This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/5ncwIjdV-lgqxsPk6TejDPmjLoU.roa File: 5ncwIjdV-lgqxsPk6TejDPmjLoU.roa (raw, json) Hash identifier: gvOpAQoTeSfO+y1nRziJ19qDe2iH3kf8RYDheGEeWc8= Subject key identifier: E6:77:30:22:37:55:FA:58:2A:C6:C3:E4:E9:37:A3:0C:F9:A3:2E:85 Certificate issuer: /CN=5dd39e1de18514bac2f5a23910f8c7d4672a0fd8 Certificate serial: 019B7CEE2670B59CE232FECEFA3D0941454A Authority key identifier: 5D:D3:9E:1D:E1:85:14:BA:C2:F5:A2:39:10:F8:C7:D4:67:2A:0F:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/5ncwIjdV-lgqxsPk6TejDPmjLoU.roa Signing time: Fri 02 Jan 2026 04:19:00 +0000 ROA not before: Fri 02 Jan 2026 04:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214255 IP address blocks: 213.254.186.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:26:70:b5:9c:e2:32:fe:ce:fa:3d:09:41:45:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd39e1de18514bac2f5a23910f8c7d4672a0fd8 Validity Not Before: Jan 2 04:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e67730223755fa582ac6c3e4e937a30cf9a32e85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:23:8a:31:c7:eb:0d:81:cf:75:f8:2b:39:38: c4:0c:75:b3:39:0e:a6:17:0b:45:03:f7:2f:44:ad: 46:e8:95:13:67:b3:5e:ac:fe:5c:21:4a:83:e1:a1: d2:2a:43:62:30:a3:f7:42:80:41:e0:93:54:6b:d6: 54:e8:ab:79:ef:b2:96:5e:af:d5:ca:26:c5:b4:44: 39:e0:fa:42:2d:72:81:12:26:6a:6f:91:e0:5c:d4: 96:a7:51:fa:f1:5b:49:63:26:fa:13:07:be:5a:19: 53:d8:23:9b:76:59:38:6d:e9:df:78:67:6a:f5:2c: 00:23:a2:e6:58:14:82:80:a1:30:a8:02:fb:cc:7f: ba:be:e8:cf:8e:64:3e:4b:1f:67:12:d6:13:62:67: 8a:51:09:a6:d7:a4:11:93:fe:0d:23:63:41:aa:e5: 14:e6:9e:e6:9c:8e:ab:e2:61:61:ac:ab:d1:75:cd: c0:37:fb:7a:cb:38:bd:fa:80:e9:17:b0:ef:c1:a3: 37:55:bc:0e:bc:31:28:ed:83:e6:16:38:a3:9b:41: c6:de:e2:ae:6c:11:3d:d8:fb:15:77:9d:6c:1e:97: f9:12:15:e3:f4:e7:af:ed:85:66:60:c0:df:b3:50: 10:c8:1c:cf:38:18:2f:d8:6d:2a:cf:0c:39:75:f8: f3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:77:30:22:37:55:FA:58:2A:C6:C3:E4:E9:37:A3:0C:F9:A3:2E:85 X509v3 Authority Key Identifier: keyid:5D:D3:9E:1D:E1:85:14:BA:C2:F5:A2:39:10:F8:C7:D4:67:2A:0F:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/5ncwIjdV-lgqxsPk6TejDPmjLoU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.254.186.0/23 Signature Algorithm: sha256WithRSAEncryption 31:29:28:93:b1:d5:2e:ba:ce:a4:1c:7e:13:66:b1:5a:b2:fd: 78:46:60:94:6a:b2:4a:f4:51:e0:c2:55:9a:b7:8d:55:be:0a: 6f:4b:7f:a7:cb:64:5e:13:5f:6b:21:cb:47:c9:97:17:a2:d4: 82:b8:3d:0f:21:a9:5a:da:ba:18:71:5a:40:3e:ae:67:69:24: f7:20:26:c7:9a:f8:db:f9:76:18:af:48:b5:63:6c:3a:b0:2f: 7a:79:8d:36:c4:b7:b4:59:3a:78:bb:08:fe:5b:84:83:f8:70: bf:01:06:10:4c:22:6f:6b:fe:93:79:98:ac:60:10:ce:2b:8f: ef:3a:e6:3c:d0:7b:4d:0d:8a:eb:ed:4e:36:5b:21:f3:b2:67: f2:54:3c:bf:36:86:12:b6:a2:fa:56:3b:63:ad:7b:d9:e4:b9: cc:70:fa:8a:6c:13:4c:79:2f:f7:44:d6:38:f1:94:d5:51:40: 03:fb:4b:3e:de:30:6a:ce:51:c1:7a:b5:ff:48:fd:12:cd:62: bb:8a:c9:ce:7e:04:e3:27:b2:b0:ac:e9:e4:8c:d1:b4:7d:67: 58:15:8b:76:56:77:fe:4d:d1:7a:1e:8d:f3:05:5f:f4:3c:f9: 90:fe:da:4e:d1:a6:0d:b9:30:4d:7a:be:e2:cd:ed:66:8a:77: 38:28:ef:ee -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87iZwtZziMv7O+j0JQUVKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDM5ZTFkZTE4NTE0YmFjMmY1YTIzOTEwZjhjN2Q0Njcy YTBmZDgwHhcNMjYwMTAyMDQxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjc3MzAyMjM3NTVmYTU4MmFjNmMzZTRlOTM3YTMwY2Y5YTMyZTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSOKMcfrDYHPdfgrOTjEDHWzOQ6m FwtFA/cvRK1G6JUTZ7NerP5cIUqD4aHSKkNiMKP3QoBB4JNUa9ZU6Kt577KWXq/V yibFtEQ54PpCLXKBEiZqb5HgXNSWp1H68VtJYyb6Ewe+WhlT2CObdlk4benfeGdq 9SwAI6LmWBSCgKEwqAL7zH+6vujPjmQ+Sx9nEtYTYmeKUQmm16QRk/4NI2NBquUU 5p7mnI6r4mFhrKvRdc3AN/t6yzi9+oDpF7DvwaM3VbwOvDEo7YPmFjijm0HG3uKu bBE92PsVd51sHpf5EhXj9Oev7YVmYMDfs1AQyBzPOBgv2G0qzww5dfjzWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOZ3MCI3VfpYKsbD5Ok3owz5oy6FMB8GA1UdIwQY MBaAFF3Tnh3hhRS6wvWiORD4x9RnKg/YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRPZUhlR0ZGTHJDOWFJNUVQakgxR2NxRDlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS85Njg2NWUtYzE3Ny00ODQ0LThkYzMt OWMyNmIwN2I3MThiLzEvNW5jd0lqZFYtbGdxeHNQazZUZWpEUG1qTG9VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS85Njg2NWUtYzE3Ny00ODQ0LThkYzMtOWMyNmIwN2I3MThi LzEvWGRPZUhlR0ZGTHJDOWFJNUVQakgxR2NxRDlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1f66MA0G CSqGSIb3DQEBCwUAA4IBAQAxKSiTsdUuus6kHH4TZrFasv14RmCUarJK9FHgwlWa t41VvgpvS3+ny2ReE19rIctHyZcXotSCuD0PIala2roYcVpAPq5naST3ICbHmvjb +XYYr0i1Y2w6sC96eY02xLe0WTp4uwj+W4SD+HC/AQYQTCJva/6TeZisYBDOK4/v OuY80HtNDYrr7U42WyHzsmfyVDy/NoYStqL6VjtjrXvZ5LnMcPqKbBNMeS/3RNY4 8ZTVUUAD+0s+3jBqzlHBerX/SP0SzWK7isnOfgTjJ7KwrOnkjNG0fWdYFYt2Vnf+ TdF6Ho3zBV/0PPmQ/tpO0aYNuTBNer7ize1minc4KO/u -----END CERTIFICATE-----Generated at Sun Jan 25 16:11:57 2026 by rpki-client