This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/5Rj9Tb3RrkeEA5ETSU5kfm6gXK8.roa File: 5Rj9Tb3RrkeEA5ETSU5kfm6gXK8.roa (raw, json) Hash identifier: PCKzv47m9SIhlSPhu1nukwhGmTCJGjQ/efUYx6MbkpQ= Subject key identifier: E5:18:FD:4D:BD:D1:AE:47:84:03:91:13:49:4E:64:7E:6E:A0:5C:AF Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B96D8A6DAADAA9C6337F82B703B6387DC Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/5Rj9Tb3RrkeEA5ETSU5kfm6gXK8.roa Signing time: Wed 07 Jan 2026 05:05:39 +0000 ROA not before: Wed 07 Jan 2026 05:05:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215136 IP address blocks: 5.83.134.0/24 maxlen: 24 5.175.140.0/24 maxlen: 24 5.175.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 11:04:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:96:d8:a6:da:ad:aa:9c:63:37:f8:2b:70:3b:63:87:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 7 05:05:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e518fd4dbdd1ae4784039113494e647e6ea05caf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7d:2c:58:2c:61:eb:a5:0e:88:e1:10:28:44: 33:05:63:1a:05:03:66:8a:e1:7a:43:8c:33:cf:1c: b8:2b:c2:c6:ac:e3:ab:98:e9:0c:60:48:d3:ba:ea: b6:0f:dd:40:95:80:d9:81:90:a8:eb:a5:db:51:ec: 9a:bd:57:66:cc:10:19:cd:7a:b0:47:8b:67:2d:5b: 12:fe:a6:9c:56:1a:a2:32:73:27:bc:e6:26:c6:d3: 2c:e7:fa:be:8d:e8:5f:c1:a2:7d:2a:1a:19:d9:b6: 26:1c:88:e0:1d:3f:35:16:1b:a6:4b:ef:f5:83:5f: e4:30:57:3a:33:31:2f:b9:db:29:1c:d0:dd:9e:6e: 71:4f:10:62:03:b7:ea:17:06:24:9c:83:14:03:c1: 79:f2:2a:f4:0d:78:74:82:a6:6f:59:a0:03:0c:6c: c9:6a:59:10:f2:6e:df:a6:68:06:e2:07:6e:0b:17: 35:d1:15:91:55:76:9b:3c:27:df:3a:de:be:22:44: 0a:60:4d:32:a0:6c:b9:08:68:af:dc:95:8f:cf:5e: c0:f9:37:65:93:69:22:b4:0f:63:dd:bd:8c:a4:cd: 6b:c1:7f:36:10:96:52:78:a6:93:24:aa:79:08:3d: 18:8b:8a:69:88:7f:92:10:bb:05:50:a5:22:8f:49: 76:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:18:FD:4D:BD:D1:AE:47:84:03:91:13:49:4E:64:7E:6E:A0:5C:AF X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/5Rj9Tb3RrkeEA5ETSU5kfm6gXK8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.134.0/24 5.175.140.0/24 5.175.222.0/24 Signature Algorithm: sha256WithRSAEncryption de:dd:b9:c5:b5:d1:a2:df:68:c7:94:b4:53:70:b2:95:e0:61: 8d:a8:70:b6:22:db:94:81:d7:bf:25:b6:02:d2:3b:3b:b0:c4: df:ed:36:ea:e3:79:9e:1e:06:48:10:e3:ee:fd:71:25:41:f2: be:c4:82:d3:c9:1b:3b:f3:71:68:72:ee:4f:dc:9d:d6:c4:bd: b0:5c:ef:ae:74:6c:ec:67:a2:f4:c0:09:91:9b:20:04:a1:d1: cb:07:e3:02:9b:f7:c0:82:76:5f:2d:34:b7:75:48:fe:56:c7: 33:a2:2d:fa:4c:7e:0a:85:3f:ee:a8:bb:31:e8:86:03:84:a1: 59:da:28:3a:8b:dd:ca:39:a3:92:7b:02:33:9f:a6:ac:43:09: e4:f6:17:cc:75:1f:82:18:84:99:ab:99:06:ef:c1:ab:4d:60: 61:eb:1b:7e:72:5c:45:3e:8c:46:20:3c:85:3f:b3:15:d4:c4: 56:83:26:63:2f:5c:53:c6:95:3f:60:4d:d2:66:71:de:0a:1c: cf:12:4d:2b:22:10:06:0d:5d:44:99:d8:01:c7:16:4c:8f:f0: 97:e1:d2:59:6a:90:3e:23:0a:55:59:85:cd:e6:77:89:6a:1c: 28:01:7a:03:4c:9b:44:2e:c7:97:f1:4c:ca:b8:20:7c:a9:91: 55:43:e2:0b -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZuW2KbaraqcYzf4K3A7Y4fcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTA3MDUwNTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTE4ZmQ0ZGJkZDFhZTQ3ODQwMzkxMTM0OTRlNjQ3ZTZlYTA1Y2FmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsH0sWCxh66UOiOEQKEQzBWMaBQNm iuF6Q4wzzxy4K8LGrOOrmOkMYEjTuuq2D91AlYDZgZCo66XbUeyavVdmzBAZzXqw R4tnLVsS/qacVhqiMnMnvOYmxtMs5/q+jehfwaJ9KhoZ2bYmHIjgHT81FhumS+/1 g1/kMFc6MzEvudspHNDdnm5xTxBiA7fqFwYknIMUA8F58ir0DXh0gqZvWaADDGzJ alkQ8m7fpmgG4gduCxc10RWRVXabPCffOt6+IkQKYE0yoGy5CGiv3JWPz17A+Tdl k2kitA9j3b2MpM1rwX82EJZSeKaTJKp5CD0Yi4ppiH+SELsFUKUij0l24QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFOUY/U290a5HhAORE0lOZH5uoFyvMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvNVJqOVRiM1Jya2VFQTVFVFNVNWtmbTZnWEs4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABVOGAwQA Ba+MAwQABa/eMA0GCSqGSIb3DQEBCwUAA4IBAQDe3bnFtdGi32jHlLRTcLKV4GGN qHC2ItuUgde/JbYC0js7sMTf7Tbq43meHgZIEOPu/XElQfK+xILTyRs783Focu5P 3J3WxL2wXO+udGzsZ6L0wAmRmyAEodHLB+MCm/fAgnZfLTS3dUj+Vsczoi36TH4K hT/uqLsx6IYDhKFZ2ig6i93KOaOSewIzn6asQwnk9hfMdR+CGISZq5kG78GrTWBh 6xt+clxFPoxGIDyFP7MV1MRWgyZjL1xTxpU/YE3SZnHeChzPEk0rIhAGDV1EmdgB xxZMj/CX4dJZapA+IwpVWYXN5neJahwoAXoDTJtELseX8UzKuCB8qZFVQ+IL -----END CERTIFICATE-----Generated at Sun Jan 18 17:48:51 2026 by rpki-client