This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/A5YCoo2ePdjpMfcxVU_Sl6k7Mss.roa File: A5YCoo2ePdjpMfcxVU_Sl6k7Mss.roa (raw, json) Hash identifier: 5TlL5QCxApqjt2a0h4QTIYJy/z6ABD0Zlh15ZtqZ6NY= Subject key identifier: 03:96:02:A2:8D:9E:3D:D8:E9:31:F7:31:55:4F:D2:97:A9:3B:32:CB Certificate issuer: /CN=f7822d4597e5493d15178bfb10e6841dd17e5897 Certificate serial: 019B7CECBC1B3EA9B8AA0386835ACBD22992 Authority key identifier: F7:82:2D:45:97:E5:49:3D:15:17:8B:FB:10:E6:84:1D:D1:7E:58:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94ItRZflST0VF4v7EOaEHdF-WJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/A5YCoo2ePdjpMfcxVU_Sl6k7Mss.roa Signing time: Fri 02 Jan 2026 04:17:28 +0000 ROA not before: Fri 02 Jan 2026 04:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202098 IP address blocks: 158.47.10.0/23 maxlen: 24 158.47.12.0/23 maxlen: 24 158.47.200.0/21 maxlen: 21 158.47.208.0/21 maxlen: 24 158.47.216.0/21 maxlen: 24 158.47.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.mft rsync://rpki.ripe.net/repository/DEFAULT/94ItRZflST0VF4v7EOaEHdF-WJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:bc:1b:3e:a9:b8:aa:03:86:83:5a:cb:d2:29:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7822d4597e5493d15178bfb10e6841dd17e5897 Validity Not Before: Jan 2 04:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=039602a28d9e3dd8e931f731554fd297a93b32cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:22:8c:5b:15:b8:23:11:97:84:0c:cb:ee:16: 57:4e:10:cb:7c:be:b2:72:06:97:c4:61:99:b0:0b: f5:60:a1:5f:ef:a1:9b:3d:0e:8d:11:37:cb:f4:e8: 67:c9:f1:36:a6:1e:b8:61:f2:e0:b6:c0:55:3a:dc: 0d:c6:70:7f:0f:89:04:09:56:05:53:6f:1a:7a:b7: 05:74:94:97:39:e5:37:ef:5d:47:ad:e4:3c:3e:eb: 11:20:0a:17:f4:5d:17:c2:3e:29:b7:80:6f:8b:0b: fa:13:92:77:fb:ea:14:ab:2f:02:44:87:eb:94:cf: 32:c0:cb:73:b7:d2:f9:0c:0c:0b:ee:9e:63:96:48: 9d:c9:fc:b8:bd:c2:54:fe:24:7f:c7:57:b4:3d:b9: 71:62:e2:c6:60:ee:e9:96:33:fd:7c:ef:e4:04:00: cb:18:93:aa:d3:75:eb:64:59:9b:2e:8f:bb:31:b4: c1:74:df:e5:6a:bf:9f:70:f4:6f:0a:18:64:c5:d1: 21:1c:8e:a0:69:eb:14:57:67:9c:4e:29:73:97:fd: 45:11:a8:40:f1:99:27:d0:ec:f0:c2:e6:7a:dc:4f: b6:4c:07:3f:1a:3b:3e:9f:9b:9f:bf:ac:75:a7:78: d5:88:72:58:78:7b:3d:77:ef:ce:be:50:57:0c:ff: 6a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:96:02:A2:8D:9E:3D:D8:E9:31:F7:31:55:4F:D2:97:A9:3B:32:CB X509v3 Authority Key Identifier: keyid:F7:82:2D:45:97:E5:49:3D:15:17:8B:FB:10:E6:84:1D:D1:7E:58:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94ItRZflST0VF4v7EOaEHdF-WJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/A5YCoo2ePdjpMfcxVU_Sl6k7Mss.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.47.10.0-158.47.13.255 158.47.200.0-158.47.255.255 Signature Algorithm: sha256WithRSAEncryption 84:42:79:6b:85:3f:33:a5:ab:c0:0b:67:34:16:17:3d:12:4f: 66:0e:49:ee:b5:f6:f6:22:58:3b:9c:a3:d0:60:cc:19:a1:ec: e9:43:f7:20:9c:22:95:53:fb:74:22:92:86:5f:e1:00:ce:c2: 91:f6:f6:b1:56:5b:c9:19:30:77:dc:f1:2f:83:5d:35:d5:55: c8:a7:8d:0c:f5:c7:17:b3:92:3e:46:12:78:a5:a9:ee:be:fd: d2:41:04:b8:8d:dd:84:aa:34:98:98:6a:e4:8f:45:49:66:18: 87:fd:1b:e1:d7:f8:9e:d0:0e:2a:c7:8a:79:38:58:59:96:1e: 43:e3:1c:87:a2:85:68:fa:61:4d:a4:8e:29:ff:6e:cd:b2:c6: 97:41:f3:42:35:51:03:99:32:ca:63:c8:aa:5c:3b:b9:2c:5d: 91:91:fa:67:fa:77:07:5a:67:fe:8e:36:3b:dd:08:7b:c0:9b: e1:19:7f:a1:d0:c3:f6:82:40:99:5a:ed:9a:f1:2b:10:a0:a6: 7e:b6:3e:ef:cf:6d:e3:89:f8:d2:f5:c1:ac:88:0d:bb:bd:34: 7a:7f:41:c5:19:5e:c1:b7:43:8c:85:f5:4b:eb:52:6e:83:d4: 63:3b:e7:85:67:2e:9f:58:07:3c:35:de:30:d7:68:08:b5:a4: 6a:b9:33:83 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt87LwbPqm4qgOGg1rL0imSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3ODIyZDQ1OTdlNTQ5M2QxNTE3OGJmYjEwZTY4NDFkZDE3 ZTU4OTcwHhcNMjYwMTAyMDQxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzk2MDJhMjhkOWUzZGQ4ZTkzMWY3MzE1NTRmZDI5N2E5M2IzMmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+iKMWxW4IxGXhAzL7hZXThDLfL6y cgaXxGGZsAv1YKFf76GbPQ6NETfL9OhnyfE2ph64YfLgtsBVOtwNxnB/D4kECVYF U28aercFdJSXOeU3711HreQ8PusRIAoX9F0Xwj4pt4Bviwv6E5J3++oUqy8CRIfr lM8ywMtzt9L5DAwL7p5jlkidyfy4vcJU/iR/x1e0PblxYuLGYO7pljP9fO/kBADL GJOq03XrZFmbLo+7MbTBdN/lar+fcPRvChhkxdEhHI6gaesUV2ecTilzl/1FEahA 8Zkn0OzwwuZ63E+2TAc/Gjs+n5ufv6x1p3jViHJYeHs9d+/OvlBXDP9q+QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFAOWAqKNnj3Y6TH3MVVP0pepOzLLMB8GA1UdIwQY MBaAFPeCLUWX5Uk9FReL+xDmhB3RfliXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTRJdFJaZmxTVDBWRjR2N0VPYUVIZEYtV0pjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8zMTA4MWEtOGI1YS00OWVjLTkwMzYt ODYyZTk5OTczZmMzLzEvQTVZQ29vMmVQZGpwTWZjeFZVX1NsNms3TXNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy8zMTA4MWEtOGI1YS00OWVjLTkwMzYtODYyZTk5OTczZmMz LzEvOTRJdFJaZmxTVDBWRjR2N0VPYUVIZEYtV0pjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAATAbMAwDBAGeLwoD BAGeLwwwCwMEA54vyAMDBJ4gMA0GCSqGSIb3DQEBCwUAA4IBAQCEQnlrhT8zpavA C2c0Fhc9Ek9mDknutfb2Ilg7nKPQYMwZoezpQ/cgnCKVU/t0IpKGX+EAzsKR9vax VlvJGTB33PEvg1011VXIp40M9ccXs5I+RhJ4panuvv3SQQS4jd2EqjSYmGrkj0VJ ZhiH/Rvh1/ie0A4qx4p5OFhZlh5D4xyHooVo+mFNpI4p/27NssaXQfNCNVEDmTLK Y8iqXDu5LF2Rkfpn+ncHWmf+jjY73Qh7wJvhGX+h0MP2gkCZWu2a8SsQoKZ+tj7v z23jifjS9cGsiA27vTR6f0HFGV7Bt0OMhfVL61Jug9RjO+eFZy6fWAc8Nd4w12gI taRquTOD -----END CERTIFICATE-----Generated at Sun Jan 25 09:19:01 2026 by rpki-client