This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/5FIVNBbRzzZxl83qrCNwL_6Bnpg.roa File: 5FIVNBbRzzZxl83qrCNwL_6Bnpg.roa (raw, json) Hash identifier: LbvZNY0tC6zYRbPYoa4ozGzRAQOXt4ZTnNFn0xhSnzY= Subject key identifier: E4:52:15:34:16:D1:CF:36:71:97:CD:EA:AC:23:70:2F:FE:81:9E:98 Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674 Certificate serial: 019B7758F3014DE981AB7BDA6F94A292A687 Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/5FIVNBbRzzZxl83qrCNwL_6Bnpg.roa Signing time: Thu 01 Jan 2026 02:17:56 +0000 ROA not before: Thu 01 Jan 2026 02:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209262 IP address blocks: 217.113.20.0/23 maxlen: 24 217.113.20.0/24 maxlen: 24 217.113.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:f3:01:4d:e9:81:ab:7b:da:6f:94:a2:92:a6:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674 Validity Not Before: Jan 1 02:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e452153416d1cf367197cdeaac23702ffe819e98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:55:b5:09:56:ae:5d:79:ba:14:52:a4:be:66: a8:17:df:4b:4b:7c:1d:4e:7b:40:da:ec:cd:c8:ea: 99:1a:e6:60:d2:37:dd:47:ed:3e:56:24:c1:5b:d4: ef:9b:9f:e0:5a:2f:0e:00:fb:8d:5e:00:c1:7a:4f: c7:f3:e8:85:b2:c1:f4:20:ee:b4:42:40:34:45:2a: 4c:d7:08:65:d9:3d:40:56:0a:0a:fe:95:85:7f:da: f4:5f:6a:26:b8:2b:c0:32:2b:a2:66:6e:ea:1c:51: d8:8d:e9:2f:aa:5d:02:d1:70:34:6a:99:f8:14:e6: b6:bd:af:35:87:96:d4:1a:be:82:98:35:b7:37:97: bc:32:07:59:87:c4:e8:87:75:2d:dc:f3:5d:b2:6b: e6:7f:1c:ac:15:ea:0e:f5:a7:b8:51:aa:4e:c4:95: 3e:01:04:3c:13:ba:e1:20:56:82:d8:5b:1f:87:a2: 90:61:ca:ea:6a:9c:12:95:17:07:4f:bc:d9:f7:a5: a7:a9:89:22:96:ab:71:f2:b3:9a:12:60:60:c9:8f: 89:7f:d3:41:96:73:83:98:ce:fa:eb:63:89:6e:1c: 65:7b:0f:d8:97:73:32:72:64:d7:f6:44:c6:e8:68: 57:ae:7a:5b:6a:95:da:d7:66:a5:5c:4e:1f:77:2a: e0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:52:15:34:16:D1:CF:36:71:97:CD:EA:AC:23:70:2F:FE:81:9E:98 X509v3 Authority Key Identifier: keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/5FIVNBbRzzZxl83qrCNwL_6Bnpg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.113.20.0/23 Signature Algorithm: sha256WithRSAEncryption 06:0f:e2:7d:34:c9:6d:6e:03:6c:d2:41:02:b2:86:0c:65:44: 72:b3:2f:bb:ed:83:f9:58:88:2d:ab:79:6b:ce:f5:0d:10:a9: 78:ee:0d:ff:93:91:94:ed:66:83:08:56:89:e9:6b:9b:e6:02: e5:6d:03:25:d1:f8:bd:8a:fb:f3:80:51:76:ac:63:9e:3c:40: 2a:76:2a:22:d7:85:ac:aa:b7:0c:1d:72:db:a8:ee:1c:79:12: 8a:ef:f4:eb:74:58:19:ca:7d:1b:bd:62:ff:f9:dc:1e:76:d1: d0:35:6b:2e:75:98:31:38:e8:26:42:eb:12:1e:c2:d5:6f:0f: 5f:70:86:80:ed:1a:33:ca:99:39:8e:dc:d2:9b:1d:fc:ae:0b: 63:fc:dd:fb:2a:f6:61:92:c8:ce:84:a4:99:85:3c:16:b4:c2: 40:fb:41:3d:81:be:23:13:2a:db:7e:29:6a:cd:58:c4:b9:ec: aa:b4:6d:7d:4b:cd:48:42:b6:11:f7:0c:29:12:e6:1b:56:31: d2:34:f0:a1:5a:fb:8a:7e:11:31:6c:f8:c5:18:9e:cc:85:4d: f0:0e:3d:27:f7:40:4a:4f:5c:65:70:3c:ea:cb:05:2e:f9:80: 37:96:74:34:56:cf:a3:51:0d:08:a9:4c:59:c6:c5:1c:a9:a1: 4b:5e:a9:e6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WPMBTemBq3vab5SikqaHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzZThmNGVkNWRkMDYzMDFjNDIzOTg4ZTc4NmRhYmY1MWM1 ZjU2NzQwHhcNMjYwMTAxMDIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDUyMTUzNDE2ZDFjZjM2NzE5N2NkZWFhYzIzNzAyZmZlODE5ZTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFW1CVauXXm6FFKkvmaoF99LS3wd TntA2uzNyOqZGuZg0jfdR+0+ViTBW9Tvm5/gWi8OAPuNXgDBek/H8+iFssH0IO60 QkA0RSpM1whl2T1AVgoK/pWFf9r0X2omuCvAMiuiZm7qHFHYjekvql0C0XA0apn4 FOa2va81h5bUGr6CmDW3N5e8MgdZh8Toh3Ut3PNdsmvmfxysFeoO9ae4UapOxJU+ AQQ8E7rhIFaC2Fsfh6KQYcrqapwSlRcHT7zZ96WnqYkilqtx8rOaEmBgyY+Jf9NB lnODmM7662OJbhxlew/Yl3MycmTX9kTG6GhXrnpbapXa12alXE4fdyrgcwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFORSFTQW0c82cZfN6qwjcC/+gZ6YMB8GA1UdIwQY MBaAFJPo9O1d0GMBxCOYjnhtq/UcX1Z0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQt MWZjMTllYTczYTJhLzEvNUZJVk5CYlJ6elp4bDgzcXJDTndMXzZCbnBnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQtMWZjMTllYTczYTJh LzEvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2XEUMA0G CSqGSIb3DQEBCwUAA4IBAQAGD+J9NMltbgNs0kECsoYMZURysy+77YP5WIgtq3lr zvUNEKl47g3/k5GU7WaDCFaJ6Wub5gLlbQMl0fi9ivvzgFF2rGOePEAqdioi14Ws qrcMHXLbqO4ceRKK7/TrdFgZyn0bvWL/+dwedtHQNWsudZgxOOgmQusSHsLVbw9f cIaA7Rozypk5jtzSmx38rgtj/N37KvZhksjOhKSZhTwWtMJA+0E9gb4jEyrbfilq zVjEueyqtG19S81IQrYR9wwpEuYbVjHSNPChWvuKfhExbPjFGJ7MhU3wDj0n90BK T1xlcDzqywUu+YA3lnQ0Vs+jUQ0IqUxZxsUcqaFLXqnm -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:39 2026 by rpki-client