This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/5ovyXW66FMFmM04hnCYQuTdPbDs.roa File: 5ovyXW66FMFmM04hnCYQuTdPbDs.roa (raw, json) Hash identifier: SJtk0xAZ//VsBgvIWTtE8Cera1hdejrKmhHRvfx1y+Y= Subject key identifier: E6:8B:F2:5D:6E:BA:14:C1:66:33:4E:21:9C:26:10:B9:37:4F:6C:3B Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad Certificate serial: 019BC60D4FAD26902A3C399F99858D1077B7 Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/5ovyXW66FMFmM04hnCYQuTdPbDs.roa Signing time: Fri 16 Jan 2026 09:05:19 +0000 ROA not before: Fri 16 Jan 2026 09:05:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209372 IP address blocks: 72.56.128.0/18 maxlen: 24 72.56.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c6:0d:4f:ad:26:90:2a:3c:39:9f:99:85:8d:10:77:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad Validity Not Before: Jan 16 09:05:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e68bf25d6eba14c166334e219c2610b9374f6c3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ee:af:92:a0:6f:39:88:0c:5b:d2:43:d6:1a: ae:c1:ab:50:f1:de:75:51:7b:3d:dc:b3:a0:5b:5f: 63:ec:6f:36:9e:8b:25:26:74:40:06:cd:fb:fd:1d: 57:2a:02:3a:2b:da:6e:85:a7:43:f3:6b:de:59:da: cb:c7:c2:9d:7f:7f:2b:67:86:56:d8:f1:e6:af:bc: 45:45:e6:ae:01:3f:94:49:7e:68:8d:3e:a3:0e:b8: 7f:0d:0f:26:35:a5:f3:b1:77:62:d2:4b:5b:8d:f0: 1d:e4:ab:cc:9f:79:c5:82:d1:aa:ce:53:79:af:eb: bf:f7:89:ba:05:64:98:d2:42:89:c9:68:fc:99:93: f2:0f:22:b4:3d:b5:ab:3f:d6:f1:70:fa:e1:e5:aa: 84:81:25:77:ca:d7:4a:6c:13:da:75:d8:26:7a:6b: 12:a6:d6:ba:26:cf:22:0e:86:e9:54:7e:68:b7:fb: a8:1c:c7:35:30:66:db:b0:40:2f:65:e3:c1:c0:03: 8a:fa:f3:d2:42:6e:a5:fc:09:f5:35:f3:3f:53:07: 02:24:3c:3d:80:c0:39:25:09:67:4b:95:34:f4:ba: d5:b9:1b:b5:1f:38:7d:27:9a:71:a3:65:6c:97:4c: 28:97:35:a0:23:3d:d5:20:5c:28:c4:66:aa:16:5c: 1c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:8B:F2:5D:6E:BA:14:C1:66:33:4E:21:9C:26:10:B9:37:4F:6C:3B X509v3 Authority Key Identifier: keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/5ovyXW66FMFmM04hnCYQuTdPbDs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 72.56.128.0/17 Signature Algorithm: sha256WithRSAEncryption 73:28:2c:72:81:75:e5:fb:9b:ea:03:15:6e:1b:be:34:bc:b4: c2:12:51:0f:1b:fa:33:4d:7e:65:ff:81:17:a6:0b:46:8e:ce: 3e:c1:b3:71:a0:e4:0d:af:58:89:68:0d:9f:23:30:f2:35:26: 7d:2e:8d:78:fd:00:2b:a3:a3:2f:be:b5:66:53:d5:ea:16:97: 73:65:77:54:71:0b:e3:ed:b0:13:a7:00:3c:9d:b6:cd:11:44: a5:b7:2d:c5:23:94:0d:fe:ea:fd:9e:14:2a:6d:48:e6:48:cd: 03:69:93:c7:ea:c6:8a:96:f5:bf:02:26:cc:8d:dd:13:37:48: 09:6a:e9:40:87:f4:5f:f7:5a:2a:45:39:ee:9f:b8:20:fa:b0: 3b:63:7b:5a:af:28:e9:8f:32:66:e5:18:76:c4:96:29:63:28: ca:79:d4:6c:77:5f:ac:e9:b3:7b:72:7a:60:cf:d5:57:e7:db: bc:73:00:b5:ca:db:9b:4b:78:97:82:20:d8:de:6e:93:f0:70: aa:e6:18:45:5b:f3:80:13:82:20:52:8c:73:2f:a3:85:31:1b: 4f:68:f3:6b:78:ad:58:d9:2e:72:7f:a2:46:74:ef:09:6f:4f: 07:f7:89:7f:2d:76:a4:fc:fd:27:9b:83:2b:d5:a7:b9:8e:84: 6e:83:ea:32 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvGDU+tJpAqPDmfmYWNEHe3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3MzQyNTcyNGNhZTI3M2YyOTYzMDYwZGM4NjVjNmYwYjA0 MjVjYWQwHhcNMjYwMTE2MDkwNTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjhiZjI1ZDZlYmExNGMxNjYzMzRlMjE5YzI2MTBiOTM3NGY2YzNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6e6vkqBvOYgMW9JD1hquwatQ8d51 UXs93LOgW19j7G82noslJnRABs37/R1XKgI6K9puhadD82veWdrLx8Kdf38rZ4ZW 2PHmr7xFReauAT+USX5ojT6jDrh/DQ8mNaXzsXdi0ktbjfAd5KvMn3nFgtGqzlN5 r+u/94m6BWSY0kKJyWj8mZPyDyK0PbWrP9bxcPrh5aqEgSV3ytdKbBPaddgmemsS pta6Js8iDobpVH5ot/uoHMc1MGbbsEAvZePBwAOK+vPSQm6l/An1NfM/UwcCJDw9 gMA5JQlnS5U09LrVuRu1Hzh9J5pxo2Vsl0wolzWgIz3VIFwoxGaqFlwcdQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOaL8l1uuhTBZjNOIZwmELk3T2w7MB8GA1UdIwQY MBaAFPc0JXJMric/KWMGDchlxvCwQlytMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85ZjA5YWEtZGQ1ZS00ZTA2LWIyOGUt ZTg3MWIyMTc5MGRlLzEvNW92eVhXNjZGTUZtTTA0aG5DWVF1VGRQYkRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85ZjA5YWEtZGQ1ZS00ZTA2LWIyOGUtZTg3MWIyMTc5MGRl LzEvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHSDiAMA0G CSqGSIb3DQEBCwUAA4IBAQBzKCxygXXl+5vqAxVuG740vLTCElEPG/ozTX5l/4EX pgtGjs4+wbNxoOQNr1iJaA2fIzDyNSZ9Lo14/QAro6MvvrVmU9XqFpdzZXdUcQvj 7bATpwA8nbbNEUSlty3FI5QN/ur9nhQqbUjmSM0DaZPH6saKlvW/AibMjd0TN0gJ aulAh/Rf91oqRTnun7gg+rA7Y3taryjpjzJm5Rh2xJYpYyjKedRsd1+s6bN7cnpg z9VX59u8cwC1ytubS3iXgiDY3m6T8HCq5hhFW/OAE4IgUoxzL6OFMRtPaPNreK1Y 2S5yf6JGdO8Jb08H94l/LXak/P0nm4Mr1ae5joRug+oy -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:50 2026 by rpki-client