This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/5tf62tGZz7nxnApGHs0XPt8oyEo.roa File: 5tf62tGZz7nxnApGHs0XPt8oyEo.roa (raw, json) Hash identifier: eqObETU4MUet/YxGyvd+4bjlEhpIkWmlGdSy4IzjRT0= Subject key identifier: E6:D7:FA:DA:D1:99:CF:B9:F1:9C:0A:46:1E:CD:17:3E:DF:28:C8:4A Certificate issuer: /CN=380099a81b346f9abcaf26056f5b77094d1cf113 Certificate serial: 019B7E39308D65F7D7BDBC207E1361C74FB1 Authority key identifier: 38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/5tf62tGZz7nxnApGHs0XPt8oyEo.roa Signing time: Fri 02 Jan 2026 10:20:35 +0000 ROA not before: Fri 02 Jan 2026 10:20:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50870 IP address blocks: 94.243.208.0/22 maxlen: 22 94.243.212.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.crl rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.mft rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:30:8d:65:f7:d7:bd:bc:20:7e:13:61:c7:4f:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=380099a81b346f9abcaf26056f5b77094d1cf113 Validity Not Before: Jan 2 10:20:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e6d7fadad199cfb9f19c0a461ecd173edf28c84a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ec:28:92:23:17:db:54:50:ed:5d:07:88:9a: 4e:6a:8a:69:75:e9:9a:cf:ae:34:fc:a8:0c:64:3f: 79:f4:6e:33:87:0f:15:51:6b:8c:44:83:73:4f:04: f4:24:65:27:08:08:80:e6:b0:12:aa:ba:c0:e1:d1: 97:cd:22:ae:b6:96:fe:cf:de:be:d7:b9:93:6a:dd: cd:04:94:8c:32:f6:07:25:d0:09:12:f3:c4:b3:a6: 20:7f:5f:17:23:af:4b:3b:63:b9:74:51:d0:87:69: 5b:8d:9d:70:8b:b6:16:c8:c6:4c:12:77:59:f5:7d: af:16:47:ef:65:f9:8e:39:79:b0:26:de:60:99:16: 45:1d:a3:0b:8d:65:6d:ec:16:47:57:2f:56:d2:0e: da:7a:1d:cc:6f:a4:f4:7a:2c:39:76:c9:2d:ad:d8: a9:c3:58:d6:db:38:77:77:10:43:31:4f:38:2c:f2: fd:a2:32:07:bb:6c:de:89:a1:24:68:9c:1d:52:41: 68:54:72:2f:6e:89:d2:3c:4d:e6:ec:b0:0c:ff:3e: 2b:ec:01:98:4b:8b:62:27:8b:73:56:b6:bf:e5:9e: 92:dd:97:4d:9d:b8:10:19:d5:dc:2a:1c:4f:27:e4: 3d:5a:47:d0:e8:06:f9:95:cc:d4:b3:0b:f1:2c:86: 0f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:D7:FA:DA:D1:99:CF:B9:F1:9C:0A:46:1E:CD:17:3E:DF:28:C8:4A X509v3 Authority Key Identifier: keyid:38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/5tf62tGZz7nxnApGHs0XPt8oyEo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.243.208.0/21 Signature Algorithm: sha256WithRSAEncryption 11:83:d6:b7:b5:e5:01:c7:53:34:36:5d:97:a9:83:e2:dc:d0: 6d:52:f2:46:04:8d:92:59:c6:6c:2e:df:d8:bd:a2:5b:8d:8f: e4:da:b0:4e:bf:df:65:50:c2:58:c2:91:97:cc:a5:d8:4d:3c: 04:8f:24:30:d4:af:18:14:1d:c8:2b:03:24:9f:3c:8f:74:93: cf:6a:b5:ed:f2:ff:ab:c9:8b:c4:f5:04:99:de:0a:ac:6d:b8: df:18:03:54:3a:99:8a:17:89:d5:95:65:73:17:b0:95:73:d6: 03:8a:8d:60:4a:e7:84:24:73:2b:24:1b:d6:3d:96:bb:42:5b: 49:fc:00:b2:21:f0:1b:cd:cc:7b:33:b3:cd:82:7e:78:f8:f9: 45:ee:0f:67:7b:5a:a5:55:3c:59:b7:32:19:29:02:1b:e9:fc: 4b:bc:4c:3b:fa:27:2e:f0:69:17:00:aa:14:15:5a:55:8c:1f: e3:fe:ec:eb:25:2d:74:75:e7:af:01:d3:9e:3f:01:9e:5c:a2: a7:25:46:a2:b1:b5:57:3f:8b:b9:65:e6:a2:57:c8:c3:22:a7: 58:27:68:8c:4c:76:29:2a:09:05:76:b0:fe:cf:29:00:4c:bf: 53:45:48:e2:95:c1:48:34:9c:44:0c:36:d3:25:4f:0a:7d:74: c0:4e:69:1d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OTCNZffXvbwgfhNhx0+xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MDA5OWE4MWIzNDZmOWFiY2FmMjYwNTZmNWI3NzA5NGQx Y2YxMTMwHhcNMjYwMTAyMTAyMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNmQ3ZmFkYWQxOTljZmI5ZjE5YzBhNDYxZWNkMTczZWRmMjhjODRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOwokiMX21RQ7V0HiJpOaoppdema z640/KgMZD959G4zhw8VUWuMRINzTwT0JGUnCAiA5rASqrrA4dGXzSKutpb+z96+ 17mTat3NBJSMMvYHJdAJEvPEs6Ygf18XI69LO2O5dFHQh2lbjZ1wi7YWyMZMEndZ 9X2vFkfvZfmOOXmwJt5gmRZFHaMLjWVt7BZHVy9W0g7aeh3Mb6T0eiw5dsktrdip w1jW2zh3dxBDMU84LPL9ojIHu2zeiaEkaJwdUkFoVHIvbonSPE3m7LAM/z4r7AGY S4tiJ4tzVra/5Z6S3ZdNnbgQGdXcKhxPJ+Q9WkfQ6Ab5lczUswvxLIYPJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFObX+trRmc+58ZwKRh7NFz7fKMhKMB8GA1UdIwQY MBaAFDgAmagbNG+avK8mBW9bdwlNHPETMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0FDWnFCczBiNXE4cnlZRmIxdDNDVTBjOFJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My84ZTUwMWQtYzA4OC00ODk1LWFlZTMt NDUwZmUzMzU5NWQxLzEvNXRmNjJ0R1p6N254bkFwR0hzMFhQdDhveUVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My84ZTUwMWQtYzA4OC00ODk1LWFlZTMtNDUwZmUzMzU5NWQx LzEvT0FDWnFCczBiNXE4cnlZRmIxdDNDVTBjOFJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDXvPQMA0G CSqGSIb3DQEBCwUAA4IBAQARg9a3teUBx1M0Nl2XqYPi3NBtUvJGBI2SWcZsLt/Y vaJbjY/k2rBOv99lUMJYwpGXzKXYTTwEjyQw1K8YFB3IKwMknzyPdJPParXt8v+r yYvE9QSZ3gqsbbjfGANUOpmKF4nVlWVzF7CVc9YDio1gSueEJHMrJBvWPZa7QltJ /ACyIfAbzcx7M7PNgn54+PlF7g9ne1qlVTxZtzIZKQIb6fxLvEw7+icu8GkXAKoU FVpVjB/j/uzrJS10deevAdOePwGeXKKnJUaisbVXP4u5ZeaiV8jDIqdYJ2iMTHYp KgkFdrD+zykATL9TRUjilcFINJxEDDbTJU8KfXTATmkd -----END CERTIFICATE-----Generated at Mon Jan 26 01:02:10 2026 by rpki-client