This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5ZP4elvUNRXzjNjwomfmX04GBdQ.roa File: 5ZP4elvUNRXzjNjwomfmX04GBdQ.roa (raw, json) Hash identifier: YR80JqOL0QlReW0oAqdT62tW37GZp6htoO/zykr39rI= Subject key identifier: E5:93:F8:7A:5B:D4:35:15:F3:8C:D8:F0:A2:67:E6:5F:4E:06:05:D4 Certificate issuer: /CN=e58024b729d99f05133ec6d14390c73eb36db99e Certificate serial: 019ADFAE38C87300195D43A21C51D8CB2347 Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5ZP4elvUNRXzjNjwomfmX04GBdQ.roa Signing time: Tue 02 Dec 2025 15:28:48 +0000 ROA not before: Tue 02 Dec 2025 15:28:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 57043 IP address blocks: 80.91.65.0/24 maxlen: 24 80.91.88.0/24 maxlen: 24 81.2.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:df:ae:38:c8:73:00:19:5d:43:a2:1c:51:d8:cb:23:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e Validity Not Before: Dec 2 15:28:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e593f87a5bd43515f38cd8f0a267e65f4e0605d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:02:9c:bd:25:ca:48:b8:26:42:05:71:05:2e: 89:c4:8b:9b:97:3b:90:6c:dd:d6:04:1b:5d:91:6b: 6c:6d:b8:e2:15:d3:ff:da:59:29:c8:4e:b0:f7:5d: c3:87:a8:4b:eb:16:c9:ce:04:47:3f:af:03:90:fb: 45:80:f6:60:ec:45:4b:6f:ef:0c:d3:58:4a:34:7a: 5f:db:14:a5:60:13:e6:43:ba:ea:49:7e:37:2b:b4: 6b:73:67:7a:5c:79:a0:2d:95:1c:fb:44:6c:96:bf: fc:0e:95:88:e5:98:54:ec:d2:70:b3:a1:2c:eb:cf: 0a:e9:d7:d5:57:3a:81:b2:fa:98:bf:a5:7d:fc:7c: 8e:21:70:a3:ed:1e:7f:a1:1d:fe:75:b9:ab:b4:ed: 09:a7:b5:d4:5d:e7:21:b9:76:89:87:5d:9d:20:ac: 6a:67:a0:b5:8d:80:9e:82:76:77:01:f2:eb:80:ed: 24:15:5a:57:66:56:ad:b5:ff:48:6e:84:14:24:54: 4e:c1:6d:5e:10:33:b3:73:77:af:44:4a:6d:55:78: f1:7c:6f:a8:d6:ea:5d:d1:54:cf:df:5c:85:46:1a: 38:66:7c:d8:bd:5f:eb:7d:6b:f7:a1:7c:8b:96:14: 64:9e:65:f4:be:49:ab:83:ac:6e:e3:05:a5:f5:60: f6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:93:F8:7A:5B:D4:35:15:F3:8C:D8:F0:A2:67:E6:5F:4E:06:05:D4 X509v3 Authority Key Identifier: keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5ZP4elvUNRXzjNjwomfmX04GBdQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.91.65.0/24 80.91.88.0/24 81.2.131.0/24 Signature Algorithm: sha256WithRSAEncryption 49:42:98:5a:a5:c9:dd:00:88:33:71:7c:dc:c7:39:9c:f2:56: f2:8e:ae:4a:84:d8:f9:3a:b5:a3:a5:53:05:dd:3a:1f:fc:00: e0:b2:21:a4:de:48:99:e9:c2:e1:b0:d0:2d:43:d9:78:35:a0: ab:82:d7:c8:83:7e:3d:a2:89:71:ce:bc:68:16:f8:d1:4b:8c: 0a:f5:c5:7c:fb:63:28:5e:7c:ed:81:58:f4:d9:11:64:75:17: 48:ce:4d:83:3b:2c:04:d9:21:25:30:6d:a0:9d:66:c1:52:2a: 2d:a2:60:2b:a1:08:70:99:35:c4:73:17:53:64:ee:14:45:54: 25:8f:3c:8c:9e:ef:ed:15:6e:07:59:b3:59:91:4a:42:d3:c2: 50:b9:54:aa:96:f0:38:b3:18:96:08:a9:32:72:e7:cd:96:20: 44:89:ac:bb:56:e9:87:09:8b:93:a7:db:f7:0d:19:ae:27:00: b3:db:d2:04:10:63:85:fd:a0:a3:33:7c:8c:2a:e6:33:b8:11: 4f:b9:af:e3:02:8a:5f:fb:d4:4d:ef:63:41:90:c9:b7:b0:60: 33:e7:96:51:c7:c7:52:a7:c9:68:1c:b2:4e:a4:05:63:4f:99: a3:3f:89:0d:bb:74:8b:2a:9d:2c:37:bf:b7:0c:fa:f8:e1:f6: 97:a4:97:83 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZrfrjjIcwAZXUOiHFHYyyNHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ODAyNGI3MjlkOTlmMDUxMzNlYzZkMTQzOTBjNzNlYjM2 ZGI5OWUwHhcNMjUxMjAyMTUyODQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTkzZjg3YTViZDQzNTE1ZjM4Y2Q4ZjBhMjY3ZTY1ZjRlMDYwNWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQKcvSXKSLgmQgVxBS6JxIublzuQ bN3WBBtdkWtsbbjiFdP/2lkpyE6w913Dh6hL6xbJzgRHP68DkPtFgPZg7EVLb+8M 01hKNHpf2xSlYBPmQ7rqSX43K7Rrc2d6XHmgLZUc+0Rslr/8DpWI5ZhU7NJws6Es 688K6dfVVzqBsvqYv6V9/HyOIXCj7R5/oR3+dbmrtO0Jp7XUXechuXaJh12dIKxq Z6C1jYCegnZ3AfLrgO0kFVpXZlattf9IboQUJFROwW1eEDOzc3evREptVXjxfG+o 1upd0VTP31yFRho4ZnzYvV/rfWv3oXyLlhRknmX0vkmrg6xu4wWl9WD2YwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFOWT+Hpb1DUV84zY8KJn5l9OBgXUMB8GA1UdIwQY MBaAFOWAJLcp2Z8FEz7G0UOQxz6zbbmeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9kNTYyOGEtZDliMS00ZGE5LWE3NDQt OTU2ZjZiNWM2MTcwLzEvNVpQNGVsdlVOUlh6ak5qd29tZm1YMDRHQmRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9kNTYyOGEtZDliMS00ZGE5LWE3NDQtOTU2ZjZiNWM2MTcw LzEvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUFtBAwQA UFtYAwQAUQKDMA0GCSqGSIb3DQEBCwUAA4IBAQBJQphapcndAIgzcXzcxzmc8lby jq5KhNj5OrWjpVMF3Tof/ADgsiGk3kiZ6cLhsNAtQ9l4NaCrgtfIg349oolxzrxo FvjRS4wK9cV8+2MoXnztgVj02RFkdRdIzk2DOywE2SElMG2gnWbBUiotomAroQhw mTXEcxdTZO4URVQljzyMnu/tFW4HWbNZkUpC08JQuVSqlvA4sxiWCKkycufNliBE iay7VumHCYuTp9v3DRmuJwCz29IEEGOF/aCjM3yMKuYzuBFPua/jAopf+9RN72NB kMm3sGAz55ZRx8dSp8loHLJOpAVjT5mjP4kNu3SLKp0sN7+3DPr44faXpJeD -----END CERTIFICATE-----Generated at Sat Dec 6 21:29:50 2025 by rpki-client