This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/5ERvaJCjijofjZEEyshS2DN7G8w.roa File: 5ERvaJCjijofjZEEyshS2DN7G8w.roa (raw, json) Hash identifier: L0qBBv8W1SeaQxwY+yM3qe9nhTQXTw1BhXzcHvSUW8A= Subject key identifier: E4:44:6F:68:90:A3:8A:3A:1F:8D:91:04:CA:C8:52:D8:33:7B:1B:CC Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3 Certificate serial: 019B77C66FBD6FFD068FD43927BCC758E8FC Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/5ERvaJCjijofjZEEyshS2DN7G8w.roa Signing time: Thu 01 Jan 2026 04:17:31 +0000 ROA not before: Thu 01 Jan 2026 04:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8967 IP address blocks: 46.35.182.0/23 maxlen: 24 95.158.156.0/22 maxlen: 24 95.158.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:6f:bd:6f:fd:06:8f:d4:39:27:bc:c7:58:e8:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3 Validity Not Before: Jan 1 04:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4446f6890a38a3a1f8d9104cac852d8337b1bcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:75:d5:31:78:80:c8:80:21:f6:07:d4:74:47: 09:c4:f1:ca:96:d2:20:6f:b7:d5:f2:7c:c0:d2:d5: 7b:0e:72:70:6b:6f:96:e3:c3:2f:01:76:e0:fe:fe: 4e:3c:d3:8d:00:9a:f2:ae:e8:04:cc:fa:ff:65:19: 42:c6:19:60:b7:e1:f5:7c:94:83:97:db:28:07:08: 26:12:c0:cf:66:a5:c0:e3:ec:f8:01:d6:28:7e:2e: 26:be:37:04:6c:c9:77:f3:ef:c4:e4:27:5a:a2:4f: 35:b6:d7:b3:b2:90:ac:19:43:83:f9:b1:db:75:c1: 61:f7:9a:74:17:8e:0a:e7:89:92:af:d6:fb:ac:ad: 6b:ad:4a:99:79:20:a4:4b:d1:57:76:ed:71:0f:ca: e8:c3:63:ac:d0:72:37:15:2e:0c:05:7e:6c:70:0f: f8:54:97:06:10:5d:02:db:55:77:0e:92:f7:fc:30: e5:59:61:0b:d0:81:16:ec:c8:32:f1:2a:7c:8f:a9: 25:24:56:1a:29:1c:7b:8f:de:fe:a2:8d:b6:07:85: 5e:6c:99:db:3d:c4:84:eb:81:fb:90:09:d9:16:ea: 37:b3:6e:d7:0f:90:f1:0a:d0:96:0b:45:0b:fc:a8: 83:5d:9b:94:f7:45:f3:21:40:ab:c7:c0:0f:4c:d6: 73:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:44:6F:68:90:A3:8A:3A:1F:8D:91:04:CA:C8:52:D8:33:7B:1B:CC X509v3 Authority Key Identifier: keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/5ERvaJCjijofjZEEyshS2DN7G8w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.35.182.0/23 95.158.156.0/22 95.158.172.0/22 Signature Algorithm: sha256WithRSAEncryption 1f:dd:74:9c:0a:a9:9d:a2:6f:b7:eb:c3:0f:62:da:8b:0a:b2: 91:65:19:9d:1c:c9:55:0a:52:81:46:7a:35:ba:4b:29:38:e3: 47:e1:cc:c8:f9:18:0d:f9:11:37:f3:a1:6b:72:0f:36:2b:21: 15:ae:6f:1b:8c:60:f2:93:b2:a5:62:b3:ad:27:fa:67:b3:0d: 55:af:f2:64:f2:32:ca:75:ff:1e:b8:7b:cf:63:84:65:3c:a5: 08:ff:f2:3e:45:ca:1d:21:ea:da:0f:f7:4a:9b:0a:9b:5d:e7: 73:ab:39:ec:37:18:2c:be:ad:cd:4c:c2:42:e8:51:06:e1:ee: 6c:8b:a8:e5:78:d5:03:a0:78:90:4a:2f:2b:bb:16:f9:98:74: 90:e2:19:c6:70:2d:73:e9:d6:96:0b:10:f1:f1:55:dc:d2:dc: 4d:fe:9d:79:b8:f5:48:11:ff:23:e6:bf:9e:d0:d1:51:b1:6b: 58:29:3d:fa:1a:e5:14:bb:4e:28:5a:01:2a:11:4c:23:ee:57: b8:2a:88:28:26:bd:0b:b2:b6:c0:9e:47:43:4f:1e:c4:c2:7a: 61:2d:2a:58:f6:4c:fc:c5:01:3b:cd:7c:0e:1d:80:39:d0:fa: 61:ec:df:9b:21:bb:4f:8a:88:27:14:cd:b7:b8:a2:ac:0a:d9: 86:ea:8e:f9 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3xm+9b/0Gj9Q5J7zHWOj8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViZWM5MDMwYzcwYTNkNDE5MmQ1OWMyOGRjYzhkNTQ3Njk0 MzQwYjMwHhcNMjYwMTAxMDQxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDQ0NmY2ODkwYTM4YTNhMWY4ZDkxMDRjYWM4NTJkODMzN2IxYmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnXVMXiAyIAh9gfUdEcJxPHKltIg b7fV8nzA0tV7DnJwa2+W48MvAXbg/v5OPNONAJryrugEzPr/ZRlCxhlgt+H1fJSD l9soBwgmEsDPZqXA4+z4AdYofi4mvjcEbMl38+/E5Cdaok81ttezspCsGUOD+bHb dcFh95p0F44K54mSr9b7rK1rrUqZeSCkS9FXdu1xD8row2Os0HI3FS4MBX5scA/4 VJcGEF0C21V3DpL3/DDlWWEL0IEW7Mgy8Sp8j6klJFYaKRx7j97+oo22B4VebJnb PcSE64H7kAnZFuo3s27XD5DxCtCWC0UL/KiDXZuU90XzIUCrx8APTNZzQwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFOREb2iQo4o6H42RBMrIUtgzexvMMB8GA1UdIwQY MBaAFOvskDDHCj1BktWcKNzI1UdpQ0CzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQt NGE2Zjg2ODMyNjVjLzEvNUVSdmFKQ2ppam9malpFRXlzaFMyRE43Rzh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQtNGE2Zjg2ODMyNjVj LzEvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBLiO2AwQC X56cAwQCX56sMA0GCSqGSIb3DQEBCwUAA4IBAQAf3XScCqmdom+368MPYtqLCrKR ZRmdHMlVClKBRno1ukspOONH4czI+RgN+RE386Frcg82KyEVrm8bjGDyk7KlYrOt J/pnsw1Vr/Jk8jLKdf8euHvPY4RlPKUI//I+RcodIeraD/dKmwqbXedzqznsNxgs vq3NTMJC6FEG4e5si6jleNUDoHiQSi8ruxb5mHSQ4hnGcC1z6daWCxDx8VXc0txN /p15uPVIEf8j5r+e0NFRsWtYKT36GuUUu04oWgEqEUwj7le4KogoJr0LsrbAnkdD Tx7EwnphLSpY9kz8xQE7zXwOHYA50Pph7N+bIbtPiognFM23uKKsCtmG6o75 -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:27 2026 by rpki-client