This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/5TQ-JqFgF-IFdipnnBO-T6tTIiI.roa File: 5TQ-JqFgF-IFdipnnBO-T6tTIiI.roa (raw, json) Hash identifier: jvG5fPveO3vEmUkVM2g5EIXNmfe8tIUO+ydnKHanIQ8= Subject key identifier: E5:34:3E:26:A1:60:17:E2:05:76:2A:67:9C:13:BE:4F:AB:53:22:22 Certificate issuer: /CN=bd85272a4080904f75e235a47af0b41266e2a603 Certificate serial: 019B7B363DD978BAE6F0DEAA30FE8D1C8617 Authority key identifier: BD:85:27:2A:40:80:90:4F:75:E2:35:A4:7A:F0:B4:12:66:E2:A6:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vYUnKkCAkE914jWkevC0EmbipgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/5TQ-JqFgF-IFdipnnBO-T6tTIiI.roa Signing time: Thu 01 Jan 2026 20:18:30 +0000 ROA not before: Thu 01 Jan 2026 20:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30781 IP address blocks: 194.247.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.mft rsync://rpki.ripe.net/repository/DEFAULT/vYUnKkCAkE914jWkevC0EmbipgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:3d:d9:78:ba:e6:f0:de:aa:30:fe:8d:1c:86:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd85272a4080904f75e235a47af0b41266e2a603 Validity Not Before: Jan 1 20:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e5343e26a16017e205762a679c13be4fab532222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ed:1e:52:8c:43:fe:82:a8:14:1b:b6:2b:28: 71:6d:aa:e0:5b:fe:a2:f9:7a:e0:ab:69:79:53:f6: e1:29:50:97:f7:7c:2b:2d:d0:e0:3f:ad:6e:ad:33: 09:5b:48:64:8e:14:cb:a0:fe:f4:cb:d1:c7:c7:5c: b4:d2:a1:18:9d:33:93:5e:4c:5e:99:5d:9c:af:f3: ca:a5:64:dc:81:d8:18:ed:46:9c:84:ca:f0:fe:df: e4:2e:a6:80:46:71:28:5c:14:1a:9c:b8:7f:1a:9e: 38:47:0a:ca:c3:c8:5d:49:e5:4a:bb:96:f3:63:79: 0e:e1:f4:e4:56:b0:b8:75:7b:24:eb:2a:7d:67:de: 23:5f:38:ec:f2:31:b3:5d:fb:8a:5a:cc:55:21:3b: 54:08:46:16:23:99:93:b4:7a:a0:a9:23:74:66:2b: 3f:16:c4:11:f6:df:99:32:d9:89:8a:3e:66:a2:9f: c6:d4:58:e5:d5:8c:93:39:9f:dc:5d:68:48:06:4c: c9:33:c0:7f:ab:03:f7:0d:3a:f8:bc:1e:6e:cd:e9: e7:13:b9:2b:6c:d9:b1:74:5e:4b:c5:b4:9d:00:cf: a9:46:2c:c2:c0:27:60:24:b7:e9:8d:84:a9:4e:0c: 9d:35:b2:8d:51:d0:d6:c3:76:1d:a1:bc:d4:7f:3e: 76:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:34:3E:26:A1:60:17:E2:05:76:2A:67:9C:13:BE:4F:AB:53:22:22 X509v3 Authority Key Identifier: keyid:BD:85:27:2A:40:80:90:4F:75:E2:35:A4:7A:F0:B4:12:66:E2:A6:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vYUnKkCAkE914jWkevC0EmbipgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/5TQ-JqFgF-IFdipnnBO-T6tTIiI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.247.34.0/24 Signature Algorithm: sha256WithRSAEncryption 01:61:61:68:ef:39:4c:59:db:29:3e:2b:98:93:b9:e1:48:c6: b5:d7:78:97:a0:dd:15:89:fb:d8:d8:48:13:ec:0c:20:cb:ff: 68:40:ff:89:d6:83:2d:5f:94:31:86:eb:73:44:5b:69:9c:55: da:b3:95:68:31:ed:ef:bf:b7:9f:25:da:47:e7:bc:2a:d4:bd: 65:b7:75:5d:8a:57:d0:65:dd:2a:7d:27:eb:eb:25:ad:5b:63: 3a:17:c6:8e:4f:4f:b3:71:5b:06:76:9d:1e:68:83:00:fd:e5: 68:47:6b:7d:ce:f5:5e:54:54:93:4b:ac:dc:9c:60:03:dc:c8: 9d:f2:5d:11:8f:a7:fa:97:98:aa:4d:f9:ab:7f:59:33:8b:27: e3:d7:4c:d0:6a:02:1f:e5:cb:94:61:09:f2:6b:61:c2:ae:72: 35:bc:16:2e:1e:24:47:bb:83:75:db:d9:3e:45:2e:00:93:8a: 03:36:8b:7c:7b:8a:ec:36:61:c3:1e:79:96:4d:3c:33:49:d0: d4:b1:d7:d1:36:65:4b:ff:c8:36:a2:31:b8:6e:40:1b:91:c1: fd:74:98:4a:7a:4d:44:7e:5a:49:f7:d8:bb:03:56:7c:ba:61: 8a:8f:d0:dd:56:d5:18:20:b1:55:c1:1f:89:7e:d0:eb:24:86: b8:2b:ba:7d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nj3ZeLrm8N6qMP6NHIYXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkODUyNzJhNDA4MDkwNGY3NWUyMzVhNDdhZjBiNDEyNjZl MmE2MDMwHhcNMjYwMTAxMjAxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTM0M2UyNmExNjAxN2UyMDU3NjJhNjc5YzEzYmU0ZmFiNTMyMjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+0eUoxD/oKoFBu2KyhxbargW/6i +Xrgq2l5U/bhKVCX93wrLdDgP61urTMJW0hkjhTLoP70y9HHx1y00qEYnTOTXkxe mV2cr/PKpWTcgdgY7UachMrw/t/kLqaARnEoXBQanLh/Gp44RwrKw8hdSeVKu5bz Y3kO4fTkVrC4dXsk6yp9Z94jXzjs8jGzXfuKWsxVITtUCEYWI5mTtHqgqSN0Zis/ FsQR9t+ZMtmJij5mop/G1Fjl1YyTOZ/cXWhIBkzJM8B/qwP3DTr4vB5uzennE7kr bNmxdF5LxbSdAM+pRizCwCdgJLfpjYSpTgydNbKNUdDWw3YdobzUfz52KQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOU0PiahYBfiBXYqZ5wTvk+rUyIiMB8GA1UdIwQY MBaAFL2FJypAgJBPdeI1pHrwtBJm4qYDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdllVbktrQ0FrRTkxNGpXa2V2QzBFbWJpcGdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8yODJjYjAtOTFiZS00MjJhLTk1ZDMt MjRmMjBmOTY3NWVjLzEvNVRRLUpxRmdGLUlGZGlwbm5CTy1UNnRUSWlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8yODJjYjAtOTFiZS00MjJhLTk1ZDMtMjRmMjBmOTY3NWVj LzEvdllVbktrQ0FrRTkxNGpXa2V2QzBFbWJpcGdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwvciMA0G CSqGSIb3DQEBCwUAA4IBAQABYWFo7zlMWdspPiuYk7nhSMa113iXoN0VifvY2EgT 7Awgy/9oQP+J1oMtX5QxhutzRFtpnFXas5VoMe3vv7efJdpH57wq1L1lt3VdilfQ Zd0qfSfr6yWtW2M6F8aOT0+zcVsGdp0eaIMA/eVoR2t9zvVeVFSTS6zcnGAD3Mid 8l0Rj6f6l5iqTfmrf1kziyfj10zQagIf5cuUYQnya2HCrnI1vBYuHiRHu4N129k+ RS4Ak4oDNot8e4rsNmHDHnmWTTwzSdDUsdfRNmVL/8g2ojG4bkAbkcH9dJhKek1E flpJ99i7A1Z8umGKj9DdVtUYILFVwR+JftDrJIa4K7p9 -----END CERTIFICATE-----Generated at Sun Jan 25 19:37:43 2026 by rpki-client