This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/5CmVOyjMGaOx3Azoa9vaES31gNU.roa File: 5CmVOyjMGaOx3Azoa9vaES31gNU.roa (raw, json) Hash identifier: tmSpZLW8QseubN/4w6VFtZ3Yl76f3yLn1OWmBKE45j4= Subject key identifier: E4:29:95:3B:28:CC:19:A3:B1:DC:0C:E8:6B:DB:DA:11:2D:F5:80:D5 Certificate issuer: /CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7 Certificate serial: 019B78A36364F02607E0D13A663059B5CE64 Authority key identifier: 4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/5CmVOyjMGaOx3Azoa9vaES31gNU.roa Signing time: Thu 01 Jan 2026 08:18:52 +0000 ROA not before: Thu 01 Jan 2026 08:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 400790 IP address blocks: 206.245.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:63:64:f0:26:07:e0:d1:3a:66:30:59:b5:ce:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7 Validity Not Before: Jan 1 08:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e429953b28cc19a3b1dc0ce86bdbda112df580d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d2:67:77:18:7f:43:a7:02:98:64:b6:47:21: 9d:b2:29:11:4d:6b:44:45:3a:17:95:a1:44:db:15: 10:0c:a6:2a:8c:c1:df:b4:2c:5f:e6:27:4e:44:10: 25:07:7e:f6:45:6b:a9:7c:ac:51:58:8a:39:9d:e1: 5f:e3:e5:0a:93:8c:31:81:b0:30:9a:7c:a1:5e:fb: a1:41:74:c2:b0:f4:96:6a:7c:f0:a1:1a:ed:b8:3a: 61:db:c7:4f:25:f7:6f:97:81:95:d0:8f:19:f7:5e: cd:86:83:b3:df:0a:7a:4c:4a:ca:2d:72:da:59:5f: 4b:1c:04:64:df:b5:7d:f8:ea:3d:db:53:55:e5:79: 75:94:df:39:66:5c:81:bb:20:7b:fe:ab:f0:93:99: 26:de:19:07:12:3b:51:b8:13:c2:a5:d6:63:2c:b5: 07:b8:dc:0e:f3:6b:ea:08:b7:2f:49:86:63:db:29: a9:33:bb:54:78:55:ae:e7:31:2a:81:18:a0:da:26: 01:1f:5a:c3:cb:38:c2:06:a5:6c:9b:42:91:b4:13: 52:7e:fa:a6:73:5a:2f:56:f2:1a:c3:87:9a:1c:d6: 41:f3:4e:86:82:44:11:d3:4d:11:f7:47:1c:8c:a0: 7f:2c:6a:84:9e:f0:17:56:df:d7:fb:e7:d3:fd:ee: eb:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:29:95:3B:28:CC:19:A3:B1:DC:0C:E8:6B:DB:DA:11:2D:F5:80:D5 X509v3 Authority Key Identifier: keyid:4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/5CmVOyjMGaOx3Azoa9vaES31gNU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 206.245.208.0/24 Signature Algorithm: sha256WithRSAEncryption 64:2b:23:e0:ee:91:26:1d:c0:99:6e:8f:12:50:f4:2e:40:bc: 7a:6d:b3:c4:dc:e3:1d:d1:a5:17:49:05:48:0f:91:48:d6:e4: 14:47:94:84:c7:cf:2a:43:02:0b:6a:8c:0c:e2:9b:05:9e:04: 62:6c:27:86:fa:f0:8c:40:df:75:a4:95:20:66:4f:48:d3:21: 25:db:f9:cc:d3:f8:03:a6:9c:a8:e1:ab:d2:13:e2:a0:fb:f2: f2:cd:26:92:d3:73:e5:f1:28:f8:e8:87:30:4e:0f:4c:02:b0: 8b:d5:c5:34:ef:38:69:15:c7:b6:13:f5:5d:54:d6:71:15:e0: 90:f9:54:c3:5c:44:78:e4:c9:5a:3b:b8:b4:cf:59:3b:f6:f5: c0:9f:d9:7d:38:8e:cf:7d:b0:45:84:30:e0:5e:ca:29:83:17: 42:e7:ff:bf:a9:9b:03:67:16:3c:c9:52:0f:0e:74:46:55:e9: 87:0f:21:7b:ce:b0:41:c7:16:f5:e6:8b:32:61:a0:0d:fe:06: 46:f8:ad:2e:a9:8f:7e:83:21:19:a4:c0:a7:35:dc:15:16:d5: d4:de:da:55:ba:4d:fc:d4:72:35:21:8c:02:b3:6f:2b:ee:b4: 81:66:9c:d0:79:70:a1:ff:e7:12:39:1c:ab:24:cf:32:19:dc: 99:4b:5c:ad -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o2Nk8CYH4NE6ZjBZtc5kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZTg0M2E4NWRkNjY0ZTlkYzAzMTA4OTJiZDdkZDljZTUy NTkxYzcwHhcNMjYwMTAxMDgxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDI5OTUzYjI4Y2MxOWEzYjFkYzBjZTg2YmRiZGExMTJkZjU4MGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9Jndxh/Q6cCmGS2RyGdsikRTWtE RToXlaFE2xUQDKYqjMHftCxf5idORBAlB372RWupfKxRWIo5neFf4+UKk4wxgbAw mnyhXvuhQXTCsPSWanzwoRrtuDph28dPJfdvl4GV0I8Z917NhoOz3wp6TErKLXLa WV9LHARk37V9+Oo921NV5Xl1lN85ZlyBuyB7/qvwk5km3hkHEjtRuBPCpdZjLLUH uNwO82vqCLcvSYZj2ympM7tUeFWu5zEqgRig2iYBH1rDyzjCBqVsm0KRtBNSfvqm c1ovVvIaw4eaHNZB806GgkQR000R90ccjKB/LGqEnvAXVt/X++fT/e7ryQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOQplTsozBmjsdwM6Gvb2hEt9YDVMB8GA1UdIwQY MBaAFE7oQ6hd1mTp3AMQiSvX3ZzlJZHHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHVoRHFGM1daT25jQXhDSks5ZmRuT1Vsa2NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9hZGFkMjAtYzUxMi00ZmIwLWExMjct NDhjZjQxMmIzODdiLzEvNUNtVk95ak1HYU94M0F6b2E5dmFFUzMxZ05VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9hZGFkMjAtYzUxMi00ZmIwLWExMjctNDhjZjQxMmIzODdi LzEvVHVoRHFGM1daT25jQXhDSks5ZmRuT1Vsa2NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzvXQMA0G CSqGSIb3DQEBCwUAA4IBAQBkKyPg7pEmHcCZbo8SUPQuQLx6bbPE3OMd0aUXSQVI D5FI1uQUR5SEx88qQwILaowM4psFngRibCeG+vCMQN91pJUgZk9I0yEl2/nM0/gD ppyo4avSE+Kg+/LyzSaS03Pl8Sj46IcwTg9MArCL1cU07zhpFce2E/VdVNZxFeCQ +VTDXER45MlaO7i0z1k79vXAn9l9OI7PfbBFhDDgXsopgxdC5/+/qZsDZxY8yVIP DnRGVemHDyF7zrBBxxb15osyYaAN/gZG+K0uqY9+gyEZpMCnNdwVFtXU3tpVuk38 1HI1IYwCs28r7rSBZpzQeXCh/+cSORyrJM8yGdyZS1yt -----END CERTIFICATE-----Generated at Sun Jan 25 16:54:28 2026 by rpki-client