This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/txsQwV5nWIDxV7UxfBhka_l-5tE.roa File: txsQwV5nWIDxV7UxfBhka_l-5tE.roa (raw, json) Hash identifier: 9KN/hXODRchfuBvujxl5Gu781hmuuIf/qjbAUFRAYqI= Subject key identifier: B7:1B:10:C1:5E:67:58:80:F1:57:B5:31:7C:18:64:6B:F9:7E:E6:D1 Certificate issuer: /CN=be550b8eff90cccee9f8d3134b6438996b7d27cd Certificate serial: 019B7EA6AFBA37F25890B29C5AECC6E64BBF Authority key identifier: BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/txsQwV5nWIDxV7UxfBhka_l-5tE.roa Signing time: Fri 02 Jan 2026 12:20:11 +0000 ROA not before: Fri 02 Jan 2026 12:20:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214982 IP address blocks: 5.102.177.0/24 maxlen: 24 96.9.145.0/24 maxlen: 24 2a0a:c743:1::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.crl rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:af:ba:37:f2:58:90:b2:9c:5a:ec:c6:e6:4b:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be550b8eff90cccee9f8d3134b6438996b7d27cd Validity Not Before: Jan 2 12:20:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b71b10c15e675880f157b5317c18646bf97ee6d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:80:ef:2c:94:a4:71:e3:2b:1e:f2:7a:d9:31: 13:72:fc:a9:50:41:61:c0:37:03:47:02:38:91:b2: c0:e6:2f:cf:41:96:02:56:18:3b:0e:66:40:c9:86: 9d:89:59:74:e4:48:a4:c7:61:77:cf:e5:62:22:54: e6:c5:a9:24:f4:01:28:b4:3f:79:41:82:88:13:5a: 64:c9:db:87:62:f0:68:4d:b3:b4:fe:71:89:47:ca: 08:84:67:6c:d2:53:5e:55:22:87:44:9b:c6:e9:4b: 4a:ad:57:7d:4d:79:83:b3:74:91:a0:88:e1:0e:08: 1d:a6:c2:b3:31:6d:a9:de:f3:7f:c8:47:ae:28:f6: 55:06:6d:1f:14:2e:10:3b:6a:bf:0e:6b:b7:cb:df: 20:80:f8:43:c3:ca:9e:6b:94:87:dd:24:1c:0b:94: bf:69:54:5f:8b:b1:0f:fe:bc:38:3b:8a:e2:ff:ef: ce:e1:ef:a0:df:84:32:5d:4c:b7:f4:01:50:72:5c: 58:cc:15:95:cc:47:5b:f6:3d:dd:c8:73:1e:ae:88: 27:82:56:db:f0:e9:3b:62:f1:26:b8:5e:40:51:e3: 30:4d:00:a2:20:64:22:1f:3b:0a:61:86:49:65:28: 32:5d:59:92:49:f5:8c:8d:a2:8d:f4:47:c8:45:29: 5c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:1B:10:C1:5E:67:58:80:F1:57:B5:31:7C:18:64:6B:F9:7E:E6:D1 X509v3 Authority Key Identifier: keyid:BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/txsQwV5nWIDxV7UxfBhka_l-5tE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.102.177.0/24 96.9.145.0/24 IPv6: 2a0a:c743:1::/64 Signature Algorithm: sha256WithRSAEncryption 79:37:98:1f:d5:3e:04:fc:6b:78:5f:f0:01:62:df:be:69:90: e3:88:85:e2:c7:0d:25:17:d5:6f:b5:ee:e1:a6:dc:c7:a3:50: 5b:cd:72:68:0a:95:df:6d:b7:d5:b0:df:5f:a9:b3:0d:3e:37: 2c:b5:be:19:97:81:da:83:67:ff:37:b5:21:bf:ef:4d:e0:53: c6:dd:c8:86:6a:b2:6b:2c:17:2b:f3:10:3d:d4:31:36:ab:be: f7:77:e3:39:ec:43:5f:3a:0e:2a:34:9c:7f:75:13:24:18:d8: 87:b7:2f:b0:4a:45:1b:91:ac:f1:ad:13:94:21:de:5a:a1:3b: 1b:15:73:fe:99:b8:4a:97:9e:59:27:cb:de:35:44:3d:94:8a: 8a:63:6d:fc:b8:3b:0f:31:f1:2b:4b:b5:fb:93:b7:52:bc:9d: 91:8f:4a:03:40:84:9f:24:aa:33:8c:6a:65:61:c8:e6:51:a6: a8:c6:b1:02:87:76:6c:09:7f:36:e2:04:75:5b:77:5b:e1:72: f3:85:93:a1:0b:45:52:92:6a:de:f4:60:c9:d8:be:8f:c5:ae: d2:5c:a9:3b:fc:2f:40:73:d4:34:87:69:60:79:bf:66:09:d8: 01:ca:50:09:2a:f9:22:d1:d5:b3:99:1b:71:0b:af:44:b6:d2: 87:a6:ea:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt+pq+6N/JYkLKcWuzG5ku/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlNTUwYjhlZmY5MGNjY2VlOWY4ZDMxMzRiNjQzODk5NmI3 ZDI3Y2QwHhcNMjYwMTAyMTIyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzFiMTBjMTVlNjc1ODgwZjE1N2I1MzE3YzE4NjQ2YmY5N2VlNmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4DvLJSkceMrHvJ62TETcvypUEFh wDcDRwI4kbLA5i/PQZYCVhg7DmZAyYadiVl05Eikx2F3z+ViIlTmxakk9AEotD95 QYKIE1pkyduHYvBoTbO0/nGJR8oIhGds0lNeVSKHRJvG6UtKrVd9TXmDs3SRoIjh DggdpsKzMW2p3vN/yEeuKPZVBm0fFC4QO2q/Dmu3y98ggPhDw8qea5SH3SQcC5S/ aVRfi7EP/rw4O4ri/+/O4e+g34QyXUy39AFQclxYzBWVzEdb9j3dyHMerognglbb 8Ok7YvEmuF5AUeMwTQCiIGQiHzsKYYZJZSgyXVmSSfWMjaKN9EfIRSlchwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLcbEMFeZ1iA8Ve1MXwYZGv5fubRMB8GA1UdIwQY MBaAFL5VC47/kMzO6fjTE0tkOJlrfSfNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmxVTGp2LVF6TTdwLU5NVFMyUTRtV3Q5SjgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8zNDBkY2QtM2FlZS00MDEyLTkyMzMt YzE1NTMyYmFmZjdkLzEvdHhzUXdWNW5XSUR4VjdVeGZCaGthX2wtNXRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi8zNDBkY2QtM2FlZS00MDEyLTkyMzMtYzE1NTMyYmFmZjdk LzEvdmxVTGp2LVF6TTdwLU5NVFMyUTRtV3Q5SjgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzASBAIAATAMAwQABWaxAwQA YAmRMBEEAgACMAsDCQAqCsdDAAEAADANBgkqhkiG9w0BAQsFAAOCAQEAeTeYH9U+ BPxreF/wAWLfvmmQ44iF4scNJRfVb7Xu4abcx6NQW81yaAqV32231bDfX6mzDT43 LLW+GZeB2oNn/ze1Ib/vTeBTxt3IhmqyaywXK/MQPdQxNqu+93fjOexDXzoOKjSc f3UTJBjYh7cvsEpFG5Gs8a0TlCHeWqE7GxVz/pm4SpeeWSfL3jVEPZSKimNt/Lg7 DzHxK0u1+5O3UrydkY9KA0CEnySqM4xqZWHI5lGmqMaxAod2bAl/NuIEdVt3W+Fy 84WToQtFUpJq3vRgydi+j8Wu0lypO/wvQHPUNIdpYHm/ZgnYAcpQCSr5ItHVs5kb cQuvRLbSh6bqZQ== -----END CERTIFICATE-----Generated at Mon Jan 26 02:43:40 2026 by rpki-client