:d6:83:71:d2:49:ad:67:3d:71:5c:87: cf:d8:2e:9e:14:b0:bf:80:ab:b5:da:95:50:ab:28:15:4a:e4: 47:67:e8:9f:f1:b3:e3:b6:fe:84:65:6a:a2:b2:f8:33:5d:c6: 6f:47:19:0e:07:a6:53:de:b8:78:fa:d7:27:f8:f0:9d:ae:88: 05:6d:9f:04:7c:23:b0:17:20:8a:f6:a7:2c:79:2b:b3:3e:0b: 9c:d2:cb:ef:4d:c7:c9:cd:59:cc:ee:01:7a:43:e0:9a:1e:7a: ac:0a:17:44:24:2c:0c:dd:30:f6:19:8e:ce:d5:4f:4c:3d:a7: 01:aa:7f:da -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57TVhc4JYVeJeZLqTDU8dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwZGVlMWIwNmJhMjRhNjc2MjEzZjk3NmE0YjUwYzEyOWRj YjJiNzMwHhcNMjYwMTAxMTQxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDU5ZWViMDg4YWRmNmU2OTVhZTU3NjEzOTJmZGZmZTc3ODM1YTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5UY3FfsudlYX4ybX/lHCl2m6g5pZ ye60qzI0N8a/yDp4wLizTQ7GJDtVqcYLgHquLRXndwUgJCChHwS3ft9YhD07Acf4 mTKhMdumuqe+29ntoEWF7k5LgKbpBzOdZ8xLpcgJFFhXnG52bwtdnWa94qwfZwIT DYXVFnsyF3PnoDbumgsuV/ztX1gSAuI+uTiehTd/GFnhGqKxFaxMr5uDkcOvNNHA ynFfUrkMU2frI2yQPZ88gMb/q3alVaKcJgzxgFKI9QIzslX8fFQxJBoh/rXt8DLD c0Au4DHFS/j8H7LGgq4Pd786J8k3wpWFc9t4TqJQ39gwmH0pybTtkNXzyQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFORZ7rCIrfbmla5XYTkv3/53g1oLMB8GA1UdIwQY MBaAFODe4bBrokpnYhP5dqS1DBKdyytzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9jMjJkYzktYzdiYS00MTU2LWE3OWMt MTVlOTBiZjg3ZmFiLzEvNUZudXNJaXQ5dWFWcmxkaE9TX2ZfbmVEV2dzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9jMjJkYzktYzdiYS00MTU2LWE3OWMtMTVlOTBiZjg3ZmFi LzEvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwtPnMA0G CSqGSIb3DQEBCwUAA4IBAQA/bBOTX/NyXEmN8PDk9H+b8Q1ij9I3lqaTdlx0LiO6 Vi9BOom7HdeY/W30JdPRxFETgrCMWxZPsGAZtaieCobTi6Sj3S9kEoaWxOOrgT5f JTzW6vDC5+lMp1kiMFVHawXdRXXxGMfW4JcKYPCJ94kTq6QKRim7yAFPstTuZgZH RQShdu5P1oNx0kmtZz1xXIfP2C6eFLC/gKu12pVQqygVSuRHZ+if8bPjtv6EZWqi svgzXcZvRxkOB6ZT3rh4+tcn+PCdrogFbZ8EfCOwFyCK9qcseSuzPguc0svvTcfJ zVnM7gF6Q+CaHnqsChdEJCwM3TD2GY7O1U9MPacBqn/a -----END CERTIFICATE-----Generated at Sun Jan 25 19:37:11 2026 by rpki-client