This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/5D_6V1jfsiELpRkCmEhi7rdCKRg.roa File: 5D_6V1jfsiELpRkCmEhi7rdCKRg.roa (raw, json) Hash identifier: /d0M4c6YWxQ0V8Mp5iLPG6sVPAc4eaY42hLJi+0oXvQ= Subject key identifier: E4:3F:FA:57:58:DF:B2:21:0B:A5:19:02:98:48:62:EE:B7:42:29:18 Certificate issuer: /CN=e7d68a9eb86a8264e9ddc3122849b80cc342f5dc Certificate serial: 019B79ED02974BEEA5C0D54EF1BC99C14D8A Authority key identifier: E7:D6:8A:9E:B8:6A:82:64:E9:DD:C3:12:28:49:B8:0C:C3:42:F5:DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/59aKnrhqgmTp3cMSKEm4DMNC9dw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/5D_6V1jfsiELpRkCmEhi7rdCKRg.roa Signing time: Thu 01 Jan 2026 14:18:54 +0000 ROA not before: Thu 01 Jan 2026 14:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42641 IP address blocks: 193.142.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft rsync://rpki.ripe.net/repository/DEFAULT/59aKnrhqgmTp3cMSKEm4DMNC9dw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:02:97:4b:ee:a5:c0:d5:4e:f1:bc:99:c1:4d:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7d68a9eb86a8264e9ddc3122849b80cc342f5dc Validity Not Before: Jan 1 14:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e43ffa5758dfb2210ba51902984862eeb7422918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:40:1f:cb:e3:a2:e7:53:35:ee:8b:a7:78:ca: 66:ab:05:52:19:09:10:4e:65:69:4b:c7:c5:e1:42: 38:69:f8:4e:2e:2b:5f:16:b4:90:ea:5b:4b:ca:61: 11:9d:17:9c:b8:34:b2:5b:77:c9:db:50:56:f1:b0: cb:8e:ad:83:7a:c1:0e:2a:59:41:79:25:85:73:7b: 58:dd:ae:31:eb:e3:12:ef:87:b4:e8:8b:01:50:3e: 24:d4:08:c9:c1:d1:84:80:ce:19:dd:20:91:68:9a: b1:ec:4a:ad:e5:11:20:77:1d:11:e7:33:79:64:a7: fb:c1:a4:d0:35:5d:a9:29:da:d7:da:8e:c2:de:c2: f6:15:a0:0a:5b:c2:ec:09:7f:36:f6:a2:6f:0f:37: d9:f0:7d:e8:04:cf:5b:dd:2d:39:85:4f:54:ef:51: 0b:54:84:63:8e:47:65:60:af:f9:40:ec:8b:2e:ca: 3f:da:54:24:5a:a7:e4:9b:34:51:f8:b4:8e:f6:aa: 7a:d9:45:15:ee:2f:15:32:e0:c8:36:0b:b7:17:3e: 66:27:f4:48:5f:04:b1:ca:3a:e9:c7:67:3b:d1:5c: 44:4d:a0:a7:d6:c4:7e:4b:8c:b0:1e:99:90:f1:78: f0:d7:91:70:38:d6:45:04:5b:52:4b:89:94:c2:fd: ba:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:3F:FA:57:58:DF:B2:21:0B:A5:19:02:98:48:62:EE:B7:42:29:18 X509v3 Authority Key Identifier: keyid:E7:D6:8A:9E:B8:6A:82:64:E9:DD:C3:12:28:49:B8:0C:C3:42:F5:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59aKnrhqgmTp3cMSKEm4DMNC9dw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/5D_6V1jfsiELpRkCmEhi7rdCKRg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.142.219.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:8c:58:43:f8:f2:4d:8b:f5:6f:45:82:bf:4f:75:11:0b:39: 15:a1:cd:c7:b4:80:f6:b5:16:5e:f5:ab:8d:c7:9b:d9:09:1c: ac:90:3a:d6:09:7f:64:bb:f5:79:09:42:c4:b9:e1:a7:9c:1f: f2:9e:e2:b5:05:1a:ec:78:62:70:5e:93:b9:00:1a:9e:12:b3: df:91:c6:76:d6:8c:c9:d6:d3:36:45:56:12:19:17:07:78:5f: 6a:f6:00:c1:36:4d:0b:19:d0:88:f5:25:7a:22:7f:5b:c8:98: a1:b8:36:78:cf:34:d5:b8:c9:eb:e1:b8:9c:b7:ef:d6:ca:5f: 5c:0a:57:cd:8a:34:47:1b:5b:f5:10:06:34:41:31:32:97:6a: 4b:b8:20:f4:39:56:23:95:81:48:f1:4a:e4:cc:dd:01:27:9c: c2:ea:2a:65:30:02:89:d3:db:b5:ed:13:b1:cc:97:6b:b9:db: 89:15:04:6d:2b:78:1a:83:ec:13:82:df:f5:f5:b3:4b:33:2c: b6:47:d5:b3:cd:c4:d6:0d:73:95:33:cd:5f:e8:f1:24:2e:87: 5f:ec:96:cc:6d:21:64:ef:f0:39:0d:18:26:7c:fb:d3:2d:c7: 3e:11:92:55:51:a6:5f:92:62:0d:6f:e7:38:5b:39:8d:b3:4b: 8d:d4:83:ad -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57QKXS+6lwNVO8byZwU2KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3ZDY4YTllYjg2YTgyNjRlOWRkYzMxMjI4NDliODBjYzM0 MmY1ZGMwHhcNMjYwMTAxMTQxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDNmZmE1NzU4ZGZiMjIxMGJhNTE5MDI5ODQ4NjJlZWI3NDIyOTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokAfy+Oi51M17ouneMpmqwVSGQkQ TmVpS8fF4UI4afhOLitfFrSQ6ltLymERnRecuDSyW3fJ21BW8bDLjq2DesEOKllB eSWFc3tY3a4x6+MS74e06IsBUD4k1AjJwdGEgM4Z3SCRaJqx7Eqt5REgdx0R5zN5 ZKf7waTQNV2pKdrX2o7C3sL2FaAKW8LsCX829qJvDzfZ8H3oBM9b3S05hU9U71EL VIRjjkdlYK/5QOyLLso/2lQkWqfkmzRR+LSO9qp62UUV7i8VMuDINgu3Fz5mJ/RI XwSxyjrpx2c70VxETaCn1sR+S4ywHpmQ8Xjw15FwONZFBFtSS4mUwv26hQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOQ/+ldY37IhC6UZAphIYu63QikYMB8GA1UdIwQY MBaAFOfWip64aoJk6d3DEihJuAzDQvXcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTlhS25yaHFnbVRwM2NNU0tFbTRETU5DOWR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy81NjVlYTEtMmEzNi00NDAzLTk0MWUt ZjBkNDBmMDI5NjczLzEvNURfNlYxamZzaUVMcFJrQ21FaGk3cmRDS1JnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy81NjVlYTEtMmEzNi00NDAzLTk0MWUtZjBkNDBmMDI5Njcz LzEvNTlhS25yaHFnbVRwM2NNU0tFbTRETU5DOWR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwY7bMA0G CSqGSIb3DQEBCwUAA4IBAQBrjFhD+PJNi/VvRYK/T3URCzkVoc3HtID2tRZe9auN x5vZCRyskDrWCX9ku/V5CULEueGnnB/ynuK1BRrseGJwXpO5ABqeErPfkcZ21ozJ 1tM2RVYSGRcHeF9q9gDBNk0LGdCI9SV6In9byJihuDZ4zzTVuMnr4bict+/Wyl9c ClfNijRHG1v1EAY0QTEyl2pLuCD0OVYjlYFI8UrkzN0BJ5zC6iplMAKJ09u17ROx zJdruduJFQRtK3gag+wTgt/19bNLMyy2R9WzzcTWDXOVM81f6PEkLodf7JbMbSFk 7/A5DRgmfPvTLcc+EZJVUaZfkmINb+c4WzmNs0uN1IOt -----END CERTIFICATE-----Generated at Sun Jan 25 20:49:07 2026 by rpki-client