This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/5wH9-szrklxJTlBbOhLU1IK_X08.roa File: 5wH9-szrklxJTlBbOhLU1IK_X08.roa (raw, json) Hash identifier: Gx4zS12tew4rYVk6sgqkHaSsUoWMXIoctp7epfSf2ds= Subject key identifier: E7:01:FD:FA:CC:EB:92:5C:49:4E:50:5B:3A:12:D4:D4:82:BF:5F:4F Certificate issuer: /CN=54f87b5a62c1ff0f522812e9add1756bc73384c5 Certificate serial: 019B7F15AFCAAA2DFF39404A9C12927431A7 Authority key identifier: 54:F8:7B:5A:62:C1:FF:0F:52:28:12:E9:AD:D1:75:6B:C7:33:84:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VPh7WmLB_w9SKBLprdF1a8czhMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/5wH9-szrklxJTlBbOhLU1IK_X08.roa Signing time: Fri 02 Jan 2026 14:21:26 +0000 ROA not before: Fri 02 Jan 2026 14:21:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47372 IP address blocks: 93.191.160.0/21 maxlen: 32 185.192.168.0/22 maxlen: 32 2a06:5d00::/29 maxlen: 48 2a06:5d00::/30 maxlen: 48 2a06:5d04::/31 maxlen: 48 2a06:5d06::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/VPh7WmLB_w9SKBLprdF1a8czhMU.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/VPh7WmLB_w9SKBLprdF1a8czhMU.mft rsync://rpki.ripe.net/repository/DEFAULT/VPh7WmLB_w9SKBLprdF1a8czhMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:af:ca:aa:2d:ff:39:40:4a:9c:12:92:74:31:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54f87b5a62c1ff0f522812e9add1756bc73384c5 Validity Not Before: Jan 2 14:21:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e701fdfacceb925c494e505b3a12d4d482bf5f4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c6:57:16:fc:61:7b:fc:90:0b:1f:22:5b:57: db:50:16:72:75:23:85:d6:00:0c:57:58:21:4d:06: d1:2f:bc:84:07:da:ba:80:1b:81:75:0e:b6:89:a5: 79:50:99:7b:c7:98:b9:f2:18:5a:77:3c:bb:47:f2: d3:3e:12:f7:90:5a:f8:ca:5b:30:6e:c1:26:67:8b: ab:cf:2d:9b:4e:9e:ee:5e:9a:9f:a5:b6:7a:30:05: 80:20:0b:20:f5:5a:09:ba:7d:4c:5e:1c:cb:46:78: a4:41:6f:47:95:ca:e6:34:5a:30:84:17:4d:6e:ad: f1:e0:c0:bf:33:ce:2a:e7:18:6c:77:58:22:fa:6e: 64:a0:06:9e:f3:12:91:df:d2:1d:2d:a9:0e:08:68: 90:d5:49:55:ef:79:f8:8f:ef:59:e1:63:e3:12:d6: 04:85:68:96:42:2d:a0:d9:75:13:72:91:59:6f:66: 22:f1:32:dd:a9:29:f6:80:e4:07:b2:b8:3b:46:f8: ac:0d:6e:95:dc:e3:7a:b0:c0:ac:db:7d:8b:3b:72: 01:80:52:b0:3a:69:2f:c8:22:fc:21:7a:07:7c:de: 5e:5a:d6:98:8a:88:f8:91:05:bd:ee:e2:62:a0:74: 32:61:52:72:df:08:80:a9:a5:74:78:ec:22:7d:57: a5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:01:FD:FA:CC:EB:92:5C:49:4E:50:5B:3A:12:D4:D4:82:BF:5F:4F X509v3 Authority Key Identifier: keyid:54:F8:7B:5A:62:C1:FF:0F:52:28:12:E9:AD:D1:75:6B:C7:33:84:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPh7WmLB_w9SKBLprdF1a8czhMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/5wH9-szrklxJTlBbOhLU1IK_X08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/VPh7WmLB_w9SKBLprdF1a8czhMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.191.160.0/21 185.192.168.0/22 IPv6: 2a06:5d00::/29 Signature Algorithm: sha256WithRSAEncryption 73:cd:af:27:25:3f:71:5f:b8:36:f0:3b:bf:cf:44:eb:33:60: a7:da:33:f5:46:3a:a2:e0:8f:c3:aa:26:8a:3e:97:af:2e:e3: 88:fd:78:54:ac:d5:3a:88:a5:ce:44:9f:eb:1b:29:94:b5:12: 54:40:7e:cb:52:13:29:9b:46:3d:b4:18:6b:49:d8:42:73:fd: c9:f8:8c:d0:62:5e:b6:0a:c2:af:04:66:38:37:da:00:47:ff: 62:63:8a:32:49:cc:ba:b2:d0:4d:96:66:b6:ca:4b:36:f9:7b: 06:c8:6f:65:74:f3:13:1f:5f:55:fe:54:2a:87:7e:3f:d5:cc: 01:b3:07:cf:55:a2:9f:ee:6d:19:a0:d6:fe:0b:81:db:69:05: 63:cd:c8:29:f6:84:8f:e7:c0:20:aa:45:69:d1:6e:a5:61:6d: b0:8b:33:3b:2a:87:8f:ed:93:28:57:aa:f6:6e:37:ae:1a:e8: 5a:5b:bc:98:fd:a5:d1:35:f2:10:49:fa:2b:54:c5:38:52:4a: 4a:a6:8d:63:15:b3:f2:83:ed:38:31:5a:5f:07:be:11:72:94: d2:6b:e2:a3:10:c2:80:2d:39:8c:df:c4:fa:5e:90:d3:8c:51: 91:c8:1c:d2:dc:4b:24:d2:c6:4e:ef:49:66:d6:22:90:2c:49: c0:37:3b:ac -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/Fa/Kqi3/OUBKnBKSdDGnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Zjg3YjVhNjJjMWZmMGY1MjI4MTJlOWFkZDE3NTZiYzcz Mzg0YzUwHhcNMjYwMTAyMTQyMTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzAxZmRmYWNjZWI5MjVjNDk0ZTUwNWIzYTEyZDRkNDgyYmY1ZjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sZXFvxhe/yQCx8iW1fbUBZydSOF 1gAMV1ghTQbRL7yEB9q6gBuBdQ62iaV5UJl7x5i58hhadzy7R/LTPhL3kFr4ylsw bsEmZ4urzy2bTp7uXpqfpbZ6MAWAIAsg9VoJun1MXhzLRnikQW9HlcrmNFowhBdN bq3x4MC/M84q5xhsd1gi+m5koAae8xKR39IdLakOCGiQ1UlV73n4j+9Z4WPjEtYE hWiWQi2g2XUTcpFZb2Yi8TLdqSn2gOQHsrg7RvisDW6V3ON6sMCs232LO3IBgFKw OmkvyCL8IXoHfN5eWtaYioj4kQW97uJioHQyYVJy3wiAqaV0eOwifVel7QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFOcB/frM65JcSU5QWzoS1NSCv19PMB8GA1UdIwQY MBaAFFT4e1piwf8PUigS6a3RdWvHM4TFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlBoN1dtTEJfdzlTS0JMcHJkRjFhOGN6aE1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8yY2M0MTktOGUzNC00MWE5LWIyNDMt ODU1NDE4ZmZlZDQxLzEvNXdIOS1zenJrbHhKVGxCYk9oTFUxSUtfWDA4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8yY2M0MTktOGUzNC00MWE5LWIyNDMtODU1NDE4ZmZlZDQx LzEvVlBoN1dtTEJfdzlTS0JMcHJkRjFhOGN6aE1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDXb+gAwQC ucCoMA0EAgACMAcDBQMqBl0AMA0GCSqGSIb3DQEBCwUAA4IBAQBzza8nJT9xX7g2 8Du/z0TrM2Cn2jP1Rjqi4I/DqiaKPpevLuOI/XhUrNU6iKXORJ/rGymUtRJUQH7L UhMpm0Y9tBhrSdhCc/3J+IzQYl62CsKvBGY4N9oAR/9iY4oyScy6stBNlma2yks2 +XsGyG9ldPMTH19V/lQqh34/1cwBswfPVaKf7m0ZoNb+C4HbaQVjzcgp9oSP58Ag qkVp0W6lYW2wizM7KoeP7ZMoV6r2bjeuGuhaW7yY/aXRNfIQSforVMU4UkpKpo1j FbPyg+04MVpfB74RcpTSa+KjEMKALTmM38T6XpDTjFGRyBzS3Esk0sZO70lm1iKQ LEnANzus -----END CERTIFICATE-----Generated at Sun Jan 25 16:53:58 2026 by rpki-client