This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/5J389UyqW1b94uh4FuAIuqwlPUA.roa File: 5J389UyqW1b94uh4FuAIuqwlPUA.roa (raw, json) Hash identifier: aw+kCmWxUaXaIpH7kpNdjRvksPfxjNXmAFu1gmqQxDA= Subject key identifier: E4:9D:FC:F5:4C:AA:5B:56:FD:E2:E8:78:16:E0:08:BA:AC:25:3D:40 Certificate issuer: /CN=75f5286ee38559bdd989c764f5a6474347b03b6f Certificate serial: 019B7E38D0A72076B1727595ECEC55D4AD26 Authority key identifier: 75:F5:28:6E:E3:85:59:BD:D9:89:C7:64:F5:A6:47:43:47:B0:3B:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/5J389UyqW1b94uh4FuAIuqwlPUA.roa Signing time: Fri 02 Jan 2026 10:20:11 +0000 ROA not before: Fri 02 Jan 2026 10:20:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35003 IP address blocks: 194.126.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:d0:a7:20:76:b1:72:75:95:ec:ec:55:d4:ad:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75f5286ee38559bdd989c764f5a6474347b03b6f Validity Not Before: Jan 2 10:20:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e49dfcf54caa5b56fde2e87816e008baac253d40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f7:1d:1a:49:8b:79:03:72:b6:16:59:08:01: 4c:e9:80:64:19:a0:e5:0e:cf:ac:b8:29:03:78:3b: f2:e4:26:07:43:78:c8:b4:5d:03:e0:de:b5:51:c9: b2:00:ec:9e:79:2b:0b:dd:2a:58:2e:ed:6a:eb:61: f8:d4:8d:f5:8b:34:dc:ea:66:a1:04:ef:6f:77:0b: 0d:1a:95:c0:e1:b3:b3:6c:12:43:a3:5b:4a:ed:18: 28:c3:21:fb:d5:51:d5:99:b2:50:d1:0c:d5:3f:c0: a1:6e:46:fc:fd:41:65:77:a7:08:6f:e9:2e:2c:93: 2c:d8:f1:67:67:20:64:1a:fc:8d:cd:db:1a:6c:d6: 25:57:14:dc:57:7e:67:41:c1:b2:20:95:a4:88:6c: 47:9d:46:19:fd:2b:58:f1:4e:de:ce:b7:9b:d5:30: c5:38:49:ef:c8:d2:1b:04:64:a4:c5:67:0d:40:29: de:85:91:4a:e0:28:67:95:f9:c3:d6:b4:7b:d4:83: 1c:75:54:d5:da:eb:48:a0:a3:41:74:f5:83:08:55: 30:b4:78:e8:f9:07:52:17:95:63:94:a4:e1:b4:ff: 19:24:02:10:09:24:16:53:7f:fe:f6:52:03:c3:ef: d6:c0:40:17:5d:e7:7e:b5:7a:97:fa:5e:4d:4c:c9: 4c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:9D:FC:F5:4C:AA:5B:56:FD:E2:E8:78:16:E0:08:BA:AC:25:3D:40 X509v3 Authority Key Identifier: keyid:75:F5:28:6E:E3:85:59:BD:D9:89:C7:64:F5:A6:47:43:47:B0:3B:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/5J389UyqW1b94uh4FuAIuqwlPUA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.126.158.0/23 Signature Algorithm: sha256WithRSAEncryption 78:59:52:40:b1:05:b8:09:a5:a2:61:39:70:3a:b7:f4:c0:a2: d3:06:c0:05:ce:59:ef:5b:b3:4e:f8:da:d3:3b:0f:a5:93:cb: f5:c6:a4:49:08:25:80:9a:41:5c:ca:a8:d0:9e:89:12:09:98: 28:bc:50:32:c1:47:4e:b9:54:f9:75:14:68:9e:6d:00:ae:6f: 65:5c:0a:ca:95:2a:df:43:aa:b6:99:20:94:e3:b7:32:55:be: 69:70:a8:9b:68:6c:70:74:45:fb:4e:d8:fe:6b:6b:93:0f:36: d2:05:c2:74:f4:b8:d4:ae:e9:c7:d2:80:8c:ca:a9:18:d4:6f: 8f:da:41:9b:82:c3:36:40:f1:c4:23:a9:5e:38:ca:88:4e:4e: 38:7c:f0:ef:36:cb:b2:eb:60:6d:3c:db:49:86:a1:e3:75:eb: ca:bd:b1:8b:26:f9:cc:60:b2:02:b2:86:30:ac:6f:bb:23:43: 23:29:fe:1c:d0:b4:fc:e1:76:ce:d0:c4:0a:c2:13:0e:49:34: 33:1b:f1:90:5a:35:dc:00:8f:ea:59:e3:87:c4:78:c5:6b:51: 47:87:15:6b:75:7f:8a:f8:cb:8c:37:fe:69:ca:fe:99:dd:03: 3b:6f:6c:79:e3:4a:20:22:b8:66:b1:d7:19:52:1f:d3:2f:68: 4b:aa:3e:0a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ONCnIHaxcnWV7OxV1K0mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1ZjUyODZlZTM4NTU5YmRkOTg5Yzc2NGY1YTY0NzQzNDdi MDNiNmYwHhcNMjYwMTAyMTAyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDlkZmNmNTRjYWE1YjU2ZmRlMmU4NzgxNmUwMDhiYWFjMjUzZDQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvcdGkmLeQNythZZCAFM6YBkGaDl Ds+suCkDeDvy5CYHQ3jItF0D4N61UcmyAOyeeSsL3SpYLu1q62H41I31izTc6mah BO9vdwsNGpXA4bOzbBJDo1tK7RgowyH71VHVmbJQ0QzVP8Chbkb8/UFld6cIb+ku LJMs2PFnZyBkGvyNzdsabNYlVxTcV35nQcGyIJWkiGxHnUYZ/StY8U7ezreb1TDF OEnvyNIbBGSkxWcNQCnehZFK4ChnlfnD1rR71IMcdVTV2utIoKNBdPWDCFUwtHjo +QdSF5VjlKThtP8ZJAIQCSQWU3/+9lIDw+/WwEAXXed+tXqX+l5NTMlMswIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOSd/PVMqltW/eLoeBbgCLqsJT1AMB8GA1UdIwQY MBaAFHX1KG7jhVm92YnHZPWmR0NHsDtvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGZVb2J1T0ZXYjNaaWNkazlhWkhRMGV3TzI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8yOWJmNjEtZmRjOC00OWU2LTg0ZDkt MDM4NTM0OWZmMWU4LzEvNUozODlVeXFXMWI5NHVoNEZ1QUl1cXdsUFVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC8yOWJmNjEtZmRjOC00OWU2LTg0ZDktMDM4NTM0OWZmMWU4 LzEvZGZVb2J1T0ZXYjNaaWNkazlhWkhRMGV3TzI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwn6eMA0G CSqGSIb3DQEBCwUAA4IBAQB4WVJAsQW4CaWiYTlwOrf0wKLTBsAFzlnvW7NO+NrT Ow+lk8v1xqRJCCWAmkFcyqjQnokSCZgovFAywUdOuVT5dRRonm0Arm9lXArKlSrf Q6q2mSCU47cyVb5pcKibaGxwdEX7Ttj+a2uTDzbSBcJ09LjUrunH0oCMyqkY1G+P 2kGbgsM2QPHEI6leOMqITk44fPDvNsuy62BtPNtJhqHjdevKvbGLJvnMYLICsoYw rG+7I0MjKf4c0LT84XbO0MQKwhMOSTQzG/GQWjXcAI/qWeOHxHjFa1FHhxVrdX+K +MuMN/5pyv6Z3QM7b2x540ogIrhmsdcZUh/TL2hLqj4K -----END CERTIFICATE-----Generated at Tue Jan 27 00:31:18 2026 by rpki-client