This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/rP5nHNYdqEAJLssTyCJ5gOdDH2I.roa File: rP5nHNYdqEAJLssTyCJ5gOdDH2I.roa (raw, json) Hash identifier: yOB632STL0Rw5rEnDDsr56AUQMoN3jjS+xa8opoFvzA= Subject key identifier: AC:FE:67:1C:D6:1D:A8:40:09:2E:CB:13:C8:22:79:80:E7:43:1F:62 Certificate issuer: /CN=5aee92846fe38fde8e0f62948ca9883c1a29b755 Certificate serial: 019B7F15F2A0A78BEDCEF7594978ED211AAF Authority key identifier: 5A:EE:92:84:6F:E3:8F:DE:8E:0F:62:94:8C:A9:88:3C:1A:29:B7:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wu6ShG_jj96OD2KUjKmIPBopt1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/rP5nHNYdqEAJLssTyCJ5gOdDH2I.roa Signing time: Fri 02 Jan 2026 14:21:43 +0000 ROA not before: Fri 02 Jan 2026 14:21:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5400 IP address blocks: 192.109.52.0/24 maxlen: 24 2a0c:7c80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft rsync://rpki.ripe.net/repository/DEFAULT/Wu6ShG_jj96OD2KUjKmIPBopt1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:f2:a0:a7:8b:ed:ce:f7:59:49:78:ed:21:1a:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5aee92846fe38fde8e0f62948ca9883c1a29b755 Validity Not Before: Jan 2 14:21:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=acfe671cd61da840092ecb13c8227980e7431f62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:48:04:c3:9f:2b:b9:ca:15:40:62:62:4b:22: 17:f1:2a:85:59:9b:77:0d:f2:ac:78:88:69:ff:5a: 4d:bb:1a:b9:08:35:86:60:45:85:7c:1c:73:9e:1a: 9b:43:3e:d7:cf:e0:74:12:d6:2b:ef:ef:dc:4e:d3: 4f:72:b9:9b:ab:91:17:77:24:f9:7f:8a:3a:2c:bf: c3:35:11:6c:fd:c7:3d:2d:19:0b:04:9c:17:5b:25: 97:ed:0d:0d:21:e0:76:c7:c0:71:25:97:84:bc:ab: ed:ba:8b:b4:9e:d2:d2:a6:dc:42:9a:81:7f:70:d4: 4e:e4:c6:d2:92:72:1b:d1:0b:46:3b:15:b2:6d:04: c7:fb:3e:b9:eb:2e:d9:3b:a1:a0:6a:c4:19:8f:53: 53:0c:66:8a:b4:3f:75:3c:eb:bd:bf:a3:8d:3b:a6: 12:44:89:19:11:6a:6e:d1:d2:e1:a9:85:a4:40:56: 6d:d6:cf:63:f7:95:d8:60:86:bb:8f:64:28:a5:f2: e2:5b:79:68:06:e8:16:9d:20:01:34:35:34:0d:66: fe:48:57:0d:75:82:d7:14:59:b2:18:79:6a:e5:5a: f5:fc:70:d2:7b:4e:43:87:c2:3b:6c:0f:dd:e0:5c: 8d:eb:42:d6:f4:31:11:3a:a8:93:39:cb:be:25:20: 29:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:FE:67:1C:D6:1D:A8:40:09:2E:CB:13:C8:22:79:80:E7:43:1F:62 X509v3 Authority Key Identifier: keyid:5A:EE:92:84:6F:E3:8F:DE:8E:0F:62:94:8C:A9:88:3C:1A:29:B7:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wu6ShG_jj96OD2KUjKmIPBopt1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/rP5nHNYdqEAJLssTyCJ5gOdDH2I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.109.52.0/24 IPv6: 2a0c:7c80::/29 Signature Algorithm: sha256WithRSAEncryption 48:6c:7c:bb:1a:63:31:53:9f:d7:39:ee:f2:3e:7d:3b:ef:5a: df:17:70:0b:80:cf:f1:65:50:38:c5:64:16:b9:cb:85:69:8a: d1:82:2a:b0:16:7b:18:84:2f:ac:a5:ce:d7:fe:d2:f9:e5:b6: ae:8c:e2:19:a8:8b:59:cc:29:09:df:5a:53:61:fa:4c:37:92: bc:8c:a2:b1:9c:8f:d5:f1:d7:f2:a3:f3:7a:fd:f5:63:1a:20: 8e:22:d3:c0:0b:2b:13:eb:f3:f5:1c:95:6a:08:8b:40:92:d9: f3:ba:7e:50:e6:fa:9b:b2:b5:18:ca:f1:d7:0f:67:6b:d1:52: 40:c3:be:b7:2b:48:c9:41:6e:2b:d9:33:7e:6a:50:db:4e:2f: f3:c5:7d:1f:7f:37:1f:dc:85:7e:ff:bd:20:a1:41:91:82:c9: 6c:74:89:6f:b3:6c:20:b0:97:69:40:14:aa:b0:e1:fd:a9:57: c8:ee:a3:8a:e5:75:78:ca:c5:2b:e9:ac:96:7e:7c:ae:1c:70: c7:9b:37:0a:cc:8e:26:cb:2a:86:fc:d8:3e:5d:73:c3:14:44: 96:5c:e1:17:92:72:7d:86:e6:13:bc:69:9f:b7:78:18:d9:21: 90:7a:8a:2a:51:5f:63:82:5d:87:86:53:21:d6:e5:fe:cf:e5: 1f:bc:25:49 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/FfKgp4vtzvdZSXjtIRqvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhZWU5Mjg0NmZlMzhmZGU4ZTBmNjI5NDhjYTk4ODNjMWEy OWI3NTUwHhcNMjYwMTAyMTQyMTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhY2ZlNjcxY2Q2MWRhODQwMDkyZWNiMTNjODIyNzk4MGU3NDMxZjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEgEw58rucoVQGJiSyIX8SqFWZt3 DfKseIhp/1pNuxq5CDWGYEWFfBxznhqbQz7Xz+B0EtYr7+/cTtNPcrmbq5EXdyT5 f4o6LL/DNRFs/cc9LRkLBJwXWyWX7Q0NIeB2x8BxJZeEvKvtuou0ntLSptxCmoF/ cNRO5MbSknIb0QtGOxWybQTH+z656y7ZO6GgasQZj1NTDGaKtD91POu9v6ONO6YS RIkZEWpu0dLhqYWkQFZt1s9j95XYYIa7j2QopfLiW3loBugWnSABNDU0DWb+SFcN dYLXFFmyGHlq5Vr1/HDSe05Dh8I7bA/d4FyN60LW9DEROqiTOcu+JSApxQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKz+ZxzWHahACS7LE8gieYDnQx9iMB8GA1UdIwQY MBaAFFrukoRv44/ejg9ilIypiDwaKbdVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3U2U2hHX2pqOTZPRDJLVWpLbUlQQm9wdDFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8xZGIwY2ItNzlmZC00ZDY5LTk1MTUt NDJmY2ZiNzU1NzQ0LzEvclA1bkhOWWRxRUFKTHNzVHlDSjVnT2RESDJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC8xZGIwY2ItNzlmZC00ZDY5LTk1MTUtNDJmY2ZiNzU1NzQ0 LzEvV3U2U2hHX2pqOTZPRDJLVWpLbUlQQm9wdDFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwG00MA0E AgACMAcDBQMqDHyAMA0GCSqGSIb3DQEBCwUAA4IBAQBIbHy7GmMxU5/XOe7yPn07 71rfF3ALgM/xZVA4xWQWucuFaYrRgiqwFnsYhC+spc7X/tL55baujOIZqItZzCkJ 31pTYfpMN5K8jKKxnI/V8dfyo/N6/fVjGiCOItPACysT6/P1HJVqCItAktnzun5Q 5vqbsrUYyvHXD2dr0VJAw763K0jJQW4r2TN+alDbTi/zxX0ffzcf3IV+/70goUGR gslsdIlvs2wgsJdpQBSqsOH9qVfI7qOK5XV4ysUr6ayWfnyuHHDHmzcKzI4myyqG /Ng+XXPDFESWXOEXknJ9huYTvGmft3gY2SGQeooqUV9jgl2HhlMh1uX+z+UfvCVJ -----END CERTIFICATE-----Generated at Sun Jan 25 10:20:02 2026 by rpki-client