This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/C2rTJrn29bEkMahaeaaXZVoboPA.roa File: C2rTJrn29bEkMahaeaaXZVoboPA.roa (raw, json) Hash identifier: iPL2pg7U2wMSWFmyo8NlAj6nvHtyk3JYQ7jWseyBhYs= Subject key identifier: 0B:6A:D3:26:B9:F6:F5:B1:24:31:A8:5A:79:A6:97:65:5A:1B:A0:F0 Certificate issuer: /CN=5dd7336fa915721ce3bfee217f4e99164db9532b Certificate serial: 019B79EC1D7570AC1F740AA9A9F15F70525F Authority key identifier: 5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/C2rTJrn29bEkMahaeaaXZVoboPA.roa Signing time: Thu 01 Jan 2026 14:17:55 +0000 ROA not before: Thu 01 Jan 2026 14:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49505 IP address blocks: 5.62.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:1d:75:70:ac:1f:74:0a:a9:a9:f1:5f:70:52:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd7336fa915721ce3bfee217f4e99164db9532b Validity Not Before: Jan 1 14:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b6ad326b9f6f5b12431a85a79a697655a1ba0f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8d:36:4d:e6:fc:bd:a6:35:ed:8f:7f:8b:6b: 3c:5e:2a:b5:fc:70:d5:e2:29:22:08:48:30:fe:72: ab:d9:5e:23:52:8b:1d:a8:6f:5a:2d:e1:cf:9b:10: 5a:d2:17:25:1c:c5:62:47:b5:bd:54:67:ec:61:31: 2c:7b:b2:15:7e:0a:c1:c3:aa:cf:3d:cc:21:8a:90: a7:bc:a3:6e:94:1e:dd:e9:93:e5:b1:58:a1:96:6c: 7e:12:4b:4f:6d:82:b8:8a:7b:9d:00:a9:3e:b3:32: de:70:5d:21:6f:9c:a8:23:06:2d:da:d6:8f:1c:34: bd:b0:8e:b8:8f:d7:62:14:72:75:26:9d:ab:11:36: ff:06:1e:38:13:a2:7d:67:e3:ec:a2:b5:33:7e:f2: d8:0a:36:86:0a:84:07:16:8d:24:f0:14:f2:f5:53: 56:b6:57:50:c6:c9:d6:4e:88:51:26:11:e0:5f:f5: 9a:d2:4d:79:0a:6f:f6:3c:e7:8f:b7:6d:8b:e8:89: f1:19:23:91:0a:d7:a3:6f:f9:6b:25:51:f4:f2:bd: fd:77:58:5b:f1:c2:06:b7:2a:01:95:ac:e0:bc:1d: 1a:d9:fa:6b:40:5b:cf:da:80:9f:d8:97:08:7d:a1: ab:53:4e:1d:63:c6:e5:55:3c:ff:6d:44:92:f7:46: 63:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:6A:D3:26:B9:F6:F5:B1:24:31:A8:5A:79:A6:97:65:5A:1B:A0:F0 X509v3 Authority Key Identifier: keyid:5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/C2rTJrn29bEkMahaeaaXZVoboPA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.62.19.0/24 Signature Algorithm: sha256WithRSAEncryption 46:6d:74:01:c3:9b:98:6d:65:56:d0:0d:cf:67:ab:d6:13:20: 77:04:d0:f4:a9:d4:d4:79:44:f2:51:cb:ee:d8:98:30:cd:8b: 97:81:90:16:a0:e3:31:c5:1d:e1:e1:dd:0a:11:9d:e6:6b:80: d7:60:6c:de:61:93:e1:eb:9d:81:bc:00:c8:40:76:3c:09:c7: d6:14:b9:c5:5e:3f:bc:fd:85:ea:4f:fc:02:f0:b5:b0:dd:ce: 81:e1:b5:e3:ce:c0:67:68:3c:f6:f7:e9:d9:5d:17:82:9a:7e: 27:43:b4:3e:23:19:d3:7b:7b:73:16:7f:36:a7:6e:af:5e:2a: 3f:1f:ef:f4:7a:db:d6:b4:53:bb:01:07:7c:de:36:e6:a3:94: 51:07:af:97:09:fa:3d:74:ad:07:03:95:a8:e9:c9:34:f4:43: d2:05:d4:aa:4b:35:af:87:ef:b0:fc:58:13:e6:9a:f6:ab:3b: df:37:73:85:e2:e2:ae:27:5b:a2:e6:5c:35:3c:00:4f:24:06: 63:be:5f:41:15:e5:95:f8:0d:03:b2:68:c4:a8:e5:33:ac:fc: 52:ac:f1:15:79:3e:19:41:e7:0c:8a:1c:5a:bc:ab:b6:16:ec: 2c:67:a8:8a:24:17:19:5c:1c:89:8e:f1:3a:a6:39:a9:36:f6: af:58:e4:61 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57B11cKwfdAqpqfFfcFJfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDczMzZmYTkxNTcyMWNlM2JmZWUyMTdmNGU5OTE2NGRi OTUzMmIwHhcNMjYwMTAxMTQxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjZhZDMyNmI5ZjZmNWIxMjQzMWE4NWE3OWE2OTc2NTVhMWJhMGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxo02Teb8vaY17Y9/i2s8Xiq1/HDV 4ikiCEgw/nKr2V4jUosdqG9aLeHPmxBa0hclHMViR7W9VGfsYTEse7IVfgrBw6rP PcwhipCnvKNulB7d6ZPlsVihlmx+EktPbYK4inudAKk+szLecF0hb5yoIwYt2taP HDS9sI64j9diFHJ1Jp2rETb/Bh44E6J9Z+PsorUzfvLYCjaGCoQHFo0k8BTy9VNW tldQxsnWTohRJhHgX/Wa0k15Cm/2POePt22L6InxGSORCtejb/lrJVH08r39d1hb 8cIGtyoBlazgvB0a2fprQFvP2oCf2JcIfaGrU04dY8blVTz/bUSS90ZjTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAtq0ya59vWxJDGoWnmml2VaG6DwMB8GA1UdIwQY MBaAFF3XM2+pFXIc47/uIX9OmRZNuVMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRjemI2a1ZjaHpqdi00aGYwNlpGazI1VXlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9lNzQ0YmQtZjZkOS00Zjc0LThjMDEt OGM0YmM0NTkyN2EzLzEvQzJyVEpybjI5YkVrTWFoYWVhYVhaVm9ib1BBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9lNzQ0YmQtZjZkOS00Zjc0LThjMDEtOGM0YmM0NTkyN2Ez LzEvWGRjemI2a1ZjaHpqdi00aGYwNlpGazI1VXlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABT4TMA0G CSqGSIb3DQEBCwUAA4IBAQBGbXQBw5uYbWVW0A3PZ6vWEyB3BND0qdTUeUTyUcvu 2JgwzYuXgZAWoOMxxR3h4d0KEZ3ma4DXYGzeYZPh652BvADIQHY8CcfWFLnFXj+8 /YXqT/wC8LWw3c6B4bXjzsBnaDz29+nZXReCmn4nQ7Q+IxnTe3tzFn82p26vXio/ H+/0etvWtFO7AQd83jbmo5RRB6+XCfo9dK0HA5Wo6ck09EPSBdSqSzWvh++w/FgT 5pr2qzvfN3OF4uKuJ1ui5lw1PABPJAZjvl9BFeWV+A0DsmjEqOUzrPxSrPEVeT4Z QecMihxavKu2FuwsZ6iKJBcZXByJjvE6pjmpNvavWORh -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:38 2026 by rpki-client