This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/R5OP5KH_E7pdeQgFcU8ptZ10ArQ.roa File: R5OP5KH_E7pdeQgFcU8ptZ10ArQ.roa (raw, json) Hash identifier: lQn+RZNh55EMQdYaVWPd2fwMhR/rQtu4uCLQHJb06MY= Subject key identifier: 47:93:8F:E4:A1:FF:13:BA:5D:79:08:05:71:4F:29:B5:9D:74:02:B4 Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f Certificate serial: 019B797F3495066E9DF8B82C3EB1A8A6509F Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/R5OP5KH_E7pdeQgFcU8ptZ10ArQ.roa Signing time: Thu 01 Jan 2026 12:18:57 +0000 ROA not before: Thu 01 Jan 2026 12:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47692 IP address blocks: 91.151.16.0/22 maxlen: 22 185.51.8.0/22 maxlen: 24 185.211.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:34:95:06:6e:9d:f8:b8:2c:3e:b1:a8:a6:50:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f Validity Not Before: Jan 1 12:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=47938fe4a1ff13ba5d790805714f29b59d7402b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0f:1b:51:24:a8:fa:53:1d:91:a5:af:ec:12: df:27:35:89:3d:3b:9b:85:61:27:28:cd:eb:1e:5c: fd:22:81:23:2b:05:45:72:c8:8c:a7:28:02:94:34: 17:81:31:62:f4:62:c4:fa:e7:44:95:7f:6a:8e:5b: e1:5f:7e:ac:7d:33:02:4a:3a:87:f0:1d:22:f9:cd: 3c:5a:41:9b:0c:a6:56:60:1c:b2:ca:ac:c1:8a:41: e6:3d:ce:4a:17:a5:a5:f5:c3:68:ee:46:f6:bf:e7: 40:d3:9c:c2:f7:ec:f9:f3:b4:ca:e7:31:96:af:6f: d2:c3:d3:04:6f:45:f6:d5:6c:9a:09:46:b3:06:4c: 35:24:56:ba:8c:aa:7b:ae:aa:97:d2:11:7b:ba:8c: 98:6a:3a:12:43:01:56:43:fb:6d:b6:51:6c:06:b7: 0b:15:91:3f:9b:ef:59:87:be:a9:e2:f5:a1:b4:ca: ac:8d:fa:94:da:be:4a:7f:e9:86:0a:5f:81:6a:43: 0e:5f:41:41:e6:58:74:d2:b4:44:c4:fb:45:5c:37: 97:3d:aa:2b:70:1f:0a:ce:9e:9f:ad:a9:b1:19:1f: ab:99:5f:ab:6f:d1:3d:7f:1e:57:2d:ea:1e:75:75: b7:8a:08:ee:48:0a:e3:d3:3b:5b:67:0f:99:9b:29: 50:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:93:8F:E4:A1:FF:13:BA:5D:79:08:05:71:4F:29:B5:9D:74:02:B4 X509v3 Authority Key Identifier: keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/R5OP5KH_E7pdeQgFcU8ptZ10ArQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.151.16.0/22 185.51.8.0/22 185.211.60.0/22 Signature Algorithm: sha256WithRSAEncryption 33:46:1e:63:40:13:d3:54:54:14:e3:5a:90:0f:b5:d7:65:a7: 0c:6e:70:89:db:93:cd:f8:f3:06:86:c9:b5:34:bb:d5:0d:d2: 65:39:e3:37:45:90:55:44:a4:d7:57:d9:ed:ac:7d:68:55:06: 3d:05:93:a0:07:f5:70:ba:4c:8c:e1:e6:22:23:a2:f8:ac:5f: 71:3c:ec:b8:af:9e:85:6a:94:ce:f5:8b:84:69:18:c9:2a:1b: 5f:ae:09:fd:2b:7a:b7:b1:7c:38:69:ce:d0:ec:50:90:58:ba: fd:58:64:c6:b2:20:64:29:9c:04:2d:c2:86:5d:b7:93:57:6b: 7b:29:9b:d9:7a:02:a6:90:47:bf:7a:26:26:e1:d5:ac:25:cd: d0:5d:70:17:6a:3b:af:8c:27:57:54:ed:c2:bb:22:1f:51:41: 49:20:5d:ef:c9:81:8b:40:23:2a:72:fb:ee:b4:7b:e8:28:9a: a5:f5:76:89:1f:b7:20:66:a6:7d:33:a3:e5:c2:d4:c6:bb:ac: 97:67:d2:26:76:60:e6:eb:d9:2f:a8:0d:4b:b5:2f:e7:5f:72: 44:ce:ff:47:0b:13:3e:5d:df:86:b6:cb:39:3e:67:f8:4c:22: f6:d9:57:c3:01:8c:6b:f8:b8:76:82:eb:f9:a1:61:4b:5c:53: fd:db:13:8e -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5fzSVBm6d+LgsPrGoplCfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MjcwOGRmOTM5NTRhYWM2MDFhZWYxODM1YmQ1ZDY5MjQ1 ZmIwMmYwHhcNMjYwMTAxMTIxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzkzOGZlNGExZmYxM2JhNWQ3OTA4MDU3MTRmMjliNTlkNzQwMmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQ8bUSSo+lMdkaWv7BLfJzWJPTub hWEnKM3rHlz9IoEjKwVFcsiMpygClDQXgTFi9GLE+udElX9qjlvhX36sfTMCSjqH 8B0i+c08WkGbDKZWYByyyqzBikHmPc5KF6Wl9cNo7kb2v+dA05zC9+z587TK5zGW r2/Sw9MEb0X21WyaCUazBkw1JFa6jKp7rqqX0hF7uoyYajoSQwFWQ/tttlFsBrcL FZE/m+9Zh76p4vWhtMqsjfqU2r5Kf+mGCl+BakMOX0FB5lh00rRExPtFXDeXPaor cB8Kzp6framxGR+rmV+rb9E9fx5XLeoedXW3igjuSArj0ztbZw+ZmylQBQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFEeTj+Sh/xO6XXkIBXFPKbWddAK0MB8GA1UdIwQY MBaAFMQnCN+TlUqsYBrvGDW9XWkkX7AvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYt NzQxYzFkOGRlYTJiLzEvUjVPUDVLSF9FN3BkZVFnRmNVOHB0WjEwQXJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYtNzQxYzFkOGRlYTJi LzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCW5cQAwQC uTMIAwQCudM8MA0GCSqGSIb3DQEBCwUAA4IBAQAzRh5jQBPTVFQU41qQD7XXZacM bnCJ25PN+PMGhsm1NLvVDdJlOeM3RZBVRKTXV9ntrH1oVQY9BZOgB/VwukyM4eYi I6L4rF9xPOy4r56FapTO9YuEaRjJKhtfrgn9K3q3sXw4ac7Q7FCQWLr9WGTGsiBk KZwELcKGXbeTV2t7KZvZegKmkEe/eiYm4dWsJc3QXXAXajuvjCdXVO3CuyIfUUFJ IF3vyYGLQCMqcvvutHvoKJql9XaJH7cgZqZ9M6PlwtTGu6yXZ9ImdmDm69kvqA1L tS/nX3JEzv9HCxM+Xd+Gtss5Pmf4TCL22VfDAYxr+Lh2guv5oWFLXFP92xOO -----END CERTIFICATE-----Generated at Sun Jan 25 13:01:06 2026 by rpki-client