This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/5ykEZF8wevgZaB_1ODGOMH0aKu0.roa File: 5ykEZF8wevgZaB_1ODGOMH0aKu0.roa (raw, json) Hash identifier: eiKZrkndtioGJrHaag8vJV+0KJ7aMqNliXoe9zqh9WE= Subject key identifier: E7:29:04:64:5F:30:7A:F8:19:68:1F:F5:38:31:8E:30:7D:1A:2A:ED Certificate issuer: /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd Certificate serial: 019B791085714AE7E097D119154D4A0277EC Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/5ykEZF8wevgZaB_1ODGOMH0aKu0.roa Signing time: Thu 01 Jan 2026 10:18:04 +0000 ROA not before: Thu 01 Jan 2026 10:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50518 IP address blocks: 83.231.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:85:71:4a:e7:e0:97:d1:19:15:4d:4a:02:77:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd Validity Not Before: Jan 1 10:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e72904645f307af819681ff538318e307d1a2aed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:da:d1:ea:d4:65:c4:9e:0b:30:11:6d:9f:7a: ae:41:21:bc:62:0f:ad:ad:04:0d:c1:3c:cb:3a:03: 6d:f2:26:6b:ad:5b:ef:9c:78:a5:9c:14:31:f5:a7: 3b:b9:b8:fe:a9:62:25:f5:db:22:e2:b8:1d:0f:05: ec:95:a1:e2:2e:06:6e:9d:5c:90:93:e3:ac:48:c8: 16:e1:5d:cc:0b:b3:db:f5:fc:f2:b6:ad:99:62:7a: 56:4a:d5:04:36:2d:33:8e:9f:a5:9a:7c:ec:07:4a: f5:72:1a:73:c1:36:f0:19:9c:36:73:61:1d:28:27: ad:30:fe:98:e9:a5:59:59:ea:8e:9d:81:93:78:32: 7b:0a:af:24:ae:20:21:4c:52:e5:eb:64:fa:7f:b8: e8:12:9a:31:e0:3a:0f:11:6e:bd:40:4b:7d:c7:39: a2:b4:48:99:f0:5e:b3:e8:87:7d:0f:b7:3a:e9:36: e4:0e:a3:4b:7f:29:62:32:1d:39:fe:53:84:86:23: c4:6a:d7:ef:b7:66:0f:78:09:07:87:28:38:d6:3b: d2:14:43:54:74:00:80:1c:8a:96:93:be:8d:60:b1: 97:84:74:91:3e:31:0b:ad:27:e6:be:f4:5d:f7:78: 3a:5a:80:d6:84:04:83:7e:bf:b3:cd:b6:d5:52:e7: 34:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:29:04:64:5F:30:7A:F8:19:68:1F:F5:38:31:8E:30:7D:1A:2A:ED X509v3 Authority Key Identifier: keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/5ykEZF8wevgZaB_1ODGOMH0aKu0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.231.152.0/24 Signature Algorithm: sha256WithRSAEncryption 71:4a:4e:f8:1d:bf:31:bb:68:d0:f7:31:dd:2c:e7:93:c7:14: a7:9b:d7:a3:b4:3c:5f:b1:c6:cb:7d:64:6c:3d:f9:8f:b6:03: f7:ea:78:64:7f:bd:12:3a:6b:d7:ef:06:f6:0a:c9:df:c8:e2: af:70:cf:d8:f3:d6:5d:12:97:83:0f:f5:e9:91:ec:8d:c0:68: 5d:1a:29:18:1c:d7:3a:f1:0c:74:09:3a:dc:ae:6b:ae:04:d6: 6f:79:e8:ff:4c:10:3e:73:a5:96:af:59:bd:94:6d:f1:bb:88: fc:6b:96:5a:71:06:a5:97:77:1c:0e:3c:39:b2:f5:b9:6f:3b: 51:77:af:41:b7:3d:0f:34:4b:a8:f9:14:8f:05:80:4e:f0:2c: 2f:f3:35:70:62:7a:f8:72:44:af:5f:01:9f:6f:c4:2c:23:fc: 60:ad:2e:b8:a9:71:9a:f7:be:1b:7e:60:aa:29:6c:7c:19:87: 19:16:b5:63:48:9c:10:4d:5e:1c:b9:94:da:77:38:b5:99:e3: 6d:a8:a0:a1:a7:3a:2f:c8:8b:28:08:f6:e9:f5:f9:e8:19:0e: d8:6c:c7:d5:95:15:56:5c:0d:7e:6c:d2:c7:d5:c0:0c:81:fb: 72:78:17:9a:dc:9e:35:e8:3e:37:09:42:09:96:c3:7f:2d:76: 85:62:3e:71 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EIVxSufgl9EZFU1KAnfsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkNWEyOTIxZmJlYjhhNDQ4ZTdhZTFlYzVhMTFiOGFiODk4 ZDIyZmQwHhcNMjYwMTAxMTAxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzI5MDQ2NDVmMzA3YWY4MTk2ODFmZjUzODMxOGUzMDdkMWEyYWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdrR6tRlxJ4LMBFtn3quQSG8Yg+t rQQNwTzLOgNt8iZrrVvvnHilnBQx9ac7ubj+qWIl9dsi4rgdDwXslaHiLgZunVyQ k+OsSMgW4V3MC7Pb9fzytq2ZYnpWStUENi0zjp+lmnzsB0r1chpzwTbwGZw2c2Ed KCetMP6Y6aVZWeqOnYGTeDJ7Cq8kriAhTFLl62T6f7joEpox4DoPEW69QEt9xzmi tEiZ8F6z6Id9D7c66TbkDqNLfyliMh05/lOEhiPEatfvt2YPeAkHhyg41jvSFENU dACAHIqWk76NYLGXhHSRPjELrSfmvvRd93g6WoDWhASDfr+zzbbVUuc0YwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOcpBGRfMHr4GWgf9TgxjjB9GirtMB8GA1UdIwQY MBaAFE1aKSH764pEjnrh7FoRuKuJjSL9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9lZThiOTgtNzI0MC00YjYyLWFjYzUt NzgwYTI1Y2QwZGQ5LzEvNXlrRVpGOHdldmdaYUJfMU9ER09NSDBhS3UwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9lZThiOTgtNzI0MC00YjYyLWFjYzUtNzgwYTI1Y2QwZGQ5 LzEvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU+eYMA0G CSqGSIb3DQEBCwUAA4IBAQBxSk74Hb8xu2jQ9zHdLOeTxxSnm9ejtDxfscbLfWRs PfmPtgP36nhkf70SOmvX7wb2CsnfyOKvcM/Y89ZdEpeDD/XpkeyNwGhdGikYHNc6 8Qx0CTrcrmuuBNZveej/TBA+c6WWr1m9lG3xu4j8a5ZacQall3ccDjw5svW5bztR d69Btz0PNEuo+RSPBYBO8Cwv8zVwYnr4ckSvXwGfb8QsI/xgrS64qXGa974bfmCq KWx8GYcZFrVjSJwQTV4cuZTadzi1meNtqKChpzovyIsoCPbp9fnoGQ7YbMfVlRVW XA1+bNLH1cAMgftyeBea3J416D43CUIJlsN/LXaFYj5x -----END CERTIFICATE-----Generated at Mon Jan 12 12:27:09 2026 by rpki-client