This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/5o6k6rNuid97Qh-4yx5_yoP0grk.roa File: 5o6k6rNuid97Qh-4yx5_yoP0grk.roa (raw, json) Hash identifier: fdMkIWOquD1CiccVguV8cwles53g42rbkdlJp+WKaT4= Subject key identifier: E6:8E:A4:EA:B3:6E:89:DF:7B:42:1F:B8:CB:1E:7F:CA:83:F4:82:B9 Certificate issuer: /CN=ca96218c20efd8fe53fca9990b725dd7963c885c Certificate serial: 019B7AC8280D6F90F12C3E4F8472C8E10506 Authority key identifier: CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/5o6k6rNuid97Qh-4yx5_yoP0grk.roa Signing time: Thu 01 Jan 2026 18:18:16 +0000 ROA not before: Thu 01 Jan 2026 18:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43116 IP address blocks: 213.144.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:28:0d:6f:90:f1:2c:3e:4f:84:72:c8:e1:05:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca96218c20efd8fe53fca9990b725dd7963c885c Validity Not Before: Jan 1 18:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e68ea4eab36e89df7b421fb8cb1e7fca83f482b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f4:dc:42:33:6b:72:84:5d:e8:ae:04:ea:f9: 3d:4e:55:46:38:de:e0:6d:ba:46:62:df:3b:08:0c: ee:a7:9a:0b:fb:a9:f1:b4:d7:83:96:ee:13:2d:ce: a3:0b:97:ae:55:90:da:0c:44:1b:cb:e8:02:20:78: 7f:18:a1:45:45:0d:cc:c9:50:08:3b:e4:c6:12:08: 4c:26:63:5c:00:c2:11:e9:69:15:5b:26:4a:a2:65: c2:0a:3d:84:a8:74:e2:2f:a3:ca:d6:31:9f:3f:dc: 62:3d:eb:f6:e2:1c:01:c6:bf:5d:c9:1e:bd:4a:34: c1:b4:3b:67:e4:b7:4b:0a:00:e7:86:16:b8:03:3d: 7c:86:a3:e7:6b:dc:e4:ff:e7:14:5d:53:3b:8e:50: 9e:d3:53:e3:93:af:dd:aa:18:39:ea:78:f2:bf:ca: 0c:61:63:91:d0:39:5a:42:d4:02:46:50:8f:fe:73: ce:17:20:ed:4e:30:d5:8c:b5:4c:96:42:53:14:ba: 34:c7:bc:f9:30:42:b8:31:48:3e:eb:79:58:46:d3: 83:14:f0:d8:c1:9b:2b:ff:65:93:a7:ae:40:81:23: fe:b0:7e:25:6f:87:93:c4:85:a4:f6:f5:fe:c2:6e: 53:19:90:4b:d3:ef:c9:ac:e9:c1:85:fd:d0:fa:0c: 69:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:8E:A4:EA:B3:6E:89:DF:7B:42:1F:B8:CB:1E:7F:CA:83:F4:82:B9 X509v3 Authority Key Identifier: keyid:CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/5o6k6rNuid97Qh-4yx5_yoP0grk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.144.102.0/24 Signature Algorithm: sha256WithRSAEncryption 64:3a:60:bf:d5:12:71:55:05:30:46:4b:35:0c:1c:28:be:62: bd:63:d9:8c:b9:94:5b:ae:d7:ab:f9:d5:c0:8a:7c:e4:39:38: ae:a8:90:18:96:f4:5c:f5:f0:9e:a0:dc:0d:63:65:73:8e:5e: 08:af:d4:f0:fd:07:1b:d6:36:c9:15:a4:94:10:21:05:ea:e4: 33:31:e5:a7:03:ed:9d:21:96:77:2a:5b:27:ae:ac:50:dd:28: 4d:70:3e:fe:fc:f2:b4:43:1f:d8:4b:5c:c1:26:b5:69:7f:18: c8:10:5c:84:65:db:d9:e0:f4:c9:c6:dc:d7:33:6d:9c:9c:ea: 6b:b9:11:a9:ad:45:1a:59:ae:66:73:4b:94:53:af:63:c5:fd: 36:7a:b7:25:75:6e:be:c3:2a:f7:d2:f6:26:c9:f1:69:97:13: d5:7a:e4:78:e0:bf:34:77:dc:4c:4a:04:f2:08:6c:8a:ed:ea: 1b:62:6a:db:ba:6a:58:d9:79:c9:b8:23:55:f0:42:de:16:ce: c4:fd:d1:9e:80:7d:95:6e:4e:ef:5c:b9:d7:87:4e:4b:ca:59: 5b:f5:1f:99:66:d3:8c:42:e6:2c:cf:06:fa:d1:e7:ac:3f:5f: 1e:cb:8d:e2:9e:1a:13:6e:e4:6f:1e:a4:94:88:df:58:38:6b: d5:ee:4c:cf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yCgNb5DxLD5PhHLI4QUGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhOTYyMThjMjBlZmQ4ZmU1M2ZjYTk5OTBiNzI1ZGQ3OTYz Yzg4NWMwHhcNMjYwMTAxMTgxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjhlYTRlYWIzNmU4OWRmN2I0MjFmYjhjYjFlN2ZjYTgzZjQ4MmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/TcQjNrcoRd6K4E6vk9TlVGON7g bbpGYt87CAzup5oL+6nxtNeDlu4TLc6jC5euVZDaDEQby+gCIHh/GKFFRQ3MyVAI O+TGEghMJmNcAMIR6WkVWyZKomXCCj2EqHTiL6PK1jGfP9xiPev24hwBxr9dyR69 SjTBtDtn5LdLCgDnhha4Az18hqPna9zk/+cUXVM7jlCe01Pjk6/dqhg56njyv8oM YWOR0DlaQtQCRlCP/nPOFyDtTjDVjLVMlkJTFLo0x7z5MEK4MUg+63lYRtODFPDY wZsr/2WTp65AgSP+sH4lb4eTxIWk9vX+wm5TGZBL0+/JrOnBhf3Q+gxp8wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOaOpOqzbonfe0IfuMsef8qD9IK5MB8GA1UdIwQY MBaAFMqWIYwg79j+U/ypmQtyXdeWPIhcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXBZaGpDRHYyUDVUX0ttWkMzSmQxNVk4aUZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC85NzU1ZDUtN2YwYi00MjdmLWFmZTAt ZDcxMmQ0NzM4MDQ2LzEvNW82azZyTnVpZDk3UWgtNHl4NV95b1AwZ3JrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC85NzU1ZDUtN2YwYi00MjdmLWFmZTAtZDcxMmQ0NzM4MDQ2 LzEveXBZaGpDRHYyUDVUX0ttWkMzSmQxNVk4aUZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1ZBmMA0G CSqGSIb3DQEBCwUAA4IBAQBkOmC/1RJxVQUwRks1DBwovmK9Y9mMuZRbrter+dXA inzkOTiuqJAYlvRc9fCeoNwNY2Vzjl4Ir9Tw/Qcb1jbJFaSUECEF6uQzMeWnA+2d IZZ3KlsnrqxQ3ShNcD7+/PK0Qx/YS1zBJrVpfxjIEFyEZdvZ4PTJxtzXM22cnOpr uRGprUUaWa5mc0uUU69jxf02ercldW6+wyr30vYmyfFplxPVeuR44L80d9xMSgTy CGyK7eobYmrbumpY2XnJuCNV8ELeFs7E/dGegH2Vbk7vXLnXh05Lyllb9R+ZZtOM QuYszwb60eesP18ey43inhoTbuRvHqSUiN9YOGvV7kzP -----END CERTIFICATE-----Generated at Mon Jan 26 02:43:53 2026 by rpki-client