This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/rcsE8T3loa9paQtOZYTdGqYZZdQ.roa File: rcsE8T3loa9paQtOZYTdGqYZZdQ.roa (raw, json) Hash identifier: aTqIKXOe4lJEG0nzJ4iYV8aOwdLjU0r2z02TUxqz12s= Subject key identifier: AD:CB:04:F1:3D:E5:A1:AF:69:69:0B:4E:65:84:DD:1A:A6:19:65:D4 Certificate issuer: /CN=320b24a740f2e61632050adc146c1ee6a3e686c5 Certificate serial: 019B7C121673C9F29B93E32E2298A7DA65D3 Authority key identifier: 32:0B:24:A7:40:F2:E6:16:32:05:0A:DC:14:6C:1E:E6:A3:E6:86:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/rcsE8T3loa9paQtOZYTdGqYZZdQ.roa Signing time: Fri 02 Jan 2026 00:18:38 +0000 ROA not before: Fri 02 Jan 2026 00:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3241 IP address blocks: 5.179.29.0/24 maxlen: 24 5.179.30.0/24 maxlen: 24 5.179.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 00:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:16:73:c9:f2:9b:93:e3:2e:22:98:a7:da:65:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=320b24a740f2e61632050adc146c1ee6a3e686c5 Validity Not Before: Jan 2 00:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=adcb04f13de5a1af69690b4e6584dd1aa61965d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d2:7d:44:7f:f8:50:bb:9c:bf:8d:03:5e:33: 3f:fc:c1:72:fc:7b:e1:e3:3e:d7:f2:86:8b:16:f6: 1a:d7:2f:d8:56:f0:06:56:e7:79:6b:2c:97:83:52: f8:be:23:98:ff:31:1f:98:12:dd:30:e8:bc:f5:c3: 94:f1:eb:a1:1f:81:75:9d:47:c9:2e:d8:e9:c0:ca: af:6e:60:0a:68:ee:f3:ec:6f:b6:da:6c:9e:b2:77: 49:2f:6f:cb:e6:fb:79:d3:dc:d8:7b:27:48:da:65: 65:1e:c3:34:40:3a:8b:69:27:ad:d9:66:bd:1e:03: 37:d0:60:1e:d6:06:98:97:02:09:5c:cd:a6:3d:39: e0:5c:09:08:b7:21:c5:a1:ba:fe:83:49:05:7a:51: 95:f2:84:a9:86:43:db:f2:de:e4:9e:a8:e6:d7:9a: eb:fb:bb:ee:96:b6:7c:38:59:e7:3d:a1:ad:87:1c: b6:3b:a4:b8:e2:73:e0:e3:93:be:dc:ed:95:2b:9a: 33:b4:9a:60:46:c1:a2:c6:a7:07:87:42:1b:28:52: 60:7c:b8:ed:ef:90:42:1c:42:6c:78:54:7a:43:05: dc:da:11:05:47:72:7d:19:4d:86:46:b3:63:8c:4c: 01:1f:e5:de:8a:ec:48:6b:6a:6a:34:c3:a7:79:21: d7:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:CB:04:F1:3D:E5:A1:AF:69:69:0B:4E:65:84:DD:1A:A6:19:65:D4 X509v3 Authority Key Identifier: keyid:32:0B:24:A7:40:F2:E6:16:32:05:0A:DC:14:6C:1E:E6:A3:E6:86:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/rcsE8T3loa9paQtOZYTdGqYZZdQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.179.29.0-5.179.31.255 Signature Algorithm: sha256WithRSAEncryption 05:a8:ad:07:c2:b2:03:f4:dd:89:83:db:7a:34:4e:ee:93:3d: 8b:3a:ca:df:d1:ef:ad:7a:ba:9d:8d:d3:45:04:23:2c:a2:59: b0:5f:56:d8:b3:2d:39:13:f2:7b:87:3f:ac:14:ea:ed:d9:de: f5:1e:bf:5e:b4:cf:30:07:95:24:14:2a:4a:77:c5:fd:90:6d: 26:57:0e:3f:f7:86:24:66:38:68:d4:c4:d7:15:8e:91:e6:41: 44:8a:5a:65:fb:f6:a4:62:cf:ae:01:77:96:11:f4:30:e2:70: f4:6e:d8:63:2f:f5:61:85:38:7d:4d:dd:24:ac:ec:71:d4:12: 74:cb:7d:f1:ea:c4:07:fd:cd:da:c0:d4:0f:ce:9c:e9:e7:d2: 0c:05:88:84:4e:5e:fc:8f:a6:da:5d:60:2b:96:7e:37:96:75: c5:58:3f:03:09:6b:40:52:ed:8e:26:cb:ee:6a:59:5e:9a:f1: 10:2a:54:f5:2e:95:6e:e4:9b:5e:84:86:ad:e8:3c:b9:7d:81: b7:b8:c5:0b:6f:72:82:0b:1c:f9:71:ce:a9:bc:c5:dd:fa:b4: 48:78:75:6e:58:b0:87:95:99:72:11:bf:6e:29:87:6c:97:cd: 69:36:ad:3c:10:88:0c:8a:e2:06:95:58:72:4a:6d:a2:df:60: c0:4c:57:18 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt8EhZzyfKbk+MuIpin2mXTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyMGIyNGE3NDBmMmU2MTYzMjA1MGFkYzE0NmMxZWU2YTNl Njg2YzUwHhcNMjYwMTAyMDAxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZGNiMDRmMTNkZTVhMWFmNjk2OTBiNGU2NTg0ZGQxYWE2MTk2NWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotJ9RH/4ULucv40DXjM//MFy/Hvh 4z7X8oaLFvYa1y/YVvAGVud5ayyXg1L4viOY/zEfmBLdMOi89cOU8euhH4F1nUfJ LtjpwMqvbmAKaO7z7G+22myesndJL2/L5vt509zYeydI2mVlHsM0QDqLaSet2Wa9 HgM30GAe1gaYlwIJXM2mPTngXAkItyHFobr+g0kFelGV8oSphkPb8t7knqjm15rr +7vulrZ8OFnnPaGthxy2O6S44nPg45O+3O2VK5oztJpgRsGixqcHh0IbKFJgfLjt 75BCHEJseFR6QwXc2hEFR3J9GU2GRrNjjEwBH+XeiuxIa2pqNMOneSHXnwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFK3LBPE95aGvaWkLTmWE3RqmGWXUMB8GA1UdIwQY MBaAFDILJKdA8uYWMgUK3BRsHuaj5obFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWdza3AwRHk1aFl5QlFyY0ZHd2U1cVBtaHNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy85YzI3ZTQtZDdiMS00M2MxLWEzOGYt OTQ5MTRmNWRkYjNjLzEvcmNzRThUM2xvYTlwYVF0T1pZVGRHcVlaWmRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy85YzI3ZTQtZDdiMS00M2MxLWEzOGYtOTQ5MTRmNWRkYjNj LzEvTWdza3AwRHk1aFl5QlFyY0ZHd2U1cVBtaHNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAFsx0D BAUFswAwDQYJKoZIhvcNAQELBQADggEBAAWorQfCsgP03YmD23o0Tu6TPYs6yt/R 7616up2N00UEIyyiWbBfVtizLTkT8nuHP6wU6u3Z3vUev160zzAHlSQUKkp3xf2Q bSZXDj/3hiRmOGjUxNcVjpHmQUSKWmX79qRiz64Bd5YR9DDicPRu2GMv9WGFOH1N 3SSs7HHUEnTLffHqxAf9zdrA1A/OnOnn0gwFiIROXvyPptpdYCuWfjeWdcVYPwMJ a0BS7Y4my+5qWV6a8RAqVPUulW7km16Ehq3oPLl9gbe4xQtvcoILHPlxzqm8xd36 tEh4dW5YsIeVmXIRv24ph2yXzWk2rTwQiAyK4gaVWHJKbaLfYMBMVxg= -----END CERTIFICATE-----Generated at Tue Jan 20 09:41:01 2026 by rpki-client