This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/5dpJwurmjcNweBL1k9CqEM749HA.roa File: 5dpJwurmjcNweBL1k9CqEM749HA.roa (raw, json) Hash identifier: TM/ss4Bk5R6W5257quO9m83xy+4qnqaZUXN12oiEFzU= Subject key identifier: E5:DA:49:C2:EA:E6:8D:C3:70:78:12:F5:93:D0:AA:10:CE:F8:F4:70 Certificate issuer: /CN=6665dd97665a23b1b183e223822b66b5ae536a2f Certificate serial: 019B7D5BFEBB7F8BEFCCE2EB0598CB07A7CC Authority key identifier: 66:65:DD:97:66:5A:23:B1:B1:83:E2:23:82:2B:66:B5:AE:53:6A:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/5dpJwurmjcNweBL1k9CqEM749HA.roa Signing time: Fri 02 Jan 2026 06:18:59 +0000 ROA not before: Fri 02 Jan 2026 06:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 786 IP address blocks: 81.87.0.0/16 maxlen: 24 83.138.32.0/21 maxlen: 21 89.207.208.0/21 maxlen: 21 193.60.0.0/14 maxlen: 24 194.66.0.0/16 maxlen: 24 194.80.0.0/14 maxlen: 24 195.194.0.0/15 maxlen: 24 212.121.0.0/19 maxlen: 19 212.121.192.0/19 maxlen: 19 212.219.0.0/16 maxlen: 24 2001:630::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:fe:bb:7f:8b:ef:cc:e2:eb:05:98:cb:07:a7:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6665dd97665a23b1b183e223822b66b5ae536a2f Validity Not Before: Jan 2 06:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e5da49c2eae68dc3707812f593d0aa10cef8f470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:7b:43:a2:53:9e:16:54:38:5e:38:c8:ec:ac: a0:3c:e7:b7:af:7b:81:9d:17:ac:f2:d5:bd:dc:7d: 52:c5:36:02:05:99:26:91:16:b0:30:45:d9:d4:71: 40:a1:fd:3d:b7:4b:a3:53:c7:a8:18:bb:4c:5d:34: 38:ad:fb:2f:c2:3c:90:17:6b:ed:a3:4d:14:e9:d4: ec:c9:8c:69:97:31:51:d6:fe:bb:f3:fb:30:77:f2: 4d:a4:dc:5d:5b:e9:cc:18:6e:b7:dc:88:ad:e8:89: a4:41:38:76:7c:f7:99:f7:54:a8:df:79:c7:f2:76: 2f:68:70:99:49:00:07:bb:4a:11:2f:82:c9:03:22: 7f:d0:4c:7b:e7:c8:e4:4b:07:c3:1f:ac:59:6e:a7: b1:7e:2b:23:7a:9a:2d:01:f6:5b:d9:c3:8a:d2:37: b6:01:d5:74:d7:ac:4b:e3:fc:4e:44:e3:1c:90:48: 01:ec:7a:4e:f7:50:a8:9e:87:a0:af:0a:4e:11:f9: c8:3f:6d:64:70:ff:f4:26:27:5b:46:fa:86:42:c3: 7c:13:b8:17:33:21:62:a9:bd:a9:94:ad:ab:43:9d: 39:3f:f3:70:13:71:b4:64:ad:2d:89:82:7d:24:39: b3:c7:ff:d5:3f:25:fc:8c:53:b8:c3:28:bd:9c:a2: ab:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:DA:49:C2:EA:E6:8D:C3:70:78:12:F5:93:D0:AA:10:CE:F8:F4:70 X509v3 Authority Key Identifier: keyid:66:65:DD:97:66:5A:23:B1:B1:83:E2:23:82:2B:66:B5:AE:53:6A:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/5dpJwurmjcNweBL1k9CqEM749HA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.87.0.0/16 83.138.32.0/21 89.207.208.0/21 193.60.0.0/14 194.66.0.0/16 194.80.0.0/14 195.194.0.0/15 212.121.0.0/19 212.121.192.0/19 212.219.0.0/16 IPv6: 2001:630::/32 Signature Algorithm: sha256WithRSAEncryption 8f:8e:92:7f:ab:b4:a1:3f:f8:14:a4:e1:e2:62:27:52:fb:c8: b9:e5:b4:9e:47:42:d1:1e:8a:70:5d:de:9e:b5:5a:94:b7:50: 26:98:d0:13:02:43:bc:4f:58:a1:64:a8:47:1d:35:7d:c7:b8: f4:20:85:52:81:78:3e:9b:04:cf:db:1c:81:cf:6b:9c:b7:26: 11:eb:ff:2f:d8:b1:f3:8e:3c:70:c3:b5:7f:3a:10:ec:d5:44: 41:a7:b3:c2:20:35:9d:d3:f5:cd:f3:ea:7b:ef:48:f0:1e:c5: b7:20:df:0a:1d:8f:5d:a0:31:e3:5d:bb:2b:3a:61:fe:bc:57: 89:ed:d1:af:8d:19:d7:10:77:f7:63:92:ee:97:f4:87:fb:5e: 0d:09:57:9a:a6:ce:a5:49:38:aa:96:de:4f:00:93:f9:57:05: f7:ad:80:5f:5b:d5:b7:dd:b4:a8:2b:f0:c5:ef:89:15:4c:f4: d8:a2:ff:38:97:fe:6e:c2:8d:81:6e:68:70:e1:8b:86:29:90: c1:69:46:5b:cb:fb:a8:89:05:77:09:66:f1:75:07:a6:0e:87: f2:ab:21:c6:e2:c1:d0:f3:bf:ff:a2:98:66:a3:82:0f:31:0c: 27:2a:ab:ae:b8:59:ab:57:5d:1f:3f:60:54:52:44:b2:a1:60: 72:ab:6e:5f -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgISAZt9W/67f4vvzOLrBZjLB6fMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NjVkZDk3NjY1YTIzYjFiMTgzZTIyMzgyMmI2NmI1YWU1 MzZhMmYwHhcNMjYwMTAyMDYxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNWRhNDljMmVhZTY4ZGMzNzA3ODEyZjU5M2QwYWExMGNlZjhmNDcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6HtDolOeFlQ4XjjI7KygPOe3r3uB nRes8tW93H1SxTYCBZkmkRawMEXZ1HFAof09t0ujU8eoGLtMXTQ4rfsvwjyQF2vt o00U6dTsyYxplzFR1v678/swd/JNpNxdW+nMGG633Iit6ImkQTh2fPeZ91So33nH 8nYvaHCZSQAHu0oRL4LJAyJ/0Ex758jkSwfDH6xZbqexfisjepotAfZb2cOK0je2 AdV016xL4/xOROMckEgB7HpO91ConoegrwpOEfnIP21kcP/0JidbRvqGQsN8E7gX MyFiqb2plK2rQ505P/NwE3G0ZK0tiYJ9JDmzx//VPyX8jFO4wyi9nKKrmwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFOXaScLq5o3DcHgS9ZPQqhDO+PRwMB8GA1UdIwQY MBaAFGZl3ZdmWiOxsYPiI4IrZrWuU2ovMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWm1YZGwyWmFJN0d4Zy1JamdpdG10YTVUYWk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8zMTI1MjktNzNmNi00ODA5LWFmOWIt ZThkNzA3MTdmZjhhLzEvNWRwSnd1cm1qY053ZUJMMWs5Q3FFTTc0OUhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS8zMTI1MjktNzNmNi00ODA5LWFmOWItZThkNzA3MTdmZjhh LzEvWm1YZGwyWmFJN0d4Zy1JamdpdG10YTVUYWk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwMAUVcDBANT iiADBANZz9ADAwLBPAMDAMJCAwMCwlADAwHDwgMEBdR5AAMEBdR5wAMDANTbMA0E AgACMAcDBQAgAQYwMA0GCSqGSIb3DQEBCwUAA4IBAQCPjpJ/q7ShP/gUpOHiYidS +8i55bSeR0LRHopwXd6etVqUt1AmmNATAkO8T1ihZKhHHTV9x7j0IIVSgXg+mwTP 2xyBz2uctyYR6/8v2LHzjjxww7V/OhDs1URBp7PCIDWd0/XN8+p770jwHsW3IN8K HY9doDHjXbsrOmH+vFeJ7dGvjRnXEHf3Y5Lul/SH+14NCVeaps6lSTiqlt5PAJP5 VwX3rYBfW9W33bSoK/DF74kVTPTYov84l/5uwo2Bbmhw4YuGKZDBaUZby/uoiQV3 CWbxdQemDofyqyHG4sHQ87//ophmo4IPMQwnKquuuFmrV10fP2BUUkSyoWByq25f -----END CERTIFICATE-----Generated at Sun Jan 25 16:17:42 2026 by rpki-client