This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/k5xccdAgWXUIBYQzUy_Y_5kVFBM.roa File: k5xccdAgWXUIBYQzUy_Y_5kVFBM.roa (raw, json) Hash identifier: G3OJEnXc7wLE0YQ5zBZyEB+XHB1m/x2BVeVnHOMikX8= Subject key identifier: 93:9C:5C:71:D0:20:59:75:08:05:84:33:53:2F:D8:FF:99:15:14:13 Certificate issuer: /CN=c32ed45fcea9c71bbef56a5325c297cafae91e6e Certificate serial: 019B7FF1FD200C0E9AF03EEAA729F33367A8 Authority key identifier: C3:2E:D4:5F:CE:A9:C7:1B:BE:F5:6A:53:25:C2:97:CA:FA:E9:1E:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wy7UX86pxxu-9WpTJcKXyvrpHm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/k5xccdAgWXUIBYQzUy_Y_5kVFBM.roa Signing time: Fri 02 Jan 2026 18:22:03 +0000 ROA not before: Fri 02 Jan 2026 18:22:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 559 IP address blocks: 129.129.0.0/16 maxlen: 16 192.33.118.0/23 maxlen: 23 192.33.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/wy7UX86pxxu-9WpTJcKXyvrpHm4.crl rsync://rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/wy7UX86pxxu-9WpTJcKXyvrpHm4.mft rsync://rpki.ripe.net/repository/DEFAULT/wy7UX86pxxu-9WpTJcKXyvrpHm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:fd:20:0c:0e:9a:f0:3e:ea:a7:29:f3:33:67:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32ed45fcea9c71bbef56a5325c297cafae91e6e Validity Not Before: Jan 2 18:22:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=939c5c71d020597508058433532fd8ff99151413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:2c:aa:34:56:53:c0:24:c1:12:1d:e9:55:98: 85:d9:6e:32:33:26:81:53:21:82:9a:17:f2:95:aa: 14:73:37:9c:9e:20:9c:71:77:8f:18:c0:c7:90:1c: 5c:2e:3d:db:3b:1b:8d:33:bf:24:a6:17:2e:2e:62: 6c:84:51:bf:ce:0c:23:95:a5:5c:12:1f:fb:32:8c: 8f:6b:2d:ac:7b:c9:3c:2c:b3:f0:7c:bf:61:f7:5b: 89:c2:ba:51:21:46:b0:f1:5a:09:63:8d:ee:0c:0e: 66:8b:7d:14:ef:7d:84:0e:61:62:2f:83:f6:63:70: ad:4b:b8:8d:61:96:29:f1:2e:63:e7:47:0e:66:6f: 74:f2:d9:6d:db:61:20:cd:11:4b:f2:8b:f2:16:19: 94:8d:10:ac:93:21:2a:fd:c4:ee:c4:b0:3f:e3:8d: ec:e8:e6:64:62:04:70:1c:88:78:bd:81:12:9c:2b: 2d:0a:fb:ef:e1:4f:f6:2e:cc:51:5e:62:20:35:e7: 43:da:df:86:cb:76:97:fd:bb:cd:a9:d8:5d:b0:fb: 3a:63:13:2a:a2:bd:b7:02:7c:92:91:49:b4:28:f9: fb:66:10:85:d3:6f:e9:b6:6b:e5:de:bf:f7:d5:a8: 5f:1f:28:e9:4a:ae:23:7b:0c:40:13:99:57:ac:ea: 06:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:9C:5C:71:D0:20:59:75:08:05:84:33:53:2F:D8:FF:99:15:14:13 X509v3 Authority Key Identifier: keyid:C3:2E:D4:5F:CE:A9:C7:1B:BE:F5:6A:53:25:C2:97:CA:FA:E9:1E:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wy7UX86pxxu-9WpTJcKXyvrpHm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/k5xccdAgWXUIBYQzUy_Y_5kVFBM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/wy7UX86pxxu-9WpTJcKXyvrpHm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 129.129.0.0/16 192.33.118.0-192.33.127.255 Signature Algorithm: sha256WithRSAEncryption 05:43:11:06:06:d1:db:67:48:7f:86:f5:cb:08:52:99:f1:f6: dd:11:d0:a2:a2:b0:0b:da:61:29:78:af:58:ae:a4:12:a6:d6: 4c:b8:27:87:7a:40:ef:30:f0:be:47:94:1b:da:02:5e:b1:5c: 18:d3:bd:57:56:d8:5c:6c:ff:6b:8e:52:ef:a5:e6:fe:d7:40: cc:4b:74:67:ba:6b:d8:2b:b8:4f:08:dc:16:64:ce:35:51:3a: 36:f3:72:1b:68:d8:c2:8b:56:c9:56:73:62:45:ac:3c:62:70: 4c:8c:f8:26:4b:78:43:61:94:0b:14:19:f7:2a:7e:96:79:07: 91:06:5b:98:90:6c:27:c7:8d:07:49:c9:a6:47:f3:82:3d:ae: aa:1e:cf:c6:80:17:96:ec:e4:ee:4c:88:d7:b5:e8:a9:51:cb: 7d:0e:56:8c:5a:61:55:70:1a:74:0e:ae:7b:48:ee:01:05:e6: 04:9a:b5:97:50:93:fa:33:bf:45:41:f7:97:bc:95:7b:74:57: 0c:d2:70:fc:38:6a:72:86:99:1a:e6:da:ae:a1:49:47:24:2f: 24:d2:85:20:97:2b:ea:46:2b:a7:b8:d8:4c:cd:7f:af:c9:7f: 1b:fa:4b:d6:bd:e5:92:9d:0b:e8:c4:c9:40:f5:ce:95:d3:53: 73:7f:d0:74 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZt/8f0gDA6a8D7qpynzM2eoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzMmVkNDVmY2VhOWM3MWJiZWY1NmE1MzI1YzI5N2NhZmFl OTFlNmUwHhcNMjYwMTAyMTgyMjAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MzljNWM3MWQwMjA1OTc1MDgwNTg0MzM1MzJmZDhmZjk5MTUxNDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyyqNFZTwCTBEh3pVZiF2W4yMyaB UyGCmhfylaoUczecniCccXePGMDHkBxcLj3bOxuNM78kphcuLmJshFG/zgwjlaVc Eh/7MoyPay2se8k8LLPwfL9h91uJwrpRIUaw8VoJY43uDA5mi30U732EDmFiL4P2 Y3CtS7iNYZYp8S5j50cOZm908tlt22EgzRFL8ovyFhmUjRCskyEq/cTuxLA/443s 6OZkYgRwHIh4vYESnCstCvvv4U/2LsxRXmIgNedD2t+Gy3aX/bvNqdhdsPs6YxMq or23AnySkUm0KPn7ZhCF02/ptmvl3r/31ahfHyjpSq4jewxAE5lXrOoGpQIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFJOcXHHQIFl1CAWEM1Mv2P+ZFRQTMB8GA1UdIwQY MBaAFMMu1F/OqccbvvVqUyXCl8r66R5uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3k3VVg4NnB4eHUtOVdwVEpjS1h5dnJwSG00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8wYTZlY2ItYmJkZi00ZTk5LTk0YzMt ODc3NDQ2ZTg4ZTQwLzEvazV4Y2NkQWdXWFVJQllRelV5X1lfNWtWRkJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS8wYTZlY2ItYmJkZi00ZTk5LTk0YzMtODc3NDQ2ZTg4ZTQw LzEvd3k3VVg4NnB4eHUtOVdwVEpjS1h5dnJwSG00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAATATAwMAgYEwDAME AcAhdgMEB8AhADANBgkqhkiG9w0BAQsFAAOCAQEABUMRBgbR22dIf4b1ywhSmfH2 3RHQoqKwC9phKXivWK6kEqbWTLgnh3pA7zDwvkeUG9oCXrFcGNO9V1bYXGz/a45S 76Xm/tdAzEt0Z7pr2Cu4TwjcFmTONVE6NvNyG2jYwotWyVZzYkWsPGJwTIz4Jkt4 Q2GUCxQZ9yp+lnkHkQZbmJBsJ8eNB0nJpkfzgj2uqh7PxoAXluzk7kyI17XoqVHL fQ5WjFphVXAadA6ue0juAQXmBJq1l1CT+jO/RUH3l7yVe3RXDNJw/DhqcoaZGuba rqFJRyQvJNKFIJcr6kYrp7jYTM1/r8l/G/pL1r3lkp0L6MTJQPXOldNTc3/QdA== -----END CERTIFICATE-----Generated at Sun Jan 25 21:03:09 2026 by rpki-client