This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/5YPsIbaSg9ztPjdu-K2B8MFpuaA.roa File: 5YPsIbaSg9ztPjdu-K2B8MFpuaA.roa (raw, json) Hash identifier: d3bgCa+ndSTxYb7z39CET6dP7ykYxe9e9G4fbhzbXJI= Subject key identifier: E5:83:EC:21:B6:92:83:DC:ED:3E:37:6E:F8:AD:81:F0:C1:69:B9:A0 Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88 Certificate serial: 019B7DCABCADD787EE5BAB7ECECFFCD5221F Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/5YPsIbaSg9ztPjdu-K2B8MFpuaA.roa Signing time: Fri 02 Jan 2026 08:19:57 +0000 ROA not before: Fri 02 Jan 2026 08:19:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43965 IP address blocks: 94.184.96.0/20 maxlen: 24 94.184.144.0/20 maxlen: 24 194.225.48.0/20 maxlen: 24 194.225.78.0/23 maxlen: 24 194.225.184.0/22 maxlen: 24 194.225.192.0/19 maxlen: 24 2001:14e8:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:bc:ad:d7:87:ee:5b:ab:7e:ce:cf:fc:d5:22:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88 Validity Not Before: Jan 2 08:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e583ec21b69283dced3e376ef8ad81f0c169b9a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5a:74:d1:29:ac:91:fc:12:36:64:41:97:74: 72:c8:49:a9:a8:f5:d1:ff:3c:b4:32:69:9d:6a:ec: 83:c2:02:03:49:4c:77:78:80:a7:30:ad:8b:14:43: 44:3f:2a:3f:15:2a:02:02:a1:50:df:71:61:08:07: 4c:c6:8a:9b:13:b7:50:9b:51:52:3e:b4:f7:d6:50: 6f:12:0a:c9:87:d2:08:19:36:d6:b2:26:1a:32:8c: 2f:be:89:02:c0:47:62:e9:4f:58:a4:50:db:df:b7: 1b:41:5e:64:5e:4e:bc:31:5c:20:df:12:18:b3:ac: cd:80:35:ef:13:d4:e4:f2:9c:06:e6:ec:50:e4:97: 1f:f2:91:0d:0a:ba:b8:35:e2:ef:b0:e2:83:a3:48: 1f:08:21:7e:db:1f:db:8e:f7:40:7a:d9:e2:10:aa: 85:a8:26:43:3b:33:7e:52:46:30:09:18:2c:63:df: 16:c1:d9:e6:80:58:01:a8:51:5e:2d:aa:ca:5e:7a: d1:fb:a7:e6:9e:12:12:6e:33:9a:78:fd:a0:3b:51: 7d:84:1a:e2:9f:d7:82:1d:8e:08:be:54:5d:e6:f7: 86:3d:89:81:3b:90:c6:b6:bf:36:cc:12:30:72:22: 5a:8c:6a:e3:f6:89:a9:3a:cd:f4:93:f6:cc:07:0d: 6c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:83:EC:21:B6:92:83:DC:ED:3E:37:6E:F8:AD:81:F0:C1:69:B9:A0 X509v3 Authority Key Identifier: keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/5YPsIbaSg9ztPjdu-K2B8MFpuaA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.184.96.0/20 94.184.144.0/20 194.225.48.0/20 194.225.78.0/23 194.225.184.0/22 194.225.192.0/19 IPv6: 2001:14e8:2::/48 Signature Algorithm: sha256WithRSAEncryption 35:14:84:34:d9:31:52:72:53:a9:4b:1e:58:7f:7b:55:af:2d: 7d:7f:44:f9:7e:81:df:9b:b8:d9:31:c3:49:60:5c:e1:e5:2f: c8:77:36:a1:0b:c7:65:29:c6:fa:93:7e:dd:84:d7:67:86:20: 39:05:27:ab:9a:9c:00:3a:7f:66:94:35:da:46:ec:91:63:18: ed:94:22:dd:49:19:b8:40:10:39:c1:6b:89:ef:d7:b5:e0:f7: 14:b0:e6:5e:87:b5:ea:c8:53:2e:03:56:b6:e2:d8:74:0a:9d: f4:15:5f:0a:0e:b9:93:57:7d:0e:66:a3:39:44:da:cf:c3:4f: 46:58:a6:64:dd:2c:f4:f4:9b:e6:ab:f9:01:d1:48:e1:f9:d3: 76:98:88:96:f0:aa:cf:95:01:f1:e7:4d:f7:bd:6f:13:c1:67: 5a:10:fa:9b:9b:a8:e4:32:5a:f7:e6:ee:46:a9:9f:cf:53:f3: 26:4d:5e:4e:f0:9d:fd:cb:d3:26:b9:7b:bf:21:3b:ef:4b:69: 8b:9b:d4:d6:15:63:d2:4f:eb:d7:8f:ce:c9:26:f1:0d:25:ff: 74:16:23:d3:42:d8:0e:92:0c:b4:cf:b9:8e:1b:f7:c3:f2:50: 04:0b:65:18:fc:8d:af:06:02:69:19:1c:50:78:0c:41:21:9c: 1d:0a:f1:1e -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgISAZt9yryt14fuW6t+zs/81SIfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4M2Q3NjA1MTAxN2QwYWZhOTE1ZmNmYjc5MGEwMGY0NjY3 YjBhODgwHhcNMjYwMTAyMDgxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTgzZWMyMWI2OTI4M2RjZWQzZTM3NmVmOGFkODFmMGMxNjliOWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFp00SmskfwSNmRBl3RyyEmpqPXR /zy0MmmdauyDwgIDSUx3eICnMK2LFENEPyo/FSoCAqFQ33FhCAdMxoqbE7dQm1FS PrT31lBvEgrJh9IIGTbWsiYaMowvvokCwEdi6U9YpFDb37cbQV5kXk68MVwg3xIY s6zNgDXvE9Tk8pwG5uxQ5Jcf8pENCrq4NeLvsOKDo0gfCCF+2x/bjvdAetniEKqF qCZDOzN+UkYwCRgsY98WwdnmgFgBqFFeLarKXnrR+6fmnhISbjOaeP2gO1F9hBri n9eCHY4IvlRd5veGPYmBO5DGtr82zBIwciJajGrj9ompOs30k/bMBw1spwIDAQAB o4ICODCCAjQwHQYDVR0OBBYEFOWD7CG2koPc7T43bvitgfDBabmgMB8GA1UdIwQY MBaAFFg9dgUQF9CvqRX8+3kKAPRmewqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGIt ZGE2MTUzODg1ZjNiLzEvNVlQc0liYVNnOXp0UGpkdS1LMkI4TUZwdWFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGItZGE2MTUzODg1ZjNi LzEvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAqBAIAATAkAwQEXrhgAwQE XriQAwQEwuEwAwQBwuFOAwQCwuG4AwQFwuHAMA8EAgACMAkDBwAgARToAAIwDQYJ KoZIhvcNAQELBQADggEBADUUhDTZMVJyU6lLHlh/e1WvLX1/RPl+gd+buNkxw0lg XOHlL8h3NqELx2UpxvqTft2E12eGIDkFJ6uanAA6f2aUNdpG7JFjGO2UIt1JGbhA EDnBa4nv17Xg9xSw5l6HterIUy4DVrbi2HQKnfQVXwoOuZNXfQ5mozlE2s/DT0ZY pmTdLPT0m+ar+QHRSOH503aYiJbwqs+VAfHnTfe9bxPBZ1oQ+pubqOQyWvfm7kap n89T8yZNXk7wnf3L0ya5e78hO+9LaYub1NYVY9JP69ePzskm8Q0l/3QWI9NC2A6S DLTPuY4b98PyUAQLZRj8ja8GAmkZHFB4DEEhnB0K8R4= -----END CERTIFICATE-----Generated at Mon Jan 26 01:43:00 2026 by rpki-client