This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/a4A5NDE8Hb_awOZcK1yYV0BdNtA.roa File: a4A5NDE8Hb_awOZcK1yYV0BdNtA.roa (raw, json) Hash identifier: UhcGtGUN3kq4pMX0CPL4BxWxePj3w7wSJak+OWjA2w4= Subject key identifier: 6B:80:39:34:31:3C:1D:BF:DA:C0:E6:5C:2B:5C:98:57:40:5D:36:D0 Certificate issuer: /CN=b5000b81e9ed4b2a702a1ef5f852e0e769ee10e2 Certificate serial: 019B7C1329726FA3B25C944F91CA37A1538E Authority key identifier: B5:00:0B:81:E9:ED:4B:2A:70:2A:1E:F5:F8:52:E0:E7:69:EE:10:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQALgentSypwKh71-FLg52nuEOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/a4A5NDE8Hb_awOZcK1yYV0BdNtA.roa Signing time: Fri 02 Jan 2026 00:19:49 +0000 ROA not before: Fri 02 Jan 2026 00:19:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12998 IP address blocks: 5.183.200.0/22 maxlen: 24 91.196.100.0/22 maxlen: 24 193.227.206.0/23 maxlen: 24 195.3.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.crl rsync://rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.mft rsync://rpki.ripe.net/repository/DEFAULT/tQALgentSypwKh71-FLg52nuEOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:29:72:6f:a3:b2:5c:94:4f:91:ca:37:a1:53:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5000b81e9ed4b2a702a1ef5f852e0e769ee10e2 Validity Not Before: Jan 2 00:19:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b803934313c1dbfdac0e65c2b5c9857405d36d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1c:89:b5:fc:5c:f8:10:c2:5c:40:0b:2e:86: 17:cb:27:2f:65:71:4f:c4:dc:73:3e:d3:d1:f2:d9: 3c:33:91:0d:38:40:3c:83:20:e9:9a:39:16:50:c9: 65:d1:cf:d7:69:67:87:0d:a9:7d:ca:e1:7a:11:3c: 67:e5:e1:c9:93:d9:42:cc:f9:f8:61:03:26:d7:62: 03:bd:ab:33:b8:42:8e:01:62:68:cb:15:85:72:27: 77:83:4c:eb:f9:8d:31:2a:fe:e6:40:d3:7e:3a:21: 48:c9:a1:de:ee:47:c6:72:40:41:f4:50:9b:87:51: 48:6d:f8:3b:17:9b:2b:62:39:a2:df:dd:bc:af:d1: a0:a2:62:78:cd:a4:02:01:97:6a:c4:86:38:24:bf: 8c:18:4e:53:96:f8:94:98:f1:1e:3a:79:fb:2d:e4: 7f:88:dc:c1:c3:5f:36:b0:87:ff:6f:1d:ad:b2:1d: b6:29:9c:bb:c5:97:af:71:72:6a:1e:40:a4:8b:48: f7:c8:dc:1b:39:20:ff:80:bf:b2:a9:56:26:42:fc: df:c7:95:b7:b7:17:4f:22:6e:5f:78:4e:3c:92:7c: 78:7e:6c:cc:a3:35:7a:b0:6e:6a:2e:7a:04:57:10: e2:ae:71:c9:e8:bf:72:1b:4a:c4:0b:83:f5:75:eb: 30:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:80:39:34:31:3C:1D:BF:DA:C0:E6:5C:2B:5C:98:57:40:5D:36:D0 X509v3 Authority Key Identifier: keyid:B5:00:0B:81:E9:ED:4B:2A:70:2A:1E:F5:F8:52:E0:E7:69:EE:10:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQALgentSypwKh71-FLg52nuEOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/a4A5NDE8Hb_awOZcK1yYV0BdNtA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.183.200.0/22 91.196.100.0/22 193.227.206.0/23 195.3.156.0/22 Signature Algorithm: sha256WithRSAEncryption 11:da:37:c1:3d:3d:f7:7f:4d:4a:0c:6c:47:c7:65:0e:81:ca: c6:4f:9b:18:2c:c9:95:1d:3d:f3:68:02:3c:f4:60:b1:73:12: 46:67:c9:b4:36:b9:63:1a:87:17:c9:92:ec:ee:3c:bc:da:d9: 67:ab:d7:53:25:a5:0a:fa:54:5f:27:ef:99:98:d6:47:d7:84: b1:46:bc:4d:4c:36:41:63:ee:ec:6d:db:59:0a:98:8a:f6:34: cd:ab:67:f2:73:3b:a7:33:b7:40:76:da:41:4e:9d:17:a4:58: 99:fa:8c:6d:77:8b:03:e4:c9:dd:be:94:fa:a3:ac:34:a0:61: 92:3a:d5:fe:85:a7:f3:8c:d5:09:ca:ce:1e:01:86:f9:4c:5d: 39:65:d9:49:15:89:dc:61:d7:8f:53:52:56:81:9e:76:fb:d3: f8:e7:92:74:56:91:f8:6c:b7:1a:bc:54:fc:b4:42:25:7a:a3: e7:14:b1:17:4c:76:e1:5a:1a:37:28:2c:98:dd:9d:5a:3f:ab: be:96:d1:7d:b7:e6:34:58:a6:94:0e:f3:09:0f:b5:a3:44:91: 6b:12:34:8b:f1:33:d0:55:cb:16:42:b3:93:89:15:33:1c:20: 0e:0b:81:0b:93:40:f6:eb:13:2c:e4:dd:8b:3f:7a:cc:e7:72: 23:05:56:34 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt8Eylyb6OyXJRPkco3oVOOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1MDAwYjgxZTllZDRiMmE3MDJhMWVmNWY4NTJlMGU3Njll ZTEwZTIwHhcNMjYwMTAyMDAxOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjgwMzkzNDMxM2MxZGJmZGFjMGU2NWMyYjVjOTg1NzQwNWQzNmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ByJtfxc+BDCXEALLoYXyycvZXFP xNxzPtPR8tk8M5ENOEA8gyDpmjkWUMll0c/XaWeHDal9yuF6ETxn5eHJk9lCzPn4 YQMm12IDvaszuEKOAWJoyxWFcid3g0zr+Y0xKv7mQNN+OiFIyaHe7kfGckBB9FCb h1FIbfg7F5srYjmi3928r9GgomJ4zaQCAZdqxIY4JL+MGE5TlviUmPEeOnn7LeR/ iNzBw182sIf/bx2tsh22KZy7xZevcXJqHkCki0j3yNwbOSD/gL+yqVYmQvzfx5W3 txdPIm5feE48knx4fmzMozV6sG5qLnoEVxDirnHJ6L9yG0rEC4P1deswKwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFGuAOTQxPB2/2sDmXCtcmFdAXTbQMB8GA1UdIwQY MBaAFLUAC4Hp7UsqcCoe9fhS4Odp7hDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFFBTGdlbnRTeXB3S2g3MS1GTGc1Mm51RU9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8wZGY3ZjMtYTQ5Mi00ZDZmLWIzNmYt ZDQxZTAzNTkyMzM1LzEvYTRBNU5ERThIYl9hd09aY0sxeVlWMEJkTnRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS8wZGY3ZjMtYTQ5Mi00ZDZmLWIzNmYtZDQxZTAzNTkyMzM1 LzEvdFFBTGdlbnRTeXB3S2g3MS1GTGc1Mm51RU9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCBbfIAwQC W8RkAwQBwePOAwQCwwOcMA0GCSqGSIb3DQEBCwUAA4IBAQAR2jfBPT33f01KDGxH x2UOgcrGT5sYLMmVHT3zaAI89GCxcxJGZ8m0NrljGocXyZLs7jy82tlnq9dTJaUK +lRfJ++ZmNZH14SxRrxNTDZBY+7sbdtZCpiK9jTNq2fyczunM7dAdtpBTp0XpFiZ +oxtd4sD5MndvpT6o6w0oGGSOtX+hafzjNUJys4eAYb5TF05ZdlJFYncYdePU1JW gZ52+9P455J0VpH4bLcavFT8tEIleqPnFLEXTHbhWho3KCyY3Z1aP6u+ltF9t+Y0 WKaUDvMJD7WjRJFrEjSL8TPQVcsWQrOTiRUzHCAOC4ELk0D26xMs5N2LP3rM53Ij BVY0 -----END CERTIFICATE-----Generated at Mon Jan 26 02:23:25 2026 by rpki-client