This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/SLYW5X4FmSXC-eZnth59dct07EA.roa File: SLYW5X4FmSXC-eZnth59dct07EA.roa (raw, json) Hash identifier: EO0lM6yDWmgO8JLPZODlHn2ZvtSFCnd+OicqRjcR4/o= Subject key identifier: 48:B6:16:E5:7E:05:99:25:C2:F9:E6:67:B6:1E:7D:75:CB:74:EC:40 Certificate issuer: /CN=597b44c4a7931c66a6ff9e92dbb32ca723d4ccf7 Certificate serial: 019B7B35D843CEC5A6ACF73165467AB6CB60 Authority key identifier: 59:7B:44:C4:A7:93:1C:66:A6:FF:9E:92:DB:B3:2C:A7:23:D4:CC:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXtExKeTHGam_56S27MspyPUzPc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/SLYW5X4FmSXC-eZnth59dct07EA.roa Signing time: Thu 01 Jan 2026 20:18:04 +0000 ROA not before: Thu 01 Jan 2026 20:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60118 IP address blocks: 5.254.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/WXtExKeTHGam_56S27MspyPUzPc.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/WXtExKeTHGam_56S27MspyPUzPc.mft rsync://rpki.ripe.net/repository/DEFAULT/WXtExKeTHGam_56S27MspyPUzPc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:d8:43:ce:c5:a6:ac:f7:31:65:46:7a:b6:cb:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=597b44c4a7931c66a6ff9e92dbb32ca723d4ccf7 Validity Not Before: Jan 1 20:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=48b616e57e059925c2f9e667b61e7d75cb74ec40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:33:a7:80:c9:47:5e:0a:3c:c0:6a:7d:c5:23: 95:da:67:dd:64:bf:6d:cf:58:8c:21:c4:d9:30:73: ff:8a:85:af:4c:64:4a:b7:24:42:da:d6:b0:1f:26: 9e:1e:06:c9:68:74:7d:1c:59:6b:8b:7d:c0:97:c1: 8a:70:b6:83:f2:99:9e:0e:cc:18:6f:44:62:e7:c4: 4f:5e:f5:3e:40:4a:56:9a:4c:ec:57:ad:e6:21:23: 53:a0:85:96:34:ab:e1:9d:ea:17:57:ff:e0:5b:90: 4d:49:d2:ca:be:ef:f7:fd:8d:98:b3:45:6b:c1:8e: c3:36:bb:44:9d:c0:9c:df:3e:13:9e:31:69:15:97: 2c:fb:90:7f:15:f7:13:51:ef:b2:72:ec:7a:b0:7d: ec:a4:2d:c3:eb:ab:e4:bc:79:bd:57:ab:92:21:3d: c8:38:13:69:60:56:a5:de:8b:cd:ed:6c:a3:98:55: 11:02:16:ed:61:89:f4:01:b9:dd:9a:cc:34:30:69: 96:cd:5c:7d:1a:95:97:3f:7c:03:5f:45:55:43:f0: ac:46:1b:ca:68:c9:7d:3e:15:78:da:b9:a8:48:f3: aa:04:ae:27:28:c9:ee:51:d5:4a:6c:7d:05:1f:fc: 62:f8:b6:52:02:dd:54:00:6d:b4:47:3e:2e:bc:bd: 67:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:B6:16:E5:7E:05:99:25:C2:F9:E6:67:B6:1E:7D:75:CB:74:EC:40 X509v3 Authority Key Identifier: keyid:59:7B:44:C4:A7:93:1C:66:A6:FF:9E:92:DB:B3:2C:A7:23:D4:CC:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXtExKeTHGam_56S27MspyPUzPc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/SLYW5X4FmSXC-eZnth59dct07EA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/WXtExKeTHGam_56S27MspyPUzPc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.254.125.0/24 Signature Algorithm: sha256WithRSAEncryption 84:2a:14:7f:ad:91:ac:de:3e:46:40:ab:af:a7:05:ee:2a:44: a6:24:b5:5f:71:75:59:a5:76:69:8c:e4:be:7c:8a:be:0e:13: 12:6d:92:e1:01:7d:23:bf:91:6c:47:9a:f1:27:15:27:f8:82: a1:30:9b:a4:b9:10:e1:5f:a0:08:ec:01:f3:c7:ff:1a:08:76: 4e:cf:ab:86:57:c0:96:1b:c4:b8:a7:55:70:b5:8f:ec:a0:cc: 00:36:df:bc:26:d8:8b:ed:d6:86:bf:2a:9e:f8:e8:42:f2:a9: 7b:45:f4:e3:cc:be:ff:20:f4:c0:93:2d:ba:f6:c5:5e:28:55: 88:e8:7d:d4:bb:89:01:ab:c0:a1:cf:de:e9:9f:5a:61:25:89: 3e:26:9c:6c:03:a0:db:46:96:2d:fe:08:fd:80:46:a6:43:e4: a9:2b:15:2d:e9:28:b9:78:de:8b:00:bc:15:aa:46:b9:3e:e4: ca:a8:cf:7a:f5:aa:f6:cd:12:34:c4:03:bd:8f:54:47:78:ff: 87:fa:e7:5c:95:28:7c:88:46:92:61:5c:13:ca:8e:ed:bc:e0: 32:1c:25:6a:2b:6f:6a:95:87:07:35:e6:75:03:cf:c6:64:94: 61:59:25:dd:6b:ad:db:3e:d2:02:ac:36:01:cd:c7:15:d1:b1: 5e:97:9a:df -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NdhDzsWmrPcxZUZ6tstgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5N2I0NGM0YTc5MzFjNjZhNmZmOWU5MmRiYjMyY2E3MjNk NGNjZjcwHhcNMjYwMTAxMjAxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OGI2MTZlNTdlMDU5OTI1YzJmOWU2NjdiNjFlN2Q3NWNiNzRlYzQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDOngMlHXgo8wGp9xSOV2mfdZL9t z1iMIcTZMHP/ioWvTGRKtyRC2tawHyaeHgbJaHR9HFlri33Al8GKcLaD8pmeDswY b0Ri58RPXvU+QEpWmkzsV63mISNToIWWNKvhneoXV//gW5BNSdLKvu/3/Y2Ys0Vr wY7DNrtEncCc3z4TnjFpFZcs+5B/FfcTUe+ycux6sH3spC3D66vkvHm9V6uSIT3I OBNpYFal3ovN7WyjmFURAhbtYYn0Abndmsw0MGmWzVx9GpWXP3wDX0VVQ/CsRhvK aMl9PhV42rmoSPOqBK4nKMnuUdVKbH0FH/xi+LZSAt1UAG20Rz4uvL1n6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEi2FuV+BZklwvnmZ7YefXXLdOxAMB8GA1UdIwQY MBaAFFl7RMSnkxxmpv+ektuzLKcj1Mz3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1h0RXhLZVRIR2FtXzU2UzI3TXNweVBVelBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS85NWZmOGYtNjZiYy00YjExLTk4ZjAt MGFiMjFiMmYyNzU0LzEvU0xZVzVYNEZtU1hDLWVabnRoNTlkY3QwN0VBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS85NWZmOGYtNjZiYy00YjExLTk4ZjAtMGFiMjFiMmYyNzU0 LzEvV1h0RXhLZVRIR2FtXzU2UzI3TXNweVBVelBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABf59MA0G CSqGSIb3DQEBCwUAA4IBAQCEKhR/rZGs3j5GQKuvpwXuKkSmJLVfcXVZpXZpjOS+ fIq+DhMSbZLhAX0jv5FsR5rxJxUn+IKhMJukuRDhX6AI7AHzx/8aCHZOz6uGV8CW G8S4p1VwtY/soMwANt+8JtiL7daGvyqe+OhC8ql7RfTjzL7/IPTAky269sVeKFWI 6H3Uu4kBq8Chz97pn1phJYk+JpxsA6DbRpYt/gj9gEamQ+SpKxUt6Si5eN6LALwV qka5PuTKqM969ar2zRI0xAO9j1RHeP+H+udclSh8iEaSYVwTyo7tvOAyHCVqK29q lYcHNeZ1A8/GZJRhWSXda63bPtICrDYBzccV0bFel5rf -----END CERTIFICATE-----Generated at Mon Jan 26 02:01:33 2026 by rpki-client