This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/r5EQFD61hWzkJjB7v7Y30uUhewc.roa File: r5EQFD61hWzkJjB7v7Y30uUhewc.roa (raw, json) Hash identifier: 6ypgI1gg3G9f0KTPTcY2gQYHH5FXI074w6M2BK68aUs= Subject key identifier: AF:91:10:14:3E:B5:85:6C:E4:26:30:7B:BF:B6:37:D2:E5:21:7B:07 Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Certificate serial: 019B7910EAD70A3ED101DA6C5E751F34A945 Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/r5EQFD61hWzkJjB7v7Y30uUhewc.roa Signing time: Thu 01 Jan 2026 10:18:30 +0000 ROA not before: Thu 01 Jan 2026 10:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64161 IP address blocks: 195.88.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:ea:d7:0a:3e:d1:01:da:6c:5e:75:1f:34:a9:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Validity Not Before: Jan 1 10:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af9110143eb5856ce426307bbfb637d2e5217b07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:96:b6:50:8b:c9:a0:17:07:cf:6f:d0:54:51: 0e:4f:36:aa:5c:ae:99:04:56:58:9c:fa:92:21:d1: 9e:90:52:21:1e:27:ac:a2:94:0e:46:5a:7d:2e:65: b6:ea:e5:3b:3e:05:7f:a2:3e:4c:00:e0:b4:47:be: 6e:be:4c:84:60:02:65:0b:9c:94:b7:0a:c1:91:d9: f5:0b:2e:08:c5:e0:80:40:fa:9f:e6:e8:1c:c7:fc: f7:48:3d:d1:d2:f2:ee:af:41:df:b4:35:4f:5e:99: d9:6b:4e:4a:56:f5:ed:11:db:e1:93:6c:c8:7c:51: 16:68:99:5f:7b:a2:6e:fe:ea:a8:c2:b2:db:2c:48: 78:5d:7f:4d:41:86:63:dc:0a:e5:6d:9e:26:f0:9c: bd:b4:e6:35:76:ed:30:01:9d:76:25:60:14:32:47: 73:6b:7f:65:fe:25:0d:5f:45:5a:13:b6:b2:6f:37: 1e:6f:1b:94:c2:a7:6c:44:2e:99:28:d2:71:8b:e0: 60:6c:f1:3b:68:23:86:f8:8a:fb:96:8e:47:5c:00: 27:24:78:ac:cf:4b:48:91:b5:a4:64:88:1b:29:8e: 8d:26:3e:2f:7f:53:6d:ca:a4:4a:ab:56:01:59:9a: 34:be:fe:ce:d5:b1:6c:11:7f:f4:99:b9:5a:b3:41: d6:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:91:10:14:3E:B5:85:6C:E4:26:30:7B:BF:B6:37:D2:E5:21:7B:07 X509v3 Authority Key Identifier: keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/r5EQFD61hWzkJjB7v7Y30uUhewc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.88.213.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:d9:ae:a1:02:18:60:7f:9c:11:09:81:eb:06:7c:51:ea:74: 61:e3:88:01:30:72:d9:b5:c9:9f:84:4f:ce:bb:6f:a9:25:71: d6:77:f2:58:93:c4:0d:93:5c:c1:09:f1:97:b8:ca:51:27:ea: 33:d8:e1:7f:07:f4:cc:91:06:78:82:64:9b:93:55:06:98:72: c9:94:99:33:af:e4:31:ca:84:16:37:47:39:96:8d:67:81:38: 78:55:9e:f9:c7:d4:49:62:cc:96:ca:23:78:92:c7:e6:4c:ce: fc:96:38:b3:bc:80:fa:8e:d5:18:ff:db:52:9f:6b:f2:40:21: 5d:e7:35:07:4e:19:79:35:3c:63:83:41:3b:16:38:b8:6d:ec: 0e:0c:ce:f1:d9:87:a2:18:e3:ce:6f:a1:fc:78:76:12:83:2b: 05:05:5e:ae:58:07:fd:d7:0e:7b:e5:e6:4e:fd:97:3b:6a:66: 75:19:8f:f1:8c:d0:ab:73:33:47:34:dd:d7:78:62:92:56:a9: b9:6e:6b:9b:c4:aa:bf:98:91:76:f9:10:19:5a:98:97:7c:09: d5:63:a8:f9:d2:02:5c:aa:ea:39:1f:38:2b:db:f0:cd:57:93: 2b:5f:9d:8e:f9:bd:87:36:02:03:31:15:5c:99:39:25:84:da: e6:1c:a5:f0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EOrXCj7RAdpsXnUfNKlFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NmQ5ZDUwYjNiODlkNTFjOGFhMjQ5M2U3ZWY0NzAxZDYy NTFkYWQwHhcNMjYwMTAxMTAxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjkxMTAxNDNlYjU4NTZjZTQyNjMwN2JiZmI2MzdkMmU1MjE3YjA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45a2UIvJoBcHz2/QVFEOTzaqXK6Z BFZYnPqSIdGekFIhHiesopQORlp9LmW26uU7PgV/oj5MAOC0R75uvkyEYAJlC5yU twrBkdn1Cy4IxeCAQPqf5ugcx/z3SD3R0vLur0HftDVPXpnZa05KVvXtEdvhk2zI fFEWaJlfe6Ju/uqowrLbLEh4XX9NQYZj3ArlbZ4m8Jy9tOY1du0wAZ12JWAUMkdz a39l/iUNX0VaE7aybzcebxuUwqdsRC6ZKNJxi+BgbPE7aCOG+Ir7lo5HXAAnJHis z0tIkbWkZIgbKY6NJj4vf1NtyqRKq1YBWZo0vv7O1bFsEX/0mblas0HWKwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK+REBQ+tYVs5CYwe7+2N9LlIXsHMB8GA1UdIwQY MBaAFMZtnVCzuJ1RyKokk+fvRwHWJR2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMt YjdjNTc4Yjc0ZTM1LzEvcjVFUUZENjFoV3prSmpCN3Y3WTMwdVVoZXdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMtYjdjNTc4Yjc0ZTM1 LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1jVMA0G CSqGSIb3DQEBCwUAA4IBAQB/2a6hAhhgf5wRCYHrBnxR6nRh44gBMHLZtcmfhE/O u2+pJXHWd/JYk8QNk1zBCfGXuMpRJ+oz2OF/B/TMkQZ4gmSbk1UGmHLJlJkzr+Qx yoQWN0c5lo1ngTh4VZ75x9RJYsyWyiN4ksfmTM78ljizvID6jtUY/9tSn2vyQCFd 5zUHThl5NTxjg0E7Fji4bewODM7x2YeiGOPOb6H8eHYSgysFBV6uWAf91w575eZO /Zc7amZ1GY/xjNCrczNHNN3XeGKSVqm5bmubxKq/mJF2+RAZWpiXfAnVY6j50gJc quo5Hzgr2/DNV5MrX52O+b2HNgIDMRVcmTklhNrmHKXw -----END CERTIFICATE-----Generated at Sun Jan 25 15:06:24 2026 by rpki-client