This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/5Osfqcc7qX2SDgxGj1jXRIcgVi0.roa File: 5Osfqcc7qX2SDgxGj1jXRIcgVi0.roa (raw, json) Hash identifier: 9IUpayNc4cHMCExpEQCneCFfKtid6K9WyA/rVze7dHc= Subject key identifier: E4:EB:1F:A9:C7:3B:A9:7D:92:0E:0C:46:8F:58:D7:44:87:20:56:2D Certificate issuer: /CN=092be762fbb10fee42d6de5567936ecd1f83ded5 Certificate serial: 019B76EB030495421EF8BDBD3FDEEFF5AF01 Authority key identifier: 09:2B:E7:62:FB:B1:0F:EE:42:D6:DE:55:67:93:6E:CD:1F:83:DE:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/5Osfqcc7qX2SDgxGj1jXRIcgVi0.roa Signing time: Thu 01 Jan 2026 00:17:51 +0000 ROA not before: Thu 01 Jan 2026 00:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209097 IP address blocks: 83.175.167.0/24 maxlen: 24 83.175.173.0/24 maxlen: 24 2a04:6e80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:03:04:95:42:1e:f8:bd:bd:3f:de:ef:f5:af:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=092be762fbb10fee42d6de5567936ecd1f83ded5 Validity Not Before: Jan 1 00:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4eb1fa9c73ba97d920e0c468f58d7448720562d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d1:71:90:cb:63:e3:ee:c2:0f:0b:e4:fd:81: de:d6:c5:72:9f:cf:77:1c:37:27:0c:7e:e6:a3:93: 9e:72:1b:19:c3:c2:21:7c:53:57:14:ae:ef:38:6b: 74:ef:a5:e9:70:a0:ed:30:ac:03:82:dd:fc:eb:ab: 4f:d5:60:02:e1:e2:c4:22:7a:30:4e:bc:b6:5c:9b: 50:58:bc:eb:a2:23:44:6b:bc:3a:22:61:b6:d2:a8: ad:b5:f1:cf:30:ac:bd:bb:1e:36:47:c5:09:42:f0: 66:ff:db:39:dd:69:07:5a:15:88:78:aa:31:56:5c: 41:2c:aa:b4:75:c6:e1:fb:c6:85:c9:e8:06:e8:7a: bc:a5:c0:cf:70:21:d0:86:3d:72:95:0f:d3:77:3e: 60:73:78:eb:84:91:ef:9f:ce:81:92:f2:36:da:22: 03:11:ba:8b:2f:68:cb:d5:e0:98:b2:ba:bb:80:67: 21:b4:97:4a:7f:97:4e:17:6f:fc:5d:1b:90:ad:05: c7:c9:22:8c:78:00:48:9f:c4:17:95:9b:06:54:7a: 7a:d3:32:ee:d5:51:5c:94:1e:be:78:02:ac:fe:83: 92:84:2c:0e:0a:93:a6:9c:b8:ce:a4:fc:fe:bf:42: de:f1:f7:17:8e:be:72:dc:f7:cc:5d:41:a7:a5:80: af:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:EB:1F:A9:C7:3B:A9:7D:92:0E:0C:46:8F:58:D7:44:87:20:56:2D X509v3 Authority Key Identifier: keyid:09:2B:E7:62:FB:B1:0F:EE:42:D6:DE:55:67:93:6E:CD:1F:83:DE:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/5Osfqcc7qX2SDgxGj1jXRIcgVi0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.175.167.0/24 83.175.173.0/24 IPv6: 2a04:6e80::/29 Signature Algorithm: sha256WithRSAEncryption 39:d5:08:21:e7:21:15:87:60:ee:b4:10:0a:08:c4:c8:19:ad: 92:f2:3c:01:dc:50:48:61:38:73:64:2c:12:29:ee:a5:3f:1a: 4f:c8:06:db:05:46:7d:41:ca:80:e1:30:73:e4:2a:5c:3c:aa: ea:13:a4:d1:d0:ed:3e:53:a0:d0:c4:d6:d5:a2:75:79:8d:cc: 75:78:d8:fa:55:4e:08:3f:43:8f:62:0d:f2:58:67:d2:33:c2: e4:44:b0:88:e1:83:7c:f7:12:2f:69:37:68:ce:9c:41:34:8d: 62:b3:8a:ee:07:53:fa:47:ff:23:c0:fd:ca:09:41:32:21:c6: bd:2c:18:a4:27:8a:8b:57:cd:3f:7f:3c:3c:b9:c8:8b:80:44: 66:44:df:5b:51:4f:76:93:e5:73:c9:ab:73:8c:22:7b:b5:81: 1f:22:51:a7:62:65:9f:cf:06:f5:34:58:41:e1:c3:81:dc:34: a3:53:b5:ce:3c:fc:b6:67:f5:ad:1a:f8:35:59:f7:55:93:89: d0:76:9c:31:5a:8f:88:d7:bc:57:21:dd:1a:aa:74:e6:d4:3a: fd:63:3f:e4:28:02:40:ea:5e:3a:b3:7e:b4:0b:77:2c:eb:e6: 6a:a6:0c:68:75:5a:8b:91:83:43:9c:7b:ca:51:3d:d9:70:09: bd:72:d5:87 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt26wMElUIe+L29P97v9a8BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MmJlNzYyZmJiMTBmZWU0MmQ2ZGU1NTY3OTM2ZWNkMWY4 M2RlZDUwHhcNMjYwMTAxMDAxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNGViMWZhOWM3M2JhOTdkOTIwZTBjNDY4ZjU4ZDc0NDg3MjA1NjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdFxkMtj4+7CDwvk/YHe1sVyn893 HDcnDH7mo5OechsZw8IhfFNXFK7vOGt076XpcKDtMKwDgt3866tP1WAC4eLEInow Try2XJtQWLzroiNEa7w6ImG20qittfHPMKy9ux42R8UJQvBm/9s53WkHWhWIeKox VlxBLKq0dcbh+8aFyegG6Hq8pcDPcCHQhj1ylQ/Tdz5gc3jrhJHvn86BkvI22iID EbqLL2jL1eCYsrq7gGchtJdKf5dOF2/8XRuQrQXHySKMeABIn8QXlZsGVHp60zLu 1VFclB6+eAKs/oOShCwOCpOmnLjOpPz+v0Le8fcXjr5y3PfMXUGnpYCvAwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFOTrH6nHO6l9kg4MRo9Y10SHIFYtMB8GA1UdIwQY MBaAFAkr52L7sQ/uQtbeVWeTbs0fg97VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1N2bll2dXhELTVDMXQ1Vlo1TnV6Ui1EM3RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hYWMzZWItMGNiNC00ZTIzLTlmNzAt Yzk0MGFkM2MwMDhhLzEvNU9zZnFjYzdxWDJTRGd4R2oxalhSSWNnVmkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9hYWMzZWItMGNiNC00ZTIzLTlmNzAtYzk0MGFkM2MwMDhh LzEvQ1N2bll2dXhELTVDMXQ1Vlo1TnV6Ui1EM3RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAU6+nAwQA U6+tMA0EAgACMAcDBQMqBG6AMA0GCSqGSIb3DQEBCwUAA4IBAQA51Qgh5yEVh2Du tBAKCMTIGa2S8jwB3FBIYThzZCwSKe6lPxpPyAbbBUZ9QcqA4TBz5CpcPKrqE6TR 0O0+U6DQxNbVonV5jcx1eNj6VU4IP0OPYg3yWGfSM8LkRLCI4YN89xIvaTdozpxB NI1is4ruB1P6R/8jwP3KCUEyIca9LBikJ4qLV80/fzw8uciLgERmRN9bUU92k+Vz yatzjCJ7tYEfIlGnYmWfzwb1NFhB4cOB3DSjU7XOPPy2Z/WtGvg1WfdVk4nQdpwx Wo+I17xXId0aqnTm1Dr9Yz/kKAJA6l46s360C3cs6+ZqpgxodVqLkYNDnHvKUT3Z cAm9ctWH -----END CERTIFICATE-----Generated at Mon Jan 26 05:02:14 2026 by rpki-client