This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/DNw48YVZHSvMBEUuvya7j6ydIIE.roa File: DNw48YVZHSvMBEUuvya7j6ydIIE.roa (raw, json) Hash identifier: GQAHxbg19rDLpPVxP7BsuOIaocVhRmeV7czR8XW3KEM= Subject key identifier: 0C:DC:38:F1:85:59:1D:2B:CC:04:45:2E:BF:26:BB:8F:AC:9D:20:81 Certificate issuer: /CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba Certificate serial: 019B79ED4F39E30E4AD6B55913DB02366C04 Authority key identifier: E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/DNw48YVZHSvMBEUuvya7j6ydIIE.roa Signing time: Thu 01 Jan 2026 14:19:14 +0000 ROA not before: Thu 01 Jan 2026 14:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198187 IP address blocks: 5.252.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:4f:39:e3:0e:4a:d6:b5:59:13:db:02:36:6c:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba Validity Not Before: Jan 1 14:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0cdc38f185591d2bcc04452ebf26bb8fac9d2081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:cb:57:42:94:51:b2:fa:a4:c3:75:2b:ab:74: 6a:59:65:84:77:aa:90:ff:2b:46:bd:e1:fd:01:dd: c2:f0:ad:79:98:14:47:03:f3:49:a5:ca:f5:ac:b2: b2:03:a7:a5:68:9c:bf:4f:30:9a:29:92:c0:f6:db: 11:34:bc:ec:52:72:cb:ff:2f:18:42:fe:53:01:e0: a6:a5:83:8a:2e:6b:49:c1:83:f8:39:d9:b1:25:77: 04:4a:a1:bb:fb:7e:b5:4b:9a:e1:8d:98:47:d6:c5: c6:bd:5e:c7:1f:e7:8e:6f:b1:41:08:8e:25:52:58: f4:1f:81:ad:22:da:1e:8e:dc:83:91:ea:57:7d:f1: dd:49:9b:8b:0a:53:b1:b5:76:fd:2d:53:a1:5e:12: 0d:75:70:98:4e:c9:fb:c3:d5:cd:ff:1d:aa:d0:9f: 9d:49:f9:18:0c:01:54:ad:55:7d:fb:ba:08:ab:06: 4e:2c:75:d0:50:de:23:bc:2a:3a:68:38:1e:bb:ac: 71:b8:d7:32:1a:e2:44:11:6b:8c:e2:65:28:19:fb: 14:bd:06:dd:de:ee:98:d2:09:72:39:9c:bd:34:87: 34:c1:24:d2:38:f5:df:cf:85:1a:c2:a5:2a:e0:14: 76:0a:83:b5:29:34:79:3c:68:ef:f3:9a:82:34:4d: cd:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:DC:38:F1:85:59:1D:2B:CC:04:45:2E:BF:26:BB:8F:AC:9D:20:81 X509v3 Authority Key Identifier: keyid:E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/DNw48YVZHSvMBEUuvya7j6ydIIE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.252.214.0/24 Signature Algorithm: sha256WithRSAEncryption 26:d6:7c:1d:02:25:a5:a6:48:9f:1d:bb:81:26:4e:b4:6c:7a: 02:f6:f8:bd:a5:47:a5:5d:ae:79:f9:6d:f2:81:b7:b5:f4:4b: fa:e4:4d:46:aa:79:fa:cc:e9:7b:2d:c3:c4:87:64:b6:0a:da: b0:6c:cd:7f:3f:f5:a3:5b:48:7e:04:9d:ed:06:f1:0a:29:4b: c1:ec:0b:4a:07:81:77:10:75:61:f6:04:bf:5d:10:b0:a3:cd: 52:24:1d:f2:91:9b:ab:2a:d9:c8:20:cc:66:03:b6:e2:78:45: c4:0c:d6:f9:c7:93:51:84:97:c7:4a:4d:0f:ac:3d:99:4d:6d: 2a:ab:4a:10:7a:71:c3:6b:a3:6d:8b:e6:d1:02:76:41:75:40: cb:e9:1e:bb:90:97:aa:e4:b0:da:59:25:02:bf:71:81:78:21: 2c:6a:84:28:d8:e8:30:2c:31:a2:23:5b:af:db:91:42:06:14: 34:83:da:c3:1c:05:ac:62:6e:0d:44:50:07:24:b2:88:bd:49: 8d:e5:3e:ff:7a:03:41:e4:a9:e0:76:61:59:65:c9:e7:b4:ef: c6:96:8e:0e:65:43:07:39:0f:b2:a0:42:83:09:7e:aa:94:cd: 42:31:df:91:8f:8b:2f:b3:2f:94:2d:2b:88:80:6d:74:10:b1: 71:b6:ad:9d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57U854w5K1rVZE9sCNmwEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YmU4ZWZlYzFmYjAzZDhhZjk3OWFmMWNiYTEzYTA4NDVh N2IwYmEwHhcNMjYwMTAxMTQxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwY2RjMzhmMTg1NTkxZDJiY2MwNDQ1MmViZjI2YmI4ZmFjOWQyMDgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MtXQpRRsvqkw3Urq3RqWWWEd6qQ /ytGveH9Ad3C8K15mBRHA/NJpcr1rLKyA6elaJy/TzCaKZLA9tsRNLzsUnLL/y8Y Qv5TAeCmpYOKLmtJwYP4OdmxJXcESqG7+361S5rhjZhH1sXGvV7HH+eOb7FBCI4l Ulj0H4GtItoejtyDkepXffHdSZuLClOxtXb9LVOhXhINdXCYTsn7w9XN/x2q0J+d SfkYDAFUrVV9+7oIqwZOLHXQUN4jvCo6aDgeu6xxuNcyGuJEEWuM4mUoGfsUvQbd 3u6Y0glyOZy9NIc0wSTSOPXfz4UawqUq4BR2CoO1KTR5PGjv85qCNE3NhwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAzcOPGFWR0rzARFLr8mu4+snSCBMB8GA1UdIwQY MBaAFOS+jv7B+wPYr5ea8cuhOghFp7C6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUt ZGZiZmEzZmNmMDIxLzEvRE53NDhZVlpIU3ZNQkVVdXZ5YTdqNnlkSUlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUtZGZiZmEzZmNmMDIx LzEvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABfzWMA0G CSqGSIb3DQEBCwUAA4IBAQAm1nwdAiWlpkifHbuBJk60bHoC9vi9pUelXa55+W3y gbe19Ev65E1Gqnn6zOl7LcPEh2S2CtqwbM1/P/WjW0h+BJ3tBvEKKUvB7AtKB4F3 EHVh9gS/XRCwo81SJB3ykZurKtnIIMxmA7bieEXEDNb5x5NRhJfHSk0PrD2ZTW0q q0oQenHDa6Nti+bRAnZBdUDL6R67kJeq5LDaWSUCv3GBeCEsaoQo2OgwLDGiI1uv 25FCBhQ0g9rDHAWsYm4NRFAHJLKIvUmN5T7/egNB5KngdmFZZcnntO/Glo4OZUMH OQ+yoEKDCX6qlM1CMd+Rj4svsy+ULSuIgG10ELFxtq2d -----END CERTIFICATE-----Generated at Mon Jan 26 05:01:31 2026 by rpki-client