This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/5sjVZOffDC3SdMXl3xj-LISTTRA.roa File: 5sjVZOffDC3SdMXl3xj-LISTTRA.roa (raw, json) Hash identifier: NgYO+E9uip8I6LBuV26/SjtRZiAA/mIEsqO23fxRKZo= Subject key identifier: E6:C8:D5:64:E7:DF:0C:2D:D2:74:C5:E5:DF:18:FE:2C:84:93:4D:10 Certificate issuer: /CN=4367547d851e3cd776cd33290b2454acc0e851bb Certificate serial: 019B7FF1261A9D361F0802F1C2B0CD752366 Authority key identifier: 43:67:54:7D:85:1E:3C:D7:76:CD:33:29:0B:24:54:AC:C0:E8:51:BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2dUfYUePNd2zTMpCyRUrMDoUbs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/5sjVZOffDC3SdMXl3xj-LISTTRA.roa Signing time: Fri 02 Jan 2026 18:21:08 +0000 ROA not before: Fri 02 Jan 2026 18:21:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214844 IP address blocks: 193.186.160.0/24 maxlen: 24 2a14:56c0:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.crl rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft rsync://rpki.ripe.net/repository/DEFAULT/Q2dUfYUePNd2zTMpCyRUrMDoUbs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:26:1a:9d:36:1f:08:02:f1:c2:b0:cd:75:23:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4367547d851e3cd776cd33290b2454acc0e851bb Validity Not Before: Jan 2 18:21:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e6c8d564e7df0c2dd274c5e5df18fe2c84934d10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d4:dd:a3:44:5d:05:36:ed:64:a0:d0:01:09: 26:f3:c5:f9:18:99:70:0c:d3:b1:de:24:2a:f4:0c: 97:0f:56:1f:69:f1:f4:3c:fd:d4:09:a0:cc:94:df: 95:23:93:7d:d9:78:fd:64:61:00:75:13:5d:58:ef: fc:c7:e1:9c:b8:ca:96:55:ba:bb:62:f3:09:9e:62: a8:84:3e:a7:6e:f2:d1:6e:43:5a:a0:d4:f3:e7:75: e2:bb:ee:3a:67:68:a9:ba:63:1a:19:d1:c2:69:c0: 8e:27:84:ef:11:26:b1:bc:8b:8f:a1:7f:d1:58:39: 68:84:d1:78:8b:82:2c:ea:8d:2c:e9:b6:cf:bc:db: 61:9d:25:0d:6e:c5:a8:bf:13:94:20:ba:ea:83:5d: 95:01:87:8b:50:1b:a4:78:cc:d7:9f:6e:ef:cd:73: da:13:79:25:8e:45:25:e1:0b:5e:61:dc:4d:2b:83: 2b:9d:93:d1:b3:d7:36:a4:e1:9c:8a:94:e7:be:1a: 68:6e:40:36:9a:51:43:60:7c:76:c9:25:f9:3f:0b: b3:67:6c:cf:c2:22:e9:e6:b9:a6:d4:be:34:a8:7d: 43:e7:b1:5f:51:a5:09:ad:8e:1f:47:f7:f7:94:b0: 5c:bc:c2:c7:f9:10:73:5b:a5:a3:e3:f2:b7:2e:5e: 51:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:C8:D5:64:E7:DF:0C:2D:D2:74:C5:E5:DF:18:FE:2C:84:93:4D:10 X509v3 Authority Key Identifier: keyid:43:67:54:7D:85:1E:3C:D7:76:CD:33:29:0B:24:54:AC:C0:E8:51:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2dUfYUePNd2zTMpCyRUrMDoUbs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/5sjVZOffDC3SdMXl3xj-LISTTRA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.186.160.0/24 IPv6: 2a14:56c0:ffff::/48 Signature Algorithm: sha256WithRSAEncryption 1c:f3:b6:1d:58:15:eb:26:cc:62:54:28:38:0b:2b:a0:53:49: f3:2e:3e:85:28:c5:63:c5:6c:64:90:bd:79:7d:ea:9d:d5:8b: 06:c4:a6:c5:40:23:c6:e2:29:14:c8:44:49:49:48:bd:0c:e1: 3b:92:e8:58:8e:c5:a0:fc:5e:d5:6c:df:cf:97:f2:54:70:94: e6:61:72:fd:b1:fa:07:7f:5c:36:ff:21:47:a9:66:40:b6:22: bd:06:9b:ba:12:02:c6:49:b8:da:85:14:37:fd:7d:43:16:15: 39:56:9d:fa:53:dd:9a:19:04:40:46:bd:1a:ba:23:64:b5:27: 4c:12:3b:ee:f4:7e:4c:a4:3a:ed:16:1e:a7:50:c1:50:b8:6d: 71:5b:d7:89:c2:11:ac:15:f9:b0:31:e9:1f:12:e9:58:96:13: 27:ed:f8:cf:bc:10:d9:bd:d3:c2:f5:eb:b8:f9:99:f3:6d:84: 96:c7:75:f8:80:56:97:32:b6:f7:78:60:22:5d:9d:9c:c7:02: 7f:e0:13:46:54:3a:63:f2:37:b6:c5:ad:25:d6:56:b8:60:da: 4c:a0:09:e9:1b:31:99:d2:6d:0b:e7:2a:74:8e:67:74:e2:cf: 19:2b:3b:df:b4:77:67:61:6f:6f:60:c3:92:c6:a5:2c:de:30: 9c:ef:ae:a2 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/8SYanTYfCALxwrDNdSNmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzNjc1NDdkODUxZTNjZDc3NmNkMzMyOTBiMjQ1NGFjYzBl ODUxYmIwHhcNMjYwMTAyMTgyMTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNmM4ZDU2NGU3ZGYwYzJkZDI3NGM1ZTVkZjE4ZmUyYzg0OTM0ZDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdTdo0RdBTbtZKDQAQkm88X5GJlw DNOx3iQq9AyXD1YfafH0PP3UCaDMlN+VI5N92Xj9ZGEAdRNdWO/8x+GcuMqWVbq7 YvMJnmKohD6nbvLRbkNaoNTz53Xiu+46Z2ipumMaGdHCacCOJ4TvESaxvIuPoX/R WDlohNF4i4Is6o0s6bbPvNthnSUNbsWovxOUILrqg12VAYeLUBukeMzXn27vzXPa E3kljkUl4QteYdxNK4MrnZPRs9c2pOGcipTnvhpobkA2mlFDYHx2ySX5PwuzZ2zP wiLp5rmm1L40qH1D57FfUaUJrY4fR/f3lLBcvMLH+RBzW6Wj4/K3Ll5RDwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFObI1WTn3wwt0nTF5d8Y/iyEk00QMB8GA1UdIwQY MBaAFENnVH2FHjzXds0zKQskVKzA6FG7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTJkVWZZVWVQTmQyelRNcEN5UlVyTURvVWJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi84NzRjODUtOWU3ZC00YWNlLTk1OGYt ZGFiN2YwYzhkMjQwLzEvNXNqVlpPZmZEQzNTZE1YbDN4ai1MSVNUVFJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi84NzRjODUtOWU3ZC00YWNlLTk1OGYtZGFiN2YwYzhkMjQw LzEvUTJkVWZZVWVQTmQyelRNcEN5UlVyTURvVWJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwbqgMA8E AgACMAkDBwAqFFbA//8wDQYJKoZIhvcNAQELBQADggEBABzzth1YFesmzGJUKDgL K6BTSfMuPoUoxWPFbGSQvXl96p3ViwbEpsVAI8biKRTIRElJSL0M4TuS6FiOxaD8 XtVs38+X8lRwlOZhcv2x+gd/XDb/IUepZkC2Ir0Gm7oSAsZJuNqFFDf9fUMWFTlW nfpT3ZoZBEBGvRq6I2S1J0wSO+70fkykOu0WHqdQwVC4bXFb14nCEawV+bAx6R8S 6ViWEyft+M+8ENm908L167j5mfNthJbHdfiAVpcytvd4YCJdnZzHAn/gE0ZUOmPy N7bFrSXWVrhg2kygCekbMZnSbQvnKnSOZ3TizxkrO9+0d2dhb29gw5LGpSzeMJzv rqI= -----END CERTIFICATE-----Generated at Sat Jan 10 20:49:54 2026 by rpki-client