This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/5aUFJ1nRNDZXvDlW5Ib7ApLcjzU.roa File: 5aUFJ1nRNDZXvDlW5Ib7ApLcjzU.roa (raw, json) Hash identifier: CM2yuZbmUG7aD/W6YESLWl+Ll1dOOpDPDyQg/E7d6L8= Subject key identifier: E5:A5:05:27:59:D1:34:36:57:BC:39:56:E4:86:FB:02:92:DC:8F:35 Certificate issuer: /CN=34d0ec7ac4c391e4ecba9d0a3749191b18ebf934 Certificate serial: 019B78348306C5B34D1419683DC98D60802D Authority key identifier: 34:D0:EC:7A:C4:C3:91:E4:EC:BA:9D:0A:37:49:19:1B:18:EB:F9:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/5aUFJ1nRNDZXvDlW5Ib7ApLcjzU.roa Signing time: Thu 01 Jan 2026 06:17:45 +0000 ROA not before: Thu 01 Jan 2026 06:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8226 IP address blocks: 109.68.120.0/22 maxlen: 22 109.68.124.0/23 maxlen: 23 109.68.126.0/24 maxlen: 24 2001:4d00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.crl rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:83:06:c5:b3:4d:14:19:68:3d:c9:8d:60:80:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34d0ec7ac4c391e4ecba9d0a3749191b18ebf934 Validity Not Before: Jan 1 06:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e5a5052759d1343657bc3956e486fb0292dc8f35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:9b:eb:12:cd:4c:66:fb:ba:aa:84:61:ff:c7: 6e:fb:68:69:3d:b0:22:bf:46:69:79:ac:47:7d:3e: 86:e2:1b:18:08:bc:73:c2:0a:26:72:c7:a7:5d:34: 35:ec:5f:eb:ca:c3:a1:43:83:be:44:1e:f5:17:bb: c6:84:f8:d4:38:ac:49:3a:ff:3b:b2:82:bd:54:fc: b9:c6:61:fa:92:38:8a:d2:5c:57:db:97:76:9e:4c: c0:15:a4:2a:84:25:c7:e9:ff:e9:b3:c0:8f:00:c7: 91:27:c3:9e:89:12:71:b9:a9:23:d8:a6:d2:f7:cf: 9e:c5:a3:bc:f4:d8:0e:6a:9d:bf:8a:eb:0c:6e:b3: de:9b:33:7c:53:5e:0e:30:25:ac:f7:d4:66:36:15: 68:7e:81:2b:0c:da:0e:eb:25:a4:87:1a:6d:01:67: 8a:da:6b:72:a8:9d:44:d9:72:e4:7b:4b:4c:e4:15: 91:b9:69:d0:e7:9b:73:cb:09:ac:6e:18:7e:02:11: 20:8f:29:62:23:da:20:fb:55:90:78:4e:4e:f0:55: ab:2f:fb:75:70:16:7c:ec:4d:0c:96:13:7f:c2:e6: af:6e:dd:a8:46:da:43:88:5d:91:90:bb:89:d3:f6: 57:00:cb:1f:7a:1d:20:bc:c7:c3:5e:68:b0:d2:0a: e0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:A5:05:27:59:D1:34:36:57:BC:39:56:E4:86:FB:02:92:DC:8F:35 X509v3 Authority Key Identifier: keyid:34:D0:EC:7A:C4:C3:91:E4:EC:BA:9D:0A:37:49:19:1B:18:EB:F9:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/5aUFJ1nRNDZXvDlW5Ib7ApLcjzU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.68.120.0-109.68.126.255 IPv6: 2001:4d00::/32 Signature Algorithm: sha256WithRSAEncryption 74:9b:05:4a:99:2d:ff:d2:a1:8b:29:f2:99:a6:63:5d:05:eb: 5d:cd:04:b8:7b:50:0d:24:e1:23:1f:4c:25:6b:69:26:76:c0: 2e:a6:f8:56:c1:60:5f:72:a5:1e:3b:72:54:78:6b:a3:e0:83: 4c:ea:5c:c6:eb:4f:25:8d:6b:47:a4:7f:7f:f3:39:03:29:cc: 8c:12:7a:4e:c7:a4:bb:95:4b:81:df:4c:26:30:8c:be:13:71: 17:d9:45:18:57:36:11:90:c4:b6:24:93:6d:20:65:f1:3c:bd: 13:c8:a5:8f:5c:a3:94:1e:c5:e3:40:ea:21:d5:19:de:4f:0a: ae:d2:4a:05:63:59:2e:7d:b3:a5:01:00:09:90:63:ca:83:eb: d2:fe:c2:50:e5:11:04:c2:2b:cb:2f:08:c6:12:f6:15:61:33: 1b:a9:35:d7:d3:92:f3:25:a6:5d:5e:42:2e:55:68:80:d8:53: 1b:64:25:e5:0d:db:90:c6:92:15:07:24:89:5d:60:2a:46:9c: 45:54:d3:1d:b8:d5:af:80:4d:53:62:c4:11:a2:28:6f:bd:e8: 6d:65:77:3b:aa:37:9d:1e:62:76:f3:bd:82:cd:d1:12:aa:94: a0:69:8f:51:8d:e3:2d:5e:24:12:c4:8c:7f:a1:8e:61:0d:12: 53:f2:44:86 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt4NIMGxbNNFBloPcmNYIAtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZDBlYzdhYzRjMzkxZTRlY2JhOWQwYTM3NDkxOTFiMThl YmY5MzQwHhcNMjYwMTAxMDYxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNWE1MDUyNzU5ZDEzNDM2NTdiYzM5NTZlNDg2ZmIwMjkyZGM4ZjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ZvrEs1MZvu6qoRh/8du+2hpPbAi v0ZpeaxHfT6G4hsYCLxzwgomcsenXTQ17F/rysOhQ4O+RB71F7vGhPjUOKxJOv87 soK9VPy5xmH6kjiK0lxX25d2nkzAFaQqhCXH6f/ps8CPAMeRJ8OeiRJxuakj2KbS 98+exaO89NgOap2/iusMbrPemzN8U14OMCWs99RmNhVofoErDNoO6yWkhxptAWeK 2mtyqJ1E2XLke0tM5BWRuWnQ55tzywmsbhh+AhEgjyliI9og+1WQeE5O8FWrL/t1 cBZ87E0MlhN/wuavbt2oRtpDiF2RkLuJ0/ZXAMsfeh0gvMfDXmiw0grgLQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFOWlBSdZ0TQ2V7w5VuSG+wKS3I81MB8GA1UdIwQY MBaAFDTQ7HrEw5Hk7LqdCjdJGRsY6/k0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTk5Ec2VzVERrZVRzdXAwS04wa1pHeGpyLVRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9mN2Y1M2QtMDY4Yy00NDRlLWFkMWUt YjdjMjY5NmJhZTUwLzEvNWFVRkoxblJORFpYdkRsVzVJYjdBcExjanpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9mN2Y1M2QtMDY4Yy00NDRlLWFkMWUtYjdjMjY5NmJhZTUw LzEvTk5Ec2VzVERrZVRzdXAwS04wa1pHeGpyLVRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBANtRHgD BABtRH4wDQQCAAIwBwMFACABTQAwDQYJKoZIhvcNAQELBQADggEBAHSbBUqZLf/S oYsp8pmmY10F613NBLh7UA0k4SMfTCVraSZ2wC6m+FbBYF9ypR47clR4a6Pgg0zq XMbrTyWNa0ekf3/zOQMpzIwSek7HpLuVS4HfTCYwjL4TcRfZRRhXNhGQxLYkk20g ZfE8vRPIpY9co5QexeNA6iHVGd5PCq7SSgVjWS59s6UBAAmQY8qD69L+wlDlEQTC K8svCMYS9hVhMxupNdfTkvMlpl1eQi5VaIDYUxtkJeUN25DGkhUHJIldYCpGnEVU 0x241a+ATVNixBGiKG+96G1ldzuqN50eYnbzvYLN0RKqlKBpj1GN4y1eJBLEjH+h jmENElPyRIY= -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:31 2026 by rpki-client