This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/5qt9lNybqUHZohfxSPz95g9mX7E.roa File: 5qt9lNybqUHZohfxSPz95g9mX7E.roa (raw, json) Hash identifier: mVHv2PLsBDsXEMy4ovgXLDyhiJ+2KGTM6nPmA9c85LE= Subject key identifier: E6:AB:7D:94:DC:9B:A9:41:D9:A2:17:F1:48:FC:FD:E6:0F:66:5F:B1 Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00 Certificate serial: 019B79EC4877D8153CC8F7C5A620E62CE157 Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/5qt9lNybqUHZohfxSPz95g9mX7E.roa Signing time: Thu 01 Jan 2026 14:18:06 +0000 ROA not before: Thu 01 Jan 2026 14:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200922 IP address blocks: 195.49.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:48:77:d8:15:3c:c8:f7:c5:a6:20:e6:2c:e1:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00 Validity Not Before: Jan 1 14:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e6ab7d94dc9ba941d9a217f148fcfde60f665fb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3a:2a:39:f2:7d:6c:26:b6:99:ee:9e:d4:b9: 3e:cf:94:18:e7:7d:15:fe:40:1b:88:d1:e2:bf:31: 5a:bd:85:8b:61:dc:65:9f:dc:f3:33:bc:78:e1:60: 9f:ae:00:7b:70:5a:b4:1b:6d:e5:40:68:3f:8d:1d: b3:58:94:9f:70:f0:1e:12:2a:2c:08:85:f5:0f:f5: 58:d4:ae:4f:a4:d4:bc:7e:64:b7:55:2c:72:e8:c2: 39:c2:ed:c5:d4:ff:ed:df:e2:08:61:c2:5c:0a:cb: f1:b7:a9:f6:fb:1f:35:38:27:b9:0c:5d:c7:bb:12: 14:e4:ca:d1:92:08:7c:90:c4:96:c0:e5:6b:d5:5c: f9:41:d1:aa:0d:7e:4a:0e:ab:45:b0:57:4b:1d:08: ce:80:bf:be:8f:95:0b:57:2a:52:d1:1c:64:34:99: 6a:30:92:3c:6f:49:08:1a:58:22:72:f2:a7:30:eb: a2:21:fd:3d:1b:d3:55:d2:b1:d0:6c:66:07:28:63: 27:50:d3:3f:0d:0a:80:37:19:f8:64:15:7a:25:9e: 1e:49:5b:b0:7f:13:95:78:d6:b9:60:e8:14:59:10: ee:d0:ee:41:29:34:e4:18:ab:49:b1:f2:7b:2c:d5: 0d:c2:70:9f:d2:2e:6a:f3:46:e4:7d:ad:13:f7:62: 9a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:AB:7D:94:DC:9B:A9:41:D9:A2:17:F1:48:FC:FD:E6:0F:66:5F:B1 X509v3 Authority Key Identifier: keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/5qt9lNybqUHZohfxSPz95g9mX7E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.49.204.0/24 Signature Algorithm: sha256WithRSAEncryption af:3a:03:fa:ec:a4:7d:1e:c4:ee:d0:c3:41:ed:7e:df:96:7b: d7:d7:2d:cc:fa:8b:60:df:be:18:5c:8a:c3:6a:e0:51:c6:63: 8f:38:1d:ea:18:c9:39:7d:b4:7d:a8:e4:02:1d:7c:b6:ce:79: 22:66:cf:3c:da:78:b8:51:96:e7:e0:3f:62:e4:fc:80:c4:fa: 82:7f:11:8e:00:9a:bb:71:12:d9:ba:6a:0f:df:ac:f9:8f:ed: 9e:b1:ff:bc:bb:c4:14:54:fa:00:6e:79:f8:2f:83:29:fe:99: 3e:ec:0c:67:68:96:0d:04:96:95:45:8a:4f:ee:94:1f:95:a9: 83:2d:88:d3:ca:3a:5f:70:8c:48:6a:1c:fc:21:b7:4d:dc:39: 97:bf:61:fb:ad:56:1e:eb:ad:4a:34:15:8c:0b:46:8e:21:1a: ba:92:eb:b7:40:31:41:b8:f8:d5:8c:6b:05:93:77:25:5b:d9: c6:d8:00:f4:c1:dc:8d:7e:72:96:4c:d2:d1:f4:ac:00:b5:cc: ba:fa:06:9e:4c:1a:42:e8:3c:39:79:26:4e:c4:50:64:5b:4d: 75:37:46:37:5c:c5:c4:0b:99:c9:49:57:d3:b3:9d:39:16:f9: 82:7d:63:ee:68:a3:d4:29:d6:a0:54:93:ec:8e:60:3e:da:a9: 80:0c:c8:a5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57Eh32BU8yPfFpiDmLOFXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMWRmNjY2N2RhMzhlNTdhMjViMTk0NWZhNDBlNTkzZTVh ZGZhMDAwHhcNMjYwMTAxMTQxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNmFiN2Q5NGRjOWJhOTQxZDlhMjE3ZjE0OGZjZmRlNjBmNjY1ZmIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDoqOfJ9bCa2me6e1Lk+z5QY530V /kAbiNHivzFavYWLYdxln9zzM7x44WCfrgB7cFq0G23lQGg/jR2zWJSfcPAeEios CIX1D/VY1K5PpNS8fmS3VSxy6MI5wu3F1P/t3+IIYcJcCsvxt6n2+x81OCe5DF3H uxIU5MrRkgh8kMSWwOVr1Vz5QdGqDX5KDqtFsFdLHQjOgL++j5ULVypS0RxkNJlq MJI8b0kIGlgicvKnMOuiIf09G9NV0rHQbGYHKGMnUNM/DQqANxn4ZBV6JZ4eSVuw fxOVeNa5YOgUWRDu0O5BKTTkGKtJsfJ7LNUNwnCf0i5q80bkfa0T92KaYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOarfZTcm6lB2aIX8Uj8/eYPZl+xMB8GA1UdIwQY MBaAFM8d9mZ9o45XolsZRfpA5ZPlrfoAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEt OGRmMzYzMzdlNmJjLzEvNXF0OWxOeWJxVUhab2hmeFNQejk1ZzltWDdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEtOGRmMzYzMzdlNmJj LzEvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwzHMMA0G CSqGSIb3DQEBCwUAA4IBAQCvOgP67KR9HsTu0MNB7X7flnvX1y3M+otg374YXIrD auBRxmOPOB3qGMk5fbR9qOQCHXy2znkiZs882ni4UZbn4D9i5PyAxPqCfxGOAJq7 cRLZumoP36z5j+2esf+8u8QUVPoAbnn4L4Mp/pk+7AxnaJYNBJaVRYpP7pQflamD LYjTyjpfcIxIahz8IbdN3DmXv2H7rVYe661KNBWMC0aOIRq6kuu3QDFBuPjVjGsF k3clW9nG2AD0wdyNfnKWTNLR9KwAtcy6+gaeTBpC6Dw5eSZOxFBkW011N0Y3XMXE C5nJSVfTs505FvmCfWPuaKPUKdagVJPsjmA+2qmADMil -----END CERTIFICATE-----Generated at Mon Jan 26 12:22:07 2026 by rpki-client