This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/NAvPU3PvWk2BT8zglyKAPm42uoo.roa File: NAvPU3PvWk2BT8zglyKAPm42uoo.roa (raw, json) Hash identifier: 1bUbDIdnIXubMQt2eslQ/ZroPi0FRkjK8z9itzf2nhI= Subject key identifier: 34:0B:CF:53:73:EF:5A:4D:81:4F:CC:E0:97:22:80:3E:6E:36:BA:8A Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b Certificate serial: 019B79106E6F0E973946F48A0AEBE0537DD6 Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/NAvPU3PvWk2BT8zglyKAPm42uoo.roa Signing time: Thu 01 Jan 2026 10:17:58 +0000 ROA not before: Thu 01 Jan 2026 10:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41745 IP address blocks: 5.39.249.0/24 maxlen: 24 5.39.250.0/24 maxlen: 24 5.144.176.0/24 maxlen: 24 5.144.181.0/24 maxlen: 24 5.178.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 11:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:6e:6f:0e:97:39:46:f4:8a:0a:eb:e0:53:7d:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b Validity Not Before: Jan 1 10:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=340bcf5373ef5a4d814fcce09722803e6e36ba8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0c:1b:da:2f:40:f1:78:b1:e0:86:c6:46:65: 3a:85:34:dd:a3:7a:e8:4a:18:c7:6a:91:be:3d:8b: 05:60:e3:4c:b6:e9:8c:7f:68:23:6f:45:08:2c:2a: 97:0d:b4:34:c2:cf:ee:da:b9:89:b3:68:93:1d:68: 1f:ee:3a:49:cb:cb:2d:fc:10:4d:60:b4:24:66:f1: 80:0f:d4:bb:6e:fb:80:8a:7a:14:fa:7d:c5:4c:5b: 2f:4c:e2:f5:65:9b:4e:82:35:6f:bb:b5:1f:ba:8a: 11:d5:3d:6d:a5:a8:27:14:7c:d6:04:5e:dd:d9:4d: 1c:fb:f5:e4:27:da:73:7b:89:25:df:23:f6:e5:14: 41:85:2b:95:ed:f3:ff:53:c7:40:93:c7:31:ef:09: 45:e4:2c:c7:da:cb:79:2a:62:79:37:6b:3a:3f:c5: 9a:e7:b5:73:a1:d7:82:68:69:cc:52:f0:f3:a7:23: 97:13:89:9e:15:fc:db:0b:e8:6d:27:48:08:d3:cb: d8:92:30:a7:5d:64:17:65:cc:1e:22:c4:92:56:3d: 0b:4c:b1:8a:23:3e:1f:e6:cf:e3:94:91:31:73:05: d4:37:5a:d4:2c:50:59:ef:1d:f8:de:ae:7c:4b:2e: 80:f7:e2:84:57:03:da:1b:3d:cb:1c:a3:f7:ea:63: 49:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:0B:CF:53:73:EF:5A:4D:81:4F:CC:E0:97:22:80:3E:6E:36:BA:8A X509v3 Authority Key Identifier: keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/NAvPU3PvWk2BT8zglyKAPm42uoo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.39.249.0-5.39.250.255 5.144.176.0/24 5.144.181.0/24 5.178.109.0/24 Signature Algorithm: sha256WithRSAEncryption cc:0a:f6:5d:b6:bf:fc:3e:d4:70:c2:64:34:e9:38:a1:b4:5c: 9b:1a:d8:f7:e0:e0:02:b9:65:ee:ef:fa:22:4a:39:88:00:cc: df:f4:e3:41:6d:c2:31:64:fd:af:f5:1f:5e:d1:0a:24:a1:a6: 9a:07:b5:60:b3:89:fd:f9:cb:7a:3a:56:c8:48:cd:c4:3e:ca: fb:73:7e:2b:34:88:a2:41:7c:df:9f:d6:bf:60:fc:46:52:81: 8a:01:37:15:62:31:83:29:8c:75:ea:e5:4d:08:54:a7:13:8f: 9b:f7:8e:03:b2:95:91:c1:fa:ed:52:90:04:06:0b:06:88:9e: b1:2c:ec:f7:25:c5:e9:59:5a:6b:81:35:bf:68:46:f8:6e:5f: 40:f3:df:f6:ed:30:34:27:bd:d4:e1:b5:ec:0c:bc:7b:1a:e4: 6d:99:45:e8:49:01:a4:d3:84:61:8c:f0:65:5f:a8:5b:83:b4: cb:52:8d:ca:ae:e1:aa:ce:f0:d8:25:f8:44:ce:8a:b7:8f:0e: 37:99:84:54:5e:91:03:0f:4b:8d:59:17:c6:08:67:e6:b0:27: 00:53:c1:8b:2a:66:93:49:53:4f:cf:ab:73:19:a2:cf:22:13: ad:9a:22:34:1e:1f:81:89:cf:a0:1c:96:16:ef:52:c5:f8:42: 8e:c8:20:61 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt5EG5vDpc5RvSKCuvgU33WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzMTg4MTczMmEzZTI0NWE5NTliYzY3OWUwNDU4YzM5Zjg5 M2U0NmIwHhcNMjYwMTAxMTAxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDBiY2Y1MzczZWY1YTRkODE0ZmNjZTA5NzIyODAzZTZlMzZiYThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgwb2i9A8Xix4IbGRmU6hTTdo3ro ShjHapG+PYsFYONMtumMf2gjb0UILCqXDbQ0ws/u2rmJs2iTHWgf7jpJy8st/BBN YLQkZvGAD9S7bvuAinoU+n3FTFsvTOL1ZZtOgjVvu7UfuooR1T1tpagnFHzWBF7d 2U0c+/XkJ9pze4kl3yP25RRBhSuV7fP/U8dAk8cx7wlF5CzH2st5KmJ5N2s6P8Wa 57VzodeCaGnMUvDzpyOXE4meFfzbC+htJ0gI08vYkjCnXWQXZcweIsSSVj0LTLGK Iz4f5s/jlJExcwXUN1rULFBZ7x343q58Sy6A9+KEVwPaGz3LHKP36mNJ7QIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFDQLz1Nz71pNgU/M4JcigD5uNrqKMB8GA1UdIwQY MBaAFBMYgXMqPiRalZvGeeBFjDn4k+RrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUt Y2Q2MTUyMjYxYzZmLzEvTkF2UFUzUHZXazJCVDh6Z2x5S0FQbTQydW9vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUtY2Q2MTUyMjYxYzZm LzEvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBAAFJ/kD BAAFJ/oDBAAFkLADBAAFkLUDBAAFsm0wDQYJKoZIhvcNAQELBQADggEBAMwK9l22 v/w+1HDCZDTpOKG0XJsa2Pfg4AK5Ze7v+iJKOYgAzN/040FtwjFk/a/1H17RCiSh ppoHtWCzif35y3o6VshIzcQ+yvtzfis0iKJBfN+f1r9g/EZSgYoBNxViMYMpjHXq 5U0IVKcTj5v3jgOylZHB+u1SkAQGCwaInrEs7PclxelZWmuBNb9oRvhuX0Dz3/bt MDQnvdThtewMvHsa5G2ZRehJAaTThGGM8GVfqFuDtMtSjcqu4arO8Ngl+ETOireP DjeZhFRekQMPS41ZF8YIZ+awJwBTwYsqZpNJU0/Pq3MZos8iE62aIjQeH4GJz6Ac lhbvUsX4Qo7IIGE= -----END CERTIFICATE-----Generated at Tue Jan 20 14:14:21 2026 by rpki-client