This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/bS3seMeeB2K-eBXB64nERrvFou8.roa File: bS3seMeeB2K-eBXB64nERrvFou8.roa (raw, json) Hash identifier: tlycMgGcWtMwnSgJ6avVAXTcfntBwGo5BgMaV3Y8k+k= Subject key identifier: 6D:2D:EC:78:C7:9E:07:62:BE:78:15:C1:EB:89:C4:46:BB:C5:A2:EF Certificate issuer: /CN=5bb1c57055c29d669f289a9f68f392823942132a Certificate serial: 019B76EB2FE0629C04CF07E2D8B656C06CEB Authority key identifier: 5B:B1:C5:70:55:C2:9D:66:9F:28:9A:9F:68:F3:92:82:39:42:13:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W7HFcFXCnWafKJqfaPOSgjlCEyo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/bS3seMeeB2K-eBXB64nERrvFou8.roa Signing time: Thu 01 Jan 2026 00:18:03 +0000 ROA not before: Thu 01 Jan 2026 00:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202709 IP address blocks: 5.253.214.0/24 maxlen: 24 5.253.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.crl rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft rsync://rpki.ripe.net/repository/DEFAULT/W7HFcFXCnWafKJqfaPOSgjlCEyo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:2f:e0:62:9c:04:cf:07:e2:d8:b6:56:c0:6c:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bb1c57055c29d669f289a9f68f392823942132a Validity Not Before: Jan 1 00:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d2dec78c79e0762be7815c1eb89c446bbc5a2ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3d:1b:cc:c8:7e:f4:da:aa:b5:6b:ee:4d:12: d0:ac:15:22:fe:32:2a:4e:7f:14:c8:73:f0:f1:3d: ff:dd:dc:72:21:a4:f7:af:69:58:9f:f6:86:3a:c6: 09:ff:e4:86:4e:48:94:2f:96:20:05:dd:e7:dd:38: c8:2e:74:39:b4:30:99:fa:c0:7b:0b:f5:0c:c9:1f: 5f:c6:8c:69:d6:03:d9:23:c3:38:e2:0d:97:c4:e3: c8:b9:11:25:d0:0f:5c:09:81:7e:19:02:3b:f9:58: 28:fd:6c:fb:91:33:c4:25:73:28:b3:16:76:da:62: f2:f4:0b:b4:5d:3d:00:69:df:e3:27:ca:9d:d6:16: 96:5e:02:ad:71:ad:4a:24:5c:0f:37:4c:c4:aa:a9: 90:cd:89:87:61:f8:0b:88:55:08:57:6c:48:6b:7c: 21:e5:b5:4c:c2:c9:08:06:d1:00:8c:84:d2:84:ca: de:df:85:52:ac:c4:87:b9:59:09:73:b5:86:c6:19: 09:87:8e:7c:97:77:ae:4b:04:dc:b1:50:ed:3c:e7: a3:53:65:61:7e:46:b1:2d:d0:05:c0:30:22:7d:11: 68:49:1b:c5:e8:89:a3:63:87:fc:78:82:40:ff:47: 42:d9:7c:73:e9:54:23:88:5c:68:29:79:0e:1c:ae: 95:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:2D:EC:78:C7:9E:07:62:BE:78:15:C1:EB:89:C4:46:BB:C5:A2:EF X509v3 Authority Key Identifier: keyid:5B:B1:C5:70:55:C2:9D:66:9F:28:9A:9F:68:F3:92:82:39:42:13:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W7HFcFXCnWafKJqfaPOSgjlCEyo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/bS3seMeeB2K-eBXB64nERrvFou8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.253.214.0/23 Signature Algorithm: sha256WithRSAEncryption 45:fd:e6:0d:fc:13:8a:a4:d8:7a:2a:fc:ab:c9:9b:88:74:03: 8c:3f:56:a3:6b:7a:0d:34:7c:f8:a9:07:6f:92:a6:a6:43:51: 09:d7:1e:82:6e:5c:30:6d:8c:fd:3f:b3:57:d0:9b:94:83:e8: 22:29:d5:5d:37:a0:56:2e:47:09:60:56:2a:9e:fe:f5:1a:32: 74:d5:f8:2d:ac:26:68:9b:f1:95:b1:85:36:58:d4:63:4f:6f: d2:71:46:cc:03:4f:f1:1f:f3:b5:7b:e2:82:3f:9a:8a:76:63: cd:35:23:a8:cc:8e:56:e2:c4:37:93:f4:ad:b2:06:be:70:53: 32:8d:c0:04:5e:4e:b5:ce:1f:9f:87:03:83:e8:34:de:62:f6: 02:3d:90:5a:7c:41:c3:f4:2d:c9:33:67:21:a6:48:34:7c:7d: d3:02:5b:a6:cf:30:6a:48:6e:75:85:23:66:cb:95:73:7d:f4: 1c:38:49:56:0e:a7:8a:2f:c1:5b:bd:ea:d7:f7:b2:e7:83:fc: 32:33:37:d6:8a:b1:f8:3d:75:52:e7:81:b9:f2:b7:5c:7b:ce: 05:10:53:e5:8e:76:95:58:9a:bd:e9:13:8c:ad:fe:60:b1:f6: 6b:16:5f:45:ac:4c:3f:ec:50:5c:d5:61:f1:f5:fe:4d:57:a3: cc:7d:ca:ae -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26y/gYpwEzwfi2LZWwGzrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViYjFjNTcwNTVjMjlkNjY5ZjI4OWE5ZjY4ZjM5MjgyMzk0 MjEzMmEwHhcNMjYwMTAxMDAxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDJkZWM3OGM3OWUwNzYyYmU3ODE1YzFlYjg5YzQ0NmJiYzVhMmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqj0bzMh+9NqqtWvuTRLQrBUi/jIq Tn8UyHPw8T3/3dxyIaT3r2lYn/aGOsYJ/+SGTkiUL5YgBd3n3TjILnQ5tDCZ+sB7 C/UMyR9fxoxp1gPZI8M44g2XxOPIuREl0A9cCYF+GQI7+Vgo/Wz7kTPEJXMosxZ2 2mLy9Au0XT0Aad/jJ8qd1haWXgKtca1KJFwPN0zEqqmQzYmHYfgLiFUIV2xIa3wh 5bVMwskIBtEAjITShMre34VSrMSHuVkJc7WGxhkJh458l3euSwTcsVDtPOejU2Vh fkaxLdAFwDAifRFoSRvF6ImjY4f8eIJA/0dC2Xxz6VQjiFxoKXkOHK6V/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG0t7HjHngdivngVweuJxEa7xaLvMB8GA1UdIwQY MBaAFFuxxXBVwp1mnyian2jzkoI5QhMqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzdIRmNGWENuV2FmS0pxZmFQT1NnamxDRXlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS84MjIzNzYtODA4YS00NjVjLWE4N2Yt NWNlYWUxOWY5NGY5LzEvYlMzc2VNZWVCMkstZUJYQjY0bkVScnZGb3U4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS84MjIzNzYtODA4YS00NjVjLWE4N2YtNWNlYWUxOWY5NGY5 LzEvVzdIRmNGWENuV2FmS0pxZmFQT1NnamxDRXlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBBf3WMA0G CSqGSIb3DQEBCwUAA4IBAQBF/eYN/BOKpNh6KvyryZuIdAOMP1aja3oNNHz4qQdv kqamQ1EJ1x6CblwwbYz9P7NX0JuUg+giKdVdN6BWLkcJYFYqnv71GjJ01fgtrCZo m/GVsYU2WNRjT2/ScUbMA0/xH/O1e+KCP5qKdmPNNSOozI5W4sQ3k/Stsga+cFMy jcAEXk61zh+fhwOD6DTeYvYCPZBafEHD9C3JM2chpkg0fH3TAlumzzBqSG51hSNm y5VzffQcOElWDqeKL8FbverX97Lng/wyMzfWirH4PXVS54G58rdce84FEFPljnaV WJq96ROMrf5gsfZrFl9FrEw/7FBc1WHx9f5NV6PMfcqu -----END CERTIFICATE-----Generated at Mon Jan 26 09:22:49 2026 by rpki-client