This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3b51c9-b37b-4767-88d9-5df6a463035b/1/5sg8jhdzeaiLeEp6wxZ_2JeXdD4.roa File: 5sg8jhdzeaiLeEp6wxZ_2JeXdD4.roa (raw, json) Hash identifier: liGuxIjPN3BQno0UGJZyTCNg4Fr30OK1nNLU8WxYRpQ= Subject key identifier: E6:C8:3C:8E:17:73:79:A8:8B:78:4A:7A:C3:16:7F:D8:97:97:74:3E Certificate issuer: /CN=a6a05904ec81746a0a66d207f5d36f8d97888a0d Certificate serial: 019B7CECC40DEF3CA868618D11233C57A923 Authority key identifier: A6:A0:59:04:EC:81:74:6A:0A:66:D2:07:F5:D3:6F:8D:97:88:8A:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqBZBOyBdGoKZtIH9dNvjZeIig0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3b51c9-b37b-4767-88d9-5df6a463035b/1/5sg8jhdzeaiLeEp6wxZ_2JeXdD4.roa Signing time: Fri 02 Jan 2026 04:17:30 +0000 ROA not before: Fri 02 Jan 2026 04:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60318 IP address blocks: 193.104.157.0/24 maxlen: 24 2a06:b300::/48 maxlen: 48 2a06:b300:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/3b51c9-b37b-4767-88d9-5df6a463035b/1/pqBZBOyBdGoKZtIH9dNvjZeIig0.crl rsync://rpki.ripe.net/repository/DEFAULT/26/3b51c9-b37b-4767-88d9-5df6a463035b/1/pqBZBOyBdGoKZtIH9dNvjZeIig0.mft rsync://rpki.ripe.net/repository/DEFAULT/pqBZBOyBdGoKZtIH9dNvjZeIig0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:c4:0d:ef:3c:a8:68:61:8d:11:23:3c:57:a9:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6a05904ec81746a0a66d207f5d36f8d97888a0d Validity Not Before: Jan 2 04:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e6c83c8e177379a88b784a7ac3167fd89797743e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:69:13:ee:45:28:ea:b9:a1:68:96:91:59:91: aa:c3:60:70:a0:20:bd:95:4f:57:41:69:35:11:3e: 3f:0e:21:e3:5e:61:7d:9b:ac:47:83:60:ce:0e:d9: 9e:da:21:7c:0c:8d:5a:58:59:69:65:fb:6c:77:79: ff:33:59:e4:3f:6b:de:23:bd:6a:b1:4f:a4:c1:82: 54:50:a7:38:9e:91:25:ed:77:ff:6a:2e:79:6c:2a: 8f:55:13:f4:96:98:0b:10:9e:3d:39:80:f4:dd:27: 2b:cd:31:94:cb:9a:65:78:8d:71:9b:a8:2d:9b:40: 83:fc:15:03:0d:87:94:44:eb:b3:ba:7a:f8:9a:c5: 55:28:47:95:bd:1f:a7:d2:70:5b:98:8b:0a:ab:39: 3e:84:8d:9d:98:e8:c8:7d:f7:e6:0b:c6:ce:94:6a: 14:49:b9:13:81:35:2d:bf:0f:55:f8:82:55:0f:c6: 4e:96:bf:0f:28:40:01:f5:10:fa:bc:56:96:5e:62: 75:5b:69:26:75:ae:1e:17:39:16:b8:45:d2:51:a2: e7:19:de:d8:58:b1:b9:47:74:38:66:91:51:8a:3d: 7e:fd:ba:f0:bb:7f:3d:3f:f2:2f:f5:64:40:17:24: b4:51:5a:55:43:33:ce:c3:70:c3:99:8f:9d:4f:8b: 60:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:C8:3C:8E:17:73:79:A8:8B:78:4A:7A:C3:16:7F:D8:97:97:74:3E X509v3 Authority Key Identifier: keyid:A6:A0:59:04:EC:81:74:6A:0A:66:D2:07:F5:D3:6F:8D:97:88:8A:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqBZBOyBdGoKZtIH9dNvjZeIig0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3b51c9-b37b-4767-88d9-5df6a463035b/1/5sg8jhdzeaiLeEp6wxZ_2JeXdD4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3b51c9-b37b-4767-88d9-5df6a463035b/1/pqBZBOyBdGoKZtIH9dNvjZeIig0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.104.157.0/24 IPv6: 2a06:b300::/47 Signature Algorithm: sha256WithRSAEncryption 99:40:eb:c3:35:f5:d8:6f:50:1c:e6:83:7c:f7:65:b2:f0:de: 1b:41:e1:36:2f:5b:5d:84:2c:08:08:9e:4c:89:7c:d8:53:c4: d6:4e:17:9d:3f:7f:58:47:41:e3:e9:65:91:e5:06:cb:8b:29: 4d:f2:bb:26:26:e4:68:5f:65:c4:d0:59:1b:86:2d:71:1a:5c: 99:d6:1a:bd:00:dc:aa:1e:c4:1e:af:a8:fe:f1:7c:1c:62:30: a7:e4:97:4c:e3:42:f0:c2:f3:1b:74:11:33:d2:2e:ef:b9:36: 58:d5:e0:ee:46:b5:a9:9f:d1:7e:a1:ff:15:80:dd:ff:5c:66: 2d:0b:07:df:bf:28:ed:14:29:56:1a:c7:27:84:77:9b:06:b1: 42:b4:d4:65:23:fd:47:21:76:9e:68:b8:83:c0:16:22:87:62: b6:39:7c:98:2f:f2:b2:69:08:48:ce:07:c3:37:29:42:45:8e: d1:6a:ab:31:a2:dc:6d:b4:90:32:a1:0e:6c:99:a0:ff:6f:b9: a6:c5:2f:e6:aa:0d:93:62:a3:aa:5e:eb:3d:c8:d1:1b:b5:14: 75:08:cd:97:15:20:39:45:06:24:34:61:ed:35:15:ae:1d:bb: a7:7d:0c:5a:85:a0:e3:24:c2:91:30:de:f7:72:56:27:bc:82: 41:5c:68:8a -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt87MQN7zyoaGGNESM8V6kjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2YTA1OTA0ZWM4MTc0NmEwYTY2ZDIwN2Y1ZDM2ZjhkOTc4 ODhhMGQwHhcNMjYwMTAyMDQxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNmM4M2M4ZTE3NzM3OWE4OGI3ODRhN2FjMzE2N2ZkODk3OTc3NDNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mkT7kUo6rmhaJaRWZGqw2BwoCC9 lU9XQWk1ET4/DiHjXmF9m6xHg2DODtme2iF8DI1aWFlpZftsd3n/M1nkP2veI71q sU+kwYJUUKc4npEl7Xf/ai55bCqPVRP0lpgLEJ49OYD03ScrzTGUy5pleI1xm6gt m0CD/BUDDYeUROuzunr4msVVKEeVvR+n0nBbmIsKqzk+hI2dmOjIfffmC8bOlGoU SbkTgTUtvw9V+IJVD8ZOlr8PKEAB9RD6vFaWXmJ1W2kmda4eFzkWuEXSUaLnGd7Y WLG5R3Q4ZpFRij1+/brwu389P/Iv9WRAFyS0UVpVQzPOw3DDmY+dT4tgwwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFObIPI4Xc3moi3hKesMWf9iXl3Q+MB8GA1UdIwQY MBaAFKagWQTsgXRqCmbSB/XTb42XiIoNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHFCWkJPeUJkR29LWnRJSDlkTnZqWmVJaWcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8zYjUxYzktYjM3Yi00NzY3LTg4ZDkt NWRmNmE0NjMwMzViLzEvNXNnOGpoZHplYWlMZUVwNnd4Wl8ySmVYZEQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi8zYjUxYzktYjM3Yi00NzY3LTg4ZDktNWRmNmE0NjMwMzVi LzEvcHFCWkJPeUJkR29LWnRJSDlkTnZqWmVJaWcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwWidMA8E AgACMAkDBwEqBrMAAAAwDQYJKoZIhvcNAQELBQADggEBAJlA68M19dhvUBzmg3z3 ZbLw3htB4TYvW12ELAgInkyJfNhTxNZOF50/f1hHQePpZZHlBsuLKU3yuyYm5Ghf ZcTQWRuGLXEaXJnWGr0A3KoexB6vqP7xfBxiMKfkl0zjQvDC8xt0ETPSLu+5NljV 4O5Gtamf0X6h/xWA3f9cZi0LB9+/KO0UKVYaxyeEd5sGsUK01GUj/Uchdp5ouIPA FiKHYrY5fJgv8rJpCEjOB8M3KUJFjtFqqzGi3G20kDKhDmyZoP9vuabFL+aqDZNi o6pe6z3I0Ru1FHUIzZcVIDlFBiQ0Ye01Fa4du6d9DFqFoOMkwpEw3vdyVie8gkFc aIo= -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:37 2026 by rpki-client