This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/5V_xONqzwKma1n0RRaZThBrg5gE.roa File: 5V_xONqzwKma1n0RRaZThBrg5gE.roa (raw, json) Hash identifier: z1TwNh3QakcyBUbCZgGTjXYrrx8YDgv/xgtP0R9TjOI= Subject key identifier: E5:5F:F1:38:DA:B3:C0:A9:9A:D6:7D:11:45:A6:53:84:1A:E0:E6:01 Certificate issuer: /CN=f62eeb879085c94194297dd9e4cd249cd2516515 Certificate serial: 019B7C7FE86B742E6611FB17195143BD346E Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/5V_xONqzwKma1n0RRaZThBrg5gE.roa Signing time: Fri 02 Jan 2026 02:18:35 +0000 ROA not before: Fri 02 Jan 2026 02:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198022 IP address blocks: 37.120.180.0/23 maxlen: 24 46.38.248.0/24 maxlen: 25 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:e8:6b:74:2e:66:11:fb:17:19:51:43:bd:34:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515 Validity Not Before: Jan 2 02:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e55ff138dab3c0a99ad67d1145a653841ae0e601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f0:87:a9:82:4e:30:cf:51:b3:3a:1f:85:41: 8d:c0:f5:7c:00:47:31:8f:bf:ce:84:09:7b:68:08: 70:7e:f9:bf:2c:d0:1d:c2:be:b2:b6:bc:fd:8e:31: fd:3a:e6:d4:27:c7:fc:18:e0:58:98:78:45:90:a6: 8c:0a:13:4e:cf:fb:08:0f:91:4d:5b:fa:f2:d0:f2: fa:cd:ad:aa:40:57:4b:cb:05:ee:d0:53:3e:87:94: 71:6a:35:68:ae:0c:3e:49:e8:8c:46:11:e2:6b:e7: 35:c4:9b:e0:67:86:b3:c6:f0:83:03:a7:c0:34:77: d1:28:c4:bc:72:77:fc:a6:12:11:3e:ed:25:e1:f6: 74:0f:83:95:4d:37:1e:78:75:71:d3:7c:e7:82:43: ec:c1:aa:48:4f:69:74:ca:59:93:e3:dc:e7:57:96: 7d:9f:64:36:d4:b4:97:80:40:49:61:b0:3e:e9:fd: 00:dd:13:0d:41:85:cc:f6:6a:5b:17:ae:e1:42:df: fb:2e:e2:5f:fd:84:20:87:f5:a2:eb:bd:8d:bd:58: b7:96:5b:3d:a7:3a:98:98:c8:ff:85:61:05:16:5b: 7d:a0:c4:ea:f1:d5:c4:44:91:7e:a9:04:53:26:ed: 43:9b:03:67:ae:34:51:7d:c9:c1:f9:38:88:00:fd: a4:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:5F:F1:38:DA:B3:C0:A9:9A:D6:7D:11:45:A6:53:84:1A:E0:E6:01 X509v3 Authority Key Identifier: keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/5V_xONqzwKma1n0RRaZThBrg5gE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.120.180.0/23 46.38.248.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:ee:76:32:b2:94:bf:44:35:bf:22:cf:d9:ad:b4:ed:c1:7b: 80:ca:60:1a:b5:2c:e7:91:35:98:f7:41:4f:62:1d:4d:ca:8f: f5:be:07:46:46:37:a8:df:24:40:eb:84:79:6e:2a:5b:13:72: fb:70:7e:e6:98:51:0e:71:5e:32:cf:a6:a2:50:07:70:42:7f: ad:a2:12:c3:fd:4a:65:27:4b:c2:23:90:52:2e:0e:11:0c:4e: f2:e1:9a:e8:18:4d:e7:79:09:93:b6:98:17:40:72:34:d3:0b: 4b:47:37:e6:f4:3f:03:74:89:28:aa:c0:16:d2:85:94:67:a2: e3:d0:77:f0:57:30:68:32:36:b6:ae:7d:90:08:d2:b5:41:56: cd:45:a2:a3:42:55:ee:7b:70:4c:16:a4:61:50:0b:0d:0a:bf: 26:39:5c:ff:f2:fa:0d:25:24:f6:6a:4c:1c:a4:d2:13:b9:68: 1f:de:1b:26:63:b3:d6:16:9c:b5:67:c0:ca:54:8f:9d:6e:36: a4:99:16:b2:1c:c5:a0:54:68:0b:4e:9e:8e:aa:a2:27:19:27: 4d:0f:3c:59:2b:b8:4f:c7:36:48:a4:33:5e:f1:26:61:0a:fd: 25:64:55:91:57:51:2a:5c:52:63:5d:b2:e5:a6:3a:d0:4b:64: 25:19:2e:d6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8f+hrdC5mEfsXGVFDvTRuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2MmVlYjg3OTA4NWM5NDE5NDI5N2RkOWU0Y2QyNDljZDI1 MTY1MTUwHhcNMjYwMTAyMDIxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTVmZjEzOGRhYjNjMGE5OWFkNjdkMTE0NWE2NTM4NDFhZTBlNjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/CHqYJOMM9RszofhUGNwPV8AEcx j7/OhAl7aAhwfvm/LNAdwr6ytrz9jjH9OubUJ8f8GOBYmHhFkKaMChNOz/sID5FN W/ry0PL6za2qQFdLywXu0FM+h5RxajVorgw+SeiMRhHia+c1xJvgZ4azxvCDA6fA NHfRKMS8cnf8phIRPu0l4fZ0D4OVTTceeHVx03zngkPswapIT2l0ylmT49znV5Z9 n2Q21LSXgEBJYbA+6f0A3RMNQYXM9mpbF67hQt/7LuJf/YQgh/Wi672NvVi3lls9 pzqYmMj/hWEFFlt9oMTq8dXERJF+qQRTJu1DmwNnrjRRfcnB+TiIAP2kpwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOVf8Tjas8CpmtZ9EUWmU4Qa4OYBMB8GA1UdIwQY MBaAFPYu64eQhclBlCl92eTNJJzSUWUVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWk3cmg1Q0Z5VUdVS1gzWjVNMGtuTkpSWlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS85MWRhOGItMDUwMi00OGRmLTg1MzIt NWZiZjlhMjliNmUxLzEvNVZfeE9OcXp3S21hMW4wUlJhWlRoQnJnNWdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS85MWRhOGItMDUwMi00OGRmLTg1MzItNWZiZjlhMjliNmUx LzEvOWk3cmg1Q0Z5VUdVS1gzWjVNMGtuTkpSWlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBJXi0AwQA Lib4MA0GCSqGSIb3DQEBCwUAA4IBAQAv7nYyspS/RDW/Is/ZrbTtwXuAymAatSzn kTWY90FPYh1Nyo/1vgdGRjeo3yRA64R5bipbE3L7cH7mmFEOcV4yz6aiUAdwQn+t ohLD/UplJ0vCI5BSLg4RDE7y4ZroGE3neQmTtpgXQHI00wtLRzfm9D8DdIkoqsAW 0oWUZ6Lj0HfwVzBoMja2rn2QCNK1QVbNRaKjQlXue3BMFqRhUAsNCr8mOVz/8voN JST2akwcpNITuWgf3hsmY7PWFpy1Z8DKVI+dbjakmRayHMWgVGgLTp6OqqInGSdN DzxZK7hPxzZIpDNe8SZhCv0lZFWRV1EqXFJjXbLlpjrQS2QlGS7W -----END CERTIFICATE-----Generated at Mon Jan 26 04:22:24 2026 by rpki-client