This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/5nq9HL_fbHwF3htXeFbjQsIUGNI.roa File: 5nq9HL_fbHwF3htXeFbjQsIUGNI.roa (raw, json) Hash identifier: HH0P6PKHmRUyRPLZbai/JhwygluwWuiwYd/rDdjWeOU= Subject key identifier: E6:7A:BD:1C:BF:DF:6C:7C:05:DE:1B:57:78:56:E3:42:C2:14:18:D2 Certificate issuer: /CN=d0113dd5d0759c03009380140c668ebbd1f9c168 Certificate serial: 019B7DCA58C1605DD3A6298CE05EB1ED21EC Authority key identifier: D0:11:3D:D5:D0:75:9C:03:00:93:80:14:0C:66:8E:BB:D1:F9:C1:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BE91dB1nAMAk4AUDGaOu9H5wWg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/5nq9HL_fbHwF3htXeFbjQsIUGNI.roa Signing time: Fri 02 Jan 2026 08:19:31 +0000 ROA not before: Fri 02 Jan 2026 08:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35661 IP address blocks: 193.39.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.crl rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.mft rsync://rpki.ripe.net/repository/DEFAULT/0BE91dB1nAMAk4AUDGaOu9H5wWg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:58:c1:60:5d:d3:a6:29:8c:e0:5e:b1:ed:21:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0113dd5d0759c03009380140c668ebbd1f9c168 Validity Not Before: Jan 2 08:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e67abd1cbfdf6c7c05de1b577856e342c21418d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b5:a6:2a:72:a3:03:20:d3:e4:30:3b:b1:dd: 95:c0:9c:b8:6a:c8:14:2d:82:ce:31:83:94:35:e9: 76:a9:6e:ab:d2:15:f7:20:e2:4f:25:ec:37:3b:2a: 35:13:8d:b3:b2:54:d5:24:32:05:53:ff:6c:b9:8d: 83:da:7d:30:2e:4b:b0:e6:29:6b:24:0d:c5:bd:98: 84:12:1b:98:88:4e:c5:56:7f:13:83:a8:77:ee:d3: bb:9c:79:a5:2e:74:2e:11:fe:c8:3f:5f:ad:5c:e6: 73:25:e9:97:c2:50:71:c7:58:7f:d7:ee:41:58:bc: f5:51:41:32:20:34:77:7b:b2:5c:a4:4e:78:30:1d: a9:a3:5e:10:5b:63:18:86:be:89:0d:0b:4c:53:1f: 0f:bb:f7:8d:44:b0:86:d4:b6:a0:23:19:44:ea:9e: ae:13:4f:30:5b:1e:38:5b:3f:5f:9f:44:a5:48:49: 71:d6:c7:d5:1e:13:44:d9:72:3c:e8:bc:8b:77:a5: 91:b0:05:93:66:14:a4:bf:a5:5c:58:bf:b9:d1:f5: 60:56:fd:26:d2:77:55:d5:78:44:9e:07:d6:b2:a9: 0e:b0:c2:3b:9b:a1:39:eb:db:f1:e7:8e:f6:ac:cd: 21:cd:85:f8:b7:d9:9d:6b:8b:3f:02:2f:0c:f6:08: c3:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:7A:BD:1C:BF:DF:6C:7C:05:DE:1B:57:78:56:E3:42:C2:14:18:D2 X509v3 Authority Key Identifier: keyid:D0:11:3D:D5:D0:75:9C:03:00:93:80:14:0C:66:8E:BB:D1:F9:C1:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BE91dB1nAMAk4AUDGaOu9H5wWg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/5nq9HL_fbHwF3htXeFbjQsIUGNI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.39.79.0/24 Signature Algorithm: sha256WithRSAEncryption 58:4d:2d:75:eb:e6:31:cf:55:9a:6c:a3:2a:70:f2:cc:85:7a: 24:cf:60:46:6f:e2:97:f2:0c:d2:2f:da:33:58:33:73:3b:32: 40:ad:23:f7:ae:db:0c:08:57:84:08:8d:f0:26:e5:3d:ee:1a: f9:74:46:e1:8c:2e:27:9a:d3:c5:3b:57:b3:08:26:18:2a:00: a0:26:ad:d5:e8:40:7c:d1:7d:ad:9d:90:cf:e5:b4:30:04:da: 63:64:42:08:78:68:f3:42:e3:ea:fd:12:4a:9e:ae:3a:1b:ef: f0:75:b2:35:0d:21:f0:2a:2b:ae:c9:1d:d6:e6:0d:ca:c3:f5: dd:8c:ef:b2:e4:67:23:15:48:c0:21:28:61:4b:6a:33:03:86: db:9a:78:67:f7:cd:48:d4:37:24:ed:3c:dd:93:c3:00:bc:7a: ad:77:74:97:d5:f1:67:90:d9:28:0c:23:7f:20:74:83:2c:87: 2b:07:08:5c:f3:58:92:57:dd:63:d3:8b:6a:70:ea:51:bd:60: 8b:60:c6:2a:e9:f1:a8:dd:13:bd:7f:bd:fe:1e:79:11:ad:7c: 8d:e5:8c:26:10:f0:77:bf:53:0a:92:9f:4d:ee:8d:df:12:97: 82:9c:c1:dc:5b:fb:b4:26:05:8e:30:42:bc:0e:cf:00:95:50: 4a:29:5a:b8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yljBYF3TpimM4F6x7SHsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwMTEzZGQ1ZDA3NTljMDMwMDkzODAxNDBjNjY4ZWJiZDFm OWMxNjgwHhcNMjYwMTAyMDgxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjdhYmQxY2JmZGY2YzdjMDVkZTFiNTc3ODU2ZTM0MmMyMTQxOGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7WmKnKjAyDT5DA7sd2VwJy4asgU LYLOMYOUNel2qW6r0hX3IOJPJew3Oyo1E42zslTVJDIFU/9suY2D2n0wLkuw5ilr JA3FvZiEEhuYiE7FVn8Tg6h37tO7nHmlLnQuEf7IP1+tXOZzJemXwlBxx1h/1+5B WLz1UUEyIDR3e7JcpE54MB2po14QW2MYhr6JDQtMUx8Pu/eNRLCG1LagIxlE6p6u E08wWx44Wz9fn0SlSElx1sfVHhNE2XI86LyLd6WRsAWTZhSkv6VcWL+50fVgVv0m 0ndV1XhEngfWsqkOsMI7m6E569vx5472rM0hzYX4t9mda4s/Ai8M9gjDCwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOZ6vRy/32x8Bd4bV3hW40LCFBjSMB8GA1UdIwQY MBaAFNARPdXQdZwDAJOAFAxmjrvR+cFoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEJFOTFkQjFuQU1BazRBVURHYU91OUg1d1dnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS82OTE0Y2UtNjZjMi00MjM4LTkyYjct YTJkNjM2ZjMyNWU2LzEvNW5xOUhMX2ZiSHdGM2h0WGVGYmpRc0lVR05JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS82OTE0Y2UtNjZjMi00MjM4LTkyYjctYTJkNjM2ZjMyNWU2 LzEvMEJFOTFkQjFuQU1BazRBVURHYU91OUg1d1dnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSdPMA0G CSqGSIb3DQEBCwUAA4IBAQBYTS116+Yxz1WabKMqcPLMhXokz2BGb+KX8gzSL9oz WDNzOzJArSP3rtsMCFeECI3wJuU97hr5dEbhjC4nmtPFO1ezCCYYKgCgJq3V6EB8 0X2tnZDP5bQwBNpjZEIIeGjzQuPq/RJKnq46G+/wdbI1DSHwKiuuyR3W5g3Kw/Xd jO+y5GcjFUjAIShhS2ozA4bbmnhn981I1Dck7Tzdk8MAvHqtd3SX1fFnkNkoDCN/ IHSDLIcrBwhc81iSV91j04tqcOpRvWCLYMYq6fGo3RO9f73+HnkRrXyN5YwmEPB3 v1MKkp9N7o3fEpeCnMHcW/u0JgWOMEK8Ds8AlVBKKVq4 -----END CERTIFICATE-----Generated at Sun Jan 25 19:59:48 2026 by rpki-client