This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/5SEARh8FCEo871iB7G34fI2Kpe4.roa File: 5SEARh8FCEo871iB7G34fI2Kpe4.roa (raw, json) Hash identifier: m8tzPmTHhc1WTCJBLsi032NvSAtwSGzKJid4Omy7Mh4= Subject key identifier: E5:21:00:46:1F:05:08:4A:3C:EF:58:81:EC:6D:F8:7C:8D:8A:A5:EE Certificate issuer: /CN=7c3c39d1899e699bf5177418ee381489edff4380 Certificate serial: 019B77593995F57B5B8931C92E7A33D22050 Authority key identifier: 7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/5SEARh8FCEo871iB7G34fI2Kpe4.roa Signing time: Thu 01 Jan 2026 02:18:14 +0000 ROA not before: Thu 01 Jan 2026 02:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51048 IP address blocks: 31.210.24.0/21 maxlen: 21 64.253.32.0/19 maxlen: 19 185.2.196.0/22 maxlen: 22 2a03:4300::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:39:95:f5:7b:5b:89:31:c9:2e:7a:33:d2:20:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3c39d1899e699bf5177418ee381489edff4380 Validity Not Before: Jan 1 02:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e52100461f05084a3cef5881ec6df87c8d8aa5ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c8:05:42:12:1b:6d:a2:61:61:f7:57:70:53: 28:f1:12:2e:d3:c7:e1:6f:19:89:b9:31:ba:98:e1: 8d:69:71:9b:0b:37:4f:d9:2c:ad:47:c8:1b:4a:d7: 59:ef:19:e3:43:db:46:3f:d2:82:54:0f:b1:4e:15: a9:36:38:72:17:91:4c:8d:44:08:27:33:f8:7e:9c: 50:07:57:ef:84:62:27:b7:5d:d5:ad:7e:3e:5e:5b: 54:fa:0a:68:c7:01:7b:bf:b4:4f:f3:95:af:9e:ed: db:ae:34:57:32:2a:bf:df:00:36:c7:dd:6f:a6:67: 9b:05:30:78:7d:91:43:1d:99:b2:d8:5a:c6:c7:a0: 19:e8:b6:94:70:a7:99:b2:e3:0e:a6:fe:f0:f7:86: 4f:eb:e0:3d:96:2b:f0:08:89:ec:13:78:e6:7e:96: c6:2f:4f:6b:3e:d1:ea:16:90:fd:55:b5:6d:e1:f7: 27:bf:41:11:e1:1b:4f:ab:ae:88:ed:72:3d:0f:ad: f4:4f:f9:35:a8:eb:d5:c5:59:fc:4d:b8:9f:9e:2b: da:e2:76:7e:4b:f0:89:bb:ee:ce:1b:46:48:3c:d4: bf:1a:67:5b:92:10:22:2e:d2:0b:43:ee:12:c4:09: 5a:46:15:0a:bc:59:a3:0e:95:b6:9a:a0:31:0c:59: cc:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:21:00:46:1F:05:08:4A:3C:EF:58:81:EC:6D:F8:7C:8D:8A:A5:EE X509v3 Authority Key Identifier: keyid:7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/5SEARh8FCEo871iB7G34fI2Kpe4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.210.24.0/21 64.253.32.0/19 185.2.196.0/22 IPv6: 2a03:4300::/29 Signature Algorithm: sha256WithRSAEncryption 17:ca:be:01:50:f2:02:9b:72:12:f5:2a:23:71:32:8d:48:7d: 65:22:86:f6:7f:9b:ef:fa:9a:39:0f:e9:b7:ed:09:07:5c:a6: aa:37:7b:45:c1:3f:79:65:cf:ef:ad:16:50:f8:f4:d9:c4:d5: 36:4c:b1:97:c7:ab:23:a0:cd:2a:3c:d8:3c:b8:81:44:81:20: 52:ff:05:f0:49:30:11:b3:5d:95:6c:57:86:e4:e1:d0:42:be: d8:ab:02:cf:3a:b3:ca:db:77:0a:a8:6c:31:02:62:ce:b1:c7: 52:ea:a6:e0:4c:b3:4d:53:4f:94:cc:ca:96:74:29:65:db:ce: 2c:da:6a:23:fe:b3:ac:00:7a:91:f6:d2:bc:f7:06:01:db:d4: 13:cb:6e:87:17:1c:3b:e7:5e:8d:18:23:eb:0e:0f:a9:aa:96: cd:5e:c1:ba:2f:ab:45:30:eb:ed:46:20:87:21:4a:63:28:25: c7:9c:58:a6:34:a8:36:ed:26:54:f1:45:57:24:cc:af:b4:4f: 98:10:20:b4:f7:8b:72:d8:ad:c5:cd:0c:b9:c3:5e:e4:36:e9: b8:ab:f0:76:63:23:a0:e9:66:79:d9:40:d1:65:56:6f:3d:a0: 53:80:2c:ed:ef:02:68:02:20:e3:e1:69:ad:f8:cc:37:ee:01: 91:bf:88:ee -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt3WTmV9XtbiTHJLnoz0iBQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2MzOWQxODk5ZTY5OWJmNTE3NzQxOGVlMzgxNDg5ZWRm ZjQzODAwHhcNMjYwMTAxMDIxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTIxMDA0NjFmMDUwODRhM2NlZjU4ODFlYzZkZjg3YzhkOGFhNWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucgFQhIbbaJhYfdXcFMo8RIu08fh bxmJuTG6mOGNaXGbCzdP2SytR8gbStdZ7xnjQ9tGP9KCVA+xThWpNjhyF5FMjUQI JzP4fpxQB1fvhGInt13VrX4+XltU+gpoxwF7v7RP85Wvnu3brjRXMiq/3wA2x91v pmebBTB4fZFDHZmy2FrGx6AZ6LaUcKeZsuMOpv7w94ZP6+A9livwCInsE3jmfpbG L09rPtHqFpD9VbVt4fcnv0ER4RtPq66I7XI9D630T/k1qOvVxVn8Tbifniva4nZ+ S/CJu+7OG0ZIPNS/GmdbkhAiLtILQ+4SxAlaRhUKvFmjDpW2mqAxDFnMTwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFOUhAEYfBQhKPO9Ygext+HyNiqXuMB8GA1UdIwQY MBaAFHw8OdGJnmmb9Rd0GO44FInt/0OAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkR3NTBZbWVhWnYxRjNRWTdqZ1VpZTNfUTRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9jODAwYzktNTFiNS00NTg5LTkyNjAt MDYzZmNkZDNhMDU3LzEvNVNFQVJoOEZDRW84NzFpQjdHMzRmSTJLcGU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9jODAwYzktNTFiNS00NTg5LTkyNjAtMDYzZmNkZDNhMDU3 LzEvZkR3NTBZbWVhWnYxRjNRWTdqZ1VpZTNfUTRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDH9IYAwQF QP0gAwQCuQLEMA0EAgACMAcDBQMqA0MAMA0GCSqGSIb3DQEBCwUAA4IBAQAXyr4B UPICm3IS9SojcTKNSH1lIob2f5vv+po5D+m37QkHXKaqN3tFwT95Zc/vrRZQ+PTZ xNU2TLGXx6sjoM0qPNg8uIFEgSBS/wXwSTARs12VbFeG5OHQQr7YqwLPOrPK23cK qGwxAmLOscdS6qbgTLNNU0+UzMqWdCll284s2moj/rOsAHqR9tK89wYB29QTy26H Fxw7516NGCPrDg+pqpbNXsG6L6tFMOvtRiCHIUpjKCXHnFimNKg27SZU8UVXJMyv tE+YECC094ty2K3FzQy5w17kNum4q/B2YyOg6WZ52UDRZVZvPaBTgCzt7wJoAiDj 4Wmt+Mw37gGRv4ju -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:29 2026 by rpki-client