This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/E5S-491e04UPO6wkLr3oIZLgnEA.roa File: E5S-491e04UPO6wkLr3oIZLgnEA.roa (raw, json) Hash identifier: zxLn05yftDnpI1oHvWUMVVlRpprTPSrrOCIpWGxaWqY= Subject key identifier: 13:94:BE:E3:DD:5E:D3:85:0F:3B:AC:24:2E:BD:E8:21:92:E0:9C:40 Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1 Certificate serial: 019B7F15B67F7FDB526CDE2E5BA56848AEF0 Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/E5S-491e04UPO6wkLr3oIZLgnEA.roa Signing time: Fri 02 Jan 2026 14:21:27 +0000 ROA not before: Fri 02 Jan 2026 14:21:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20905 IP address blocks: 217.124.152.0/24 maxlen: 24 2a02:9010:45::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:b6:7f:7f:db:52:6c:de:2e:5b:a5:68:48:ae:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1 Validity Not Before: Jan 2 14:21:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1394bee3dd5ed3850f3bac242ebde82192e09c40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:80:b0:69:fa:ab:00:99:65:31:88:2a:6e:1d: 47:79:ef:cd:8d:b9:85:b4:d0:b8:94:66:a8:0e:ba: 9a:f3:e8:1c:93:53:d5:a6:8a:c0:70:6a:f8:d0:f2: fb:6e:ce:8b:a3:6d:41:c0:28:33:19:54:99:69:75: 10:ec:bc:bc:01:4b:4b:81:7f:fa:06:3b:c3:1b:d3: 64:ae:9e:d6:f7:2d:53:01:28:7b:b0:db:e1:ce:81: c4:be:bb:22:17:81:f9:28:ab:05:d4:1a:76:94:19: 67:ce:f7:d8:bc:43:a9:ea:a4:f6:f7:2c:23:f9:65: 8c:c5:6f:60:e3:5c:61:71:de:da:39:65:dd:05:95: 9e:b6:8c:88:2e:91:7d:18:f1:f0:69:e0:e5:43:05: cc:9a:88:5c:d4:bb:dc:26:e6:43:bc:b1:91:66:aa: cf:2f:84:91:9a:4c:b3:38:62:24:9f:31:b3:16:fc: f3:47:af:46:c4:6f:fe:85:49:6b:f1:41:bd:bb:7c: 24:4e:25:94:fe:bb:fc:52:ad:17:f2:51:5c:ae:62: 1f:cc:ad:99:40:c2:0d:7b:86:8d:ef:e4:e8:92:f5: b4:e7:38:72:28:3e:27:f3:fc:7f:c3:e7:04:31:29: 3f:96:7b:d9:1a:75:b5:50:52:81:0a:56:ff:0f:2a: 15:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:94:BE:E3:DD:5E:D3:85:0F:3B:AC:24:2E:BD:E8:21:92:E0:9C:40 X509v3 Authority Key Identifier: keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/E5S-491e04UPO6wkLr3oIZLgnEA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.124.152.0/24 IPv6: 2a02:9010:45::/48 Signature Algorithm: sha256WithRSAEncryption ce:7a:de:8d:8a:19:98:39:2c:47:c3:ef:e2:94:e0:7e:5d:d0: 7c:e9:74:d1:93:bf:8b:53:7d:6f:2d:e7:c1:a4:01:ff:ba:3f: 59:2e:80:92:39:aa:02:02:0e:46:77:aa:44:85:74:09:5d:d6: f3:37:63:89:16:0a:05:7e:7c:c2:37:31:56:ab:75:61:70:88: 91:36:a9:95:1d:89:55:a8:9f:01:e2:a7:b6:a0:93:81:48:80: 04:ea:49:4f:1e:9e:26:c1:4d:8e:c8:3f:27:6b:c0:40:87:f2: 0e:6b:11:8c:17:dc:ab:dd:77:4a:a5:0c:95:9b:04:cd:2c:a0: 6d:95:97:6f:9c:a2:cd:8d:88:31:b6:b3:de:25:aa:70:05:09: 6e:e8:e7:50:de:f2:a9:3c:12:e1:a9:04:93:48:5b:a2:38:4a: d8:5b:53:f6:62:28:36:0e:01:35:b6:04:ff:f0:96:7b:55:32: cc:f0:04:f4:81:64:4a:ef:e1:a6:2e:8e:fd:74:c0:42:38:fe: ab:8d:83:e3:2b:d6:09:8d:a9:4d:aa:05:9d:46:0a:48:6c:2f: 2e:62:b4:7b:8f:d4:a9:da:08:83:8d:b9:c3:79:a5:c4:7e:4b: bb:d8:3f:85:a4:01:4a:a4:90:94:ab:36:73:52:b8:b4:18:7f: 4d:25:b1:da -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/FbZ/f9tSbN4uW6VoSK7wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwN2Y1ZmUyNzQwYTJiNmRlNGMzNzA5ZDI5NjQxMTViM2M5 NjdkYTEwHhcNMjYwMTAyMTQyMTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzk0YmVlM2RkNWVkMzg1MGYzYmFjMjQyZWJkZTgyMTkyZTA5YzQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApICwafqrAJllMYgqbh1Hee/NjbmF tNC4lGaoDrqa8+gck1PVporAcGr40PL7bs6Lo21BwCgzGVSZaXUQ7Ly8AUtLgX/6 BjvDG9Nkrp7W9y1TASh7sNvhzoHEvrsiF4H5KKsF1Bp2lBlnzvfYvEOp6qT29ywj +WWMxW9g41xhcd7aOWXdBZWetoyILpF9GPHwaeDlQwXMmohc1LvcJuZDvLGRZqrP L4SRmkyzOGIknzGzFvzzR69GxG/+hUlr8UG9u3wkTiWU/rv8Uq0X8lFcrmIfzK2Z QMINe4aN7+TokvW05zhyKD4n8/x/w+cEMSk/lnvZGnW1UFKBClb/DyoVxQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFBOUvuPdXtOFDzusJC696CGS4JxAMB8GA1UdIwQY MBaAFDB/X+J0Citt5MNwnSlkEVs8ln2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQt NGJhMmY4ZjFmODNiLzEvRTVTLTQ5MWUwNFVQTzZ3a0xyM29JWkxnbkVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQtNGJhMmY4ZjFmODNi LzEvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQA2XyYMA8E AgACMAkDBwAqApAQAEUwDQYJKoZIhvcNAQELBQADggEBAM563o2KGZg5LEfD7+KU 4H5d0HzpdNGTv4tTfW8t58GkAf+6P1kugJI5qgICDkZ3qkSFdAld1vM3Y4kWCgV+ fMI3MVardWFwiJE2qZUdiVWonwHip7agk4FIgATqSU8enibBTY7IPydrwECH8g5r EYwX3Kvdd0qlDJWbBM0soG2Vl2+cos2NiDG2s94lqnAFCW7o51De8qk8EuGpBJNI W6I4SthbU/ZiKDYOATW2BP/wlntVMszwBPSBZErv4aYujv10wEI4/quNg+Mr1gmN qU2qBZ1GCkhsLy5itHuP1KnaCIONucN5pcR+S7vYP4WkAUqkkJSrNnNSuLQYf00l sdo= -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:38 2026 by rpki-client