This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/c-5WHUGe7Cokv7tp6uqgS70r8Ic.roa File: c-5WHUGe7Cokv7tp6uqgS70r8Ic.roa (raw, json) Hash identifier: DoQj2C6sdy5dVILWLV9HA8ZssSHksnBbLRNoxs++EvU= Subject key identifier: 73:EE:56:1D:41:9E:EC:2A:24:BF:BB:69:EA:EA:A0:4B:BD:2B:F0:87 Certificate issuer: /CN=5753c06290a371994d7577318685f5bc4a538d47 Certificate serial: 019B7910F416272808DC583155BF2FA0617C Authority key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/c-5WHUGe7Cokv7tp6uqgS70r8Ic.roa Signing time: Thu 01 Jan 2026 10:18:32 +0000 ROA not before: Thu 01 Jan 2026 10:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202766 IP address blocks: 158.172.140.0/23 maxlen: 23 158.172.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:f4:16:27:28:08:dc:58:31:55:bf:2f:a0:61:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5753c06290a371994d7577318685f5bc4a538d47 Validity Not Before: Jan 1 10:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=73ee561d419eec2a24bfbb69eaeaa04bbd2bf087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:2f:22:56:b8:76:6e:cc:53:18:f7:f0:b0:1f: 80:4e:13:cc:74:53:eb:30:e4:df:e6:86:75:d4:54: 4e:c0:cf:1e:9b:a6:ce:48:b2:c5:95:22:30:66:e1: 5e:f9:8c:90:4a:78:9c:71:2a:84:27:0d:dc:f0:78: 73:ee:48:48:f2:06:8d:04:db:8c:5c:04:fd:80:f5: 46:1a:66:5b:7e:d3:81:d8:a0:5c:eb:84:cf:eb:a1: 95:02:d9:b4:0c:0b:62:bc:45:e4:bb:b1:a4:d8:de: d6:d9:87:8a:b6:0a:e5:8a:53:a3:36:35:4b:fb:f1: c5:b2:c7:5c:2f:9e:53:8c:06:84:12:0b:45:27:e9: 2b:bf:08:26:cc:ee:94:77:13:e4:5f:05:ad:97:cb: 4a:3b:73:70:5d:23:8f:20:db:40:46:a5:c0:2b:8b: f5:83:2c:cb:97:d5:b1:1a:40:1f:a9:56:9b:e0:5e: 4c:69:8f:3a:f4:d6:d1:d0:ba:af:63:8e:de:8c:b0: 84:95:fa:0c:77:12:ad:2f:e5:a8:a7:f6:31:87:e4: 78:0b:61:66:96:79:00:56:d6:66:49:30:65:66:57: b9:84:99:4a:aa:0b:ae:8b:72:7e:4c:3f:9d:12:a1: f6:c2:61:78:20:5f:c7:14:03:22:2e:40:8f:1c:ca: cb:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:EE:56:1D:41:9E:EC:2A:24:BF:BB:69:EA:EA:A0:4B:BD:2B:F0:87 X509v3 Authority Key Identifier: keyid:57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/c-5WHUGe7Cokv7tp6uqgS70r8Ic.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.172.140.0-158.172.142.255 Signature Algorithm: sha256WithRSAEncryption b0:95:46:cf:83:b4:d0:99:db:36:7f:4b:31:9a:0a:32:65:08: 00:18:7e:fb:f3:6e:16:eb:b2:27:12:d0:e0:fb:28:be:33:f9: 42:cc:0d:75:89:44:55:04:ed:72:3f:42:29:5e:9e:da:95:09: 78:aa:db:20:1b:62:f5:7f:97:3f:90:03:07:c3:dd:8f:3c:b0: e6:bb:4d:b3:3d:9b:70:cd:95:db:ae:bf:81:16:70:44:be:84: d7:d2:6a:9c:09:fc:ba:0f:1c:9b:12:46:34:2f:52:fb:92:46: a4:36:09:9a:ce:04:20:eb:7f:2e:01:97:a1:12:00:55:3c:cd: dd:61:78:15:93:ec:fd:e4:e8:39:3a:1e:b5:bd:3c:b3:5f:d7: 7b:8c:1a:94:4a:15:03:5b:3a:1c:e9:76:f1:75:ff:28:c2:6d: 76:75:ae:c5:8f:7a:78:5c:eb:77:dd:ce:40:b9:e9:f8:95:a7: aa:28:57:49:f3:3f:19:d7:cb:aa:d9:18:e1:be:c3:cb:87:e7: d3:7c:50:f3:69:9d:5f:f2:fd:af:69:c8:7c:5b:2f:69:25:30: e3:87:46:7e:10:f6:65:42:79:61:85:9d:e3:a8:bb:34:90:33: e6:b7:5c:f3:85:e8:e7:cd:e2:68:d9:54:44:b8:e7:b9:2c:b6: a8:77:55:1c -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt5EPQWJygI3FgxVb8voGF8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NTNjMDYyOTBhMzcxOTk0ZDc1NzczMTg2ODVmNWJjNGE1 MzhkNDcwHhcNMjYwMTAxMTAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3M2VlNTYxZDQxOWVlYzJhMjRiZmJiNjllYWVhYTA0YmJkMmJmMDg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmi8iVrh2bsxTGPfwsB+AThPMdFPr MOTf5oZ11FROwM8em6bOSLLFlSIwZuFe+YyQSniccSqEJw3c8Hhz7khI8gaNBNuM XAT9gPVGGmZbftOB2KBc64TP66GVAtm0DAtivEXku7Gk2N7W2YeKtgrlilOjNjVL +/HFssdcL55TjAaEEgtFJ+krvwgmzO6UdxPkXwWtl8tKO3NwXSOPINtARqXAK4v1 gyzLl9WxGkAfqVab4F5MaY869NbR0LqvY47ejLCElfoMdxKtL+Wop/Yxh+R4C2Fm lnkAVtZmSTBlZle5hJlKqguui3J+TD+dEqH2wmF4IF/HFAMiLkCPHMrL9wIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFHPuVh1BnuwqJL+7aerqoEu9K/CHMB8GA1UdIwQY MBaAFFdTwGKQo3GZTXV3MYaF9bxKU41HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2It MWVkMTA5NTRiZDk2LzEvYy01V0hVR2U3Q29rdjd0cDZ1cWdTNzByOEljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2ItMWVkMTA5NTRiZDk2 LzEvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAKerIwD BACerI4wDQYJKoZIhvcNAQELBQADggEBALCVRs+DtNCZ2zZ/SzGaCjJlCAAYfvvz bhbrsicS0OD7KL4z+ULMDXWJRFUE7XI/QilentqVCXiq2yAbYvV/lz+QAwfD3Y88 sOa7TbM9m3DNlduuv4EWcES+hNfSapwJ/LoPHJsSRjQvUvuSRqQ2CZrOBCDrfy4B l6ESAFU8zd1heBWT7P3k6Dk6HrW9PLNf13uMGpRKFQNbOhzpdvF1/yjCbXZ1rsWP enhc63fdzkC56fiVp6ooV0nzPxnXy6rZGOG+w8uH59N8UPNpnV/y/a9pyHxbL2kl MOOHRn4Q9mVCeWGFneOouzSQM+a3XPOF6OfN4mjZVES457kstqh3VRw= -----END CERTIFICATE-----Generated at Mon Jan 26 01:42:06 2026 by rpki-client