This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/5335TVWq-TAy75K-3w-T_kbzaH0.roa File: 5335TVWq-TAy75K-3w-T_kbzaH0.roa (raw, json) Hash identifier: 9SO05Pcou3qWF6g88dlB6s3gfpWtXt6YbpW1v8iIrjQ= Subject key identifier: E7:7D:F9:4D:55:AA:F9:30:32:EF:92:BE:DF:0F:93:FE:46:F3:68:7D Certificate issuer: /CN=f9e0257d067ef8b85f620c67220cf977ddde3994 Certificate serial: 019B7C80AADD195DCE17E86C6DD3FCF416D9 Authority key identifier: F9:E0:25:7D:06:7E:F8:B8:5F:62:0C:67:22:0C:F9:77:DD:DE:39:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/5335TVWq-TAy75K-3w-T_kbzaH0.roa Signing time: Fri 02 Jan 2026 02:19:25 +0000 ROA not before: Fri 02 Jan 2026 02:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41884 IP address blocks: 195.200.72.0/23 maxlen: 23 2001:67c:1c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:aa:dd:19:5d:ce:17:e8:6c:6d:d3:fc:f4:16:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9e0257d067ef8b85f620c67220cf977ddde3994 Validity Not Before: Jan 2 02:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e77df94d55aaf93032ef92bedf0f93fe46f3687d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:29:e6:23:c4:7c:8a:67:ab:a6:70:f4:8b:a1: fd:bb:b7:0e:4f:e8:a4:4f:f8:f6:3b:70:b7:05:5a: ff:eb:c8:c4:01:56:e5:f2:da:83:d6:21:44:8e:e9: 3a:a0:e2:7c:61:48:07:10:41:d7:63:40:68:58:bd: c7:ad:bd:73:88:dd:50:50:5a:f5:b0:1f:9b:5f:9f: 79:b4:ca:74:e6:01:69:bb:2b:ac:4b:e4:c2:1a:3f: af:5f:bc:91:34:1a:35:56:97:a4:08:0f:22:33:79: 9c:ca:26:b6:ae:9b:bd:e8:71:fb:10:47:50:10:b3: 69:54:23:ac:e2:9e:91:da:d8:ae:a3:ac:5e:5b:a6: fa:6c:f3:19:02:ab:00:ea:f7:dd:62:f0:05:99:55: a6:30:5c:c6:1a:3e:62:4b:71:76:c3:87:4e:fa:c4: dd:b2:a1:b3:a0:c3:61:9b:42:55:9d:c0:12:b8:1a: c4:d2:cd:ef:37:4c:93:cf:d5:1d:8e:ed:ae:3b:f2: 3b:1a:12:e4:20:1a:89:b1:5d:df:bf:96:a7:ad:5d: 50:77:b6:40:36:99:1d:87:bd:91:14:22:a9:cc:6d: 2f:fd:03:c6:5c:db:06:ef:8b:81:7b:3f:62:ab:c8: b4:94:7b:03:2c:72:75:a0:e0:52:33:ac:78:e9:08: 3d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:7D:F9:4D:55:AA:F9:30:32:EF:92:BE:DF:0F:93:FE:46:F3:68:7D X509v3 Authority Key Identifier: keyid:F9:E0:25:7D:06:7E:F8:B8:5F:62:0C:67:22:0C:F9:77:DD:DE:39:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/5335TVWq-TAy75K-3w-T_kbzaH0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.200.72.0/23 IPv6: 2001:67c:1c::/48 Signature Algorithm: sha256WithRSAEncryption 18:14:56:4b:38:ca:fb:da:a3:3d:9e:06:14:af:a8:41:0f:8a: 02:fe:49:f1:03:41:3f:1b:4d:6c:b1:f9:5a:a9:f4:d7:3f:09: 12:70:18:67:98:dc:3f:91:e2:0a:be:cd:8b:41:89:b6:64:d6: 6c:03:08:7b:bc:08:68:40:17:76:cc:6f:2e:45:20:49:23:12: fc:6f:20:70:ca:2e:8c:4b:c3:9c:80:30:6d:6f:b1:99:6b:b8: c3:89:03:60:5b:03:13:4a:25:67:d2:2f:32:76:9a:de:7c:e7: ae:d4:7d:61:8f:44:9b:79:77:00:70:37:13:df:b7:da:c1:72: e9:f3:e9:27:12:e3:7a:6a:f7:1e:ef:89:50:37:11:ad:50:3f: 0b:ec:0e:7a:4a:92:62:a0:80:68:14:27:1b:01:3e:ce:9a:ce: d5:21:2b:77:af:b2:61:4e:05:23:b4:f9:59:15:44:2c:2a:07: a1:06:7d:53:39:bc:71:0b:59:42:8a:9a:7e:f1:bb:ce:69:1c: 28:b3:31:9f:ad:aa:b6:a1:6d:26:8e:91:fe:66:04:a0:69:de: 6d:f5:d8:77:ff:9b:78:aa:81:1f:38:ac:33:9d:ec:2b:fa:b8: 41:d4:2b:62:75:bc:bb:54:b7:49:23:01:3d:b7:60:60:7f:ff: bc:a9:45:04 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgISAZt8gKrdGV3OF+hsbdP89BbZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5ZTAyNTdkMDY3ZWY4Yjg1ZjYyMGM2NzIyMGNmOTc3ZGRk ZTM5OTQwHhcNMjYwMTAyMDIxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzdkZjk0ZDU1YWFmOTMwMzJlZjkyYmVkZjBmOTNmZTQ2ZjM2ODdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSnmI8R8imerpnD0i6H9u7cOT+ik T/j2O3C3BVr/68jEAVbl8tqD1iFEjuk6oOJ8YUgHEEHXY0BoWL3Hrb1ziN1QUFr1 sB+bX595tMp05gFpuyusS+TCGj+vX7yRNBo1VpekCA8iM3mcyia2rpu96HH7EEdQ ELNpVCOs4p6R2tiuo6xeW6b6bPMZAqsA6vfdYvAFmVWmMFzGGj5iS3F2w4dO+sTd sqGzoMNhm0JVncASuBrE0s3vN0yTz9Udju2uO/I7GhLkIBqJsV3fv5anrV1Qd7ZA Npkdh72RFCKpzG0v/QPGXNsG74uBez9iq8i0lHsDLHJ1oOBSM6x46Qg9GwIDAQAB o4ICHDCCAhgwHQYDVR0OBBYEFOd9+U1VqvkwMu+Svt8Pk/5G82h9MB8GA1UdIwQY MBaAFPngJX0Gfvi4X2IMZyIM+Xfd3jmUMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1lQWxmUVotLUxoZllneG5JZ3o1ZDkzZU9aUS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIvNjkxOTRhLTQ1YTAtNDhlZi05OWJm LThlMDQ4ODdjMGFiZi8xLzUzMzVUVldxLVRBeTc1Sy0zdy1UX2tiemFIMC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZWIvNjkxOTRhLTQ1YTAtNDhlZi05OWJmLThlMDQ4ODdjMGFi Zi8xLzEtZUFsZlFaLS1MaGZZZ3huSWd6NWQ5M2VPWlEuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAHDyEgw DwQCAAIwCQMHACABBnwAHDANBgkqhkiG9w0BAQsFAAOCAQEAGBRWSzjK+9qjPZ4G FK+oQQ+KAv5J8QNBPxtNbLH5Wqn01z8JEnAYZ5jcP5HiCr7Ni0GJtmTWbAMIe7wI aEAXdsxvLkUgSSMS/G8gcMoujEvDnIAwbW+xmWu4w4kDYFsDE0olZ9IvMnaa3nzn rtR9YY9Em3l3AHA3E9+32sFy6fPpJxLjemr3Hu+JUDcRrVA/C+wOekqSYqCAaBQn GwE+zprO1SErd6+yYU4FI7T5WRVELCoHoQZ9Uzm8cQtZQoqafvG7zmkcKLMxn62q tqFtJo6R/mYEoGnebfXYd/+beKqBHzisM53sK/q4QdQrYnW8u1S3SSMBPbdgYH// vKlFBA== -----END CERTIFICATE-----Generated at Sun Jan 25 15:14:16 2026 by rpki-client