This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/r1jEpAmwbttHC_NlYHCGTRBo1J4.roa File: r1jEpAmwbttHC_NlYHCGTRBo1J4.roa (raw, json) Hash identifier: KNjzSwPg/5u1YZ/73y/8b7ro/20GYgw/rgE7l+oyh+0= Subject key identifier: AF:58:C4:A4:09:B0:6E:DB:47:0B:F3:65:60:70:86:4D:10:68:D4:9E Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f Certificate serial: 019B7F13FEEB330E0D61C3EB22D454A4DCAB Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/r1jEpAmwbttHC_NlYHCGTRBo1J4.roa Signing time: Fri 02 Jan 2026 14:19:35 +0000 ROA not before: Fri 02 Jan 2026 14:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209303 IP address blocks: 5.3.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 23:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:fe:eb:33:0e:0d:61:c3:eb:22:d4:54:a4:dc:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f Validity Not Before: Jan 2 14:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af58c4a409b06edb470bf3656070864d1068d49e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7e:60:7f:c3:dd:da:f9:ac:49:1d:54:3a:fa: 0b:5b:a0:0a:92:97:e2:80:3c:6a:b2:c8:2f:1f:30: ef:00:42:fa:dd:23:4c:bb:dd:36:a7:7c:83:d4:85: 22:b3:2b:23:fa:15:eb:a9:5b:a2:15:e4:8f:5a:6b: ac:bc:9e:6c:d0:7b:da:c4:2c:a4:8f:c4:98:f8:c6: 79:bf:e7:70:ec:7e:4e:83:62:ce:fd:3f:a0:c6:c2: 25:ad:f8:0b:a7:2f:17:94:cf:95:98:5b:f4:ac:82: da:c5:6b:b9:e6:ea:5f:1c:e4:31:1c:80:fc:a7:c1: 71:ee:48:18:4a:9f:f5:47:f1:39:a3:9a:6d:b6:77: 20:01:df:57:cc:fe:a3:a7:f4:03:fb:05:c5:7d:6d: bf:87:c3:5b:58:dc:37:32:d1:e4:3b:b3:ac:c2:be: 38:9c:4f:61:d1:dd:20:55:1f:ab:3b:26:c9:04:7d: 4c:8d:c5:b8:10:16:5d:fe:da:bd:bb:65:a2:8a:26: a9:05:4e:09:dc:df:d1:2e:b0:87:b3:59:68:f3:40: a1:e8:a2:1c:d4:8b:4d:f0:8d:0f:87:ff:51:00:3b: 54:b9:30:1e:56:e7:16:33:a2:57:73:01:85:80:cc: d5:3c:35:13:c6:aa:2a:8c:d4:a0:51:67:b7:e6:9e: 82:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:58:C4:A4:09:B0:6E:DB:47:0B:F3:65:60:70:86:4D:10:68:D4:9E X509v3 Authority Key Identifier: keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/r1jEpAmwbttHC_NlYHCGTRBo1J4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.3.90.0/24 Signature Algorithm: sha256WithRSAEncryption 99:cb:4f:0b:70:b7:e8:9c:c6:17:87:7c:0a:9d:36:15:bc:d9: d3:ba:b9:43:b7:b5:cb:78:7f:01:cf:a1:6a:8d:3f:58:38:04: f5:ba:c7:ec:27:59:fe:98:a9:f3:2a:aa:80:38:e4:7d:78:bf: 44:20:01:80:9d:f2:55:bd:6d:89:85:6f:80:5f:7d:c1:33:3e: 5b:28:2c:20:52:48:e6:95:a6:d7:39:f3:a5:12:68:a5:8b:be: 33:ed:cd:70:a3:e1:69:dd:93:1f:73:1b:23:c6:8c:3e:57:ff: 8f:55:b1:a4:79:79:95:52:c2:c1:d3:56:b8:93:df:68:b3:87: 50:7b:22:87:04:8a:26:5d:ee:89:b1:9e:89:52:2e:08:ac:3c: 9f:3c:8a:67:9b:b8:f0:d2:e0:95:a1:d3:29:88:a2:74:29:72: 2b:b5:b2:af:ce:2a:0c:bf:47:01:09:47:c3:3d:99:38:bd:25: 95:71:e3:d3:cc:6a:7f:8e:ea:33:85:a2:40:47:f4:b8:92:df: 65:68:6a:e8:82:e8:9e:2b:11:f1:48:60:93:d4:66:05:1a:d1: e8:22:35:76:65:b6:f2:f3:a9:85:55:f6:8b:83:40:c1:a0:c9: f5:c3:cf:e6:59:e8:53:6f:07:b8:d5:6f:e3:9b:f1:9d:67:9f: dc:16:65:6e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/E/7rMw4NYcPrItRUpNyrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MDJiOTVjZTYyMzlkNTI2YzM1YWU3YThlMmNlYjQ4YWVi ODJiNWYwHhcNMjYwMTAyMTQxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjU4YzRhNDA5YjA2ZWRiNDcwYmYzNjU2MDcwODY0ZDEwNjhkNDllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApH5gf8Pd2vmsSR1UOvoLW6AKkpfi gDxqssgvHzDvAEL63SNMu902p3yD1IUisysj+hXrqVuiFeSPWmusvJ5s0HvaxCyk j8SY+MZ5v+dw7H5Og2LO/T+gxsIlrfgLpy8XlM+VmFv0rILaxWu55upfHOQxHID8 p8Fx7kgYSp/1R/E5o5pttncgAd9XzP6jp/QD+wXFfW2/h8NbWNw3MtHkO7Oswr44 nE9h0d0gVR+rOybJBH1MjcW4EBZd/tq9u2WiiiapBU4J3N/RLrCHs1lo80Ch6KIc 1ItN8I0Ph/9RADtUuTAeVucWM6JXcwGFgMzVPDUTxqoqjNSgUWe35p6CvwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK9YxKQJsG7bRwvzZWBwhk0QaNSeMB8GA1UdIwQY MBaAFAgCuVzmI51SbDWueo4s60iuuCtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDIt Y2YwYWEzZWNhZDI4LzEvcjFqRXBBbXdidHRIQ19ObFlIQ0dUUkJvMUo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDItY2YwYWEzZWNhZDI4 LzEvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABQNaMA0G CSqGSIb3DQEBCwUAA4IBAQCZy08LcLfonMYXh3wKnTYVvNnTurlDt7XLeH8Bz6Fq jT9YOAT1usfsJ1n+mKnzKqqAOOR9eL9EIAGAnfJVvW2JhW+AX33BMz5bKCwgUkjm labXOfOlEmili74z7c1wo+Fp3ZMfcxsjxow+V/+PVbGkeXmVUsLB01a4k99os4dQ eyKHBIomXe6JsZ6JUi4IrDyfPIpnm7jw0uCVodMpiKJ0KXIrtbKvzioMv0cBCUfD PZk4vSWVcePTzGp/juozhaJAR/S4kt9laGroguieKxHxSGCT1GYFGtHoIjV2Zbby 86mFVfaLg0DBoMn1w8/mWehTbwe41W/jm/GdZ5/cFmVu -----END CERTIFICATE-----Generated at Thu Feb 5 06:00:19 2026 by rpki-client