This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/5Y6TfMJt3WV-rSYPCVPuolmkiEU.roa File: 5Y6TfMJt3WV-rSYPCVPuolmkiEU.roa (raw, json) Hash identifier: aA1cheHSXU3ZXRWSB1cMe0LjsBi3PbxACt6z6wY0hOo= Subject key identifier: E5:8E:93:7C:C2:6D:DD:65:7E:AD:26:0F:09:53:EE:A2:59:A4:88:45 Certificate issuer: /CN=c1a4d142d410aab0905112c4ae579076c0e6dc81 Certificate serial: 019B79ECA0139B4A34FB74566690457114FB Authority key identifier: C1:A4:D1:42:D4:10:AA:B0:90:51:12:C4:AE:57:90:76:C0:E6:DC:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/5Y6TfMJt3WV-rSYPCVPuolmkiEU.roa Signing time: Thu 01 Jan 2026 14:18:29 +0000 ROA not before: Thu 01 Jan 2026 14:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43549 IP address blocks: 194.116.180.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:a0:13:9b:4a:34:fb:74:56:66:90:45:71:14:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1a4d142d410aab0905112c4ae579076c0e6dc81 Validity Not Before: Jan 1 14:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e58e937cc26ddd657ead260f0953eea259a48845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:52:57:57:e6:7f:ed:ff:74:a7:57:56:69:51: 53:d2:1b:a8:e3:57:07:38:78:16:01:d1:e9:71:50: 0b:0f:6d:bb:23:16:85:99:7c:ee:f2:d8:e7:1d:bb: a5:c5:17:bd:e6:b3:a3:ed:24:14:12:7b:58:b8:2d: 62:cc:88:7a:ec:69:93:35:6e:9d:86:80:c2:6a:64: 8d:4e:81:34:04:1f:43:aa:a6:47:c6:ee:a2:d8:41: 3a:40:13:cf:e7:30:df:6c:e0:a2:4f:99:d0:ef:cf: c6:32:7a:39:d4:3d:7a:49:e5:17:8e:80:f2:91:54: e9:25:c2:6c:4c:7a:31:06:2a:d3:5e:db:f5:8e:fb: 3a:c9:10:63:4a:40:3b:fe:fa:71:62:9c:a3:34:3d: a1:e6:68:17:be:26:81:fc:54:19:d2:7e:32:84:cb: fb:a9:b0:bc:1a:e0:f8:ab:95:d6:e1:dd:d1:bb:60: 94:02:ef:3e:6e:f2:4c:3d:ba:91:4c:5b:b2:1f:f1: b3:05:8a:40:99:97:f1:05:a8:da:7d:65:35:af:2d: 90:62:7b:26:c4:cd:6f:f4:b7:f1:8c:65:fb:ae:b7: f7:00:9b:46:b2:73:44:ed:5b:fc:40:fc:55:45:58: 71:38:c2:f7:1c:6b:89:30:70:28:05:16:74:5f:02: 41:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:8E:93:7C:C2:6D:DD:65:7E:AD:26:0F:09:53:EE:A2:59:A4:88:45 X509v3 Authority Key Identifier: keyid:C1:A4:D1:42:D4:10:AA:B0:90:51:12:C4:AE:57:90:76:C0:E6:DC:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/5Y6TfMJt3WV-rSYPCVPuolmkiEU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.116.180.0/23 Signature Algorithm: sha256WithRSAEncryption 00:ac:ed:f4:4f:a0:ce:ad:30:3a:38:4a:be:d4:6f:f6:36:4c: 81:60:e6:5f:dd:16:a7:89:ff:c3:6d:c8:7f:ba:31:cd:1f:07: d7:f1:8b:94:77:03:3c:31:7a:f6:f3:f8:fb:80:9a:72:7f:33: ea:10:bf:aa:26:16:46:e6:97:8a:f1:86:88:d3:3c:0e:ab:c3: 97:2d:db:33:37:5d:e3:00:cc:30:e0:64:6b:63:75:d0:71:5b: fe:4e:d1:54:c9:48:8b:28:c6:16:21:bb:95:b7:a4:94:c0:91: 3c:80:f7:17:7a:6a:59:44:0c:2a:08:c0:26:aa:f2:17:86:ef: 2b:51:d5:9e:ee:a8:c9:84:64:c3:e0:10:77:f2:fb:4e:7b:d0: 11:d3:29:ac:79:f0:96:81:15:21:44:9e:be:46:ef:81:85:05: c6:8f:21:10:12:5d:b3:55:a3:2f:c5:3d:2e:be:b8:b0:60:69: dd:28:85:a8:2e:9f:d5:81:b9:14:b1:e0:12:ae:7d:fe:0f:1b: 56:a0:17:af:bb:f6:f6:54:62:5a:c4:63:2e:e9:e5:5c:a8:a8: f8:12:a4:b6:e7:47:cb:2a:0d:94:07:e2:85:f3:4f:da:e0:03: 38:b0:85:68:0c:f5:e6:14:21:ce:21:15:91:c1:73:73:5b:2e: 41:db:fc:83 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57KATm0o0+3RWZpBFcRT7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxYTRkMTQyZDQxMGFhYjA5MDUxMTJjNGFlNTc5MDc2YzBl NmRjODEwHhcNMjYwMTAxMTQxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNThlOTM3Y2MyNmRkZDY1N2VhZDI2MGYwOTUzZWVhMjU5YTQ4ODQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlJXV+Z/7f90p1dWaVFT0huo41cH OHgWAdHpcVALD227IxaFmXzu8tjnHbulxRe95rOj7SQUEntYuC1izIh67GmTNW6d hoDCamSNToE0BB9DqqZHxu6i2EE6QBPP5zDfbOCiT5nQ78/GMno51D16SeUXjoDy kVTpJcJsTHoxBirTXtv1jvs6yRBjSkA7/vpxYpyjND2h5mgXviaB/FQZ0n4yhMv7 qbC8GuD4q5XW4d3Ru2CUAu8+bvJMPbqRTFuyH/GzBYpAmZfxBajafWU1ry2QYnsm xM1v9LfxjGX7rrf3AJtGsnNE7Vv8QPxVRVhxOML3HGuJMHAoBRZ0XwJB7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOWOk3zCbd1lfq0mDwlT7qJZpIhFMB8GA1UdIwQY MBaAFMGk0ULUEKqwkFESxK5XkHbA5tyBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2FUUlF0UVFxckNRVVJMRXJsZVFkc0RtM0lFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xODA1N2EtN2MyOC00NGIwLWIzNDYt OTkwOTc2NzBiNDRlLzEvNVk2VGZNSnQzV1YtclNZUENWUHVvbG1raUVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8xODA1N2EtN2MyOC00NGIwLWIzNDYtOTkwOTc2NzBiNDRl LzEvd2FUUlF0UVFxckNRVVJMRXJsZVFkc0RtM0lFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwnS0MA0G CSqGSIb3DQEBCwUAA4IBAQAArO30T6DOrTA6OEq+1G/2NkyBYOZf3Ranif/Dbch/ ujHNHwfX8YuUdwM8MXr28/j7gJpyfzPqEL+qJhZG5peK8YaI0zwOq8OXLdszN13j AMww4GRrY3XQcVv+TtFUyUiLKMYWIbuVt6SUwJE8gPcXempZRAwqCMAmqvIXhu8r UdWe7qjJhGTD4BB38vtOe9AR0ymsefCWgRUhRJ6+Ru+BhQXGjyEQEl2zVaMvxT0u vriwYGndKIWoLp/VgbkUseASrn3+DxtWoBevu/b2VGJaxGMu6eVcqKj4EqS250fL Kg2UB+KF80/a4AM4sIVoDPXmFCHOIRWRwXNzWy5B2/yD -----END CERTIFICATE-----Generated at Mon Jan 26 14:45:50 2026 by rpki-client