This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/c6f31a-7ca7-48c4-93ff-c480da0264ca/1/nRyiWTsZY8Fa98Jg_g22rBoULl0.roa File: nRyiWTsZY8Fa98Jg_g22rBoULl0.roa (raw, json) Hash identifier: Y/2gQiD3bpRlc098s51fHT9JqHT1aLWqDNL4VBWb/iY= Subject key identifier: 9D:1C:A2:59:3B:19:63:C1:5A:F7:C2:60:FE:0D:B6:AC:1A:14:2E:5D Certificate issuer: /CN=5a081a52ac9cb0856df6563ed87d38b0caca7ccc Certificate serial: 019B77C6F267FD17E7972D3CF21A5C553F4E Authority key identifier: 5A:08:1A:52:AC:9C:B0:85:6D:F6:56:3E:D8:7D:38:B0:CA:CA:7C:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WggaUqycsIVt9lY-2H04sMrKfMw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/c6f31a-7ca7-48c4-93ff-c480da0264ca/1/nRyiWTsZY8Fa98Jg_g22rBoULl0.roa Signing time: Thu 01 Jan 2026 04:18:05 +0000 ROA not before: Thu 01 Jan 2026 04:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214873 IP address blocks: 5.183.5.0/24 maxlen: 24 5.183.6.0/24 maxlen: 24 5.183.7.0/24 maxlen: 24 2a14:4fc0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/c6f31a-7ca7-48c4-93ff-c480da0264ca/1/WggaUqycsIVt9lY-2H04sMrKfMw.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/c6f31a-7ca7-48c4-93ff-c480da0264ca/1/WggaUqycsIVt9lY-2H04sMrKfMw.mft rsync://rpki.ripe.net/repository/DEFAULT/WggaUqycsIVt9lY-2H04sMrKfMw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:f2:67:fd:17:e7:97:2d:3c:f2:1a:5c:55:3f:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a081a52ac9cb0856df6563ed87d38b0caca7ccc Validity Not Before: Jan 1 04:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d1ca2593b1963c15af7c260fe0db6ac1a142e5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:31:56:4f:ae:55:f7:5e:d8:fa:4b:70:7e:84: 0e:07:d5:0c:15:32:10:77:e0:c2:7b:cd:c1:15:89: e3:54:40:9d:f9:18:30:3f:63:35:e9:d5:39:be:3a: c7:1e:15:7c:31:8f:9c:e0:2b:4c:da:d9:45:f8:9b: 36:f1:c9:4a:1f:e5:49:3a:0b:34:78:fb:9d:2d:f2: bf:69:ec:6b:42:f7:53:29:14:a3:21:08:86:c5:d0: bc:be:ec:e2:42:1b:73:c4:a5:96:6b:e2:f3:bd:b8: 60:de:c9:b7:4e:45:14:0d:59:57:04:99:93:e0:44: 0b:a9:0e:98:23:2e:b7:83:12:7d:88:5d:67:22:b5: 45:1c:05:bf:cd:da:80:a3:41:53:7d:0e:34:02:29: c4:5b:6e:67:a0:1f:65:74:42:96:82:6d:02:0a:51: 3e:e5:b8:51:eb:62:4d:45:f3:22:fd:24:46:1f:a6: fb:2f:fc:46:5d:b4:11:a1:ce:92:db:59:06:0d:78: 45:76:3d:f8:af:8b:ce:09:ba:8c:6c:07:23:fc:35: 72:f0:c2:06:3b:d2:63:a7:3c:1a:fa:5e:8e:60:e6: ac:e0:f8:96:4b:61:f6:d4:13:f3:0f:53:51:f7:22: 97:ab:bd:2a:36:d5:eb:3e:77:f2:41:18:f2:e4:20: de:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:1C:A2:59:3B:19:63:C1:5A:F7:C2:60:FE:0D:B6:AC:1A:14:2E:5D X509v3 Authority Key Identifier: keyid:5A:08:1A:52:AC:9C:B0:85:6D:F6:56:3E:D8:7D:38:B0:CA:CA:7C:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WggaUqycsIVt9lY-2H04sMrKfMw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c6f31a-7ca7-48c4-93ff-c480da0264ca/1/nRyiWTsZY8Fa98Jg_g22rBoULl0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c6f31a-7ca7-48c4-93ff-c480da0264ca/1/WggaUqycsIVt9lY-2H04sMrKfMw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.183.5.0-5.183.7.255 IPv6: 2a14:4fc0::/32 Signature Algorithm: sha256WithRSAEncryption 87:18:cd:d0:95:60:d7:7c:ee:09:73:c5:f4:e3:d8:07:54:69: 2e:b1:19:c2:06:42:6e:e1:69:48:d9:09:c2:36:e0:7f:11:20: 87:51:3b:e0:06:47:d0:65:39:db:e7:0d:e2:78:9b:70:c6:f3: 74:c4:df:32:c4:b3:6f:03:5c:94:fb:16:1e:ec:d8:4a:dc:50: 5b:3f:21:a5:b7:fb:7e:24:07:45:2c:eb:c2:5d:11:10:fe:3e: a0:48:09:47:75:71:8d:92:4f:65:85:0d:b0:19:c0:bd:39:0c: 22:a5:23:32:ac:39:ae:0f:65:40:91:31:cb:dd:3c:db:25:97: 16:e1:cb:18:da:09:6c:b4:39:40:6a:f9:9f:10:5c:31:6b:1b: c4:c2:e9:22:5f:d4:9d:fa:be:ad:f1:e2:93:84:22:d3:33:9f: 00:8d:ea:db:35:1c:c2:9f:c0:0f:e4:69:ce:55:06:30:5a:07: 21:9a:d5:02:9b:3e:0a:60:d4:e9:14:f8:33:02:5c:7c:84:97: 22:6e:58:ef:16:a6:bb:be:8e:79:6b:ba:01:05:e4:d2:92:f3: 17:f9:4e:3c:48:c9:32:fc:9b:3c:ab:9d:1d:5e:6b:d5:e0:8f: 3e:5d:3c:7a:09:1a:32:58:75:14:a1:12:25:38:d6:9d:4d:e7: e6:12:95:97 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt3xvJn/Rfnly088hpcVT9OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMDgxYTUyYWM5Y2IwODU2ZGY2NTYzZWQ4N2QzOGIwY2Fj YTdjY2MwHhcNMjYwMTAxMDQxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDFjYTI1OTNiMTk2M2MxNWFmN2MyNjBmZTBkYjZhYzFhMTQyZTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzFWT65V917Y+ktwfoQOB9UMFTIQ d+DCe83BFYnjVECd+RgwP2M16dU5vjrHHhV8MY+c4CtM2tlF+Js28clKH+VJOgs0 ePudLfK/aexrQvdTKRSjIQiGxdC8vuziQhtzxKWWa+Lzvbhg3sm3TkUUDVlXBJmT 4EQLqQ6YIy63gxJ9iF1nIrVFHAW/zdqAo0FTfQ40AinEW25noB9ldEKWgm0CClE+ 5bhR62JNRfMi/SRGH6b7L/xGXbQRoc6S21kGDXhFdj34r4vOCbqMbAcj/DVy8MIG O9Jjpzwa+l6OYOas4PiWS2H21BPzD1NR9yKXq70qNtXrPnfyQRjy5CDebQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFJ0colk7GWPBWvfCYP4NtqwaFC5dMB8GA1UdIwQY MBaAFFoIGlKsnLCFbfZWPth9OLDKynzMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2dnYVVxeWNzSVZ0OWxZLTJIMDRzTXJLZk13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9jNmYzMWEtN2NhNy00OGM0LTkzZmYt YzQ4MGRhMDI2NGNhLzEvblJ5aVdUc1pZOEZhOThKZ19nMjJyQm9VTGwwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy9jNmYzMWEtN2NhNy00OGM0LTkzZmYtYzQ4MGRhMDI2NGNh LzEvV2dnYVVxeWNzSVZ0OWxZLTJIMDRzTXJLZk13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBAAFtwUD BAMFtwAwDQQCAAIwBwMFACoUT8AwDQYJKoZIhvcNAQELBQADggEBAIcYzdCVYNd8 7glzxfTj2AdUaS6xGcIGQm7haUjZCcI24H8RIIdRO+AGR9BlOdvnDeJ4m3DG83TE 3zLEs28DXJT7Fh7s2ErcUFs/IaW3+34kB0Us68JdERD+PqBICUd1cY2ST2WFDbAZ wL05DCKlIzKsOa4PZUCRMcvdPNsllxbhyxjaCWy0OUBq+Z8QXDFrG8TC6SJf1J36 vq3x4pOEItMznwCN6ts1HMKfwA/kac5VBjBaByGa1QKbPgpg1OkU+DMCXHyElyJu WO8Wpru+jnlrugEF5NKS8xf5TjxIyTL8mzyrnR1ea9Xgjz5dPHoJGjJYdRShEiU4 1p1N5+YSlZc= -----END CERTIFICATE-----Generated at Sun Jan 25 18:08:18 2026 by rpki-client