This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/5aAt-H-NrSfKmKytWzYNSCs_1lk.roa File: 5aAt-H-NrSfKmKytWzYNSCs_1lk.roa (raw, json) Hash identifier: pyFF9VTfBNSbLnwiK+bjW8VxJtVYpW2jHZxr3VVTNf0= Subject key identifier: E5:A0:2D:F8:7F:8D:AD:27:CA:98:AC:AD:5B:36:0D:48:2B:3F:D6:59 Certificate issuer: /CN=8f0a2bb8813b74d78283b1728fdb9bbc5d57845d Certificate serial: 019B79ED256379771E8B77F7395DF9CC1BB2 Authority key identifier: 8F:0A:2B:B8:81:3B:74:D7:82:83:B1:72:8F:DB:9B:BC:5D:57:84:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jworuIE7dNeCg7Fyj9ubvF1XhF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/5aAt-H-NrSfKmKytWzYNSCs_1lk.roa Signing time: Thu 01 Jan 2026 14:19:03 +0000 ROA not before: Thu 01 Jan 2026 14:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57724 IP address blocks: 176.57.64.0/23 maxlen: 23 176.57.66.0/24 maxlen: 24 176.57.67.0/24 maxlen: 24 185.215.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/jworuIE7dNeCg7Fyj9ubvF1XhF0.crl rsync://rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/jworuIE7dNeCg7Fyj9ubvF1XhF0.mft rsync://rpki.ripe.net/repository/DEFAULT/jworuIE7dNeCg7Fyj9ubvF1XhF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:25:63:79:77:1e:8b:77:f7:39:5d:f9:cc:1b:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f0a2bb8813b74d78283b1728fdb9bbc5d57845d Validity Not Before: Jan 1 14:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e5a02df87f8dad27ca98acad5b360d482b3fd659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:92:46:f9:98:95:d4:51:d4:ed:ee:8a:51:64: c1:55:e3:dc:74:43:6b:be:c5:62:77:59:8d:66:d8: 32:27:c6:bb:59:f5:f8:4a:5a:44:f4:0e:7d:bb:f0: e2:45:8c:ad:e3:84:71:fd:5f:03:21:f3:ce:e3:51: fa:47:f2:07:dc:de:b5:31:c6:b5:f4:22:73:ef:44: 45:0d:ce:c7:5c:25:fb:1f:c2:1d:59:af:dc:4d:7f: 50:80:aa:ac:ee:d9:06:fc:bd:b6:7a:ac:e3:83:65: ac:a1:f0:47:98:4c:db:72:a7:a3:1f:53:9f:29:36: 1a:d9:b9:79:7c:7d:0d:1b:e1:5c:7f:bc:2f:79:87: d9:30:1e:7f:e6:9e:23:21:f0:e8:7c:55:01:cd:94: c2:8e:a6:4c:b3:58:db:e2:41:10:3e:56:90:5f:f2: f9:b3:0b:d9:46:5f:9d:90:35:23:fb:22:93:9e:09: 74:83:46:91:4e:1c:db:4b:e5:89:c6:ab:22:dc:3f: bb:e8:ec:78:90:60:99:e8:97:2d:9b:1e:aa:5e:32: 60:c0:b9:ef:47:2d:10:77:ff:02:82:02:d0:4d:fc: 05:ca:83:26:1d:41:e9:ce:b4:fc:ac:4e:c7:69:44: 73:e3:59:c2:52:d1:2b:b4:18:56:62:cb:35:50:33: d7:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:A0:2D:F8:7F:8D:AD:27:CA:98:AC:AD:5B:36:0D:48:2B:3F:D6:59 X509v3 Authority Key Identifier: keyid:8F:0A:2B:B8:81:3B:74:D7:82:83:B1:72:8F:DB:9B:BC:5D:57:84:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jworuIE7dNeCg7Fyj9ubvF1XhF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/5aAt-H-NrSfKmKytWzYNSCs_1lk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/jworuIE7dNeCg7Fyj9ubvF1XhF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.57.64.0/22 185.215.4.0/24 Signature Algorithm: sha256WithRSAEncryption 52:61:c4:39:f3:f5:f8:d8:4d:cc:af:ad:a0:b0:b6:0f:bf:19: d0:4f:74:31:14:06:03:95:79:4a:18:f7:4e:8e:10:bb:b6:b0: bc:6b:56:2d:bc:61:d0:2d:29:0e:3b:75:70:a2:0e:d0:33:7d: 98:63:99:33:40:5e:69:1b:5b:85:6d:e5:35:bb:d4:a7:e7:ff: dd:dd:4d:2d:b6:97:cc:80:c4:ec:ab:38:68:23:6e:c7:30:07: ef:ab:5f:6d:03:9f:ec:db:96:b7:2a:c4:67:8d:be:ab:8d:dc: 9f:2f:bb:b5:0c:99:64:10:eb:21:58:c4:dd:45:58:48:3a:b1: 1c:25:e9:be:37:e3:34:28:33:b6:00:78:07:d3:8c:98:fe:35: 89:13:e8:e2:a1:80:39:d1:bb:99:09:fc:e8:8c:12:a6:1a:0c: 91:f4:c8:df:be:98:86:93:7c:4d:27:b8:25:f2:66:6b:86:92: 5d:0c:ca:57:d8:b5:83:b7:b4:11:20:3f:43:64:34:af:0b:5e: 58:87:9c:1c:d5:8e:2d:a6:95:ed:48:21:d0:68:5d:de:1b:0d: 20:a0:d2:6b:94:a4:bb:3b:9f:8f:b9:d4:48:7d:76:32:3f:f8: d8:0b:bb:3d:1a:35:2b:2a:7c:45:45:9d:da:77:62:07:51:a8: 7d:0e:d7:3b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57SVjeXcei3f3OV35zBuyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMGEyYmI4ODEzYjc0ZDc4MjgzYjE3MjhmZGI5YmJjNWQ1 Nzg0NWQwHhcNMjYwMTAxMTQxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNWEwMmRmODdmOGRhZDI3Y2E5OGFjYWQ1YjM2MGQ0ODJiM2ZkNjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5JG+ZiV1FHU7e6KUWTBVePcdENr vsVid1mNZtgyJ8a7WfX4SlpE9A59u/DiRYyt44Rx/V8DIfPO41H6R/IH3N61Mca1 9CJz70RFDc7HXCX7H8IdWa/cTX9QgKqs7tkG/L22eqzjg2WsofBHmEzbcqejH1Of KTYa2bl5fH0NG+Fcf7wveYfZMB5/5p4jIfDofFUBzZTCjqZMs1jb4kEQPlaQX/L5 swvZRl+dkDUj+yKTngl0g0aRThzbS+WJxqsi3D+76Ox4kGCZ6Jctmx6qXjJgwLnv Ry0Qd/8CggLQTfwFyoMmHUHpzrT8rE7HaURz41nCUtErtBhWYss1UDPX8wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOWgLfh/ja0nypisrVs2DUgrP9ZZMB8GA1UdIwQY MBaAFI8KK7iBO3TXgoOxco/bm7xdV4RdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvandvcnVJRTdkTmVDZzdGeWo5dWJ2RjFYaEYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83NDIzNDAtOGNmOC00NDYwLTg1Y2Mt YWEyYjNiZWEwOGJmLzEvNWFBdC1ILU5yU2ZLbUt5dFd6WU5TQ3NfMWxrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny83NDIzNDAtOGNmOC00NDYwLTg1Y2MtYWEyYjNiZWEwOGJm LzEvandvcnVJRTdkTmVDZzdGeWo5dWJ2RjFYaEYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCsDlAAwQA udcEMA0GCSqGSIb3DQEBCwUAA4IBAQBSYcQ58/X42E3Mr62gsLYPvxnQT3QxFAYD lXlKGPdOjhC7trC8a1YtvGHQLSkOO3Vwog7QM32YY5kzQF5pG1uFbeU1u9Sn5//d 3U0ttpfMgMTsqzhoI27HMAfvq19tA5/s25a3KsRnjb6rjdyfL7u1DJlkEOshWMTd RVhIOrEcJem+N+M0KDO2AHgH04yY/jWJE+jioYA50buZCfzojBKmGgyR9MjfvpiG k3xNJ7gl8mZrhpJdDMpX2LWDt7QRID9DZDSvC15Yh5wc1Y4tppXtSCHQaF3eGw0g oNJrlKS7O5+PudRIfXYyP/jYC7s9GjUrKnxFRZ3ad2IHUah9Dtc7 -----END CERTIFICATE-----Generated at Mon Jan 26 06:17:44 2026 by rpki-client