This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/5pLQrCDn5D8bVqkdzuifJBqlex0.roa File: 5pLQrCDn5D8bVqkdzuifJBqlex0.roa (raw, json) Hash identifier: 0MwCURQ0Xhqkz3sD1+rb90Gix+uAv8BcWMGW8cyLKN4= Subject key identifier: E6:92:D0:AC:20:E7:E4:3F:1B:56:A9:1D:CE:E8:9F:24:1A:A5:7B:1D Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B783466CE56983E8628D1B5D14191CF46 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/5pLQrCDn5D8bVqkdzuifJBqlex0.roa Signing time: Thu 01 Jan 2026 06:17:38 +0000 ROA not before: Thu 01 Jan 2026 06:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49419 IP address blocks: 193.235.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:66:ce:56:98:3e:86:28:d1:b5:d1:41:91:cf:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e692d0ac20e7e43f1b56a91dcee89f241aa57b1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:65:48:f7:b8:95:ae:19:0b:a0:18:fd:f0:77: d0:f2:43:09:f4:f5:83:2d:02:f1:b5:61:f0:d2:01: 39:48:fd:e2:94:b1:13:72:9b:e8:2f:93:a7:be:56: 30:96:15:f5:75:33:9b:3c:b2:91:00:2a:93:ce:06: 10:ff:a3:ce:83:f0:8b:40:a2:4e:60:bb:77:cd:81: 17:f2:b6:87:47:a0:6f:5a:1e:a2:f9:2c:d3:21:e5: d4:4f:40:b7:08:b7:a8:94:9d:58:14:f7:bc:20:c1: fb:d6:13:7d:78:02:6e:cb:ec:60:e5:3b:3d:21:be: dc:08:23:81:5b:d5:3a:7d:4b:a4:15:3e:54:44:31: 0c:d6:68:59:41:09:20:f9:a6:e3:0d:13:03:9d:2a: 4f:55:65:79:10:55:31:88:93:b2:13:4b:ab:85:86: 11:f5:c6:72:da:6c:2e:9a:a7:6e:92:14:68:00:b0: de:8a:df:85:2a:3c:03:0d:bc:7b:80:11:5a:93:00: 01:48:59:55:ae:6a:4f:3a:d7:ba:96:08:21:df:b2: 3a:85:74:e1:f3:4b:fc:d5:19:c4:cb:d6:c7:f3:3a: 4b:5a:68:99:60:ad:da:47:3e:a3:f6:16:36:69:11: bf:13:33:42:60:af:e3:e2:c6:41:b5:4d:46:05:2c: 37:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:92:D0:AC:20:E7:E4:3F:1B:56:A9:1D:CE:E8:9F:24:1A:A5:7B:1D X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/5pLQrCDn5D8bVqkdzuifJBqlex0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.235.154.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:19:9d:6b:3e:e2:de:19:3a:bb:8f:09:1a:17:c7:54:b4:57: 85:2b:e2:81:9a:e1:73:2d:cd:cb:38:46:eb:5f:ef:a3:ce:d0: f6:8a:f0:7e:7d:91:3c:2f:5b:0f:ed:b6:2a:e5:b9:a6:92:08: 3d:d0:dc:46:72:8b:40:1d:a4:3e:1e:8a:ef:8a:31:51:fc:98: f7:9f:15:4a:77:bc:b6:1d:91:d3:cd:1d:8b:c1:06:d0:d4:13: 48:4b:74:e1:b7:69:44:7e:59:49:b7:1b:b7:f7:79:22:ef:18: a3:98:5d:ed:ea:65:61:2f:6e:48:f0:2e:81:72:f2:66:95:aa: ed:f9:3c:93:c6:4f:70:0a:93:0b:52:7b:58:d2:5c:b0:7d:fd: 06:a7:a5:7c:9d:7a:11:15:40:50:ea:f3:79:02:3b:50:fa:30: 9e:e1:97:68:0a:45:45:a4:46:35:47:1c:65:c5:5b:10:0d:d8: 63:0b:5d:13:2b:e3:7e:63:51:4c:4f:c2:ca:ad:80:97:44:4f: 78:e4:a7:2b:43:d5:8a:59:f5:63:06:48:5b:74:18:0c:2a:b8: e5:1e:de:1d:e3:84:9d:54:c7:aa:ef:1a:bd:02:56:b9:90:3d: d8:62:d7:f1:81:fa:e6:49:90:69:cc:e0:42:d9:62:0b:11:e0: a2:e9:d2:bc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NGbOVpg+hijRtdFBkc9GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjkyZDBhYzIwZTdlNDNmMWI1NmE5MWRjZWU4OWYyNDFhYTU3YjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWVI97iVrhkLoBj98HfQ8kMJ9PWD LQLxtWHw0gE5SP3ilLETcpvoL5OnvlYwlhX1dTObPLKRACqTzgYQ/6POg/CLQKJO YLt3zYEX8raHR6BvWh6i+SzTIeXUT0C3CLeolJ1YFPe8IMH71hN9eAJuy+xg5Ts9 Ib7cCCOBW9U6fUukFT5URDEM1mhZQQkg+abjDRMDnSpPVWV5EFUxiJOyE0urhYYR 9cZy2mwumqdukhRoALDeit+FKjwDDbx7gBFakwABSFlVrmpPOte6lggh37I6hXTh 80v81RnEy9bH8zpLWmiZYK3aRz6j9hY2aRG/EzNCYK/j4sZBtU1GBSw32QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOaS0Kwg5+Q/G1apHc7onyQapXsdMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvNXBMUXJDRG41RDhiVnFrZHp1aWZKQnFsZXgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAweuaMA0G CSqGSIb3DQEBCwUAA4IBAQA7GZ1rPuLeGTq7jwkaF8dUtFeFK+KBmuFzLc3LOEbr X++jztD2ivB+fZE8L1sP7bYq5bmmkgg90NxGcotAHaQ+HorvijFR/Jj3nxVKd7y2 HZHTzR2LwQbQ1BNIS3Tht2lEfllJtxu393ki7xijmF3t6mVhL25I8C6BcvJmlart +TyTxk9wCpMLUntY0lywff0Gp6V8nXoRFUBQ6vN5AjtQ+jCe4ZdoCkVFpEY1Rxxl xVsQDdhjC10TK+N+Y1FMT8LKrYCXRE945KcrQ9WKWfVjBkhbdBgMKrjlHt4d44Sd VMeq7xq9Ala5kD3YYtfxgfrmSZBpzOBC2WILEeCi6dK8 -----END CERTIFICATE-----Generated at Sun Jan 25 09:03:46 2026 by rpki-client