This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/5aZWyJBLIHcU6RZHhhqPqFmCtrk.roa File: 5aZWyJBLIHcU6RZHhhqPqFmCtrk.roa (raw, json) Hash identifier: 13nxKMdVKVjzMHdAUhxbH/qaDgQty47l+n7Zxmnvz20= Subject key identifier: E5:A6:56:C8:90:4B:20:77:14:E9:16:47:86:1A:8F:A8:59:82:B6:B9 Certificate issuer: /CN=e8b3eed1c7aca636d6245852b802e0e73754df63 Certificate serial: 019B7BA500AD660D8E21A88A196496D4EFE4 Authority key identifier: E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/5aZWyJBLIHcU6RZHhhqPqFmCtrk.roa Signing time: Thu 01 Jan 2026 22:19:29 +0000 ROA not before: Thu 01 Jan 2026 22:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30081 IP address blocks: 195.191.102.0/23 maxlen: 24 195.191.102.0/24 maxlen: 24 195.191.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.mft rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:00:ad:66:0d:8e:21:a8:8a:19:64:96:d4:ef:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8b3eed1c7aca636d6245852b802e0e73754df63 Validity Not Before: Jan 1 22:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e5a656c8904b207714e91647861a8fa85982b6b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1b:44:d5:13:ee:ef:fe:76:f9:7d:97:f5:82: 4c:a5:18:fc:56:be:9f:06:a5:15:41:dd:68:2b:bb: 35:4a:74:0c:8f:b3:d8:9f:64:00:60:27:0a:be:6d: 2f:51:97:50:0d:c0:34:11:65:3d:e7:1f:98:ca:17: de:bd:cc:b8:29:83:f5:f7:70:db:cd:8c:aa:85:e5: fe:55:3e:80:dd:e9:db:98:98:33:00:89:24:5b:a1: 7e:92:8c:02:81:4f:c0:1c:56:93:ed:5e:bc:44:91: 9e:1c:2a:06:02:34:e4:12:40:17:fd:29:0e:44:32: 40:37:ce:95:04:d8:2a:71:c6:ec:b9:eb:e4:7a:89: 33:01:f8:17:4e:c5:b1:73:e4:c3:19:5c:43:69:03: 01:2d:1f:25:2e:8b:f2:50:ec:c1:75:f2:55:ab:f5: 11:e7:73:8c:66:01:77:87:06:e0:c5:a2:6e:95:52: 65:c6:ab:e7:39:ff:74:34:ca:d1:61:69:44:89:72: 5b:e1:3d:f6:34:9d:f6:65:82:d5:d7:41:26:7a:91: 1d:a8:a9:5b:0b:72:8b:c6:a9:4a:a5:5b:6a:c4:68: d2:64:76:3a:d3:d7:b6:3c:bc:52:0a:df:ff:b7:fd: 1f:af:aa:06:3d:34:74:f6:3f:21:d2:7b:ec:aa:1a: 65:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:A6:56:C8:90:4B:20:77:14:E9:16:47:86:1A:8F:A8:59:82:B6:B9 X509v3 Authority Key Identifier: keyid:E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/5aZWyJBLIHcU6RZHhhqPqFmCtrk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.191.102.0/23 Signature Algorithm: sha256WithRSAEncryption 36:0c:e2:21:cd:d0:e6:a3:09:53:a6:d3:d3:18:c7:06:a4:d0: 37:4b:df:c7:e4:af:c4:54:42:b1:88:a1:00:c4:e8:83:31:f1: c3:5e:97:e8:2b:56:46:5d:6b:db:46:4f:71:e4:a5:17:f4:ec: 84:3e:c1:14:c4:2b:b2:1c:53:89:b1:f9:dd:57:67:01:f1:ef: e5:32:6e:ee:47:bc:4d:f3:32:5a:e0:1d:6f:6a:b0:de:9e:00: 42:22:bd:cf:f7:a6:82:f2:2d:56:f6:02:c2:1d:a3:2a:2f:52: 26:51:3a:ac:80:46:90:b6:d3:ca:67:15:52:3a:03:90:25:7b: f8:30:ec:a7:19:cd:d7:81:76:c9:24:17:eb:6c:70:df:fb:4e: 59:b2:62:01:5e:5e:c7:06:41:79:14:98:b5:90:15:5e:16:55: d1:c3:d5:60:a2:6a:05:08:29:a6:70:b9:4b:48:b0:d5:29:bc: 06:44:63:78:bf:1f:4d:07:de:1d:2d:09:d2:06:3b:df:53:ed: 5d:ee:b5:98:e6:00:ae:e2:a9:0d:e5:21:cd:95:67:a1:eb:07: 90:88:27:7b:e9:df:7f:e5:87:4d:20:86:15:4a:1f:ed:cb:c6: d1:d5:59:03:d8:ff:cd:05:7c:b1:43:30:6c:02:8d:ee:e6:4b: cb:97:6a:a0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pQCtZg2OIaiKGWSW1O/kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4YjNlZWQxYzdhY2E2MzZkNjI0NTg1MmI4MDJlMGU3Mzc1 NGRmNjMwHhcNMjYwMTAxMjIxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNWE2NTZjODkwNGIyMDc3MTRlOTE2NDc4NjFhOGZhODU5ODJiNmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhtE1RPu7/52+X2X9YJMpRj8Vr6f BqUVQd1oK7s1SnQMj7PYn2QAYCcKvm0vUZdQDcA0EWU95x+Yyhfevcy4KYP193Db zYyqheX+VT6A3enbmJgzAIkkW6F+kowCgU/AHFaT7V68RJGeHCoGAjTkEkAX/SkO RDJAN86VBNgqccbsuevkeokzAfgXTsWxc+TDGVxDaQMBLR8lLovyUOzBdfJVq/UR 53OMZgF3hwbgxaJulVJlxqvnOf90NMrRYWlEiXJb4T32NJ32ZYLV10EmepEdqKlb C3KLxqlKpVtqxGjSZHY609e2PLxSCt//t/0fr6oGPTR09j8h0nvsqhplWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOWmVsiQSyB3FOkWR4Yaj6hZgra5MB8GA1UdIwQY MBaAFOiz7tHHrKY21iRYUrgC4Oc3VN9jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkxQdTBjZXNwamJXSkZoU3VBTGc1emRVMzJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8xNzczMjktMjhjZC00ODY0LTllMTYt OTQ2NDA0ZWMxYWE0LzEvNWFaV3lKQkxJSGNVNlJaSGhocVBxRm1DdHJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi8xNzczMjktMjhjZC00ODY0LTllMTYtOTQ2NDA0ZWMxYWE0 LzEvNkxQdTBjZXNwamJXSkZoU3VBTGc1emRVMzJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw79mMA0G CSqGSIb3DQEBCwUAA4IBAQA2DOIhzdDmowlTptPTGMcGpNA3S9/H5K/EVEKxiKEA xOiDMfHDXpfoK1ZGXWvbRk9x5KUX9OyEPsEUxCuyHFOJsfndV2cB8e/lMm7uR7xN 8zJa4B1varDengBCIr3P96aC8i1W9gLCHaMqL1ImUTqsgEaQttPKZxVSOgOQJXv4 MOynGc3XgXbJJBfrbHDf+05ZsmIBXl7HBkF5FJi1kBVeFlXRw9VgomoFCCmmcLlL SLDVKbwGRGN4vx9NB94dLQnSBjvfU+1d7rWY5gCu4qkN5SHNlWeh6weQiCd76d9/ 5YdNIIYVSh/ty8bR1VkD2P/NBXyxQzBsAo3u5kvLl2qg -----END CERTIFICATE-----Generated at Sun Jan 25 17:35:52 2026 by rpki-client