This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/v5kyyRAO3nRwLZjdmYWqF2PE6Xw.roa File: v5kyyRAO3nRwLZjdmYWqF2PE6Xw.roa (raw, json) Hash identifier: cz8wU8VfVi/UOhj8fUTgjFjn3D6rtrlh0ujcQlLWPWA= Subject key identifier: BF:99:32:C9:10:0E:DE:74:70:2D:98:DD:99:85:AA:17:63:C4:E9:7C Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Certificate serial: 019B7F83949022EEEA1F4CBCD0DB8AA1C7DD Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/v5kyyRAO3nRwLZjdmYWqF2PE6Xw.roa Signing time: Fri 02 Jan 2026 16:21:28 +0000 ROA not before: Fri 02 Jan 2026 16:21:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 194.53.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 17 Jan 2026 22:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:94:90:22:ee:ea:1f:4c:bc:d0:db:8a:a1:c7:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Validity Not Before: Jan 2 16:21:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf9932c9100ede74702d98dd9985aa1763c4e97c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a5:1e:80:f9:d5:4e:20:06:c6:37:15:81:1c: 50:13:9c:7c:e7:cb:49:ea:b7:ae:6a:88:28:ca:1a: a6:9d:ef:f4:f8:1b:e2:2e:01:80:67:0a:18:7b:c3: c2:98:9c:5e:e4:13:56:70:8d:8f:5d:76:36:37:ac: ad:7f:bd:8a:b5:15:62:08:44:48:6a:00:5d:5f:e7: 5f:10:97:47:16:90:6a:e5:04:66:6a:d5:5e:af:ea: 20:b6:c1:3f:9d:0c:46:25:3a:3e:e9:b0:ed:53:30: 27:fb:52:38:16:3d:d0:e8:eb:65:de:75:eb:0a:3c: 5a:ff:98:a7:10:c6:31:7f:57:39:94:cb:e0:ae:dd: 5d:c6:d3:92:e3:43:f5:e4:2f:99:cd:06:ff:9b:e8: a4:94:60:44:00:53:18:2e:60:c2:02:0f:71:15:56: b0:ea:f4:83:19:77:73:f9:11:0a:e1:65:61:e1:a6: 44:c8:41:24:dd:15:c3:1c:cf:77:cb:77:01:00:29: 79:ae:6f:ca:71:d4:80:f5:3f:30:37:d7:c6:9c:b0: c8:21:c0:38:d7:46:db:34:2e:67:4a:47:a4:cf:56: 76:b3:f2:e7:a2:60:13:c2:9e:ab:78:0e:81:00:60: 4a:7a:85:10:d5:38:b8:d7:c1:e8:e6:ec:69:ae:4b: c3:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:99:32:C9:10:0E:DE:74:70:2D:98:DD:99:85:AA:17:63:C4:E9:7C X509v3 Authority Key Identifier: keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/v5kyyRAO3nRwLZjdmYWqF2PE6Xw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.53.200.0/24 Signature Algorithm: sha256WithRSAEncryption 17:4e:3a:c0:b9:ff:a0:08:14:48:e0:0a:01:e6:00:48:f1:a9: 3e:d9:4f:56:97:49:86:c8:0d:51:74:4c:c2:28:ef:0c:28:a6: 16:e8:7b:f7:30:7b:84:a5:16:d8:a8:a4:99:75:c8:22:17:3d: 48:df:91:aa:2d:bb:2c:da:91:67:10:34:82:55:ba:91:c8:ad: 9b:3c:31:c5:1e:13:70:40:aa:7c:d1:8d:b9:e2:79:71:59:e8: 2f:5a:70:66:09:bd:ab:7c:20:df:f6:dc:11:da:fd:63:74:3f: 02:a7:a3:59:32:32:96:1e:58:b1:29:f9:ad:7e:92:6f:0e:04: 38:35:05:a3:8a:2b:94:16:99:9a:c2:fa:d8:66:f5:34:5d:40: b9:b9:a6:95:d8:f5:ba:02:25:21:b8:ee:2a:a9:15:b4:5d:c9: 2c:fc:3e:0e:32:41:e3:d9:ea:77:37:e5:97:cf:18:2d:8c:46: 37:60:e0:18:9a:60:36:08:c5:87:8c:89:ea:5b:34:4a:da:1e: 32:5f:c9:0f:b3:08:2a:19:51:96:52:46:e8:77:60:d7:20:38: a8:53:6c:00:21:95:0c:00:90:e7:b0:45:8c:7a:7b:52:9d:9c: d5:eb:94:37:e7:15:dd:bf:36:84:e7:91:39:d9:d7:36:c8:0f: 71:60:5c:7c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g5SQIu7qH0y80NuKocfdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyY2U3NTkzMjAxOTViOWNjMThjY2ZjYjFiNTMyYWVhOTQ5 MjU4ZjEwHhcNMjYwMTAyMTYyMTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjk5MzJjOTEwMGVkZTc0NzAyZDk4ZGQ5OTg1YWExNzYzYzRlOTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaUegPnVTiAGxjcVgRxQE5x858tJ 6reuaogoyhqmne/0+BviLgGAZwoYe8PCmJxe5BNWcI2PXXY2N6ytf72KtRViCERI agBdX+dfEJdHFpBq5QRmatVer+ogtsE/nQxGJTo+6bDtUzAn+1I4Fj3Q6Otl3nXr Cjxa/5inEMYxf1c5lMvgrt1dxtOS40P15C+ZzQb/m+iklGBEAFMYLmDCAg9xFVaw 6vSDGXdz+REK4WVh4aZEyEEk3RXDHM93y3cBACl5rm/KcdSA9T8wN9fGnLDIIcA4 10bbNC5nSkekz1Z2s/LnomATwp6reA6BAGBKeoUQ1Ti418Ho5uxprkvDVwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL+ZMskQDt50cC2Y3ZmFqhdjxOl8MB8GA1UdIwQY MBaAFELOdZMgGVucwYzPyxtTKuqUkljxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUt Njk3OTQ4ZWE3MWY1LzEvdjVreXlSQU8zblJ3TFpqZG1ZV3FGMlBFNlh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUtNjk3OTQ4ZWE3MWY1 LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjXIMA0G CSqGSIb3DQEBCwUAA4IBAQAXTjrAuf+gCBRI4AoB5gBI8ak+2U9Wl0mGyA1RdEzC KO8MKKYW6Hv3MHuEpRbYqKSZdcgiFz1I35GqLbss2pFnEDSCVbqRyK2bPDHFHhNw QKp80Y254nlxWegvWnBmCb2rfCDf9twR2v1jdD8Cp6NZMjKWHlixKfmtfpJvDgQ4 NQWjiiuUFpmawvrYZvU0XUC5uaaV2PW6AiUhuO4qqRW0Xcks/D4OMkHj2ep3N+WX zxgtjEY3YOAYmmA2CMWHjInqWzRK2h4yX8kPswgqGVGWUkbod2DXIDioU2wAIZUM AJDnsEWMentSnZzV65Q35xXdvzaE55E52dc2yA9xYFx8 -----END CERTIFICATE-----Generated at Sat Jan 17 06:46:21 2026 by rpki-client