This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/5TCdgL2HtG2U6UqaKMQzmRQpVYg.roa File: 5TCdgL2HtG2U6UqaKMQzmRQpVYg.roa (raw, json) Hash identifier: iiy0cvTf0H0qnM221d0FdIuvs2I+5Ca1XYPiAhqx6SI= Subject key identifier: E5:30:9D:80:BD:87:B4:6D:94:E9:4A:9A:28:C4:33:99:14:29:55:88 Certificate issuer: /CN=f4e155548ec9abe11ef3be70606a4b987eae3825 Certificate serial: 019B7D5CE5B0F8B79BD68E5FA5F4AFC36E7E Authority key identifier: F4:E1:55:54:8E:C9:AB:E1:1E:F3:BE:70:60:6A:4B:98:7E:AE:38:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/5TCdgL2HtG2U6UqaKMQzmRQpVYg.roa Signing time: Fri 02 Jan 2026 06:19:58 +0000 ROA not before: Fri 02 Jan 2026 06:19:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3320 IP address blocks: 193.39.200.0/23 maxlen: 23 193.39.200.0/24 maxlen: 24 193.39.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 03:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:e5:b0:f8:b7:9b:d6:8e:5f:a5:f4:af:c3:6e:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4e155548ec9abe11ef3be70606a4b987eae3825 Validity Not Before: Jan 2 06:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e5309d80bd87b46d94e94a9a28c4339914295588 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:01:39:c7:9d:7f:23:4e:bb:20:12:c7:85:97: d5:e6:96:05:62:2b:4c:5f:b7:1f:4a:8e:aa:d3:6b: 83:8a:44:79:93:79:90:02:f8:3a:1c:7c:bb:73:f8: 25:00:03:4f:97:4c:33:40:40:af:78:fa:33:30:a0: 3a:03:79:ea:b4:b2:83:75:66:cb:0e:c9:10:0b:10: bb:bd:28:99:8e:74:25:7a:0f:87:a1:b9:78:70:07: b6:5e:29:7f:7d:f4:e0:f4:79:9b:b7:64:48:f4:66: 40:9d:2a:56:51:a0:15:77:21:89:da:d9:94:c4:f3: 3b:e1:6a:b5:2b:f9:be:0c:43:26:92:a9:40:bc:51: 9c:4d:28:49:3d:42:2d:81:73:24:38:b8:a3:9a:57: d0:49:9e:a3:b8:01:3d:02:f9:eb:37:6a:fa:7a:ec: 9e:8c:0b:a4:9a:a2:be:38:c0:29:7a:15:32:40:e5: 15:69:83:b8:f3:cc:65:1e:bf:31:d9:a6:e8:34:f4: 2f:4c:3f:8a:0e:79:79:fc:e8:7d:30:aa:be:77:69: 77:85:06:dc:4c:a8:46:d5:38:c5:c9:2e:c9:b7:53: 1e:f7:0a:58:46:b9:8a:a8:79:a1:1d:05:7a:99:04: 2b:01:ea:28:43:8c:84:54:24:7a:bc:3c:dc:ee:15: 1a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:30:9D:80:BD:87:B4:6D:94:E9:4A:9A:28:C4:33:99:14:29:55:88 X509v3 Authority Key Identifier: keyid:F4:E1:55:54:8E:C9:AB:E1:1E:F3:BE:70:60:6A:4B:98:7E:AE:38:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/5TCdgL2HtG2U6UqaKMQzmRQpVYg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.39.200.0/23 Signature Algorithm: sha256WithRSAEncryption 61:aa:8e:31:3c:7b:36:7b:7f:d9:b2:ac:3d:75:a7:26:85:37: 4f:69:69:6e:e9:6b:4d:d7:80:65:e9:52:db:2c:3a:62:06:03: 86:e6:f5:61:c3:9f:d0:c2:3f:73:c9:00:66:26:35:ce:72:23: dc:1f:64:c3:80:ad:77:45:91:c8:76:94:33:34:2f:0b:c3:79: 60:82:c4:e0:1c:49:8f:7c:c4:c5:0d:e5:99:4a:40:f5:71:5e: f5:7e:79:35:7a:b9:ca:f5:fb:f5:0a:76:c8:0a:d1:83:8d:17: 6b:5b:d7:79:af:0a:a0:82:f0:9c:e9:2d:12:ca:9e:01:6c:3f: 48:66:6c:09:21:68:84:41:c9:38:34:35:8f:2c:19:3a:78:a9: 1d:dc:c2:b4:c4:3c:36:eb:48:8a:02:5d:0c:a6:13:da:80:c6: 10:55:35:68:83:12:7c:bf:86:ff:b9:9b:a9:64:ec:ad:3d:23: 34:f2:5f:88:cc:e5:1b:ac:3d:fe:47:58:50:fe:f9:16:ad:3f: 09:bb:1c:86:9c:22:22:b6:43:e7:ea:e4:57:6a:57:fa:48:98: ce:e8:7a:ff:44:76:12:f5:b9:cd:8b:dc:2f:cd:b6:72:ce:20: 74:f2:fe:7a:0d:72:00:88:77:0a:f5:45:0a:77:5f:ce:69:ea: 4a:5f:77:52 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XOWw+Leb1o5fpfSvw25+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZTE1NTU0OGVjOWFiZTExZWYzYmU3MDYwNmE0Yjk4N2Vh ZTM4MjUwHhcNMjYwMTAyMDYxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTMwOWQ4MGJkODdiNDZkOTRlOTRhOWEyOGM0MzM5OTE0Mjk1NTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwE5x51/I067IBLHhZfV5pYFYitM X7cfSo6q02uDikR5k3mQAvg6HHy7c/glAANPl0wzQECvePozMKA6A3nqtLKDdWbL DskQCxC7vSiZjnQleg+Hobl4cAe2Xil/ffTg9Hmbt2RI9GZAnSpWUaAVdyGJ2tmU xPM74Wq1K/m+DEMmkqlAvFGcTShJPUItgXMkOLijmlfQSZ6juAE9AvnrN2r6euye jAukmqK+OMApehUyQOUVaYO488xlHr8x2aboNPQvTD+KDnl5/Oh9MKq+d2l3hQbc TKhG1TjFyS7Jt1Me9wpYRrmKqHmhHQV6mQQrAeooQ4yEVCR6vDzc7hUa+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOUwnYC9h7RtlOlKmijEM5kUKVWIMB8GA1UdIwQY MBaAFPThVVSOyavhHvO+cGBqS5h+rjglMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU9GVlZJN0pxLUVlODc1d1lHcExtSDZ1T0NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy80ZWRlOWQtY2RmOC00YzI4LTg4YjMt YzlmMTZlODBiM2M0LzEvNVRDZGdMMkh0RzJVNlVxYUtNUXptUlFwVllnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy80ZWRlOWQtY2RmOC00YzI4LTg4YjMtYzlmMTZlODBiM2M0 LzEvOU9GVlZJN0pxLUVlODc1d1lHcExtSDZ1T0NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwSfIMA0G CSqGSIb3DQEBCwUAA4IBAQBhqo4xPHs2e3/Zsqw9dacmhTdPaWlu6WtN14Bl6VLb LDpiBgOG5vVhw5/Qwj9zyQBmJjXOciPcH2TDgK13RZHIdpQzNC8Lw3lggsTgHEmP fMTFDeWZSkD1cV71fnk1ernK9fv1CnbICtGDjRdrW9d5rwqggvCc6S0Syp4BbD9I ZmwJIWiEQck4NDWPLBk6eKkd3MK0xDw260iKAl0MphPagMYQVTVogxJ8v4b/uZup ZOytPSM08l+IzOUbrD3+R1hQ/vkWrT8JuxyGnCIitkPn6uRXalf6SJjO6Hr/RHYS 9bnNi9wvzbZyziB08v56DXIAiHcK9UUKd1/OaepKX3dS -----END CERTIFICATE-----Generated at Mon Jan 19 11:48:26 2026 by rpki-client