This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/5jCnir6W6gAd6_EDtQEmsCT7w14.roa File: 5jCnir6W6gAd6_EDtQEmsCT7w14.roa (raw, json) Hash identifier: 0wvxGHojLuaQ4hENlIsY48YCfJ44p5EM0SkFd7dB+g4= Subject key identifier: E6:30:A7:8A:BE:96:EA:00:1D:EB:F1:03:B5:01:26:B0:24:FB:C3:5E Certificate issuer: /CN=d0de618822b8af6f9ecaffcd7d5459b7cc11449a Certificate serial: 019B783532883331E745EA267D99A2A13DE0 Authority key identifier: D0:DE:61:88:22:B8:AF:6F:9E:CA:FF:CD:7D:54:59:B7:CC:11:44:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/5jCnir6W6gAd6_EDtQEmsCT7w14.roa Signing time: Thu 01 Jan 2026 06:18:30 +0000 ROA not before: Thu 01 Jan 2026 06:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15924 IP address blocks: 185.156.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:32:88:33:31:e7:45:ea:26:7d:99:a2:a1:3d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0de618822b8af6f9ecaffcd7d5459b7cc11449a Validity Not Before: Jan 1 06:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e630a78abe96ea001debf103b50126b024fbc35e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:0b:9e:4c:db:19:85:29:bd:0b:59:a8:dc:ba: ec:22:21:57:cb:9e:57:44:24:ce:09:e3:7d:bf:91: 26:d2:c0:61:70:20:98:fc:5b:ab:29:fa:73:6d:b9: da:2f:6f:d7:6a:b8:d1:ec:94:f4:9d:a4:bb:be:41: 09:59:71:9b:d4:77:b6:08:38:f0:0f:1c:c9:ed:ab: 3e:ab:a9:86:12:61:8d:b7:78:2a:41:93:80:8b:1b: d3:9b:ef:fa:6c:88:17:e0:56:20:d5:14:f6:a9:ec: 85:b0:25:3f:d5:68:72:4d:af:97:0e:6f:11:a0:3c: c1:04:f8:ee:1b:d9:42:c6:d7:eb:bf:6d:7f:0d:eb: b3:79:3b:a7:5c:71:eb:c8:2c:31:88:e0:44:31:f7: 62:87:53:bb:41:f8:9c:33:f7:e7:d7:20:a7:50:7a: da:80:a8:95:c1:d1:15:ae:86:83:0f:14:a4:27:c0: 30:5e:a6:c6:ce:1c:e3:f4:d6:84:e2:7a:e9:11:14: 84:14:a1:53:29:3f:e1:22:0c:0a:bf:03:d8:59:2c: de:2e:8d:6f:57:fc:c4:47:75:65:fd:99:5b:c1:64: f0:d0:f8:7f:f5:89:16:37:d1:3c:9c:6c:05:80:47: 7a:c4:89:79:0c:dd:89:12:c1:da:a6:7e:19:b9:97: c6:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:30:A7:8A:BE:96:EA:00:1D:EB:F1:03:B5:01:26:B0:24:FB:C3:5E X509v3 Authority Key Identifier: keyid:D0:DE:61:88:22:B8:AF:6F:9E:CA:FF:CD:7D:54:59:B7:CC:11:44:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/5jCnir6W6gAd6_EDtQEmsCT7w14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.156.4.0/24 Signature Algorithm: sha256WithRSAEncryption 53:e5:43:c1:43:02:e2:0b:cd:5a:52:47:ca:f4:77:0c:a4:d8: 08:64:74:09:74:8c:9b:91:60:24:02:33:bb:18:a5:91:40:84: 53:95:b7:0f:62:b8:50:8c:ec:cd:4c:57:48:09:aa:47:ec:83: 56:f5:f5:9a:2f:aa:e7:0c:f0:9a:3c:82:d6:17:6b:aa:09:ec: a9:86:bf:f4:15:e0:41:6c:fc:c4:39:1c:22:ce:50:4e:a6:5e: 5f:4b:bb:42:bc:4a:34:de:64:6d:05:29:61:18:c3:23:ba:ea: 8f:c2:d1:14:78:94:84:0b:ed:dd:4b:31:1e:00:bf:f4:02:ea: 89:07:1c:93:a9:86:3d:dc:dc:fe:70:c8:06:bc:e3:79:ca:d4: 91:9b:ec:f6:92:21:3e:9d:20:21:9b:59:69:7b:7d:6e:68:32: 6d:c2:8a:f9:0f:d7:25:7d:d1:d4:40:87:f0:1e:b4:0a:3a:0d: 75:a7:f4:03:81:92:dd:d1:57:ce:73:fa:6b:9c:91:14:b8:5a: 40:2c:18:cb:ce:11:02:43:18:7c:f9:5a:3c:81:ef:34:1c:8d: 72:f5:d1:fb:67:12:63:a0:d8:6b:b3:fb:1e:c4:72:7f:be:1a: be:35:45:ac:24:dc:b1:f4:22:59:f7:52:15:f2:1b:0e:45:1e: 5f:84:1a:31 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NTKIMzHnReomfZmioT3gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwZGU2MTg4MjJiOGFmNmY5ZWNhZmZjZDdkNTQ1OWI3Y2Mx MTQ0OWEwHhcNMjYwMTAxMDYxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjMwYTc4YWJlOTZlYTAwMWRlYmYxMDNiNTAxMjZiMDI0ZmJjMzVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8QueTNsZhSm9C1mo3LrsIiFXy55X RCTOCeN9v5Em0sBhcCCY/FurKfpzbbnaL2/XarjR7JT0naS7vkEJWXGb1He2CDjw DxzJ7as+q6mGEmGNt3gqQZOAixvTm+/6bIgX4FYg1RT2qeyFsCU/1WhyTa+XDm8R oDzBBPjuG9lCxtfrv21/DeuzeTunXHHryCwxiOBEMfdih1O7QficM/fn1yCnUHra gKiVwdEVroaDDxSkJ8AwXqbGzhzj9NaE4nrpERSEFKFTKT/hIgwKvwPYWSzeLo1v V/zER3Vl/ZlbwWTw0Ph/9YkWN9E8nGwFgEd6xIl5DN2JEsHapn4ZuZfGqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOYwp4q+luoAHevxA7UBJrAk+8NeMB8GA1UdIwQY MBaAFNDeYYgiuK9vnsr/zX1UWbfMEUSaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvME41aGlDSzRyMi1leXZfTmZWUlp0OHdSUkpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC81YWNkNzgtZDY3MC00MTkyLWI1NjQt MDQwZTA2NDRmYmU4LzEvNWpDbmlyNlc2Z0FkNl9FRHRRRW1zQ1Q3dzE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC81YWNkNzgtZDY3MC00MTkyLWI1NjQtMDQwZTA2NDRmYmU4 LzEvME41aGlDSzRyMi1leXZfTmZWUlp0OHdSUkpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZwEMA0G CSqGSIb3DQEBCwUAA4IBAQBT5UPBQwLiC81aUkfK9HcMpNgIZHQJdIybkWAkAjO7 GKWRQIRTlbcPYrhQjOzNTFdICapH7INW9fWaL6rnDPCaPILWF2uqCeyphr/0FeBB bPzEORwizlBOpl5fS7tCvEo03mRtBSlhGMMjuuqPwtEUeJSEC+3dSzEeAL/0AuqJ BxyTqYY93Nz+cMgGvON5ytSRm+z2kiE+nSAhm1lpe31uaDJtwor5D9clfdHUQIfw HrQKOg11p/QDgZLd0VfOc/prnJEUuFpALBjLzhECQxh8+Vo8ge80HI1y9dH7ZxJj oNhrs/sexHJ/vhq+NUWsJNyx9CJZ91IV8hsORR5fhBox -----END CERTIFICATE-----Generated at Mon Jan 26 00:37:25 2026 by rpki-client