This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/jU54PtK7fmV3I1k6Zz4STzHa7uU.roa File: jU54PtK7fmV3I1k6Zz4STzHa7uU.roa (raw, json) Hash identifier: n4j20nAc1oo7iJ6xqgFI3X9jLm6gXZeE5K8K6RiRKUM= Subject key identifier: 8D:4E:78:3E:D2:BB:7E:65:77:23:59:3A:67:3E:12:4F:31:DA:EE:E5 Certificate issuer: /CN=e501815c6f98f3a2b6184afebf18ea341be882ea Certificate serial: 019B797F42F2A35C6B015DBF4D394B100B20 Authority key identifier: E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/jU54PtK7fmV3I1k6Zz4STzHa7uU.roa Signing time: Thu 01 Jan 2026 12:19:01 +0000 ROA not before: Thu 01 Jan 2026 12:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15755 IP address blocks: 87.251.22.0/24 maxlen: 24 94.103.39.0/24 maxlen: 24 185.35.21.0/24 maxlen: 24 185.35.22.0/24 maxlen: 24 185.96.168.0/24 maxlen: 24 185.96.171.0/24 maxlen: 24 185.203.32.0/24 maxlen: 24 185.203.33.0/24 maxlen: 24 185.203.34.0/24 maxlen: 24 185.203.35.0/24 maxlen: 24 2a00:7300::/32 maxlen: 32 2a00:7300::/48 maxlen: 48 2a0a:e0c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.mft rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:42:f2:a3:5c:6b:01:5d:bf:4d:39:4b:10:0b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e501815c6f98f3a2b6184afebf18ea341be882ea Validity Not Before: Jan 1 12:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d4e783ed2bb7e657723593a673e124f31daeee5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:af:ad:f3:0d:55:29:31:30:fb:ad:da:95:2c: 89:b4:ad:fe:0f:fa:ee:79:0f:05:e5:0c:e6:fb:44: c3:eb:7a:d1:6e:f2:31:88:b4:98:1f:63:e4:7f:cb: 9e:34:d4:5d:30:f4:90:4b:1f:24:f2:18:95:16:bd: 37:c1:77:31:b3:ae:7a:54:34:d6:f2:d5:83:53:53: 7f:ff:5e:c4:f6:0f:23:d8:91:e5:ea:d7:f4:91:c6: 11:c7:23:07:c7:8e:bd:c4:58:8a:bb:d7:6c:75:b2: fa:4a:51:3f:75:e4:8c:48:aa:97:0f:52:27:dd:6c: 7d:fd:b8:41:1f:d1:39:6e:9d:c2:ef:9a:c4:c1:1f: f8:e2:fb:37:62:29:ec:77:d7:db:71:9e:68:10:9f: 17:de:17:f7:0d:9f:6c:97:46:49:3c:09:23:96:6f: 19:a6:da:5f:9f:dc:17:70:4e:58:9c:62:b5:0b:3e: c3:e1:8d:88:43:55:a6:75:36:f8:0a:2c:ca:9d:40: 3b:c9:3c:4f:e5:31:fb:82:ce:2b:2c:31:46:dd:4b: a5:27:28:42:7d:90:49:b2:b9:90:9d:68:0f:11:88: 14:00:59:78:fd:f0:a8:e9:d1:09:59:49:50:d3:a3: a9:6a:8d:c5:2c:b7:79:51:1f:c6:60:19:4e:21:c1: 9e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:4E:78:3E:D2:BB:7E:65:77:23:59:3A:67:3E:12:4F:31:DA:EE:E5 X509v3 Authority Key Identifier: keyid:E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/jU54PtK7fmV3I1k6Zz4STzHa7uU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.251.22.0/24 94.103.39.0/24 185.35.21.0-185.35.22.255 185.96.168.0/24 185.96.171.0/24 185.203.32.0/22 IPv6: 2a00:7300::/32 2a0a:e0c0::/29 Signature Algorithm: sha256WithRSAEncryption 27:22:6f:b4:cb:61:d0:c2:ed:06:d8:3a:98:07:82:39:60:a4: 80:74:78:57:32:06:fa:dc:f4:77:42:40:06:72:1f:96:27:71: ce:fd:e9:ab:40:4b:8d:23:21:ab:99:38:27:70:fe:66:e2:da: 2c:97:e2:22:c0:e1:5c:71:9e:93:e3:86:ae:f6:ae:ac:3a:1f: 1f:25:1d:7a:f9:64:65:71:a9:3b:fd:a4:ac:28:55:c5:77:99: f8:7a:1c:da:23:db:24:ab:bc:4e:1e:23:6d:33:10:0c:1c:a4: 33:d7:81:79:79:4f:c4:72:62:75:cf:bf:8d:66:dc:70:e0:ff: 20:61:7d:51:44:2a:9e:c8:a1:b6:d1:3c:89:b9:36:cc:97:80: 8c:20:b2:8f:71:f3:1e:ba:bb:2b:55:ab:84:27:90:a2:d4:1a: a4:7e:44:38:dd:97:bd:23:a2:a5:e5:70:13:4a:53:84:1b:2c: d3:c0:16:32:f2:5a:90:9f:2f:61:87:1d:fb:eb:a8:26:88:62: 83:a6:86:eb:6b:eb:90:9f:b8:4b:4d:c1:61:8f:97:ed:83:6b: e7:70:f9:d5:2f:0f:d1:63:bf:17:52:6a:77:93:2f:14:df:40: 4c:21:f1:18:5e:02:7e:d6:08:fe:84:12:3f:75:79:7b:b8:66: 92:29:12:bc -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgISAZt5f0Lyo1xrAV2/TTlLEAsgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1MDE4MTVjNmY5OGYzYTJiNjE4NGFmZWJmMThlYTM0MWJl ODgyZWEwHhcNMjYwMTAxMTIxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDRlNzgzZWQyYmI3ZTY1NzcyMzU5M2E2NzNlMTI0ZjMxZGFlZWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoq+t8w1VKTEw+63alSyJtK3+D/ru eQ8F5Qzm+0TD63rRbvIxiLSYH2Pkf8ueNNRdMPSQSx8k8hiVFr03wXcxs656VDTW 8tWDU1N//17E9g8j2JHl6tf0kcYRxyMHx469xFiKu9dsdbL6SlE/deSMSKqXD1In 3Wx9/bhBH9E5bp3C75rEwR/44vs3Yinsd9fbcZ5oEJ8X3hf3DZ9sl0ZJPAkjlm8Z ptpfn9wXcE5YnGK1Cz7D4Y2IQ1WmdTb4CizKnUA7yTxP5TH7gs4rLDFG3UulJyhC fZBJsrmQnWgPEYgUAFl4/fCo6dEJWUlQ06Opao3FLLd5UR/GYBlOIcGedQIDAQAB o4ICRTCCAkEwHQYDVR0OBBYEFI1OeD7Su35ldyNZOmc+Ek8x2u7lMB8GA1UdIwQY MBaAFOUBgVxvmPOithhK/r8Y6jQb6ILqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVFHQlhHLVk4NksyR0VyLXZ4anFOQnZvZ3VvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy81YjAyMjItZWQ2NC00ZjU1LWI0NWIt MDA1OWY3MzdlZjA1LzEvalU1NFB0SzdmbVYzSTFrNlp6NFNUekhhN3VVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy81YjAyMjItZWQ2NC00ZjU1LWI0NWItMDA1OWY3MzdlZjA1 LzEvNVFHQlhHLVk4NksyR0VyLXZ4anFOQnZvZ3VvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjAyBAIAATAsAwQAV/sWAwQA XmcnMAwDBAC5IxUDBAC5IxYDBAC5YKgDBAC5YKsDBAK5yyAwFAQCAAIwDgMFACoA cwADBQMqCuDAMA0GCSqGSIb3DQEBCwUAA4IBAQAnIm+0y2HQwu0G2DqYB4I5YKSA dHhXMgb63PR3QkAGch+WJ3HO/emrQEuNIyGrmTgncP5m4tosl+IiwOFccZ6T44au 9q6sOh8fJR16+WRlcak7/aSsKFXFd5n4ehzaI9skq7xOHiNtMxAMHKQz14F5eU/E cmJ1z7+NZtxw4P8gYX1RRCqeyKG20TyJuTbMl4CMILKPcfMeursrVauEJ5Ci1Bqk fkQ43Ze9I6Kl5XATSlOEGyzTwBYy8lqQny9hhx3766gmiGKDpobra+uQn7hLTcFh j5ftg2vncPnVLw/RY78XUmp3ky8U30BMIfEYXgJ+1gj+hBI/dXl7uGaSKRK8 -----END CERTIFICATE-----Generated at Wed Jan 21 13:34:40 2026 by rpki-client