This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/5I0HBHU6DFGjisjl0_HXu6MzkBc.roa File: 5I0HBHU6DFGjisjl0_HXu6MzkBc.roa (raw, json) Hash identifier: J1zWeGNMh7+0ujc6n39n2VNnjxJR10bleZ2BiJvLPD8= Subject key identifier: E4:8D:07:04:75:3A:0C:51:A3:8A:C8:E5:D3:F1:D7:BB:A3:33:90:17 Certificate issuer: /CN=53153003737d78f722db9a28e22043e35d8d871e Certificate serial: 019B77595B6AC02CFD745DB5E130FD92D5AA Authority key identifier: 53:15:30:03:73:7D:78:F7:22:DB:9A:28:E2:20:43:E3:5D:8D:87:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxUwA3N9ePci25oo4iBD412Nhx4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/5I0HBHU6DFGjisjl0_HXu6MzkBc.roa Signing time: Thu 01 Jan 2026 02:18:23 +0000 ROA not before: Thu 01 Jan 2026 02:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 559 IP address blocks: 134.21.0.0/16 maxlen: 16 192.47.244.0/22 maxlen: 22 192.47.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.mft rsync://rpki.ripe.net/repository/DEFAULT/UxUwA3N9ePci25oo4iBD412Nhx4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:5b:6a:c0:2c:fd:74:5d:b5:e1:30:fd:92:d5:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53153003737d78f722db9a28e22043e35d8d871e Validity Not Before: Jan 1 02:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e48d0704753a0c51a38ac8e5d3f1d7bba3339017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:5c:23:cd:71:42:6b:36:cb:90:a2:6f:a5:9c: 20:0c:d9:9b:d4:07:59:f6:af:b2:a0:d0:17:e0:dd: b0:59:f4:cb:80:22:ca:54:b6:06:09:9b:de:1d:4d: 0d:57:97:73:1b:93:a7:a9:22:f2:e9:87:83:d6:79: 8d:91:2e:fd:ce:bf:91:dd:f2:77:8f:72:a4:46:e6: 26:89:b0:ab:83:24:7d:98:ee:d7:ca:81:07:95:8f: c1:fb:8f:c6:8d:dd:9c:5b:f8:ad:51:b1:9d:91:3c: 74:ec:ee:2c:77:35:7a:5a:e6:c8:6a:f6:30:55:fc: 80:3b:8c:08:fb:76:6f:f1:4f:5e:8b:d5:24:c8:a1: b9:e6:41:6f:71:1d:94:41:f6:b4:cf:4e:97:a6:b6: 64:79:89:7a:12:1d:e8:9f:23:f4:d5:c2:24:0d:68: 45:fd:fb:70:44:5d:c0:8a:d6:5e:93:44:01:f2:af: a1:02:10:26:1f:63:dd:dc:6f:81:07:36:01:18:7e: 5f:ba:fc:af:34:6e:ca:e4:26:84:8f:6e:34:6a:23: e3:0f:b1:db:7b:70:42:05:af:48:51:8c:ba:5a:b0: 88:3c:eb:54:b3:ac:88:9e:88:15:83:e9:d3:58:45: d6:3a:b8:78:68:6b:43:17:ef:e5:69:a1:2a:88:36: fe:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:8D:07:04:75:3A:0C:51:A3:8A:C8:E5:D3:F1:D7:BB:A3:33:90:17 X509v3 Authority Key Identifier: keyid:53:15:30:03:73:7D:78:F7:22:DB:9A:28:E2:20:43:E3:5D:8D:87:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxUwA3N9ePci25oo4iBD412Nhx4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/5I0HBHU6DFGjisjl0_HXu6MzkBc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 134.21.0.0/16 192.47.244.0-192.47.249.255 Signature Algorithm: sha256WithRSAEncryption 19:f4:c8:a1:6a:72:3d:46:27:06:19:4b:61:17:ed:15:bd:0c: 80:fb:77:0f:61:b8:63:fd:b2:60:26:a8:1b:ee:12:38:e9:a6: 48:96:09:8c:28:d8:31:38:22:c5:9f:46:e3:49:c2:bf:b1:6c: f7:06:c9:d8:1d:4b:f1:cb:37:8d:53:24:67:cc:74:c6:d5:40: be:e9:61:03:3b:0f:be:f3:b3:6e:5e:43:cc:96:a2:81:3d:51: 7d:f4:6d:c2:cd:45:d2:49:d0:11:68:f0:4a:ce:5c:ec:fd:4a: af:e6:25:82:c1:5c:24:9d:96:c4:28:1c:5b:44:79:0b:81:fe: d1:8b:52:a8:f5:b3:41:21:f1:e8:6f:57:aa:5a:07:66:29:d8: 1b:2f:0b:05:23:e1:bc:9d:d4:7c:5c:63:66:a2:29:bd:ef:e6: 1a:11:1b:30:68:63:74:4d:89:72:db:8e:c2:c0:92:ac:1e:75: 01:87:43:b5:a7:aa:85:65:9a:01:a5:24:3c:58:df:88:ad:f2: 96:e7:27:c4:4c:67:08:f5:7c:d5:f2:7a:28:a9:65:c9:ea:46: 83:50:1d:c2:52:e8:74:06:f6:2b:91:c1:74:e2:0d:f4:b2:30: ad:f3:68:b4:8c:1a:bc:bb:5d:7f:1f:46:ee:e4:80:b7:1e:07: 8b:63:d9:92 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZt3WVtqwCz9dF214TD9ktWqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMTUzMDAzNzM3ZDc4ZjcyMmRiOWEyOGUyMjA0M2UzNWQ4 ZDg3MWUwHhcNMjYwMTAxMDIxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDhkMDcwNDc1M2EwYzUxYTM4YWM4ZTVkM2YxZDdiYmEzMzM5MDE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA41wjzXFCazbLkKJvpZwgDNmb1AdZ 9q+yoNAX4N2wWfTLgCLKVLYGCZveHU0NV5dzG5OnqSLy6YeD1nmNkS79zr+R3fJ3 j3KkRuYmibCrgyR9mO7XyoEHlY/B+4/Gjd2cW/itUbGdkTx07O4sdzV6WubIavYw VfyAO4wI+3Zv8U9ei9UkyKG55kFvcR2UQfa0z06XprZkeYl6Eh3onyP01cIkDWhF /ftwRF3AitZek0QB8q+hAhAmH2Pd3G+BBzYBGH5fuvyvNG7K5CaEj240aiPjD7Hb e3BCBa9IUYy6WrCIPOtUs6yInogVg+nTWEXWOrh4aGtDF+/laaEqiDb+HwIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFOSNBwR1OgxRo4rI5dPx17ujM5AXMB8GA1UdIwQY MBaAFFMVMANzfXj3ItuaKOIgQ+NdjYceMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXhVd0EzTjllUGNpMjVvbzRpQkQ0MTJOaHg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS84ZjcxNDgtMjM2ZC00MDg4LTg5ZTYt NjY1OTk1YzYyODM4LzEvNUkwSEJIVTZERkdqaXNqbDBfSFh1Nk16a0JjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS84ZjcxNDgtMjM2ZC00MDg4LTg5ZTYtNjY1OTk1YzYyODM4 LzEvVXhVd0EzTjllUGNpMjVvbzRpQkQ0MTJOaHg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAATATAwMAhhUwDAME AsAv9AMEAcAv+DANBgkqhkiG9w0BAQsFAAOCAQEAGfTIoWpyPUYnBhlLYRftFb0M gPt3D2G4Y/2yYCaoG+4SOOmmSJYJjCjYMTgixZ9G40nCv7Fs9wbJ2B1L8cs3jVMk Z8x0xtVAvulhAzsPvvOzbl5DzJaigT1RffRtws1F0knQEWjwSs5c7P1Kr+YlgsFc JJ2WxCgcW0R5C4H+0YtSqPWzQSHx6G9XqloHZinYGy8LBSPhvJ3UfFxjZqIpve/m GhEbMGhjdE2JctuOwsCSrB51AYdDtaeqhWWaAaUkPFjfiK3ylucnxExnCPV81fJ6 KKllyepGg1AdwlLodAb2K5HBdOIN9LIwrfNotIwavLtdfx9G7uSAtx4Hi2PZkg== -----END CERTIFICATE-----Generated at Mon Jan 26 01:42:25 2026 by rpki-client