This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/5W2yb0OTfr9uG0K_7DoW2_cp1fw.roa File: 5W2yb0OTfr9uG0K_7DoW2_cp1fw.roa (raw, json) Hash identifier: HItHiIMYtUNAKPJMroY3n9Q5dWaMLwwCORj1H4dodTI= Subject key identifier: E5:6D:B2:6F:43:93:7E:BF:6E:1B:42:BF:EC:3A:16:DB:F7:29:D5:FC Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Certificate serial: 019B7EA758E54C908EBE9ED45F3B093E71E3 Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/5W2yb0OTfr9uG0K_7DoW2_cp1fw.roa Signing time: Fri 02 Jan 2026 12:20:55 +0000 ROA not before: Fri 02 Jan 2026 12:20:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 22168 IP address blocks: 146.19.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Jan 2026 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:58:e5:4c:90:8e:be:9e:d4:5f:3b:09:3e:71:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Validity Not Before: Jan 2 12:20:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e56db26f43937ebf6e1b42bfec3a16dbf729d5fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b2:5b:e9:f3:b1:e4:9b:f6:d8:0a:c3:22:70: 41:3d:06:3b:9d:76:9c:ea:08:c0:f9:ed:bf:e0:c4: 50:c3:d9:4d:2d:ca:2f:de:1c:ec:a7:ab:87:9f:a8: aa:46:e3:00:53:a6:5d:56:d2:d7:d9:09:b9:b5:17: 9e:4c:d8:bc:5c:12:1d:72:11:05:a2:f2:c5:be:ff: 7f:e2:d9:37:9d:71:62:d2:a3:b2:98:d6:cc:d4:7a: 3f:96:2e:fb:e3:93:a1:25:66:7f:b0:3a:cf:bb:46: 4d:b7:98:f3:43:23:16:c2:72:bd:de:fc:67:b6:b9: ad:6c:2f:da:87:9f:8e:1a:9a:8c:8d:35:e6:44:15: 5a:43:91:e5:b7:f4:64:63:b7:48:5c:1e:4e:ae:c8: 2f:ec:fb:b8:75:08:ba:67:19:00:e4:d0:78:6e:6a: ac:03:34:77:93:40:62:8c:10:c3:3c:1f:25:e5:1b: b0:f2:31:e3:ee:58:22:49:ce:9b:a4:a4:be:a1:7b: eb:22:6d:30:79:40:b1:74:20:4a:40:80:28:e1:d9: d9:b0:f1:7a:db:7b:c4:31:bd:25:40:72:2e:70:36: ff:b0:ea:fe:7e:62:8a:2f:e0:21:f4:c6:44:c0:b6: a3:d4:93:4b:83:b2:6a:86:38:71:ad:ac:62:f9:87: 40:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:6D:B2:6F:43:93:7E:BF:6E:1B:42:BF:EC:3A:16:DB:F7:29:D5:FC X509v3 Authority Key Identifier: keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/5W2yb0OTfr9uG0K_7DoW2_cp1fw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.19.20.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:67:ff:5c:aa:b8:8a:f8:72:47:a4:72:84:31:48:59:1c:25: 45:97:64:66:7b:02:fb:ab:fb:74:45:70:5d:b8:df:21:0a:35: c1:f9:42:34:64:bd:4d:32:04:3a:ab:fe:dc:95:75:44:0e:60: c5:ac:b6:87:0b:99:7d:0b:6e:2b:66:31:ce:5d:e9:b7:c4:78: dd:83:6a:bf:16:43:0c:6f:ed:14:f6:77:a5:69:99:85:43:eb: 66:39:a8:9c:57:48:76:d2:33:75:8f:2d:17:2e:a4:f4:6d:b4: b0:24:73:31:cc:78:b0:69:c2:55:05:63:fe:85:da:b7:5c:06: b8:e1:0c:21:3b:cc:e0:e1:b9:a7:7b:78:b8:c7:64:49:3f:ec: 50:cb:6f:02:37:85:6f:a5:fa:cf:cf:11:41:2e:f1:13:d6:26: ff:08:64:25:2d:a2:eb:ca:1f:5c:9d:22:9f:c4:98:2b:d8:c4: e3:7a:5f:32:70:8b:15:0f:02:99:45:76:9f:29:ba:f7:89:47: 0f:65:d3:95:13:13:5d:09:b9:d7:75:71:37:c0:51:5a:58:fe: 1b:ce:55:cf:a1:6d:82:2c:95:ed:9c:56:85:4f:ba:4e:04:55: 06:c8:16:13:29:6a:f4:31:0a:d2:d2:2a:82:20:c9:e9:96:04: cf:eb:99:a1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+p1jlTJCOvp7UXzsJPnHjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0 ZGIwYTUwHhcNMjYwMTAyMTIyMDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTZkYjI2ZjQzOTM3ZWJmNmUxYjQyYmZlYzNhMTZkYmY3MjlkNWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bJb6fOx5Jv22ArDInBBPQY7nXac 6gjA+e2/4MRQw9lNLcov3hzsp6uHn6iqRuMAU6ZdVtLX2Qm5tReeTNi8XBIdchEF ovLFvv9/4tk3nXFi0qOymNbM1Ho/li7745OhJWZ/sDrPu0ZNt5jzQyMWwnK93vxn trmtbC/ah5+OGpqMjTXmRBVaQ5Hlt/RkY7dIXB5Orsgv7Pu4dQi6ZxkA5NB4bmqs AzR3k0BijBDDPB8l5Ruw8jHj7lgiSc6bpKS+oXvrIm0weUCxdCBKQIAo4dnZsPF6 23vEMb0lQHIucDb/sOr+fmKKL+Ah9MZEwLaj1JNLg7Jqhjhxraxi+YdAwwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOVtsm9Dk36/bhtCv+w6Ftv3KdX8MB8GA1UdIwQY MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt YmFmYmRmYzgxMzJhLzEvNVcyeWIwT1Rmcjl1RzBLXzdEb1cyX2NwMWZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhMUMA0G CSqGSIb3DQEBCwUAA4IBAQCNZ/9cqriK+HJHpHKEMUhZHCVFl2RmewL7q/t0RXBd uN8hCjXB+UI0ZL1NMgQ6q/7clXVEDmDFrLaHC5l9C24rZjHOXem3xHjdg2q/FkMM b+0U9nelaZmFQ+tmOaicV0h20jN1jy0XLqT0bbSwJHMxzHiwacJVBWP+hdq3XAa4 4QwhO8zg4bmne3i4x2RJP+xQy28CN4VvpfrPzxFBLvET1ib/CGQlLaLryh9cnSKf xJgr2MTjel8ycIsVDwKZRXafKbr3iUcPZdOVExNdCbnXdXE3wFFaWP4bzlXPoW2C LJXtnFaFT7pOBFUGyBYTKWr0MQrS0iqCIMnplgTP65mh -----END CERTIFICATE-----Generated at Sat Jan 3 19:00:21 2026 by rpki-client