This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/E5SPaDEMTvlYfAVnbM3ETob88Xs.roa File: E5SPaDEMTvlYfAVnbM3ETob88Xs.roa (raw, json) Hash identifier: swOPjza97qCHWoAORaceipt2Q5pF466PWBAdL7I6tD4= Subject key identifier: 13:94:8F:68:31:0C:4E:F9:58:7C:05:67:6C:CD:C4:4E:86:FC:F1:7B Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Certificate serial: 019B7759538A18E846B93F52A8EDCE9C6B4D Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/E5SPaDEMTvlYfAVnbM3ETob88Xs.roa Signing time: Thu 01 Jan 2026 02:18:21 +0000 ROA not before: Thu 01 Jan 2026 02:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49496 IP address blocks: 86.104.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:53:8a:18:e8:46:b9:3f:52:a8:ed:ce:9c:6b:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Validity Not Before: Jan 1 02:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=13948f68310c4ef9587c05676ccdc44e86fcf17b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:55:5c:ee:3e:53:fa:6c:44:c4:02:ec:96:0f: d8:2c:9f:3d:ac:bc:68:90:90:dc:e8:73:c0:48:50: 11:ad:72:8c:db:96:33:0d:b5:78:30:39:79:45:89: 53:e9:76:09:ea:d8:d0:36:a0:40:dc:bc:3f:96:ef: 42:60:14:71:e6:5b:b9:b4:25:05:78:ee:47:bf:f7: b7:92:09:2d:48:3f:9f:1c:1b:80:12:ac:4d:4b:dd: 52:06:65:6f:d1:bd:9c:29:00:e6:42:5f:53:94:fd: 57:9d:6d:b1:08:9a:cb:1f:61:bb:96:4d:28:f2:1b: 92:5f:6e:79:70:08:50:86:9a:07:ba:07:6c:d3:c7: b5:e1:99:07:f9:c2:c8:ca:7b:34:1d:16:16:b7:6d: e7:0d:72:12:a9:30:b5:55:d9:7a:1e:7b:ab:03:0b: f1:95:e3:df:2c:e8:b7:8f:aa:66:0a:cd:21:c9:fb: 5d:a5:f1:23:66:9e:82:33:df:c2:af:90:ec:38:9a: 02:08:32:05:4f:7d:9e:d5:da:06:54:00:e4:33:b8: 55:f7:b6:9f:77:31:57:3a:0c:cf:88:49:f3:ce:25: 9d:39:12:aa:f0:45:0b:91:41:c1:30:73:11:9c:05: 12:ac:4b:32:9e:ef:75:3f:2f:23:54:56:e5:11:f3: 6b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:94:8F:68:31:0C:4E:F9:58:7C:05:67:6C:CD:C4:4E:86:FC:F1:7B X509v3 Authority Key Identifier: keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/E5SPaDEMTvlYfAVnbM3ETob88Xs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.104.18.0/24 Signature Algorithm: sha256WithRSAEncryption 65:7f:39:88:07:5c:8b:b3:e6:61:9b:16:f5:df:4b:7c:9e:f1: 97:11:91:57:7c:cb:33:64:55:6d:e7:c7:fc:ce:5a:63:ad:1e: af:49:78:5a:68:f5:71:d6:f6:ff:c0:0a:e0:c2:b4:b5:31:13: 4f:45:21:81:2c:18:93:7b:35:59:83:31:0c:5e:5b:b1:90:57: 1b:ce:fe:09:33:51:7a:2e:f0:0e:c6:05:d4:ec:ee:e6:ae:fd: ed:da:77:61:c9:95:ee:d4:6e:7c:b6:88:a0:b9:86:c2:77:64: 38:53:ba:54:92:4c:d9:3f:2b:91:2c:a5:50:d3:23:bf:6e:83: 50:e5:73:c7:e7:fb:89:56:b8:b5:e6:cc:f6:26:75:fe:13:28: 89:fd:e0:cb:05:56:cb:a2:a4:dc:8e:b5:52:08:e2:3b:e4:01: 3e:53:51:7d:17:45:72:15:2d:95:14:7c:1a:ed:b5:ac:4b:12: 82:98:7b:9e:23:32:a9:96:8f:b1:ad:df:44:1e:58:1b:0d:c4: 66:e9:d3:dd:f9:8a:e8:f5:95:2e:26:06:6d:67:9e:36:8c:c3: 5c:12:49:e1:8b:0a:da:26:35:1a:73:95:7b:f4:e5:ea:d3:8d: a3:3e:a1:48:2a:46:a7:d5:97:99:df:c9:7c:92:b6:28:02:09: 9b:b4:41:c9 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3WVOKGOhGuT9SqO3OnGtNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy MTliNTkwHhcNMjYwMTAxMDIxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzk0OGY2ODMxMGM0ZWY5NTg3YzA1Njc2Y2NkYzQ0ZTg2ZmNmMTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5lVc7j5T+mxExALslg/YLJ89rLxo kJDc6HPASFARrXKM25YzDbV4MDl5RYlT6XYJ6tjQNqBA3Lw/lu9CYBRx5lu5tCUF eO5Hv/e3kgktSD+fHBuAEqxNS91SBmVv0b2cKQDmQl9TlP1XnW2xCJrLH2G7lk0o 8huSX255cAhQhpoHugds08e14ZkH+cLIyns0HRYWt23nDXISqTC1Vdl6HnurAwvx lePfLOi3j6pmCs0hyftdpfEjZp6CM9/Cr5DsOJoCCDIFT32e1doGVADkM7hV97af dzFXOgzPiEnzziWdORKq8EULkUHBMHMRnAUSrEsynu91Py8jVFblEfNrSQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFBOUj2gxDE75WHwFZ2zNxE6G/PF7MB8GA1UdIwQY MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl LTkyZTI1ZmUxNjMzMS8xL0U1U1BhREVNVHZsWWZBVm5iTTNFVG9iODhYcy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABWaBIw DQYJKoZIhvcNAQELBQADggEBAGV/OYgHXIuz5mGbFvXfS3ye8ZcRkVd8yzNkVW3n x/zOWmOtHq9JeFpo9XHW9v/ACuDCtLUxE09FIYEsGJN7NVmDMQxeW7GQVxvO/gkz UXou8A7GBdTs7uau/e3ad2HJle7Ubny2iKC5hsJ3ZDhTulSSTNk/K5EspVDTI79u g1Dlc8fn+4lWuLXmzPYmdf4TKIn94MsFVsuipNyOtVII4jvkAT5TUX0XRXIVLZUU fBrttaxLEoKYe54jMqmWj7Gt30QeWBsNxGbp0935iuj1lS4mBm1nnjaMw1wSSeGL CtomNRpzlXv05erTjaM+oUgqRqfVl5nfyXyStigCCZu0Qck= -----END CERTIFICATE-----Generated at Sun Jan 25 17:33:42 2026 by rpki-client