This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/5rnh2cNgPGbhvisWNoYnjQNSqgU.roa File: 5rnh2cNgPGbhvisWNoYnjQNSqgU.roa (raw, json) Hash identifier: A5f9EOq/CUORQuAksDL2Y97AIgaSwOm7lfoMN+QFKyk= Subject key identifier: E6:B9:E1:D9:C3:60:3C:66:E1:BE:2B:16:36:86:27:8D:03:52:AA:05 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B7E392680AB41D34697F6176D3E217C7E Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/5rnh2cNgPGbhvisWNoYnjQNSqgU.roa Signing time: Fri 02 Jan 2026 10:20:33 +0000 ROA not before: Fri 02 Jan 2026 10:20:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60542 IP address blocks: 163.5.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:26:80:ab:41:d3:46:97:f6:17:6d:3e:21:7c:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Jan 2 10:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e6b9e1d9c3603c66e1be2b163686278d0352aa05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1e:27:f7:2e:81:44:06:53:f7:a4:12:04:5f: ea:5b:43:78:6c:f4:b1:f3:ac:22:9d:31:60:b0:24: f9:e5:32:f9:bf:cb:5b:4a:66:60:e7:4c:b0:79:64: 11:42:6a:03:d7:89:6d:47:9f:57:df:59:e5:17:21: c7:64:9e:3e:6a:16:38:a9:0d:45:49:b5:c1:49:b1: a5:29:85:70:24:a6:28:2d:7d:7f:cb:a7:08:d0:99: 05:6f:e3:2e:6e:b4:60:5f:20:31:a6:00:c9:e3:42: 65:2f:e6:25:93:41:de:71:0d:fa:66:fd:bb:66:fa: 11:b6:bb:20:ef:db:5f:0b:cc:7d:bc:b1:fc:a9:5a: d0:1a:d6:90:ca:60:ac:22:a2:74:af:5e:b4:08:ed: 09:e0:b3:79:88:6d:8c:81:36:60:1d:7e:31:76:9c: 04:52:5d:ba:07:49:82:0e:47:5b:a3:5a:45:7f:25: bc:03:06:01:cf:ac:85:4e:3d:78:a2:d9:8e:4b:78: 23:8b:dc:96:40:35:d2:3c:39:44:12:ae:48:b3:c1: 22:4f:74:74:c0:b2:2e:b5:42:26:06:1a:80:f7:65: 1f:fb:be:56:ef:79:e3:63:08:4c:6d:6c:82:cc:78: ac:b3:5b:9f:05:67:39:7d:7c:94:27:7e:f2:6d:b5: 4e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:B9:E1:D9:C3:60:3C:66:E1:BE:2B:16:36:86:27:8D:03:52:AA:05 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/5rnh2cNgPGbhvisWNoYnjQNSqgU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.232.0/24 Signature Algorithm: sha256WithRSAEncryption b0:2d:12:80:fb:9a:ff:ef:50:8b:69:20:63:15:2e:9d:ba:d3: 38:e8:59:6a:36:70:ff:ba:eb:85:43:f8:0b:7f:ad:bb:bb:83: f3:9f:0b:3a:db:51:7c:44:be:e8:87:8c:d2:83:b1:8d:2a:db: 88:61:d9:53:d7:9a:aa:54:6e:95:7e:45:f1:9d:68:51:60:50: a2:1f:ad:1b:51:1d:4a:95:58:2a:8d:5e:15:bf:47:07:c6:3c: 04:d2:b2:c9:ef:ae:36:25:27:eb:89:d8:d7:78:13:c8:00:5f: 42:2e:16:6e:45:38:72:4b:d4:77:e4:87:cb:d2:60:a7:18:51: 38:f0:1b:0c:b8:bc:a9:86:25:93:c0:26:a2:7c:63:e4:19:4b: 64:6f:69:96:d1:06:91:cb:af:1d:b3:ea:51:2a:4e:7d:3b:d9: 51:cd:9e:19:20:32:6f:13:d9:fb:48:d6:f2:57:89:0d:25:aa: 01:c9:41:fa:37:db:e9:2f:d0:8c:e1:ee:11:51:9f:1f:de:c6: b1:05:d8:94:60:07:3c:0f:e4:8c:fe:50:4e:25:c1:01:6f:bc: 48:29:6b:9a:3b:97:c4:af:af:eb:69:e1:8e:36:87:ca:b2:49: 05:08:3d:a6:a9:04:65:bb:41:35:b7:a7:9a:f6:ab:2f:66:e5: b8:65:d1:ab -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OSaAq0HTRpf2F20+IXx+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjYwMTAyMTAyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNmI5ZTFkOWMzNjAzYzY2ZTFiZTJiMTYzNjg2Mjc4ZDAzNTJhYTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwx4n9y6BRAZT96QSBF/qW0N4bPSx 86winTFgsCT55TL5v8tbSmZg50yweWQRQmoD14ltR59X31nlFyHHZJ4+ahY4qQ1F SbXBSbGlKYVwJKYoLX1/y6cI0JkFb+MubrRgXyAxpgDJ40JlL+Ylk0HecQ36Zv27 ZvoRtrsg79tfC8x9vLH8qVrQGtaQymCsIqJ0r160CO0J4LN5iG2MgTZgHX4xdpwE Ul26B0mCDkdbo1pFfyW8AwYBz6yFTj14otmOS3gji9yWQDXSPDlEEq5Is8EiT3R0 wLIutUImBhqA92Uf+75W73njYwhMbWyCzHiss1ufBWc5fXyUJ37ybbVOMQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOa54dnDYDxm4b4rFjaGJ40DUqoFMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvNXJuaDJjTmdQR2JodmlzV05vWW5qUU5TcWdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowXoMA0G CSqGSIb3DQEBCwUAA4IBAQCwLRKA+5r/71CLaSBjFS6dutM46FlqNnD/uuuFQ/gL f627u4Pznws621F8RL7oh4zSg7GNKtuIYdlT15qqVG6VfkXxnWhRYFCiH60bUR1K lVgqjV4Vv0cHxjwE0rLJ7642JSfridjXeBPIAF9CLhZuRThyS9R35IfL0mCnGFE4 8BsMuLyphiWTwCaifGPkGUtkb2mW0QaRy68ds+pRKk59O9lRzZ4ZIDJvE9n7SNby V4kNJaoByUH6N9vpL9CM4e4RUZ8f3saxBdiUYAc8D+SM/lBOJcEBb7xIKWuaO5fE r6/raeGONofKskkFCD2mqQRlu0E1t6ea9qsvZuW4ZdGr -----END CERTIFICATE-----Generated at Mon Jan 19 20:01:05 2026 by rpki-client