This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/mUrwLBSn-6OABt-a8CWyid9HQT0.roa File: mUrwLBSn-6OABt-a8CWyid9HQT0.roa (raw, json) Hash identifier: QLR5JTAjIM5uhR1YB984cbq/Umms9s9InAJMrrGnnxg= Subject key identifier: 99:4A:F0:2C:14:A7:FB:A3:80:06:DF:9A:F0:25:B2:89:DF:47:41:3D Certificate issuer: /CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8 Certificate serial: 019B7BA4C36DFC15ECA1D7040950DBB4B259 Authority key identifier: 5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/mUrwLBSn-6OABt-a8CWyid9HQT0.roa Signing time: Thu 01 Jan 2026 22:19:14 +0000 ROA not before: Thu 01 Jan 2026 22:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197715 IP address blocks: 5.253.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.crl rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:c3:6d:fc:15:ec:a1:d7:04:09:50:db:b4:b2:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8 Validity Not Before: Jan 1 22:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=994af02c14a7fba38006df9af025b289df47413d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:34:23:74:0d:48:cd:fd:d7:d6:df:d9:0f:09: 41:29:b7:a4:42:ec:a2:d6:59:49:e1:2b:1e:b7:d1: c3:32:66:95:00:fe:03:ed:7b:3b:49:24:8a:7d:4e: 56:1f:50:19:7e:1b:10:c6:59:b8:da:d7:cb:d1:7a: ad:f1:d4:86:d8:cd:f1:74:0a:39:0f:83:13:85:62: 2d:bb:20:29:98:ca:6c:e0:87:fb:b0:6f:57:79:a3: 6d:9d:4d:42:26:76:f6:6d:14:32:c0:6e:63:f1:b0: 94:46:1c:3e:0e:2b:ea:e5:90:79:f7:ed:4d:e2:ad: 38:d7:cd:7f:cb:6f:a3:2d:5e:63:fe:d6:20:4a:21: 14:75:ae:21:43:75:b3:cf:03:a9:09:f5:da:94:82: 8d:d3:eb:b9:cd:4d:a7:c4:bb:f9:f3:a1:1f:23:0e: da:ef:33:e1:78:8f:1a:4a:c2:b5:c6:d3:0f:5e:e7: f3:f7:9a:9a:87:e8:4f:fc:01:09:fd:e1:8d:8f:7e: 07:be:90:e7:c5:51:dd:2a:35:73:55:6f:36:c2:e7: f7:0f:bf:52:bd:62:10:97:76:91:85:3c:25:66:65: e7:e5:b5:c8:b7:89:f3:4e:89:6f:40:47:0f:dc:b2: 89:4d:d2:2b:dc:96:19:12:50:48:5f:90:89:1b:fe: 9f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:4A:F0:2C:14:A7:FB:A3:80:06:DF:9A:F0:25:B2:89:DF:47:41:3D X509v3 Authority Key Identifier: keyid:5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/mUrwLBSn-6OABt-a8CWyid9HQT0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.253.191.0/24 Signature Algorithm: sha256WithRSAEncryption 25:e3:ef:ef:dc:88:ad:bc:97:f5:49:ab:53:b5:42:b6:40:9f: b1:6e:1d:f5:b6:d1:4d:6f:42:3c:31:e8:e7:47:c0:9f:a0:36: cc:56:0b:09:1d:1f:f2:eb:52:37:63:87:5a:cb:77:e1:35:77: 41:56:32:75:90:bb:48:31:76:1c:4b:72:88:12:ce:0b:22:be: fd:f6:71:fb:30:9d:4b:b1:33:30:44:ad:6b:eb:aa:90:04:b9: ad:69:c3:af:e2:1a:d0:76:84:a2:b4:f8:e8:8d:fa:a9:1b:20: 8e:fb:0e:80:dd:4c:b0:de:9b:48:2c:aa:d1:b9:cc:14:0e:75: 1e:ae:0c:eb:0d:71:30:58:84:25:77:74:0e:da:d6:9c:c3:b2: 8b:f7:56:0c:d8:6d:f2:b2:aa:1f:7f:d4:16:33:33:e2:01:7b: 42:4c:a6:3a:b5:3b:36:4a:1b:f0:31:f4:e8:be:c8:99:a9:b3: e4:de:f1:4d:ec:72:e2:f0:0b:ed:27:25:d5:ba:0e:5e:3c:a7: 21:f4:c6:0e:80:b4:43:a1:00:a0:ef:10:7d:93:82:1e:75:b4: 94:9f:35:d1:f3:85:d6:fc:34:cc:d0:70:9a:36:71:9d:66:69: 6d:87:54:a3:71:5e:3c:3b:11:fd:8f:6d:c9:65:31:e7:d3:83: a2:a1:0d:56 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pMNt/BXsodcECVDbtLJZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkODZjNDdkYTZkOTA3OTM0N2I2MGYwNGVkNWM1NTU3ZmU5 ODNlYjgwHhcNMjYwMTAxMjIxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTRhZjAyYzE0YTdmYmEzODAwNmRmOWFmMDI1YjI4OWRmNDc0MTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTQjdA1Izf3X1t/ZDwlBKbekQuyi 1llJ4Sset9HDMmaVAP4D7Xs7SSSKfU5WH1AZfhsQxlm42tfL0Xqt8dSG2M3xdAo5 D4MThWItuyApmMps4If7sG9XeaNtnU1CJnb2bRQywG5j8bCURhw+Divq5ZB59+1N 4q04181/y2+jLV5j/tYgSiEUda4hQ3WzzwOpCfXalIKN0+u5zU2nxLv586EfIw7a 7zPheI8aSsK1xtMPXufz95qah+hP/AEJ/eGNj34HvpDnxVHdKjVzVW82wuf3D79S vWIQl3aRhTwlZmXn5bXIt4nzTolvQEcP3LKJTdIr3JYZElBIX5CJG/6fvwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJlK8CwUp/ujgAbfmvAlsonfR0E9MB8GA1UdIwQY MBaAFF2GxH2m2QeTR7YPBO1cVVf+mD64MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFliRWZhYlpCNU5IdGc4RTdWeFZWXzZZUHJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9kZjY2YTAtYzk1OC00ZTVjLWE2ZGYt ZmM2MzI4NDFiYTNlLzEvbVVyd0xCU24tNk9BQnQtYThDV3lpZDlIUVQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9kZjY2YTAtYzk1OC00ZTVjLWE2ZGYtZmM2MzI4NDFiYTNl LzEvWFliRWZhYlpCNU5IdGc4RTdWeFZWXzZZUHJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABf2/MA0G CSqGSIb3DQEBCwUAA4IBAQAl4+/v3IitvJf1SatTtUK2QJ+xbh31ttFNb0I8Mejn R8CfoDbMVgsJHR/y61I3Y4day3fhNXdBVjJ1kLtIMXYcS3KIEs4LIr799nH7MJ1L sTMwRK1r66qQBLmtacOv4hrQdoSitPjojfqpGyCO+w6A3Uyw3ptILKrRucwUDnUe rgzrDXEwWIQld3QO2tacw7KL91YM2G3ysqoff9QWMzPiAXtCTKY6tTs2ShvwMfTo vsiZqbPk3vFN7HLi8AvtJyXVug5ePKch9MYOgLRDoQCg7xB9k4IedbSUnzXR84XW /DTM0HCaNnGdZmlth1SjcV48OxH9j23JZTHn04OioQ1W -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:30 2026 by rpki-client