This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/u5TTHw1xs_VZmXq0SW0y3xO1cGU.roa File: u5TTHw1xs_VZmXq0SW0y3xO1cGU.roa (raw, json) Hash identifier: Dqfr/DYLvT8+a4pNm7nHH6jlz+8bHebHFDIps12J6io= Subject key identifier: BB:94:D3:1F:0D:71:B3:F5:59:99:7A:B4:49:6D:32:DF:13:B5:70:65 Certificate issuer: /CN=5e7c7736945c29a77bacd5b18b0ff58751117bad Certificate serial: 019B7F8530F5E2463D8B0DD855A9DEA323A0 Authority key identifier: 5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/u5TTHw1xs_VZmXq0SW0y3xO1cGU.roa Signing time: Fri 02 Jan 2026 16:23:13 +0000 ROA not before: Fri 02 Jan 2026 16:23:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48789 IP address blocks: 193.104.229.0/24 maxlen: 24 2a12:6cc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:30:f5:e2:46:3d:8b:0d:d8:55:a9:de:a3:23:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e7c7736945c29a77bacd5b18b0ff58751117bad Validity Not Before: Jan 2 16:23:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb94d31f0d71b3f559997ab4496d32df13b57065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:33:c8:cc:40:58:93:60:09:0d:56:cc:14:08: 6f:f0:f6:b6:b3:5f:47:3d:f2:21:6f:25:e2:64:d0: 43:26:47:8d:da:26:ac:7c:1c:db:4e:c0:4d:79:a7: fa:b7:f5:35:25:8c:8f:1b:39:4d:5b:eb:60:b7:d0: 68:11:eb:17:4c:04:8f:9c:8c:f9:44:f6:c6:74:e7: 3f:3c:81:a5:55:49:eb:c1:92:b1:80:c5:13:87:01: 3b:6c:bc:d2:94:2e:c7:bc:52:15:4c:d3:e4:5f:1e: f0:0f:cc:3a:db:09:72:fe:9f:11:5c:a7:63:87:58: ef:43:b8:4f:aa:40:a9:10:18:ab:ae:1b:10:f9:04: 58:90:23:2e:06:9e:86:dc:8f:f4:d6:da:cc:1e:bf: 69:31:80:39:ae:d8:19:c1:d0:5b:ca:88:5c:9f:90: 92:54:d7:e2:58:2b:b0:75:ff:fb:20:8f:d4:c2:ad: 98:b2:59:20:c5:89:c0:0c:4d:e2:8e:6b:3a:b8:01: 96:2a:78:5f:86:c1:64:8b:ea:a7:b0:d0:b9:4e:c2: a2:43:3d:2d:cd:09:b7:e9:ff:d2:84:3d:bb:5a:06: cd:4b:1d:24:70:23:e0:c9:18:40:56:77:c2:b1:6e: f7:0b:11:39:b7:87:27:f8:0e:ae:52:92:a5:3f:6a: be:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:94:D3:1F:0D:71:B3:F5:59:99:7A:B4:49:6D:32:DF:13:B5:70:65 X509v3 Authority Key Identifier: keyid:5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/u5TTHw1xs_VZmXq0SW0y3xO1cGU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.104.229.0/24 IPv6: 2a12:6cc0::/32 Signature Algorithm: sha256WithRSAEncryption 9d:c8:9c:d5:cc:2f:66:74:49:dc:c5:66:06:4d:bf:9e:c3:f5: 7e:c9:cd:1e:81:c3:9f:4d:df:dd:2b:59:9f:5a:25:e8:b2:9a: db:16:32:19:37:3e:2d:3c:18:ef:35:92:f3:95:47:61:b9:98: eb:0f:98:44:5a:ab:ca:ca:fb:75:a9:1d:9d:f0:b7:71:4e:85: 09:6e:78:10:cf:c1:82:a0:78:39:2f:e5:e6:0c:33:1b:98:c4: c5:f3:7c:cc:71:87:50:ac:ab:2e:0b:65:10:3b:de:05:15:e5: 67:fd:63:c1:dd:32:83:20:14:ba:a4:c0:2e:e2:94:ab:eb:68: 51:b9:8c:b9:de:b9:95:db:ff:d2:90:4a:fd:05:1e:63:50:64: 01:c2:2f:58:9c:dd:be:68:be:67:0a:c6:3c:a9:cc:ed:2c:b2: 50:68:c1:b7:06:48:90:1e:86:86:44:e3:3e:9b:8c:f4:52:27: 80:21:6f:39:08:8d:af:a3:6c:87:94:7a:ca:89:52:e9:1d:b6: 13:eb:55:b0:11:58:89:66:84:2e:6d:ba:36:39:7a:28:0b:da: 7e:1a:1e:9f:1c:71:f2:ce:58:58:0b:4e:95:2c:28:a0:18:88: c9:09:d4:fd:a2:06:24:55:df:40:dd:f6:af:de:b9:4f:a6:ef: dd:2e:b9:6e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/hTD14kY9iw3YVaneoyOgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlN2M3NzM2OTQ1YzI5YTc3YmFjZDViMThiMGZmNTg3NTEx MTdiYWQwHhcNMjYwMTAyMTYyMzEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjk0ZDMxZjBkNzFiM2Y1NTk5OTdhYjQ0OTZkMzJkZjEzYjU3MDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5TPIzEBYk2AJDVbMFAhv8Pa2s19H PfIhbyXiZNBDJkeN2iasfBzbTsBNeaf6t/U1JYyPGzlNW+tgt9BoEesXTASPnIz5 RPbGdOc/PIGlVUnrwZKxgMUThwE7bLzSlC7HvFIVTNPkXx7wD8w62wly/p8RXKdj h1jvQ7hPqkCpEBirrhsQ+QRYkCMuBp6G3I/01trMHr9pMYA5rtgZwdBbyohcn5CS VNfiWCuwdf/7II/Uwq2YslkgxYnADE3ijms6uAGWKnhfhsFki+qnsNC5TsKiQz0t zQm36f/ShD27WgbNSx0kcCPgyRhAVnfCsW73CxE5t4cn+A6uUpKlP2q+MQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFLuU0x8NcbP1WZl6tEltMt8TtXBlMB8GA1UdIwQY MBaAFF58dzaUXCmne6zVsYsP9YdREXutMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWG54M05wUmNLYWQ3ck5XeGl3XzFoMUVSZTYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS83YmRkMDctNmU1NS00YTA1LTlkMWIt ZWVlZGQ5OWI4Y2M0LzEvdTVUVEh3MXhzX1ZabVhxMFNXMHkzeE8xY0dVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS83YmRkMDctNmU1NS00YTA1LTlkMWItZWVlZGQ5OWI4Y2M0 LzEvWG54M05wUmNLYWQ3ck5XeGl3XzFoMUVSZTYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwWjlMA0E AgACMAcDBQAqEmzAMA0GCSqGSIb3DQEBCwUAA4IBAQCdyJzVzC9mdEncxWYGTb+e w/V+yc0egcOfTd/dK1mfWiXosprbFjIZNz4tPBjvNZLzlUdhuZjrD5hEWqvKyvt1 qR2d8LdxToUJbngQz8GCoHg5L+XmDDMbmMTF83zMcYdQrKsuC2UQO94FFeVn/WPB 3TKDIBS6pMAu4pSr62hRuYy53rmV2//SkEr9BR5jUGQBwi9YnN2+aL5nCsY8qczt LLJQaMG3BkiQHoaGROM+m4z0UieAIW85CI2vo2yHlHrKiVLpHbYT61WwEViJZoQu bbo2OXooC9p+Gh6fHHHyzlhYC06VLCigGIjJCdT9ogYkVd9A3fav3rlPpu/dLrlu -----END CERTIFICATE-----Generated at Mon Jan 26 02:44:08 2026 by rpki-client