This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/1-a4Jfvl73sg74p_0XL8QwTt9GSg.roa File: 1-a4Jfvl73sg74p_0XL8QwTt9GSg.roa (raw, json) Hash identifier: FUZwlR5+IowctwR2O6qPAipX2v6y8pLQV+4UDQvBld4= Subject key identifier: F9:AE:09:7E:F9:7B:DE:C8:3B:E2:9F:F4:5C:BF:10:C1:3B:7D:19:28 Certificate issuer: /CN=015b6d1596ac0501a71a393447051a62ff1dda16 Certificate serial: 019B7BA36B3A15A62AF24D5F31FEB095BFED Authority key identifier: 01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/1-a4Jfvl73sg74p_0XL8QwTt9GSg.roa Signing time: Thu 01 Jan 2026 22:17:45 +0000 ROA not before: Thu 01 Jan 2026 22:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8274 IP address blocks: 5.153.180.0/24 maxlen: 24 5.153.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:6b:3a:15:a6:2a:f2:4d:5f:31:fe:b0:95:bf:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=015b6d1596ac0501a71a393447051a62ff1dda16 Validity Not Before: Jan 1 22:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9ae097ef97bdec83be29ff45cbf10c13b7d1928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:74:00:cb:2f:e7:06:05:5f:1e:00:89:46:b2: e6:a3:f7:95:a6:75:08:26:3b:a4:a0:9e:aa:dc:51: 78:b9:d4:73:a7:ef:8f:c8:57:43:ff:51:fd:9d:3d: e6:43:6b:f9:6f:a2:2c:f9:f2:c3:be:fa:ac:6b:aa: 0c:21:e3:37:6c:ca:67:91:65:94:73:55:dc:eb:21: 88:7b:e8:ae:ae:1d:25:05:6b:f1:57:70:dc:52:62: 29:84:df:10:ed:88:2b:4a:8f:5b:90:93:1d:82:28: c1:59:d2:24:d4:42:fc:ab:1d:62:0f:bc:4e:a2:6f: d3:20:0a:58:aa:1c:e7:79:c8:2c:9b:f3:17:75:8e: 4d:1c:2c:a5:4c:34:55:28:cc:ec:5c:09:c1:69:15: 9d:ac:77:a0:b2:57:cf:4a:8e:2b:33:c9:eb:52:a6: 5f:05:8d:41:f5:1e:a0:27:70:bd:e8:6e:dd:74:8c: 4d:eb:4e:52:4b:cc:bd:dd:b9:a8:7f:75:21:90:65: c2:31:94:b9:2c:9c:e2:6b:2b:e5:4d:b8:5e:04:c3: a3:c1:2b:bd:25:06:06:18:28:2c:fa:70:1d:d2:43: e0:ce:2e:df:c0:62:56:e5:7e:51:19:bd:a8:7d:d3: 70:8f:7c:e6:c1:4f:cc:8d:46:4a:eb:62:a0:0a:17: 7b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:AE:09:7E:F9:7B:DE:C8:3B:E2:9F:F4:5C:BF:10:C1:3B:7D:19:28 X509v3 Authority Key Identifier: keyid:01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/1-a4Jfvl73sg74p_0XL8QwTt9GSg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.153.180.0/24 5.153.189.0/24 Signature Algorithm: sha256WithRSAEncryption 12:1b:64:64:c2:3b:13:0f:95:dd:a4:95:84:70:16:d7:45:49: e6:52:28:a8:24:a4:7d:7b:b4:32:2b:eb:61:16:31:5b:bf:b4: 58:d6:14:c4:28:32:df:4a:9d:51:7a:1b:54:f9:e5:09:44:2b: 1d:b4:55:b4:75:6a:8e:2a:8a:78:c3:ae:ae:8f:c6:af:82:da: 62:c4:21:00:49:c9:9a:64:be:37:03:38:70:4c:09:e2:d1:af: 1b:9c:98:f0:00:d6:f2:b1:78:22:94:21:fb:a6:06:53:ad:bc: 32:0f:13:83:67:7f:ba:4e:11:86:5c:32:ab:79:43:d6:d5:66: 74:8d:06:0f:7b:ad:72:97:f0:e7:ee:14:8f:38:34:24:2f:92: fa:c8:e1:41:3e:29:06:f5:91:f9:77:8f:60:ab:7e:5d:92:6b: c1:8c:2a:7c:76:46:02:49:41:54:b0:2c:a8:d0:1d:63:57:15: 3c:3f:48:2e:45:e7:e7:db:6b:0b:a7:e2:68:8c:50:82:c8:94: e9:0e:9b:50:e5:d0:07:e6:b4:11:57:cb:69:aa:54:4f:8e:0a: 76:23:11:eb:9e:2f:21:b7:56:42:0d:99:91:c8:f7:25:5b:ba: 2d:f2:63:c3:61:81:8c:ae:63:99:2d:00:e3:ee:12:a5:06:f8: 6f:3b:cb:c1 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZt7o2s6FaYq8k1fMf6wlb/tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNWI2ZDE1OTZhYzA1MDFhNzFhMzkzNDQ3MDUxYTYyZmYx ZGRhMTYwHhcNMjYwMTAxMjIxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOWFlMDk3ZWY5N2JkZWM4M2JlMjlmZjQ1Y2JmMTBjMTNiN2QxOTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXQAyy/nBgVfHgCJRrLmo/eVpnUI JjukoJ6q3FF4udRzp++PyFdD/1H9nT3mQ2v5b6Is+fLDvvqsa6oMIeM3bMpnkWWU c1Xc6yGIe+iurh0lBWvxV3DcUmIphN8Q7YgrSo9bkJMdgijBWdIk1EL8qx1iD7xO om/TIApYqhznecgsm/MXdY5NHCylTDRVKMzsXAnBaRWdrHegslfPSo4rM8nrUqZf BY1B9R6gJ3C96G7ddIxN605SS8y93bmof3UhkGXCMZS5LJziayvlTbheBMOjwSu9 JQYGGCgs+nAd0kPgzi7fwGJW5X5RGb2ofdNwj3zmwU/MjUZK62KgChd7XQIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFPmuCX75e97IO+Kf9Fy/EME7fRkoMB8GA1UdIwQY MBaAFAFbbRWWrAUBpxo5NEcFGmL/HdoWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgt ZmVlOGYzNzkwNTY3LzEvMS1hNEpmdmw3M3NnNzRwXzBYTDhRd1R0OUdTZy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNjQvNTJhODhmLWU5YTItNDg1MS05MTQ4LWZlZThmMzc5MDU2 Ny8xL0FWdHRGWmFzQlFHbkdqazBSd1VhWXY4ZDJoWS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAAWZtAME AAWZvTANBgkqhkiG9w0BAQsFAAOCAQEAEhtkZMI7Ew+V3aSVhHAW10VJ5lIoqCSk fXu0MivrYRYxW7+0WNYUxCgy30qdUXobVPnlCUQrHbRVtHVqjiqKeMOuro/Gr4La YsQhAEnJmmS+NwM4cEwJ4tGvG5yY8ADW8rF4IpQh+6YGU628Mg8Tg2d/uk4Rhlwy q3lD1tVmdI0GD3utcpfw5+4Ujzg0JC+S+sjhQT4pBvWR+XePYKt+XZJrwYwqfHZG AklBVLAsqNAdY1cVPD9ILkXn59trC6fiaIxQgsiU6Q6bUOXQB+a0EVfLaapUT44K diMR654vIbdWQg2Zkcj3JVu6LfJjw2GBjK5jmS0A4+4SpQb4bzvLwQ== -----END CERTIFICATE-----Generated at Mon Jan 26 09:24:31 2026 by rpki-client