This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/5FPzvveRrCz-9qyh9zTW711G9sM.roa File: 5FPzvveRrCz-9qyh9zTW711G9sM.roa (raw, json) Hash identifier: VuXchz0NkcQUmGkPc2YLEoISBITahfJ9I51Pd9l0//4= Subject key identifier: E4:53:F3:BE:F7:91:AC:2C:FE:F6:AC:A1:F7:34:D6:EF:5D:46:F6:C3 Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Certificate serial: 019B797E6FB25D9062CDF4204F8B902CD238 Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/5FPzvveRrCz-9qyh9zTW711G9sM.roa Signing time: Thu 01 Jan 2026 12:18:07 +0000 ROA not before: Thu 01 Jan 2026 12:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137517 IP address blocks: 89.251.20.0/24 maxlen: 24 109.122.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:6f:b2:5d:90:62:cd:f4:20:4f:8b:90:2c:d2:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Validity Not Before: Jan 1 12:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e453f3bef791ac2cfef6aca1f734d6ef5d46f6c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:de:c4:3c:e4:15:4b:fc:65:07:d2:fa:51:b8: 22:90:5d:c0:5b:ca:70:56:ad:8c:eb:62:68:87:e7: 3a:81:62:dc:ab:0d:79:8e:ff:a2:ae:55:30:1a:30: f4:57:85:fa:93:ba:46:7a:e7:99:46:a4:aa:b3:64: 06:59:dc:16:15:ef:a6:ba:76:0f:30:05:c6:d5:92: da:b6:9c:70:46:46:90:dd:95:dd:a2:82:b1:ef:d5: 8f:90:04:fb:b3:ef:ef:39:be:b2:a3:ab:90:2b:dd: 8c:8f:41:1e:78:3f:78:40:30:b2:96:11:30:8f:f8: 95:b7:dc:84:d1:ef:9e:f1:32:5e:03:25:92:5c:17: 96:43:1d:f0:2b:a0:ab:1e:dd:b2:e7:3f:37:a2:8b: bc:6c:8a:4a:81:9e:67:2c:c7:b6:6b:49:1f:9e:bc: 0c:23:b1:6e:2c:9b:98:01:6f:e6:e6:02:c5:3e:f4: c7:6f:fa:34:de:d5:24:81:78:42:ff:30:6a:29:f5: 33:4b:81:ae:fb:6a:b5:d5:5d:3f:7d:3c:49:01:b0: bc:ed:73:9c:d5:34:59:0f:e8:d2:e1:0c:5d:3c:17: 47:1f:50:65:77:2f:2a:c8:3d:12:d4:3c:76:9b:b9: ab:d6:11:66:d4:cc:1d:86:99:f3:89:15:3a:00:26: 6f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:53:F3:BE:F7:91:AC:2C:FE:F6:AC:A1:F7:34:D6:EF:5D:46:F6:C3 X509v3 Authority Key Identifier: keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/5FPzvveRrCz-9qyh9zTW711G9sM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.251.20.0/24 109.122.44.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:ef:ee:b4:9a:fc:4b:7d:cb:b6:1c:6a:10:40:52:5d:46:4e: 5c:9d:c1:c1:a5:d7:2c:4a:b4:e1:2b:88:a4:25:04:62:82:56: 83:01:b6:a3:09:40:33:12:cf:ca:cd:87:c0:2a:b5:ea:ee:32: 9e:3f:57:85:18:23:0f:97:65:2a:01:72:15:fd:a1:5d:f9:a2: f2:ea:95:49:30:f6:6e:52:02:34:e8:1f:3a:9c:ea:41:f3:1b: 12:e1:ce:46:bd:62:84:f4:9d:5a:9e:ab:7d:01:14:52:6e:c7: 10:2d:70:a9:cb:9f:f2:f5:82:fe:69:41:05:6c:79:b4:27:6d: ec:f9:94:d9:e6:25:d8:f1:b2:40:9c:56:1b:b4:6e:b1:a9:e7: 80:78:2d:3b:ee:10:78:3e:d2:11:34:d9:a4:f5:e2:8c:5f:db: 51:20:bc:86:81:47:33:5f:ba:4b:20:8b:fc:aa:fc:b6:ed:30: cc:a4:22:98:17:19:4b:40:a2:fd:7f:b6:6c:8a:48:0f:b4:7c: 93:17:d4:9a:6e:44:8c:fc:6f:96:00:b4:42:7e:f3:d0:03:82: fc:03:5d:f8:a2:1c:8f:5a:77:ab:86:5b:ce:52:4e:1a:68:f7: 19:95:5f:ac:6e:bc:da:db:b5:af:15:33:82:79:e9:bd:9e:3e: e9:75:9b:de -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5fm+yXZBizfQgT4uQLNI4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj NWFjOGQwHhcNMjYwMTAxMTIxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDUzZjNiZWY3OTFhYzJjZmVmNmFjYTFmNzM0ZDZlZjVkNDZmNmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv97EPOQVS/xlB9L6UbgikF3AW8pw Vq2M62Joh+c6gWLcqw15jv+irlUwGjD0V4X6k7pGeueZRqSqs2QGWdwWFe+munYP MAXG1ZLatpxwRkaQ3ZXdooKx79WPkAT7s+/vOb6yo6uQK92Mj0EeeD94QDCylhEw j/iVt9yE0e+e8TJeAyWSXBeWQx3wK6CrHt2y5z83oou8bIpKgZ5nLMe2a0kfnrwM I7FuLJuYAW/m5gLFPvTHb/o03tUkgXhC/zBqKfUzS4Gu+2q11V0/fTxJAbC87XOc 1TRZD+jS4QxdPBdHH1Bldy8qyD0S1Dx2m7mr1hFm1MwdhpnziRU6ACZvzQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFORT8773kaws/vasofc01u9dRvbDMB8GA1UdIwQY MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt MzE4YTI2ZDRhOGM5LzEvNUZQenZ2ZVJyQ3otOXF5aDl6VFc3MTFHOXNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5 LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWfsUAwQA bXosMA0GCSqGSIb3DQEBCwUAA4IBAQAM7+60mvxLfcu2HGoQQFJdRk5cncHBpdcs SrThK4ikJQRiglaDAbajCUAzEs/KzYfAKrXq7jKeP1eFGCMPl2UqAXIV/aFd+aLy 6pVJMPZuUgI06B86nOpB8xsS4c5GvWKE9J1anqt9ARRSbscQLXCpy5/y9YL+aUEF bHm0J23s+ZTZ5iXY8bJAnFYbtG6xqeeAeC077hB4PtIRNNmk9eKMX9tRILyGgUcz X7pLIIv8qvy27TDMpCKYFxlLQKL9f7ZsikgPtHyTF9SabkSM/G+WALRCfvPQA4L8 A134ohyPWnerhlvOUk4aaPcZlV+sbrza27WvFTOCeem9nj7pdZve -----END CERTIFICATE-----Generated at Mon Jan 19 13:55:14 2026 by rpki-client