This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/5YAovCxiYTc45JxdA6EOYqy_CLE.roa File: 5YAovCxiYTc45JxdA6EOYqy_CLE.roa (raw, json) Hash identifier: wZ5E1HSFWMUzYs9A5z2qRllifuxDCxhIkgExNKQWRew= Subject key identifier: E5:80:28:BC:2C:62:61:37:38:E4:9C:5D:03:A1:0E:62:AC:BF:08:B1 Certificate issuer: /CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40 Certificate serial: 019B7758E0BE5852C430448DF47AE9095ECC Authority key identifier: CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/5YAovCxiYTc45JxdA6EOYqy_CLE.roa Signing time: Thu 01 Jan 2026 02:17:51 +0000 ROA not before: Thu 01 Jan 2026 02:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 217.149.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.crl rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:e0:be:58:52:c4:30:44:8d:f4:7a:e9:09:5e:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40 Validity Not Before: Jan 1 02:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e58028bc2c62613738e49c5d03a10e62acbf08b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:dd:ea:3e:0f:0b:32:61:bf:ac:a7:e5:f9:81: 9e:a5:46:28:90:6e:ce:9f:d5:d8:7a:a6:e0:5b:36: c4:d3:61:40:34:cc:32:36:f8:ea:cb:4c:ce:7e:7a: d1:ed:74:7e:5a:53:88:66:ba:0a:5f:d5:c2:90:67: 03:8a:a9:ab:0b:ea:80:bc:b2:32:45:e3:8e:e4:9d: 29:88:87:6d:70:57:19:25:1d:28:4b:7c:b0:8a:16: a5:61:94:eb:44:75:40:af:8c:12:76:89:91:f5:43: ff:a3:66:cd:47:e0:70:5c:cf:32:7f:4e:6b:ec:d6: 1f:bd:ef:06:73:73:b0:f9:1a:d1:09:2d:b5:ec:b0: 67:f4:13:01:c7:cb:10:b1:ff:23:09:d2:a9:bd:9b: 07:89:06:c0:f9:36:fb:a8:ac:9d:71:ff:c4:d0:d7: 32:44:fb:7b:58:3e:6f:bf:b7:56:15:53:26:65:01: de:43:c1:15:0c:55:a9:41:60:49:1c:0a:84:a4:aa: b8:e7:5c:77:f3:5a:fb:e6:34:53:15:4c:67:95:67: 53:87:40:fb:87:0d:42:69:ee:1d:c0:3a:1d:e5:e5: c0:8f:66:e9:f2:4c:36:86:c3:83:ab:f5:9e:8a:a2: c1:db:66:f5:e2:01:8b:d0:00:f4:02:cf:5e:0f:91: e2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:80:28:BC:2C:62:61:37:38:E4:9C:5D:03:A1:0E:62:AC:BF:08:B1 X509v3 Authority Key Identifier: keyid:CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/5YAovCxiYTc45JxdA6EOYqy_CLE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.149.108.0/24 Signature Algorithm: sha256WithRSAEncryption 72:29:4d:de:43:f9:06:95:aa:aa:2d:23:39:32:d9:24:93:a9: 11:8c:eb:5d:5b:ce:80:bf:96:e8:60:f2:e2:41:1f:30:58:41: 49:21:9e:eb:e0:db:c7:ce:83:f4:d2:2b:be:66:91:0a:bb:cf: b0:60:64:90:a9:68:f0:a7:53:29:3b:d4:9a:6c:45:24:4a:1d: 69:8a:09:6d:81:e3:24:2b:40:64:7e:92:d7:f6:6a:fe:05:16: 79:db:97:3d:be:e5:58:a3:41:57:bd:43:40:bd:ac:87:f2:36: 86:a1:5e:34:c6:dc:d3:44:be:e8:af:7a:a5:c7:c6:85:36:df: 8d:1f:87:81:1d:d4:fc:bf:0a:b9:53:6c:c6:e8:70:ff:79:8a: 2b:47:b3:85:48:2c:65:10:b2:c7:a2:7a:86:ea:3f:41:8d:e5: 7b:35:12:81:87:29:db:72:1a:30:b9:c2:de:49:1f:52:b2:10: d8:4c:b5:5d:1f:22:93:11:87:4e:12:6a:73:d1:94:e5:41:30: ee:d5:63:16:97:b5:e3:5e:95:b9:a1:60:0f:d3:71:b4:d4:a1: 78:f4:06:d8:23:a6:ba:06:b9:bb:7f:6f:62:60:fe:9e:62:66: d6:12:7f:db:25:36:31:cd:62:b1:33:3b:87:f5:20:87:a6:9c: f7:0e:8f:1c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WOC+WFLEMESN9HrpCV7MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhOTI2Zjk2MzUxMTg5M2ZhNGQ5ZmJkNWU2NGUwZjhhNDM4 MzdlNDAwHhcNMjYwMTAxMDIxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTgwMjhiYzJjNjI2MTM3MzhlNDljNWQwM2ExMGU2MmFjYmYwOGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyN3qPg8LMmG/rKfl+YGepUYokG7O n9XYeqbgWzbE02FANMwyNvjqy0zOfnrR7XR+WlOIZroKX9XCkGcDiqmrC+qAvLIy ReOO5J0piIdtcFcZJR0oS3ywihalYZTrRHVAr4wSdomR9UP/o2bNR+BwXM8yf05r 7NYfve8Gc3Ow+RrRCS217LBn9BMBx8sQsf8jCdKpvZsHiQbA+Tb7qKydcf/E0Ncy RPt7WD5vv7dWFVMmZQHeQ8EVDFWpQWBJHAqEpKq451x381r75jRTFUxnlWdTh0D7 hw1Cae4dwDod5eXAj2bp8kw2hsODq/WeiqLB22b14gGL0AD0As9eD5HiPQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOWAKLwsYmE3OOScXQOhDmKsvwixMB8GA1UdIwQY MBaAFMqSb5Y1EYk/pNn71eZOD4pDg35AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXBKdmxqVVJpVC1rMmZ2VjVrNFBpa09EZmtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy80NGI3YmItMjYwNS00MjViLWIzNDEt MTQ2MDVkYjU0M2QwLzEvNVlBb3ZDeGlZVGM0NUp4ZEE2RU9ZcXlfQ0xFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy80NGI3YmItMjYwNS00MjViLWIzNDEtMTQ2MDVkYjU0M2Qw LzEveXBKdmxqVVJpVC1rMmZ2VjVrNFBpa09EZmtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2ZVsMA0G CSqGSIb3DQEBCwUAA4IBAQByKU3eQ/kGlaqqLSM5Mtkkk6kRjOtdW86Av5boYPLi QR8wWEFJIZ7r4NvHzoP00iu+ZpEKu8+wYGSQqWjwp1MpO9SabEUkSh1pigltgeMk K0BkfpLX9mr+BRZ525c9vuVYo0FXvUNAvayH8jaGoV40xtzTRL7or3qlx8aFNt+N H4eBHdT8vwq5U2zG6HD/eYorR7OFSCxlELLHonqG6j9BjeV7NRKBhynbchowucLe SR9SshDYTLVdHyKTEYdOEmpz0ZTlQTDu1WMWl7XjXpW5oWAP03G01KF49AbYI6a6 Brm7f29iYP6eYmbWEn/bJTYxzWKxMzuH9SCHppz3Do8c -----END CERTIFICATE-----Generated at Wed Jan 7 23:48:09 2026 by rpki-client