This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/N5RdOcKSZn2WXo-xhdOApmXM6X8.roa File: N5RdOcKSZn2WXo-xhdOApmXM6X8.roa (raw, json) Hash identifier: RQA+nWi3E8uaz/WCsQIw7b6rquiEkScjYVEe+LbnjAM= Subject key identifier: 37:94:5D:39:C2:92:66:7D:96:5E:8F:B1:85:D3:80:A6:65:CC:E9:7F Certificate issuer: /CN=ca91c42dfa6afbc11e78ee9de2e785f8a20b5043 Certificate serial: 019B7CED3543A2200A4C9E1881E121913CE5 Authority key identifier: CA:91:C4:2D:FA:6A:FB:C1:1E:78:EE:9D:E2:E7:85:F8:A2:0B:50:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/N5RdOcKSZn2WXo-xhdOApmXM6X8.roa Signing time: Fri 02 Jan 2026 04:17:58 +0000 ROA not before: Fri 02 Jan 2026 04:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25540 IP address blocks: 217.147.192.0/22 maxlen: 22 217.147.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.crl rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:35:43:a2:20:0a:4c:9e:18:81:e1:21:91:3c:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca91c42dfa6afbc11e78ee9de2e785f8a20b5043 Validity Not Before: Jan 2 04:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=37945d39c292667d965e8fb185d380a665cce97f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:94:68:f8:50:cd:ab:78:c0:de:54:94:eb:30: c4:ca:7b:b7:8f:e9:8c:46:26:9e:38:74:58:8f:30: 8e:d3:dd:4f:e7:aa:f2:fe:32:04:0f:9c:b7:7a:62: 0a:6d:2d:ed:01:da:04:66:8d:3a:84:a6:5b:e3:97: 13:62:14:09:ad:12:ff:ab:4d:ab:5a:ac:12:6c:d7: 9f:c1:ca:b6:b5:6a:c2:e0:62:ba:01:43:18:69:d5: db:52:eb:97:67:da:f9:26:e5:35:3b:5f:3c:ff:25: a5:40:2c:e9:62:a9:fb:ef:3f:d2:34:31:c0:35:c4: 19:75:7e:4f:04:57:f3:77:93:b7:01:8e:23:f1:52: fc:b4:79:6b:3f:16:1d:ad:c3:5c:1a:fe:de:55:3f: b7:31:f9:be:f1:00:66:15:7d:a3:64:7f:c5:11:f2: d0:64:f0:6c:9d:73:64:cd:57:86:7c:e9:76:3f:66: c1:b8:2c:d4:3d:5e:06:40:cc:75:25:16:27:1b:d1: 8e:d2:9f:7a:03:d5:31:d6:3d:26:e2:9c:0b:94:63: a6:e8:91:88:09:8f:c1:90:f4:8c:5e:80:2c:4e:13: e6:6c:22:a5:fd:51:d6:d0:c5:57:27:fa:9d:78:f2: d1:6f:33:4f:10:c1:1b:42:dc:8b:b2:56:eb:2f:3e: 7c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:94:5D:39:C2:92:66:7D:96:5E:8F:B1:85:D3:80:A6:65:CC:E9:7F X509v3 Authority Key Identifier: keyid:CA:91:C4:2D:FA:6A:FB:C1:1E:78:EE:9D:E2:E7:85:F8:A2:0B:50:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/N5RdOcKSZn2WXo-xhdOApmXM6X8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.147.192.0/21 Signature Algorithm: sha256WithRSAEncryption 5e:21:b7:ff:d7:36:43:89:13:ef:71:9c:f6:50:92:9c:ca:71: 88:ac:48:fa:9b:ac:f9:e9:da:45:0f:36:b0:da:23:5c:36:12: 95:42:2b:f1:4d:7a:42:38:fc:2d:a2:3a:02:e0:5d:8f:62:94: 90:dd:36:26:3f:99:5d:53:01:72:18:6a:2b:e4:5a:49:56:a0: bb:2f:f2:46:90:f0:62:9e:d6:03:cb:f6:d2:b1:46:a4:74:ac: 09:91:f0:b5:99:40:3d:f6:84:11:59:10:4b:ca:31:0d:2d:0f: 1d:a6:af:1a:17:40:c3:c8:b9:95:17:aa:c5:40:d3:65:61:24: ae:24:d8:83:01:d2:f5:2a:b6:b7:3c:7d:b8:a4:b5:57:8d:9b: e9:14:06:54:ce:ab:0b:46:7a:cd:8f:dc:fc:80:1b:88:70:7e: ad:01:ee:7b:04:fa:c2:d1:08:5d:11:93:45:a9:dc:61:ac:7f: 12:ee:bd:c5:fd:7b:2f:9b:0d:17:7c:be:b0:cc:2e:28:10:38: 50:9b:23:4f:e2:89:f9:b7:26:18:46:54:41:cf:13:f8:95:43: c2:95:27:f2:a6:25:1d:15:6b:e2:a7:8c:3d:69:35:26:c4:b9: 6f:1d:44:7c:ac:85:3b:b4:89:a3:89:bb:49:b3:69:a5:bd:a6: ec:a3:f0:a3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87TVDoiAKTJ4YgeEhkTzlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhOTFjNDJkZmE2YWZiYzExZTc4ZWU5ZGUyZTc4NWY4YTIw YjUwNDMwHhcNMjYwMTAyMDQxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzk0NWQzOWMyOTI2NjdkOTY1ZThmYjE4NWQzODBhNjY1Y2NlOTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZRo+FDNq3jA3lSU6zDEynu3j+mM RiaeOHRYjzCO091P56ry/jIED5y3emIKbS3tAdoEZo06hKZb45cTYhQJrRL/q02r WqwSbNefwcq2tWrC4GK6AUMYadXbUuuXZ9r5JuU1O188/yWlQCzpYqn77z/SNDHA NcQZdX5PBFfzd5O3AY4j8VL8tHlrPxYdrcNcGv7eVT+3Mfm+8QBmFX2jZH/FEfLQ ZPBsnXNkzVeGfOl2P2bBuCzUPV4GQMx1JRYnG9GO0p96A9Ux1j0m4pwLlGOm6JGI CY/BkPSMXoAsThPmbCKl/VHW0MVXJ/qdePLRbzNPEMEbQtyLslbrLz58EQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDeUXTnCkmZ9ll6PsYXTgKZlzOl/MB8GA1UdIwQY MBaAFMqRxC36avvBHnjuneLnhfiiC1BDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXBIRUxmcHEtOEVlZU82ZDR1ZUYtS0lMVUVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny84NTFlODQtMmYxYS00Yzc3LWIxZjIt ZDU4NjUwNDFhMTRmLzEvTjVSZE9jS1NabjJXWG8teGhkT0FwbVhNNlg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny84NTFlODQtMmYxYS00Yzc3LWIxZjItZDU4NjUwNDFhMTRm LzEveXBIRUxmcHEtOEVlZU82ZDR1ZUYtS0lMVUVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2ZPAMA0G CSqGSIb3DQEBCwUAA4IBAQBeIbf/1zZDiRPvcZz2UJKcynGIrEj6m6z56dpFDzaw 2iNcNhKVQivxTXpCOPwtojoC4F2PYpSQ3TYmP5ldUwFyGGor5FpJVqC7L/JGkPBi ntYDy/bSsUakdKwJkfC1mUA99oQRWRBLyjENLQ8dpq8aF0DDyLmVF6rFQNNlYSSu JNiDAdL1Kra3PH24pLVXjZvpFAZUzqsLRnrNj9z8gBuIcH6tAe57BPrC0QhdEZNF qdxhrH8S7r3F/Xsvmw0XfL6wzC4oEDhQmyNP4on5tyYYRlRBzxP4lUPClSfypiUd FWvip4w9aTUmxLlvHUR8rIU7tImjibtJs2mlvabso/Cj -----END CERTIFICATE-----Generated at Mon Jan 26 07:40:42 2026 by rpki-client