This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/0X5t7E48R87Bfr1kONk_W-DWq5Y.roa File: 0X5t7E48R87Bfr1kONk_W-DWq5Y.roa (raw, json) Hash identifier: DG456XkaZqysMcnNReTsPBp/WLK5e6+qvnyvuva4vcc= Subject key identifier: D1:7E:6D:EC:4E:3C:47:CE:C1:7E:BD:64:38:D9:3F:5B:E0:D6:AB:96 Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Certificate serial: 019B7E3832984E3C69DF5DB990375154BA9E Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/0X5t7E48R87Bfr1kONk_W-DWq5Y.roa Signing time: Fri 02 Jan 2026 10:19:30 +0000 ROA not before: Fri 02 Jan 2026 10:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209813 IP address blocks: 5.8.66.0/24 maxlen: 24 5.8.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:32:98:4e:3c:69:df:5d:b9:90:37:51:54:ba:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Validity Not Before: Jan 2 10:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d17e6dec4e3c47cec17ebd6438d93f5be0d6ab96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a3:09:e6:da:80:af:63:ba:58:30:42:df:0c: b5:6b:74:22:a1:fa:73:a1:81:63:a8:6e:a7:47:70: 50:70:99:b9:64:ef:7b:6f:8a:7a:06:0f:b8:1d:45: 6c:8d:07:2c:5b:df:93:80:5b:f3:a7:7c:29:fb:0b: 1a:e6:2a:60:fb:ea:f7:a2:d4:05:bd:f1:23:3d:b8: d1:2a:5a:f1:e3:59:49:17:90:32:28:6b:ac:42:a4: 8d:eb:dd:b5:13:cf:51:20:70:3f:58:97:9f:c9:2a: 93:dd:dd:69:b6:ed:3e:db:04:09:2c:9b:43:06:0f: ff:5c:00:c7:d5:15:aa:5f:dd:11:61:fb:00:c1:f2: de:67:dd:76:d4:fc:9e:8c:61:0c:bb:5d:54:fe:bf: 9e:c9:ca:62:2a:2f:94:30:d4:9e:60:2b:a3:11:fe: 03:e2:4f:94:16:84:2e:4f:f6:6b:6d:c6:79:1a:ea: 40:8f:6d:1e:2a:ab:22:7a:ca:71:a9:ba:51:4b:e9: 5a:61:0b:fc:e7:69:82:f5:e2:61:3e:91:70:8d:80: 1c:7c:f1:db:33:71:d2:63:81:49:d9:2e:c5:76:17: 16:3d:19:c0:fa:c0:04:24:64:68:f5:ff:b4:0e:4d: be:4a:fc:8b:5f:de:9b:3d:dd:3a:a3:18:1c:70:d3: e3:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:7E:6D:EC:4E:3C:47:CE:C1:7E:BD:64:38:D9:3F:5B:E0:D6:AB:96 X509v3 Authority Key Identifier: keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/0X5t7E48R87Bfr1kONk_W-DWq5Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.8.66.0/23 Signature Algorithm: sha256WithRSAEncryption 65:e9:62:2a:f4:d9:6d:de:1c:39:6c:be:21:1f:7e:03:3e:1b: 4b:a3:05:4b:69:44:1f:03:89:f6:e9:7e:6e:1d:8e:5d:1c:76: fd:c2:87:4d:a5:41:8f:d8:c4:3b:1f:5d:e7:22:14:b7:0d:6a: f9:f2:9a:7b:62:1d:c5:71:13:a0:55:9f:38:5d:d5:4e:7c:6f: 1d:62:e6:d8:05:a8:59:21:d5:0a:4d:41:98:96:0e:0f:82:4d: 1b:d9:dc:40:57:55:f3:ca:94:85:c6:14:1b:56:3a:4a:70:84: 50:f6:b7:ea:fc:79:8e:ff:46:50:68:8e:7f:61:5c:e1:26:f4: c7:af:0b:ad:79:f9:75:b2:d6:43:2d:ac:31:b4:14:c5:f1:33: be:a1:ca:f9:50:54:d4:ce:23:3b:ee:69:94:05:53:d0:5a:d7: 25:62:4a:c8:38:16:71:2f:2e:18:51:db:ad:27:cf:08:e2:32: 62:98:99:5b:84:18:1d:7b:20:e1:51:2d:b3:c0:b5:bf:0d:d0: 1b:cd:e0:95:ef:98:36:ae:f6:bb:a2:90:bb:0a:6e:bf:bc:2b: d6:83:c0:6f:e9:f1:02:c7:3f:64:88:e5:26:ce:cb:c3:d2:bb: 78:6c:a7:c6:ed:9b:c1:70:ad:ea:68:2e:14:4c:0e:7c:b7:8d: 7d:dd:fd:6f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ODKYTjxp3125kDdRVLqeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl Y2EwNzEwHhcNMjYwMTAyMTAxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTdlNmRlYzRlM2M0N2NlYzE3ZWJkNjQzOGQ5M2Y1YmUwZDZhYjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaMJ5tqAr2O6WDBC3wy1a3Qiofpz oYFjqG6nR3BQcJm5ZO97b4p6Bg+4HUVsjQcsW9+TgFvzp3wp+wsa5ipg++r3otQF vfEjPbjRKlrx41lJF5AyKGusQqSN6921E89RIHA/WJefySqT3d1ptu0+2wQJLJtD Bg//XADH1RWqX90RYfsAwfLeZ9121PyejGEMu11U/r+eycpiKi+UMNSeYCujEf4D 4k+UFoQuT/ZrbcZ5GupAj20eKqsiespxqbpRS+laYQv852mC9eJhPpFwjYAcfPHb M3HSY4FJ2S7FdhcWPRnA+sAEJGRo9f+0Dk2+SvyLX96bPd06oxgccNPjrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNF+bexOPEfOwX69ZDjZP1vg1quWMB8GA1UdIwQY MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt ODlkMDkyNDBjNDNiLzEvMFg1dDdFNDhSODdCZnIxa09Oa19XLURXcTVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBBQhCMA0G CSqGSIb3DQEBCwUAA4IBAQBl6WIq9Nlt3hw5bL4hH34DPhtLowVLaUQfA4n26X5u HY5dHHb9wodNpUGP2MQ7H13nIhS3DWr58pp7Yh3FcROgVZ84XdVOfG8dYubYBahZ IdUKTUGYlg4Pgk0b2dxAV1XzypSFxhQbVjpKcIRQ9rfq/HmO/0ZQaI5/YVzhJvTH rwutefl1stZDLawxtBTF8TO+ocr5UFTUziM77mmUBVPQWtclYkrIOBZxLy4YUdut J88I4jJimJlbhBgdeyDhUS2zwLW/DdAbzeCV75g2rva7opC7Cm6/vCvWg8Bv6fEC xz9kiOUmzsvD0rt4bKfG7ZvBcK3qaC4UTA58t4193f1v -----END CERTIFICATE-----Generated at Tue Jan 20 09:23:15 2026 by rpki-client