This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/5DtKerOBtfpfYOLEXubpG6W_SrU.roa File: 5DtKerOBtfpfYOLEXubpG6W_SrU.roa (raw, json) Hash identifier: qu9ii9KnB0QsSr1IjTrdruO6S3eEOG6tH8HaN9Q7Pi0= Subject key identifier: E4:3B:4A:7A:B3:81:B5:FA:5F:60:E2:C4:5E:E6:E9:1B:A5:BF:4A:B5 Certificate issuer: /CN=4ba9afd21cb8fbe6b850800cd4b49f2562c92ba0 Certificate serial: 019B7C7FAA1ABB6B6988D9DBDAC6275E5E90 Authority key identifier: 4B:A9:AF:D2:1C:B8:FB:E6:B8:50:80:0C:D4:B4:9F:25:62:C9:2B:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/5DtKerOBtfpfYOLEXubpG6W_SrU.roa Signing time: Fri 02 Jan 2026 02:18:19 +0000 ROA not before: Fri 02 Jan 2026 02:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210269 IP address blocks: 178.237.56.0/24 maxlen: 24 178.237.59.0/24 maxlen: 24 2a0d:5540::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:aa:1a:bb:6b:69:88:d9:db:da:c6:27:5e:5e:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ba9afd21cb8fbe6b850800cd4b49f2562c92ba0 Validity Not Before: Jan 2 02:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e43b4a7ab381b5fa5f60e2c45ee6e91ba5bf4ab5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:8f:c8:c1:20:6c:aa:7a:41:1d:f8:b5:82:00: d5:2a:72:1e:3e:c2:6e:18:ec:f8:fa:26:d4:4f:d7: 73:f9:4c:06:af:be:31:ea:bc:a1:28:9e:70:c8:27: d0:a7:4e:fb:3a:b7:bc:13:32:5c:c7:ce:2d:e4:ea: d0:f0:fe:43:c1:78:06:fc:79:3f:49:dd:83:37:69: e8:22:45:05:f2:c3:0c:bd:49:eb:dc:b5:ab:23:b0: f7:ba:42:ba:98:93:48:49:f8:c3:16:1d:97:24:72: be:dd:25:20:46:cb:75:22:e3:17:4c:5d:01:7d:e4: 12:cb:2e:61:0e:fd:a6:b0:4d:49:df:43:66:3b:86: c0:27:b9:ac:2e:85:fb:56:3f:71:10:32:64:7c:c6: 2b:96:33:f4:53:09:41:7c:55:5e:90:3e:91:89:07: 7f:c0:a4:ed:32:f1:fe:a4:c0:30:d9:04:1f:ab:6d: bc:de:59:d5:ce:ef:cd:cc:49:e0:ec:1b:b4:c0:41: aa:55:c7:16:e6:b9:d1:d5:b3:3c:c1:3a:0d:2a:54: c8:87:9a:f3:7c:7c:cc:aa:23:77:94:72:9c:bf:11: 28:2b:01:26:06:ed:a7:39:8b:dc:45:b2:2c:1f:34: 4d:1b:28:90:0b:1e:b0:e4:80:9e:89:57:0b:be:d0: 9e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:3B:4A:7A:B3:81:B5:FA:5F:60:E2:C4:5E:E6:E9:1B:A5:BF:4A:B5 X509v3 Authority Key Identifier: keyid:4B:A9:AF:D2:1C:B8:FB:E6:B8:50:80:0C:D4:B4:9F:25:62:C9:2B:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/5DtKerOBtfpfYOLEXubpG6W_SrU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.237.56.0/24 178.237.59.0/24 IPv6: 2a0d:5540::/48 Signature Algorithm: sha256WithRSAEncryption 8e:13:47:9a:f0:27:7b:bf:81:94:73:ec:d5:e6:3c:05:47:b6: fd:f7:37:ab:7e:45:46:43:8e:de:02:99:a8:2c:8b:0f:7a:0d: f9:ed:87:0e:0d:4f:ed:73:3c:b6:f8:7a:23:1b:55:4f:db:a0: 2b:1b:8a:95:eb:18:a1:36:56:c3:97:71:28:f1:be:02:9d:33: f9:f0:dd:71:15:2d:d3:d0:e4:db:69:6c:9b:cf:25:9e:9b:13: 6d:09:ac:62:21:a5:a6:f3:81:40:45:0c:fd:c1:d6:07:98:79: 2d:7f:3e:42:aa:4d:62:01:ed:57:16:e1:1d:11:52:6e:4b:18: 3d:5c:79:8e:c4:23:aa:f9:37:13:ed:31:35:22:ca:5f:36:63: 51:78:84:df:a9:5b:b8:8e:38:3f:4e:33:b7:4e:87:8f:ee:06: 27:39:fb:3e:36:97:24:29:3f:49:93:f5:44:a7:00:ef:fc:f4: 7b:ca:86:b9:00:55:73:c4:50:a5:48:61:a2:6b:53:90:e6:d3: 03:08:41:42:49:1b:df:a1:54:53:2f:89:cd:df:9e:b9:9b:68: 44:82:0c:e8:3e:21:39:ae:95:1e:1c:e5:ca:c5:80:fd:44:af: d6:ca:ee:37:25:6c:71:93:5b:fe:a2:e9:54:b6:65:af:2c:51: c4:fb:f0:b5 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt8f6oau2tpiNnb2sYnXl6QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiYTlhZmQyMWNiOGZiZTZiODUwODAwY2Q0YjQ5ZjI1NjJj OTJiYTAwHhcNMjYwMTAyMDIxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDNiNGE3YWIzODFiNWZhNWY2MGUyYzQ1ZWU2ZTkxYmE1YmY0YWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkI/IwSBsqnpBHfi1ggDVKnIePsJu GOz4+ibUT9dz+UwGr74x6ryhKJ5wyCfQp077Ore8EzJcx84t5OrQ8P5DwXgG/Hk/ Sd2DN2noIkUF8sMMvUnr3LWrI7D3ukK6mJNISfjDFh2XJHK+3SUgRst1IuMXTF0B feQSyy5hDv2msE1J30NmO4bAJ7msLoX7Vj9xEDJkfMYrljP0UwlBfFVekD6RiQd/ wKTtMvH+pMAw2QQfq2283lnVzu/NzEng7Bu0wEGqVccW5rnR1bM8wToNKlTIh5rz fHzMqiN3lHKcvxEoKwEmBu2nOYvcRbIsHzRNGyiQCx6w5ICeiVcLvtCeLwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFOQ7SnqzgbX6X2DixF7m6Rulv0q1MB8GA1UdIwQY MBaAFEupr9IcuPvmuFCADNS0nyViySugMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzZtdjBoeTQtLWE0VUlBTTFMU2ZKV0xKSzZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9kNWJkMzktYmVhNi00NDdiLTgzYmIt ZjY5NjIyNDI1NjUxLzEvNUR0S2VyT0J0ZnBmWU9MRVh1YnBHNldfU3JVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9kNWJkMzktYmVhNi00NDdiLTgzYmItZjY5NjIyNDI1NjUx LzEvUzZtdjBoeTQtLWE0VUlBTTFMU2ZKV0xKSzZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAsu04AwQA su07MA8EAgACMAkDBwAqDVVAAAAwDQYJKoZIhvcNAQELBQADggEBAI4TR5rwJ3u/ gZRz7NXmPAVHtv33N6t+RUZDjt4Cmagsiw96Dfnthw4NT+1zPLb4eiMbVU/boCsb ipXrGKE2VsOXcSjxvgKdM/nw3XEVLdPQ5NtpbJvPJZ6bE20JrGIhpabzgUBFDP3B 1geYeS1/PkKqTWIB7VcW4R0RUm5LGD1ceY7EI6r5NxPtMTUiyl82Y1F4hN+pW7iO OD9OM7dOh4/uBic5+z42lyQpP0mT9USnAO/89HvKhrkAVXPEUKVIYaJrU5Dm0wMI QUJJG9+hVFMvic3fnrmbaESCDOg+ITmulR4c5crFgP1Er9bK7jclbHGTW/6i6VS2 Za8sUcT78LU= -----END CERTIFICATE-----Generated at Mon Jan 26 02:08:12 2026 by rpki-client