This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/5SMwrN_wq7GbihxhXj3Wp0-r9Iw.roa File: 5SMwrN_wq7GbihxhXj3Wp0-r9Iw.roa (raw, json) Hash identifier: rztDOlgxHtA1Pu/RNy1ezx+YrSzDhk4zBlnVU+gOf/g= Subject key identifier: E5:23:30:AC:DF:F0:AB:B1:9B:8A:1C:61:5E:3D:D6:A7:4F:AB:F4:8C Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d Certificate serial: 019B7AC82AE737C5CA72195553180B7AF114 Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/5SMwrN_wq7GbihxhXj3Wp0-r9Iw.roa Signing time: Thu 01 Jan 2026 18:18:17 +0000 ROA not before: Thu 01 Jan 2026 18:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61272 IP address blocks: 213.252.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 02:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:2a:e7:37:c5:ca:72:19:55:53:18:0b:7a:f1:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d Validity Not Before: Jan 1 18:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e52330acdff0abb19b8a1c615e3dd6a74fabf48c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c1:a6:28:87:44:a8:39:b0:9f:8d:ce:f5:8b: 8f:0c:bb:f5:bb:24:2a:bc:c8:b6:79:08:f9:36:38: 53:04:01:93:da:d8:fc:92:d0:aa:2b:e5:dc:c9:d9: 8b:d5:c1:76:b5:33:43:c8:7f:dd:da:96:90:b6:f0: 91:c4:60:23:c4:74:ac:d1:ab:32:57:d5:28:bd:6e: ab:8a:a8:12:0b:41:22:03:27:10:cb:6a:f5:5b:71: d5:2b:7f:b6:8a:7a:1e:e3:57:fa:51:b2:5b:58:d5: 1d:ed:0d:6c:ff:bd:b2:47:da:d1:fb:aa:66:c9:9f: 8b:40:86:ae:8f:1c:22:91:9d:35:70:57:a7:42:2e: 9a:99:cf:d3:0f:be:8d:3c:e5:88:06:a4:17:9e:31: 24:c8:b5:29:a3:f4:f3:61:e9:b8:d5:8f:6c:01:2d: 1d:34:72:e0:37:4a:da:f4:4f:c7:58:0e:e5:0f:11: 4d:a2:9b:83:e9:48:00:8e:cf:0d:b0:cb:4e:9a:00: c9:d9:c6:c2:28:a6:a7:2d:39:89:99:79:a8:b2:92: fe:4a:4c:57:56:77:60:49:71:8d:cb:12:4b:a9:21: f1:2b:95:97:ff:40:fc:8d:4e:26:95:72:8a:42:59: 1d:9b:c6:b9:92:b6:24:4c:2f:6c:e6:9b:6e:ef:49: f7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:23:30:AC:DF:F0:AB:B1:9B:8A:1C:61:5E:3D:D6:A7:4F:AB:F4:8C X509v3 Authority Key Identifier: keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/5SMwrN_wq7GbihxhXj3Wp0-r9Iw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.252.244.0/22 Signature Algorithm: sha256WithRSAEncryption 21:36:8c:b7:30:fd:59:3b:66:90:22:76:46:d7:0d:8b:75:2e: ab:25:65:00:4a:b6:a0:3f:c7:b4:37:54:34:28:e9:a7:36:ec: b7:6a:a0:43:de:27:50:b6:a2:48:09:75:23:cc:e5:30:e4:dc: af:c8:c2:8a:e4:4f:59:78:b8:0c:8b:0d:00:2b:79:60:4a:c0: 63:a2:34:21:c5:88:4b:ee:8a:72:2d:63:e3:42:56:7e:67:3a: 7d:07:4c:fc:99:36:51:67:e5:99:b2:02:7e:75:9f:07:0a:a4: 41:1a:cf:88:dd:73:e0:57:c8:16:c6:92:ab:dc:74:c6:97:3a: ce:27:3c:44:7f:d1:a2:48:6c:33:d3:20:a2:83:25:80:50:b6: 5f:7b:b8:09:bf:27:46:14:52:db:69:7a:d4:69:36:7b:97:c0: db:40:29:59:35:c3:5b:e3:73:84:38:2a:a7:bd:3d:c8:41:66: 80:62:ba:c7:d2:65:fc:1b:df:88:0e:54:2d:2e:ba:48:70:af: b2:4a:97:b2:2c:5f:d3:91:5f:dd:68:e2:a3:c6:c1:4c:8f:2c: 02:cb:b4:36:be:eb:5b:65:aa:7b:13:52:17:b4:b9:c0:a7:40: b2:1a:56:f8:ae:56:9b:21:04:7b:8c:eb:90:d2:b3:e3:c6:7b: b1:15:6b:75 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yCrnN8XKchlVUxgLevEUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZGQ4MWE4MzNkOWIwNDNjN2ZmZDYzNWE1OTg3ZjUzNjk3 MTE4MGQwHhcNMjYwMTAxMTgxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTIzMzBhY2RmZjBhYmIxOWI4YTFjNjE1ZTNkZDZhNzRmYWJmNDhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsGmKIdEqDmwn43O9YuPDLv1uyQq vMi2eQj5NjhTBAGT2tj8ktCqK+XcydmL1cF2tTNDyH/d2paQtvCRxGAjxHSs0asy V9UovW6riqgSC0EiAycQy2r1W3HVK3+2inoe41f6UbJbWNUd7Q1s/72yR9rR+6pm yZ+LQIaujxwikZ01cFenQi6amc/TD76NPOWIBqQXnjEkyLUpo/TzYem41Y9sAS0d NHLgN0ra9E/HWA7lDxFNopuD6UgAjs8NsMtOmgDJ2cbCKKanLTmJmXmospL+SkxX VndgSXGNyxJLqSHxK5WX/0D8jU4mlXKKQlkdm8a5krYkTC9s5ptu70n3UwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOUjMKzf8Kuxm4ocYV491qdPq/SMMB8GA1UdIwQY MBaAFPDdgagz2bBDx//WNaWYf1NpcRgNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUt MDQ2ODA0MjQ4NmRjLzEvNVNNd3JOX3dxN0diaWh4aFhqM1dwMC1yOUl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUtMDQ2ODA0MjQ4NmRj LzEvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1fz0MA0G CSqGSIb3DQEBCwUAA4IBAQAhNoy3MP1ZO2aQInZG1w2LdS6rJWUASragP8e0N1Q0 KOmnNuy3aqBD3idQtqJICXUjzOUw5NyvyMKK5E9ZeLgMiw0AK3lgSsBjojQhxYhL 7opyLWPjQlZ+Zzp9B0z8mTZRZ+WZsgJ+dZ8HCqRBGs+I3XPgV8gWxpKr3HTGlzrO JzxEf9GiSGwz0yCigyWAULZfe7gJvydGFFLbaXrUaTZ7l8DbQClZNcNb43OEOCqn vT3IQWaAYrrH0mX8G9+IDlQtLrpIcK+ySpeyLF/TkV/daOKjxsFMjywCy7Q2vutb Zap7E1IXtLnAp0CyGlb4rlabIQR7jOuQ0rPjxnuxFWt1 -----END CERTIFICATE-----Generated at Sun Jan 25 11:45:31 2026 by rpki-client