This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/5bTbov2vGcJbN7vkkm8HHwB76jA.roa File: 5bTbov2vGcJbN7vkkm8HHwB76jA.roa (raw, json) Hash identifier: 5QyqxIyT6Sifuoap6r1mophGR/3BA1CE/nr94210ZVg= Subject key identifier: E5:B4:DB:A2:FD:AF:19:C2:5B:37:BB:E4:92:6F:07:1F:00:7B:EA:30 Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f Certificate serial: 019B7F13FE4421711F134C5C0C6A66ECDE01 Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/5bTbov2vGcJbN7vkkm8HHwB76jA.roa Signing time: Fri 02 Jan 2026 14:19:35 +0000 ROA not before: Fri 02 Jan 2026 14:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199658 IP address blocks: 109.167.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 23:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:fe:44:21:71:1f:13:4c:5c:0c:6a:66:ec:de:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f Validity Not Before: Jan 2 14:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e5b4dba2fdaf19c25b37bbe4926f071f007bea30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:68:38:e4:ae:eb:c8:1e:da:1c:39:cb:21:57: 51:47:95:d2:41:d5:99:d6:e4:46:dd:f7:8d:b3:09: 6f:d3:8e:2b:24:9c:5b:ca:f2:7f:cb:51:7a:a4:4e: e2:a9:5d:ec:94:b5:0c:e1:e5:e2:5a:df:86:31:2c: b2:79:6e:5d:2b:2b:52:af:f3:50:eb:41:4d:1e:8b: aa:e5:0c:7d:6e:3f:90:a1:e4:ea:2a:64:2e:d2:0d: 56:b1:df:0f:f4:e4:d8:59:72:d2:2d:cf:31:89:41: ea:61:16:77:45:5c:3a:a8:20:bd:74:3c:d9:51:fb: 62:44:02:f2:87:04:5a:70:9f:55:d8:f3:73:df:9c: f4:62:ee:55:b4:e6:14:f0:12:38:31:22:ab:5c:53: 4e:a6:26:30:2e:a2:25:35:47:69:23:f0:07:f0:84: 46:bb:21:df:70:ac:ae:1c:7f:e2:4e:8f:b8:9c:fe: 3b:e3:e9:a5:3d:62:6c:4b:2e:f9:a1:cf:7c:b2:39: 57:95:23:49:78:71:fa:da:2b:96:e0:03:24:6b:17: b1:66:16:16:8e:b7:4c:e5:f3:75:0f:12:bf:d1:cb: 89:a8:c6:42:a6:a7:b8:fb:7f:2e:8a:0c:9c:c9:dc: 18:18:94:d5:b0:6e:da:87:0e:cf:45:a5:81:2e:15: fe:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:B4:DB:A2:FD:AF:19:C2:5B:37:BB:E4:92:6F:07:1F:00:7B:EA:30 X509v3 Authority Key Identifier: keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/5bTbov2vGcJbN7vkkm8HHwB76jA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.167.254.0/24 Signature Algorithm: sha256WithRSAEncryption 74:ab:da:51:40:92:96:25:bf:b1:82:42:de:78:78:22:54:0a: 9c:02:2d:9a:60:ba:9d:4a:0a:bc:34:ee:f8:6e:7a:30:56:50: 58:68:a3:a4:76:c3:a2:e9:35:91:e6:69:46:bd:a2:84:73:fa: 46:be:c2:ab:c4:7b:e0:ca:27:fe:32:ff:72:7b:21:d1:6e:b0: 8b:2a:90:fd:e0:fc:73:01:e1:e5:79:76:be:d0:b1:72:72:cf: a3:e9:bc:a6:c0:74:97:7a:97:0e:34:ba:17:fe:f4:bb:77:89: 5b:05:01:43:51:c1:0c:29:47:f7:c6:7f:81:77:09:8e:97:ef: 4a:ef:31:ae:a7:0f:17:4c:11:da:f7:88:2f:f9:d8:a9:01:34: 80:91:a4:d5:61:50:3a:9d:4f:1a:f4:1d:f4:97:94:d1:8c:7a: 68:d4:59:5e:55:70:a9:df:9e:21:e6:74:08:5e:91:c7:41:72: e1:75:6a:e7:41:5e:d8:35:7e:eb:d4:32:0c:10:20:48:40:c0: 94:1d:00:13:2e:31:61:93:c6:d7:1d:d1:f0:ca:47:a2:df:02: d2:e4:26:ea:4e:32:3f:a5:13:e0:f1:8e:61:84:52:11:4d:05: a3:59:ba:e1:0f:fc:a6:63:ea:bb:43:3a:b8:b4:59:59:5f:53: 1c:86:69:d6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/E/5EIXEfE0xcDGpm7N4BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MDJiOTVjZTYyMzlkNTI2YzM1YWU3YThlMmNlYjQ4YWVi ODJiNWYwHhcNMjYwMTAyMTQxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNWI0ZGJhMmZkYWYxOWMyNWIzN2JiZTQ5MjZmMDcxZjAwN2JlYTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGg45K7ryB7aHDnLIVdRR5XSQdWZ 1uRG3feNswlv044rJJxbyvJ/y1F6pE7iqV3slLUM4eXiWt+GMSyyeW5dKytSr/NQ 60FNHouq5Qx9bj+QoeTqKmQu0g1Wsd8P9OTYWXLSLc8xiUHqYRZ3RVw6qCC9dDzZ UftiRALyhwRacJ9V2PNz35z0Yu5VtOYU8BI4MSKrXFNOpiYwLqIlNUdpI/AH8IRG uyHfcKyuHH/iTo+4nP474+mlPWJsSy75oc98sjlXlSNJeHH62iuW4AMkaxexZhYW jrdM5fN1DxK/0cuJqMZCpqe4+38uigycydwYGJTVsG7ahw7PRaWBLhX+2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOW026L9rxnCWze75JJvBx8Ae+owMB8GA1UdIwQY MBaAFAgCuVzmI51SbDWueo4s60iuuCtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDIt Y2YwYWEzZWNhZDI4LzEvNWJUYm92MnZHY0piTjd2a2ttOEhId0I3NmpBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDItY2YwYWEzZWNhZDI4 LzEvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbaf+MA0G CSqGSIb3DQEBCwUAA4IBAQB0q9pRQJKWJb+xgkLeeHgiVAqcAi2aYLqdSgq8NO74 bnowVlBYaKOkdsOi6TWR5mlGvaKEc/pGvsKrxHvgyif+Mv9yeyHRbrCLKpD94Pxz AeHleXa+0LFycs+j6bymwHSXepcONLoX/vS7d4lbBQFDUcEMKUf3xn+BdwmOl+9K 7zGupw8XTBHa94gv+dipATSAkaTVYVA6nU8a9B30l5TRjHpo1FleVXCp354h5nQI XpHHQXLhdWrnQV7YNX7r1DIMECBIQMCUHQATLjFhk8bXHdHwykei3wLS5CbqTjI/ pRPg8Y5hhFIRTQWjWbrhD/ymY+q7Qzq4tFlZX1MchmnW -----END CERTIFICATE-----Generated at Thu Feb 5 05:55:01 2026 by rpki-client