This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/5cl4Z6asyPqRl4z3J4ySouDyEeE.roa File: 5cl4Z6asyPqRl4z3J4ySouDyEeE.roa (raw, json) Hash identifier: PzM5l6ACiLTk3VlfamE9R6T8MML28IE4R3kgNFrFOdE= Subject key identifier: E5:C9:78:67:A6:AC:C8:FA:91:97:8C:F7:27:8C:92:A2:E0:F2:11:E1 Certificate issuer: /CN=58f7d27ebc269bf14b8d6895791affd429f70222 Certificate serial: 019B7A5B1D1DDFE5984B22364D8E191DDEE8 Authority key identifier: 58:F7:D2:7E:BC:26:9B:F1:4B:8D:68:95:79:1A:FF:D4:29:F7:02:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/5cl4Z6asyPqRl4z3J4ySouDyEeE.roa Signing time: Thu 01 Jan 2026 16:19:10 +0000 ROA not before: Thu 01 Jan 2026 16:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209835 IP address blocks: 83.143.108.0/22 maxlen: 22 83.143.108.0/24 maxlen: 24 83.143.109.0/24 maxlen: 24 83.143.110.0/24 maxlen: 24 83.143.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.mft rsync://rpki.ripe.net/repository/DEFAULT/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:1d:1d:df:e5:98:4b:22:36:4d:8e:19:1d:de:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58f7d27ebc269bf14b8d6895791affd429f70222 Validity Not Before: Jan 1 16:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e5c97867a6acc8fa91978cf7278c92a2e0f211e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e1:4b:a6:de:b7:60:89:4b:0e:a0:5a:74:89: ea:23:26:48:0d:7d:36:54:b4:73:58:54:59:da:30: 96:6f:9a:d9:87:48:c7:ae:3f:f4:ad:96:01:8e:fb: c2:cc:9a:3e:fb:e1:63:10:78:2d:bb:a1:6e:fd:b6: e3:b9:e8:c4:02:dc:ae:81:cc:0d:28:2a:00:cb:dc: 60:14:0d:9d:6b:7e:f7:f5:40:de:4a:6a:55:ad:95: 36:fd:aa:87:32:02:dd:db:6e:c3:60:7e:90:ad:83: 14:e9:3d:5b:6e:10:9f:a7:42:24:c6:f7:60:1b:07: 6a:fc:c3:ac:35:cc:b1:a9:1a:0a:16:9a:a9:5c:c4: 5d:e2:62:55:34:88:e1:58:19:34:0c:59:aa:60:84: 8d:37:6f:76:1b:7b:35:9d:a6:99:d4:9a:0d:69:d0: 35:c1:78:26:3d:7e:72:94:7b:54:5e:33:8d:94:b0: 96:76:5c:01:6d:bc:e4:a4:0d:2d:91:12:ab:af:c4: 69:13:c3:d6:05:4c:5d:b6:a4:a5:f8:3c:3c:44:95: e5:f4:d1:26:49:9a:4a:b6:20:9e:cf:d9:fb:91:1f: 1e:cf:04:d7:d9:2c:f1:ef:4b:2e:0a:7d:b1:ac:79: 94:cf:08:b9:34:0b:b1:20:f2:2f:c3:c9:a7:9b:26: 5b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:C9:78:67:A6:AC:C8:FA:91:97:8C:F7:27:8C:92:A2:E0:F2:11:E1 X509v3 Authority Key Identifier: keyid:58:F7:D2:7E:BC:26:9B:F1:4B:8D:68:95:79:1A:FF:D4:29:F7:02:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/5cl4Z6asyPqRl4z3J4ySouDyEeE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.143.108.0/22 Signature Algorithm: sha256WithRSAEncryption 18:7b:13:d3:0a:0b:3a:ba:83:6e:85:1f:30:23:99:ad:d2:c1: 02:d8:9d:4b:fe:75:28:a8:58:80:05:5b:99:ec:18:29:52:42: 8c:2f:43:0d:81:9c:68:17:e3:b4:33:99:50:13:4d:48:af:5a: ed:89:dc:c8:d5:7a:5e:00:dd:e7:19:6b:56:4a:a3:69:fe:d7: 96:6d:89:4a:84:69:27:0f:5e:d6:0a:9c:34:bc:5a:2d:63:bf: f9:2d:ff:5c:89:df:c2:98:1a:95:0c:27:a1:9e:45:f8:21:39: bb:19:80:ba:2e:7a:f6:0b:3f:21:c4:88:43:72:38:dd:06:f7: 5b:c3:88:6a:96:a5:6b:81:43:6b:31:2f:57:02:92:60:b7:fc: 65:37:a8:36:13:8b:65:3b:42:31:8f:c4:f9:52:b7:3f:c6:45: c7:54:54:5c:06:5c:cf:85:75:d8:12:9c:3f:40:3f:17:30:94: fd:6b:ee:64:48:2c:26:c6:2e:aa:9d:87:46:c5:10:a1:b1:d8: 98:c5:d1:89:6b:67:ac:d9:d2:77:ac:e7:bc:44:e1:d8:b0:19: 0c:e8:66:c7:2b:67:c3:07:ed:14:59:ec:d5:43:91:17:fb:b4: f2:d3:12:9c:93:d9:d0:87:93:64:1a:03:f5:76:e6:44:ad:d6: de:bb:d9:a1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wx0d3+WYSyI2TY4ZHd7oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ZjdkMjdlYmMyNjliZjE0YjhkNjg5NTc5MWFmZmQ0Mjlm NzAyMjIwHhcNMjYwMTAxMTYxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNWM5Nzg2N2E2YWNjOGZhOTE5NzhjZjcyNzhjOTJhMmUwZjIxMWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3eFLpt63YIlLDqBadInqIyZIDX02 VLRzWFRZ2jCWb5rZh0jHrj/0rZYBjvvCzJo+++FjEHgtu6Fu/bbjuejEAtyugcwN KCoAy9xgFA2da3739UDeSmpVrZU2/aqHMgLd227DYH6QrYMU6T1bbhCfp0Ikxvdg Gwdq/MOsNcyxqRoKFpqpXMRd4mJVNIjhWBk0DFmqYISNN292G3s1naaZ1JoNadA1 wXgmPX5ylHtUXjONlLCWdlwBbbzkpA0tkRKrr8RpE8PWBUxdtqSl+Dw8RJXl9NEm SZpKtiCez9n7kR8ezwTX2Szx70suCn2xrHmUzwi5NAuxIPIvw8mnmyZb/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOXJeGemrMj6kZeM9yeMkqLg8hHhMB8GA1UdIwQY MBaAFFj30n68JpvxS41olXka/9Qp9wIiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1BmU2Zyd21tX0ZMaldpVmVScl8xQ24zQWlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC85MDRhMmEtNmRkMS00OTc0LWJiMjkt NGM5MmNlYzA4YmE4LzEvNWNsNFo2YXN5UHFSbDR6M0o0eVNvdUR5RWVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC85MDRhMmEtNmRkMS00OTc0LWJiMjktNGM5MmNlYzA4YmE4 LzEvV1BmU2Zyd21tX0ZMaldpVmVScl8xQ24zQWlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCU49sMA0G CSqGSIb3DQEBCwUAA4IBAQAYexPTCgs6uoNuhR8wI5mt0sEC2J1L/nUoqFiABVuZ 7BgpUkKML0MNgZxoF+O0M5lQE01Ir1rtidzI1XpeAN3nGWtWSqNp/teWbYlKhGkn D17WCpw0vFotY7/5Lf9cid/CmBqVDCehnkX4ITm7GYC6Lnr2Cz8hxIhDcjjdBvdb w4hqlqVrgUNrMS9XApJgt/xlN6g2E4tlO0Ixj8T5Urc/xkXHVFRcBlzPhXXYEpw/ QD8XMJT9a+5kSCwmxi6qnYdGxRChsdiYxdGJa2es2dJ3rOe8ROHYsBkM6GbHK2fD B+0UWezVQ5EX+7Ty0xKck9nQh5NkGgP1duZErdbeu9mh -----END CERTIFICATE-----Generated at Sun Jan 25 18:08:00 2026 by rpki-client