This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/5aufIPquq3w8czdEJb_x03ID0ok.roa File: 5aufIPquq3w8czdEJb_x03ID0ok.roa (raw, json) Hash identifier: SXHv0uNnbQMrAAz38TkQXV7mhkcxZQRjdTnk2ZFMJ+Q= Subject key identifier: E5:AB:9F:20:FA:AE:AB:7C:3C:73:37:44:25:BF:F1:D3:72:03:D2:89 Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e Certificate serial: 019B7C7FBEC80C8C02B010D92929AAFCD21E Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/5aufIPquq3w8czdEJb_x03ID0ok.roa Signing time: Fri 02 Jan 2026 02:18:25 +0000 ROA not before: Fri 02 Jan 2026 02:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39486 IP address blocks: 45.134.79.0/24 maxlen: 32 185.184.228.0/24 maxlen: 32 193.161.128.0/22 maxlen: 24 194.104.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:be:c8:0c:8c:02:b0:10:d9:29:29:aa:fc:d2:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e Validity Not Before: Jan 2 02:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e5ab9f20faaeab7c3c73374425bff1d37203d289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d0:17:af:80:a4:07:30:22:f0:9f:60:ad:7c: 62:1b:94:c2:78:ea:e7:5e:65:71:77:9e:6f:62:96: 8d:2e:28:40:eb:8a:34:64:fa:2d:98:16:23:20:45: f9:ec:55:00:07:f3:7b:72:2d:12:c3:e6:4b:ff:45: 48:74:67:8d:be:71:e8:78:73:52:4c:2e:e4:29:70: 73:b9:68:81:19:ee:8a:d4:06:53:76:62:10:5f:65: f4:bf:1d:e6:c1:c9:df:03:07:db:1c:93:ad:73:05: a1:90:3f:77:36:3b:90:f1:0f:19:b6:cf:fb:8b:2e: dc:22:1e:b4:12:20:b0:e2:1d:f6:21:43:66:12:4c: 48:af:bb:2e:0f:19:98:97:fe:75:22:ff:49:9a:d9: c9:aa:25:37:de:5f:7f:01:37:ea:13:49:c4:69:e5: c8:5c:eb:f5:f4:45:91:6c:93:85:70:d3:52:36:00: 6d:ea:ee:7f:f6:36:18:e7:cb:e7:4e:a5:dc:bf:5d: 14:fa:58:5f:4f:70:0a:6a:89:78:7d:d7:b1:04:d2: bc:d3:3f:d0:1c:fd:3b:81:35:d3:b2:92:ad:b9:e3: c7:32:3d:d5:ca:35:aa:a2:7c:2c:88:ed:f3:ea:28: 09:4b:23:02:46:c0:75:28:bd:05:91:f0:1d:f6:af: 3e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:AB:9F:20:FA:AE:AB:7C:3C:73:37:44:25:BF:F1:D3:72:03:D2:89 X509v3 Authority Key Identifier: keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/5aufIPquq3w8czdEJb_x03ID0ok.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.134.79.0/24 185.184.228.0/24 193.161.128.0/22 194.104.104.0/22 Signature Algorithm: sha256WithRSAEncryption a5:b9:f0:7c:fc:c9:39:3c:1f:e7:5e:f7:d7:6f:ec:dd:a9:b9: 5f:9c:39:18:48:07:57:90:46:05:29:b0:cc:fb:41:48:e5:cf: 07:9b:d0:75:5c:c7:d1:9e:9e:fc:87:3f:49:92:9e:48:3f:b6: 99:cd:41:dd:a6:36:d8:86:73:82:ef:49:4f:81:9a:96:9e:89: 6d:ea:aa:16:25:9b:1e:b4:1d:a5:0f:a1:72:88:b7:35:d0:7b: e8:7b:19:6e:88:e0:e9:50:d7:4b:d6:3b:2f:61:e7:01:5f:30: d8:56:e3:aa:8b:17:18:9c:90:89:3d:dd:81:1a:db:aa:8e:c5: 0f:ea:a7:e0:2f:9f:7e:47:78:46:00:15:73:2f:0a:1d:91:bc: 96:de:40:44:60:5c:b0:d5:fd:fa:5c:a4:8b:48:28:1d:8f:c9: 0b:65:be:0e:ac:fe:9c:ca:a1:d8:ad:63:d2:8a:a2:8a:6f:f0: 63:c5:57:4e:e8:f6:15:57:73:18:99:03:81:ab:fd:56:ac:12: 55:d9:c9:50:fe:8f:05:ba:d1:ce:8d:9b:ee:92:b1:84:a1:07: 40:3a:fc:af:55:95:9c:2f:78:c5:31:64:dc:66:4b:a6:16:3e: a1:ac:f5:89:51:ba:8a:33:7e:7b:44:39:c9:1d:b4:57:62:cc: ec:5a:91:21 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt8f77IDIwCsBDZKSmq/NIeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMjIwOGI0N2I2YTg2NGQ5ZDFmZjMzZTA2YWE4MWQxMzgx OWE3NGUwHhcNMjYwMTAyMDIxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNWFiOWYyMGZhYWVhYjdjM2M3MzM3NDQyNWJmZjFkMzcyMDNkMjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNAXr4CkBzAi8J9grXxiG5TCeOrn XmVxd55vYpaNLihA64o0ZPotmBYjIEX57FUAB/N7ci0Sw+ZL/0VIdGeNvnHoeHNS TC7kKXBzuWiBGe6K1AZTdmIQX2X0vx3mwcnfAwfbHJOtcwWhkD93NjuQ8Q8Zts/7 iy7cIh60EiCw4h32IUNmEkxIr7suDxmYl/51Iv9JmtnJqiU33l9/ATfqE0nEaeXI XOv19EWRbJOFcNNSNgBt6u5/9jYY58vnTqXcv10U+lhfT3AKaol4fdexBNK80z/Q HP07gTXTspKtuePHMj3VyjWqonwsiO3z6igJSyMCRsB1KL0FkfAd9q8+bQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFOWrnyD6rqt8PHM3RCW/8dNyA9KJMB8GA1UdIwQY MBaAFJIiCLR7aoZNnR/zPgaqgdE4GadOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTct OTViMDhlMzY2MGNmLzEvNWF1ZklQcXVxM3c4Y3pkRUpiX3gwM0lEMG9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTctOTViMDhlMzY2MGNm LzEva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALYZPAwQA ubjkAwQCwaGAAwQCwmhoMA0GCSqGSIb3DQEBCwUAA4IBAQClufB8/Mk5PB/nXvfX b+zdqblfnDkYSAdXkEYFKbDM+0FI5c8Hm9B1XMfRnp78hz9Jkp5IP7aZzUHdpjbY hnOC70lPgZqWnolt6qoWJZsetB2lD6FyiLc10HvoexluiODpUNdL1jsvYecBXzDY VuOqixcYnJCJPd2BGtuqjsUP6qfgL59+R3hGABVzLwodkbyW3kBEYFyw1f36XKSL SCgdj8kLZb4OrP6cyqHYrWPSiqKKb/BjxVdO6PYVV3MYmQOBq/1WrBJV2clQ/o8F utHOjZvukrGEoQdAOvyvVZWcL3jFMWTcZkumFj6hrPWJUbqKM357RDnJHbRXYszs WpEh -----END CERTIFICATE-----Generated at Sun Jan 25 09:03:33 2026 by rpki-client