This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/s5h_FbOSJtTwNWZ7nw-DoslTY04.roa File: s5h_FbOSJtTwNWZ7nw-DoslTY04.roa (raw, json) Hash identifier: 3rYcvADDI43HpDRf99rDIKGF7HoSWoEsrigLvsY6+nw= Subject key identifier: B3:98:7F:15:B3:92:26:D4:F0:35:66:7B:9F:0F:83:A2:C9:53:63:4E Certificate issuer: /CN=c9a3a5e411deaf2284ffd01530bfb41f816cbba3 Certificate serial: 019B7C12B77ED906B65262D001FE67068829 Authority key identifier: C9:A3:A5:E4:11:DE:AF:22:84:FF:D0:15:30:BF:B4:1F:81:6C:BB:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/s5h_FbOSJtTwNWZ7nw-DoslTY04.roa Signing time: Fri 02 Jan 2026 00:19:20 +0000 ROA not before: Fri 02 Jan 2026 00:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215419 IP address blocks: 195.234.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.mft rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:b7:7e:d9:06:b6:52:62:d0:01:fe:67:06:88:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9a3a5e411deaf2284ffd01530bfb41f816cbba3 Validity Not Before: Jan 2 00:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3987f15b39226d4f035667b9f0f83a2c953634e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:74:8a:61:98:49:58:84:c0:c3:9c:62:dc:d8: fa:fc:83:74:d3:85:68:bd:c6:25:ee:15:70:d9:c0: c7:e2:3d:42:d6:b7:b3:2b:2b:8b:db:09:51:56:39: 5f:f5:3c:a1:0a:c4:de:a6:38:de:ed:9c:65:74:89: 09:20:10:d0:e9:08:9e:4a:27:0d:14:da:5f:5a:e8: 70:d2:d3:01:61:06:5b:3f:8b:45:47:a0:c5:c2:da: 9f:56:85:fc:11:23:c3:2e:45:79:0c:0a:9f:26:ac: b1:17:cb:bb:f1:ad:f5:04:a2:a3:0f:ff:ec:bc:68: de:4b:31:e6:62:4e:03:18:54:85:31:a4:90:67:c6: 5b:42:d1:ca:52:fc:83:e5:82:bd:d5:5a:b8:12:ed: 06:35:74:61:3a:23:c4:63:bc:9e:d1:ec:12:aa:bf: 93:75:0d:d7:f8:75:4a:c2:2a:cc:2f:b9:7e:78:40: 24:5c:35:79:65:be:1e:9e:02:fd:9f:20:cd:d9:4d: 6e:ae:83:d3:d1:83:c6:96:82:66:c9:ef:63:ee:92: e4:75:c7:d8:23:52:d5:c3:a5:3d:ec:1f:97:85:41: ad:04:eb:79:c5:6f:6a:a3:fd:aa:ef:d3:e7:f2:c1: de:07:40:41:11:41:da:99:59:ed:55:10:a5:e3:84: 53:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:98:7F:15:B3:92:26:D4:F0:35:66:7B:9F:0F:83:A2:C9:53:63:4E X509v3 Authority Key Identifier: keyid:C9:A3:A5:E4:11:DE:AF:22:84:FF:D0:15:30:BF:B4:1F:81:6C:BB:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/s5h_FbOSJtTwNWZ7nw-DoslTY04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.234.153.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:67:16:c0:7a:c9:7b:ba:27:aa:8c:b7:0f:7f:4e:f4:08:18: 4b:80:57:2a:c2:a5:ea:0e:d8:0d:99:6e:7a:37:c9:b2:bd:31: 46:e4:8b:f7:bb:4c:ed:7c:c0:b7:e1:25:8d:3e:bf:dd:09:47: 54:4e:8d:31:3f:41:33:ae:4d:a1:1f:45:59:5b:9c:9d:03:92: 93:13:d5:3e:3f:9b:14:68:bc:bd:95:12:27:50:2c:5a:44:02: 3a:1e:4a:5f:72:9a:5b:8b:5f:c4:9e:06:35:09:c0:58:0d:3c: 00:9e:d5:fa:c1:7d:49:e0:13:47:63:0a:53:a4:8e:cf:b8:18: ae:d4:ab:f7:84:67:2e:4d:23:71:4c:af:ce:0e:8d:c2:d0:c9: 63:89:d5:8f:84:c2:10:5e:9a:e0:86:74:e2:49:f9:2d:1d:cb: a6:91:44:50:e3:8c:1a:0d:85:7d:09:24:24:aa:51:10:61:3a: d5:07:27:d8:6c:c1:3f:b5:cd:c8:56:83:41:c7:e2:df:60:07: 53:3e:66:0b:99:ea:39:00:65:54:61:26:5e:db:56:c4:9c:b0: 96:35:68:05:f7:45:b5:b4:df:f9:02:6f:0f:74:3a:4b:91:f3: 7b:e7:08:aa:7a:bc:9e:e4:ff:70:d1:22:4d:32:9b:db:b8:bd: 68:a6:af:55 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Erd+2Qa2UmLQAf5nBogpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5YTNhNWU0MTFkZWFmMjI4NGZmZDAxNTMwYmZiNDFmODE2 Y2JiYTMwHhcNMjYwMTAyMDAxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzk4N2YxNWIzOTIyNmQ0ZjAzNTY2N2I5ZjBmODNhMmM5NTM2MzRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3SKYZhJWITAw5xi3Nj6/IN004Vo vcYl7hVw2cDH4j1C1rezKyuL2wlRVjlf9TyhCsTepjje7ZxldIkJIBDQ6QieSicN FNpfWuhw0tMBYQZbP4tFR6DFwtqfVoX8ESPDLkV5DAqfJqyxF8u78a31BKKjD//s vGjeSzHmYk4DGFSFMaSQZ8ZbQtHKUvyD5YK91Vq4Eu0GNXRhOiPEY7ye0ewSqr+T dQ3X+HVKwirML7l+eEAkXDV5Zb4engL9nyDN2U1uroPT0YPGloJmye9j7pLkdcfY I1LVw6U97B+XhUGtBOt5xW9qo/2q79Pn8sHeB0BBEUHamVntVRCl44RToQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLOYfxWzkibU8DVme58Pg6LJU2NOMB8GA1UdIwQY MBaAFMmjpeQR3q8ihP/QFTC/tB+BbLujMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWFPbDVCSGVyeUtFXzlBVk1MLTBINEZzdTZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9iOGVhODMtNDc2NS00M2E2LWE1NGYt MjBkMjQ5MDAxMzBhLzEvczVoX0ZiT1NKdFR3TldaN253LURvc2xUWTA0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9iOGVhODMtNDc2NS00M2E2LWE1NGYtMjBkMjQ5MDAxMzBh LzEveWFPbDVCSGVyeUtFXzlBVk1MLTBINEZzdTZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw+qZMA0G CSqGSIb3DQEBCwUAA4IBAQBNZxbAesl7uieqjLcPf070CBhLgFcqwqXqDtgNmW56 N8myvTFG5Iv3u0ztfMC34SWNPr/dCUdUTo0xP0Ezrk2hH0VZW5ydA5KTE9U+P5sU aLy9lRInUCxaRAI6Hkpfcppbi1/EngY1CcBYDTwAntX6wX1J4BNHYwpTpI7PuBiu 1Kv3hGcuTSNxTK/ODo3C0MljidWPhMIQXprghnTiSfktHcumkURQ44waDYV9CSQk qlEQYTrVByfYbME/tc3IVoNBx+LfYAdTPmYLmeo5AGVUYSZe21bEnLCWNWgF90W1 tN/5Am8PdDpLkfN75wiqerye5P9w0SJNMpvbuL1opq9V -----END CERTIFICATE-----Generated at Sun Jan 25 21:03:09 2026 by rpki-client