This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/tFlecPj9faE5UuJPSXthpqNarpA.roa File: tFlecPj9faE5UuJPSXthpqNarpA.roa (raw, json) Hash identifier: 5jCL7O74oBD5Kbdkv9c3bpe0JfXJwQwzffhIipXmb94= Subject key identifier: B4:59:5E:70:F8:FD:7D:A1:39:52:E2:4F:49:7B:61:A6:A3:5A:AE:90 Certificate issuer: /CN=284e5eb112e13a42703dbb387ba577a2e793ac3a Certificate serial: 019B77C664DE1C135C92E46574A6BF8CA9DB Authority key identifier: 28:4E:5E:B1:12:E1:3A:42:70:3D:BB:38:7B:A5:77:A2:E7:93:AC:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/tFlecPj9faE5UuJPSXthpqNarpA.roa Signing time: Thu 01 Jan 2026 04:17:29 +0000 ROA not before: Thu 01 Jan 2026 04:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20836 IP address blocks: 5.253.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.crl rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:64:de:1c:13:5c:92:e4:65:74:a6:bf:8c:a9:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=284e5eb112e13a42703dbb387ba577a2e793ac3a Validity Not Before: Jan 1 04:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4595e70f8fd7da13952e24f497b61a6a35aae90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:5e:41:7b:cb:40:bb:25:b3:9d:b7:f8:db:e5: df:e1:14:46:9d:94:5c:af:b7:e6:1b:f2:d9:67:bf: b9:09:19:8d:10:9b:ca:48:90:ce:70:65:aa:e1:50: 00:ce:f2:6d:30:2d:39:ef:ba:ad:8a:91:43:b1:2e: 42:c9:c4:e0:78:f1:80:eb:88:16:ee:2d:59:ff:71: 46:29:1e:e2:37:26:41:72:f4:02:f4:6b:e6:d2:50: a3:19:c1:f1:f0:36:62:99:e1:61:a2:e6:dc:8d:b0: 63:af:5c:d3:18:d1:b1:c1:de:51:73:a0:2f:74:51: 80:30:c9:41:c0:f6:a9:1d:2b:ba:34:23:30:a8:7c: 55:b4:24:2f:c5:2a:f0:74:4a:7a:93:0f:e8:65:e8: 80:b4:5b:41:03:27:c3:5e:06:eb:43:d9:6e:b3:55: 59:d0:e8:3a:43:52:19:bd:df:a8:33:a2:31:78:43: 63:03:a9:58:4c:3f:8b:f1:2a:c4:27:9b:a1:c6:f2: 57:48:94:4b:18:2f:09:7f:4b:f5:72:2c:5f:7c:a7: 3c:4a:1b:30:a2:0c:f4:e5:96:6c:29:3f:84:32:2d: 79:35:b8:d6:e2:16:b1:ab:16:65:66:ea:79:93:58: 81:49:5d:0b:4f:ba:4f:5b:fc:e7:89:1a:67:d9:ab: 6e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:59:5E:70:F8:FD:7D:A1:39:52:E2:4F:49:7B:61:A6:A3:5A:AE:90 X509v3 Authority Key Identifier: keyid:28:4E:5E:B1:12:E1:3A:42:70:3D:BB:38:7B:A5:77:A2:E7:93:AC:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/tFlecPj9faE5UuJPSXthpqNarpA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.253.198.0/24 Signature Algorithm: sha256WithRSAEncryption cb:bd:21:34:7d:0c:3a:e1:b6:09:c3:fb:78:07:7b:70:97:4f: 06:e7:82:e1:4d:99:22:85:35:fe:6a:d9:47:b1:2d:32:ea:9b: 1c:d2:d8:83:be:2c:80:49:1b:b2:f2:d0:d4:86:8e:cd:cb:d8: a6:25:8e:3b:ab:cf:78:bb:6b:9c:db:be:3a:dd:82:51:54:66: c0:3c:58:b0:f9:6d:2f:87:63:d1:ab:7b:db:6f:41:3a:66:f9: d6:fc:a8:82:39:6c:7d:8b:2a:5c:0c:52:e8:af:b9:5f:b1:55: d1:b0:41:0a:bf:2c:60:55:23:48:56:37:0c:c9:68:ac:9c:06: fb:93:52:ad:d2:2c:98:2d:42:0d:d0:ed:d1:f9:84:a6:6d:d3: bb:ac:d5:6a:6d:e3:34:ed:96:24:15:11:23:79:bf:26:55:21: 9f:6b:c3:94:4c:19:32:62:63:44:8a:7e:bb:01:d0:b3:d2:01: df:66:49:40:36:fa:67:7d:a2:85:56:c7:65:e1:de:49:aa:4b: df:b2:2d:f9:04:43:70:b5:4a:58:75:c7:12:07:91:88:17:5c: f4:a2:97:b9:25:7f:b4:81:bb:b8:17:93:ff:6f:3a:27:79:7a: 24:8e:e1:f8:29:2b:5d:9c:f8:4f:dc:26:0b:6d:99:ec:81:4b: 48:3f:e6:c1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xmTeHBNckuRldKa/jKnbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4NGU1ZWIxMTJlMTNhNDI3MDNkYmIzODdiYTU3N2EyZTc5 M2FjM2EwHhcNMjYwMTAxMDQxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDU5NWU3MGY4ZmQ3ZGExMzk1MmUyNGY0OTdiNjFhNmEzNWFhZTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2l5Be8tAuyWznbf42+Xf4RRGnZRc r7fmG/LZZ7+5CRmNEJvKSJDOcGWq4VAAzvJtMC0577qtipFDsS5CycTgePGA64gW 7i1Z/3FGKR7iNyZBcvQC9Gvm0lCjGcHx8DZimeFhoubcjbBjr1zTGNGxwd5Rc6Av dFGAMMlBwPapHSu6NCMwqHxVtCQvxSrwdEp6kw/oZeiAtFtBAyfDXgbrQ9lus1VZ 0Og6Q1IZvd+oM6IxeENjA6lYTD+L8SrEJ5uhxvJXSJRLGC8Jf0v1cixffKc8Shsw ogz05ZZsKT+EMi15NbjW4haxqxZlZup5k1iBSV0LT7pPW/zniRpn2atuSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLRZXnD4/X2hOVLiT0l7YaajWq6QMB8GA1UdIwQY MBaAFChOXrES4TpCcD27OHuld6Lnk6w6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0U1ZXNSTGhPa0p3UGJzNGU2VjNvdWVUckRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hNmRlZjEtZjQyNS00OWE1LWFhYWYt MDdjYmVkZGQ2NDE4LzEvdEZsZWNQajlmYUU1VXVKUFNYdGhwcU5hcnBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9hNmRlZjEtZjQyNS00OWE1LWFhYWYtMDdjYmVkZGQ2NDE4 LzEvS0U1ZXNSTGhPa0p3UGJzNGU2VjNvdWVUckRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABf3GMA0G CSqGSIb3DQEBCwUAA4IBAQDLvSE0fQw64bYJw/t4B3twl08G54LhTZkihTX+atlH sS0y6psc0tiDviyASRuy8tDUho7Ny9imJY47q894u2uc27463YJRVGbAPFiw+W0v h2PRq3vbb0E6ZvnW/KiCOWx9iypcDFLor7lfsVXRsEEKvyxgVSNIVjcMyWisnAb7 k1Kt0iyYLUIN0O3R+YSmbdO7rNVqbeM07ZYkFREjeb8mVSGfa8OUTBkyYmNEin67 AdCz0gHfZklANvpnfaKFVsdl4d5Jqkvfsi35BENwtUpYdccSB5GIF1z0ope5JX+0 gbu4F5P/bzoneXokjuH4KStdnPhP3CYLbZnsgUtIP+bB -----END CERTIFICATE-----Generated at Sun Jan 25 16:38:50 2026 by rpki-client