This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/5RFARNnQP81iGTseWeUutxn3EXI.roa File: 5RFARNnQP81iGTseWeUutxn3EXI.roa (raw, json) Hash identifier: Nxourp9u5nBIWhDVwCVmI/AilNX0cSXhcM93qEhrhhU= Subject key identifier: E5:11:40:44:D9:D0:3F:CD:62:19:3B:1E:59:E5:2E:B7:19:F7:11:72 Certificate issuer: /CN=9eee4669fc08a4d4337509110613862b314f1ac7 Certificate serial: 019B79ED4FA565865E8DF5914C7183109758 Authority key identifier: 9E:EE:46:69:FC:08:A4:D4:33:75:09:11:06:13:86:2B:31:4F:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nu5GafwIpNQzdQkRBhOGKzFPGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/5RFARNnQP81iGTseWeUutxn3EXI.roa Signing time: Thu 01 Jan 2026 14:19:14 +0000 ROA not before: Thu 01 Jan 2026 14:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60475 IP address blocks: 37.202.16.0/21 maxlen: 21 45.10.84.0/22 maxlen: 22 185.241.200.0/22 maxlen: 22 2a02:ff00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/nu5GafwIpNQzdQkRBhOGKzFPGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:4f:a5:65:86:5e:8d:f5:91:4c:71:83:10:97:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9eee4669fc08a4d4337509110613862b314f1ac7 Validity Not Before: Jan 1 14:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e5114044d9d03fcd62193b1e59e52eb719f71172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:96:47:8a:e4:ac:f3:59:10:3b:f1:4e:b0:ee: 93:bd:a5:75:e4:9f:9d:68:f1:f6:45:99:e9:94:4c: d4:98:83:69:bd:49:c5:f7:69:d3:1b:43:3c:31:c6: e1:0b:75:da:42:6a:da:70:9f:0a:3c:31:e4:0e:4b: 9b:91:d1:7c:7b:fa:98:7a:f3:45:76:21:e6:bc:e5: 84:15:a7:cb:a4:63:ef:27:ac:6b:af:4b:71:51:44: 6e:a7:cc:c9:12:8e:b5:66:46:55:78:87:d6:e0:3d: 13:85:81:03:b1:5b:76:c3:a0:2c:82:9c:4f:5e:37: 9d:83:5e:7c:a0:34:51:d4:2c:05:24:ce:78:18:21: cd:cd:df:ed:17:11:ff:29:41:49:43:4a:22:4e:3d: 33:b8:b3:25:a2:34:81:f4:55:0b:b3:67:0a:d5:86: 0e:c7:f1:a1:1d:a5:68:3e:b5:24:85:6f:90:9e:bc: c3:8c:44:b1:89:5e:eb:9c:14:33:ae:9f:35:c8:5b: 36:ca:24:fa:1b:9e:81:cc:de:a5:31:1e:90:83:5f: 95:c6:eb:5c:17:0d:ae:7c:2e:9f:50:ad:78:14:06: 7c:9a:4b:5f:03:51:01:86:78:3c:a8:e5:40:37:0d: 0e:68:4a:ca:32:17:6a:28:37:f8:7d:69:af:5b:59: 93:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:11:40:44:D9:D0:3F:CD:62:19:3B:1E:59:E5:2E:B7:19:F7:11:72 X509v3 Authority Key Identifier: keyid:9E:EE:46:69:FC:08:A4:D4:33:75:09:11:06:13:86:2B:31:4F:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nu5GafwIpNQzdQkRBhOGKzFPGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/5RFARNnQP81iGTseWeUutxn3EXI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.202.16.0/21 45.10.84.0/22 185.241.200.0/22 IPv6: 2a02:ff00::/29 Signature Algorithm: sha256WithRSAEncryption 3c:56:8b:2e:17:8e:f0:12:12:64:64:c6:c8:fe:31:eb:e6:4d: af:d0:4e:2a:63:ca:57:9c:47:16:56:19:82:dc:da:6f:b3:a6: 6b:db:b7:91:d0:d8:7d:57:eb:19:4c:44:3a:ef:92:2a:8c:4e: a1:2f:94:6c:bf:20:d1:b4:0b:72:b5:77:71:f2:59:b8:2c:49: 03:38:6b:67:75:3e:e8:92:c0:1b:55:e8:66:fc:45:a8:89:a6: 9e:7f:34:33:52:5d:52:70:83:41:b4:1c:9d:1f:6d:52:8b:d4: 09:a5:54:9c:94:c3:3f:e5:25:bc:bd:31:aa:cb:32:0b:4e:41: c9:c0:bc:cd:75:83:9f:0e:56:f5:6c:8a:6c:4a:e8:71:2d:cb: e3:81:54:12:08:99:cf:41:7f:2d:1d:1c:13:04:59:93:c1:36: 8f:25:ea:b0:c1:b7:a4:3a:7d:fe:1a:78:2d:df:40:41:33:2c: b1:a6:39:02:b6:8a:20:82:a5:fe:b2:a4:38:7d:64:28:e5:77: df:96:90:b8:2f:dd:47:af:6d:f4:ec:e8:99:37:4f:f0:0a:53: 63:e4:76:28:e8:de:59:ae:cd:b7:45:7a:9d:4f:28:5c:69:44: a9:ad:77:15:ae:ed:e3:96:6a:e2:0d:c0:8e:d6:3f:c2:a8:7c: aa:2e:4d:75 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt57U+lZYZejfWRTHGDEJdYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllZWU0NjY5ZmMwOGE0ZDQzMzc1MDkxMTA2MTM4NjJiMzE0 ZjFhYzcwHhcNMjYwMTAxMTQxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTExNDA0NGQ5ZDAzZmNkNjIxOTNiMWU1OWU1MmViNzE5ZjcxMTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopZHiuSs81kQO/FOsO6TvaV15J+d aPH2RZnplEzUmINpvUnF92nTG0M8McbhC3XaQmracJ8KPDHkDkubkdF8e/qYevNF diHmvOWEFafLpGPvJ6xrr0txUURup8zJEo61ZkZVeIfW4D0ThYEDsVt2w6AsgpxP Xjedg158oDRR1CwFJM54GCHNzd/tFxH/KUFJQ0oiTj0zuLMlojSB9FULs2cK1YYO x/GhHaVoPrUkhW+QnrzDjESxiV7rnBQzrp81yFs2yiT6G56BzN6lMR6Qg1+Vxutc Fw2ufC6fUK14FAZ8mktfA1EBhng8qOVANw0OaErKMhdqKDf4fWmvW1mTLQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFOURQETZ0D/NYhk7HlnlLrcZ9xFyMB8GA1UdIwQY MBaAFJ7uRmn8CKTUM3UJEQYThisxTxrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnU1R2Fmd0lwTlF6ZFFrUkJoT0dLekZQR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9iOTQ2N2MtODRhZi00OTNhLTlkYjkt NGRkNTljN2M2MzA1LzEvNVJGQVJOblFQODFpR1RzZVdlVXV0eG4zRVhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9iOTQ2N2MtODRhZi00OTNhLTlkYjktNGRkNTljN2M2MzA1 LzEvbnU1R2Fmd0lwTlF6ZFFrUkJoT0dLekZQR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDJcoQAwQC LQpUAwQCufHIMA0EAgACMAcDBQMqAv8AMA0GCSqGSIb3DQEBCwUAA4IBAQA8Vosu F47wEhJkZMbI/jHr5k2v0E4qY8pXnEcWVhmC3Npvs6Zr27eR0Nh9V+sZTEQ675Iq jE6hL5RsvyDRtAtytXdx8lm4LEkDOGtndT7oksAbVehm/EWoiaaefzQzUl1ScINB tBydH21Si9QJpVSclMM/5SW8vTGqyzILTkHJwLzNdYOfDlb1bIpsSuhxLcvjgVQS CJnPQX8tHRwTBFmTwTaPJeqwwbekOn3+Gngt30BBMyyxpjkCtooggqX+sqQ4fWQo 5XfflpC4L91Hr2307OiZN0/wClNj5HYo6N5Zrs23RXqdTyhcaUSprXcVru3jlmri DcCO1j/CqHyqLk11 -----END CERTIFICATE-----Generated at Mon Jan 26 04:40:29 2026 by rpki-client