This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/5JcOxtK3Jz2X65Ov4E3tyAyWsMI.roa File: 5JcOxtK3Jz2X65Ov4E3tyAyWsMI.roa (raw, json) Hash identifier: QEAoAx9UQIUZyC0pzzeQ7jbNdobEp10LjTP4lNds1+o= Subject key identifier: E4:97:0E:C6:D2:B7:27:3D:97:EB:93:AF:E0:4D:ED:C8:0C:96:B0:C2 Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Certificate serial: 019BD061589A192927D273AB626052488784 Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/5JcOxtK3Jz2X65Ov4E3tyAyWsMI.roa Signing time: Sun 18 Jan 2026 09:13:19 +0000 ROA not before: Sun 18 Jan 2026 09:13:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48678 IP address blocks: 185.157.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d0:61:58:9a:19:29:27:d2:73:ab:62:60:52:48:87:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Validity Not Before: Jan 18 09:13:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4970ec6d2b7273d97eb93afe04dedc80c96b0c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5a:eb:d1:a4:74:ca:5c:57:d1:68:ec:ff:9e: c1:36:80:ad:f8:3b:12:87:2e:89:66:59:b7:d0:56: f2:82:ef:10:26:18:b5:46:bb:1d:76:8b:b7:df:e9: 76:b8:6e:50:65:66:e6:c9:5b:1c:0d:f0:5b:0f:4b: 45:d9:c9:4a:11:ab:62:cc:62:d5:fe:0d:88:11:05: e6:cb:9c:66:91:67:ff:16:b9:b3:5c:99:81:ed:c8: d7:7b:7b:3b:98:bf:76:b9:13:d8:a1:fe:f2:a7:15: 48:f3:7f:f0:dc:8f:70:ec:9c:d8:84:49:1d:56:8f: ca:44:3d:a1:a6:bf:3d:3b:d4:29:f3:c1:a6:13:0c: a8:b9:e2:4d:96:b9:ae:04:3b:d7:95:13:4d:e8:b3: cc:04:3a:ed:0f:5d:df:5d:93:b8:65:f9:9a:1b:04: da:31:c6:97:ad:ad:10:5e:02:a5:ba:21:41:a2:28: 1b:59:38:c8:96:db:ae:9c:30:b3:95:62:d5:c7:55: 10:76:fe:83:e3:b6:e8:1c:40:49:2b:24:33:7c:cd: 25:de:63:41:92:50:4d:3d:f7:d4:ab:81:77:8c:89: 51:43:d1:a7:b6:d2:34:0a:57:b8:b2:60:b5:8b:a5: 24:ab:6d:30:07:b5:66:49:97:fd:81:54:96:3b:a9: b3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:97:0E:C6:D2:B7:27:3D:97:EB:93:AF:E0:4D:ED:C8:0C:96:B0:C2 X509v3 Authority Key Identifier: keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/5JcOxtK3Jz2X65Ov4E3tyAyWsMI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.157.46.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:7e:23:15:39:d7:f7:c8:81:01:a6:94:ed:53:04:f7:d7:19: 71:56:f4:2f:f3:bf:20:a1:98:97:5c:89:fc:3e:36:b5:29:27: f9:57:b6:87:94:74:9a:01:fb:e4:84:43:42:81:56:ea:ac:2f: 49:3d:8c:b7:b3:e0:21:cd:ac:ce:05:01:b5:34:9d:75:af:b8: 3c:5f:11:c9:df:4c:90:f1:67:33:13:db:e2:57:04:fc:90:5f: 1a:f7:bc:2b:4d:f6:77:56:13:98:80:f3:f2:c2:ac:2a:a8:7f: 5c:ac:22:07:e5:ba:79:87:b1:e0:39:a2:37:73:bd:36:07:91: 12:a0:5b:b8:50:28:be:d5:ea:ad:c3:86:94:3d:d9:3e:16:0f: 10:b2:cd:b0:ab:fc:fc:8e:9a:06:a7:45:18:05:c8:60:93:5b: 25:af:6c:61:18:06:ce:11:9c:ca:61:c0:62:61:55:52:89:c9: 2a:70:a7:67:e1:96:8c:1b:39:50:6f:ac:2a:fd:51:e0:af:b3: f9:ec:e3:be:fb:9c:fe:da:f6:80:89:31:27:f1:2b:2e:dd:d4: b5:b7:49:e9:ba:1b:d8:27:46:e4:bd:c9:d2:67:af:02:61:9a: 27:fb:35:01:5f:9e:2d:9f:f4:4a:e5:03:6b:b7:aa:cc:b1:6e: fd:f3:ff:16 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvQYViaGSkn0nOrYmBSSIeEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NzEzZWYyNTI3N2UxM2RkNzNmNDQxOTZmZGE1Y2VjMGZk OWNlMTYwHhcNMjYwMTE4MDkxMzE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDk3MGVjNmQyYjcyNzNkOTdlYjkzYWZlMDRkZWRjODBjOTZiMGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlrr0aR0ylxX0Wjs/57BNoCt+DsS hy6JZlm30Fbygu8QJhi1Rrsddou33+l2uG5QZWbmyVscDfBbD0tF2clKEatizGLV /g2IEQXmy5xmkWf/FrmzXJmB7cjXe3s7mL92uRPYof7ypxVI83/w3I9w7JzYhEkd Vo/KRD2hpr89O9Qp88GmEwyoueJNlrmuBDvXlRNN6LPMBDrtD13fXZO4ZfmaGwTa McaXra0QXgKluiFBoigbWTjIltuunDCzlWLVx1UQdv6D47boHEBJKyQzfM0l3mNB klBNPffUq4F3jIlRQ9GnttI0Cle4smC1i6Ukq20wB7VmSZf9gVSWO6mzXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOSXDsbStyc9l+uTr+BN7cgMlrDCMB8GA1UdIwQY MBaAFOlxPvJSd+E91z9EGW/aXOwP2c4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEt MGY2NmMxODg3OTE2LzEvNUpjT3h0SzNKejJYNjVPdjRFM3R5QXlXc01JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEtMGY2NmMxODg3OTE2 LzEvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZ0uMA0G CSqGSIb3DQEBCwUAA4IBAQB7fiMVOdf3yIEBppTtUwT31xlxVvQv878goZiXXIn8 Pja1KSf5V7aHlHSaAfvkhENCgVbqrC9JPYy3s+AhzazOBQG1NJ11r7g8XxHJ30yQ 8WczE9viVwT8kF8a97wrTfZ3VhOYgPPywqwqqH9crCIH5bp5h7HgOaI3c702B5ES oFu4UCi+1eqtw4aUPdk+Fg8Qss2wq/z8jpoGp0UYBchgk1slr2xhGAbOEZzKYcBi YVVSickqcKdn4ZaMGzlQb6wq/VHgr7P57OO++5z+2vaAiTEn8Ssu3dS1t0npuhvY J0bkvcnSZ68CYZon+zUBX54tn/RK5QNrt6rMsW798/8W -----END CERTIFICATE-----Generated at Mon Jan 19 16:54:24 2026 by rpki-client