This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/RtdT3axTfmWPymViBZqZaqZKpVY.roa File: RtdT3axTfmWPymViBZqZaqZKpVY.roa (raw, json) Hash identifier: xtwwjn7DzhN5b7BbjlImOVuCLYyjwLWW/osFbNbKEZQ= Subject key identifier: 46:D7:53:DD:AC:53:7E:65:8F:CA:65:62:05:9A:99:6A:A6:4A:A5:56 Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b Certificate serial: 019B79106F29CDD24C36800BACBE38175CED Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/RtdT3axTfmWPymViBZqZaqZKpVY.roa Signing time: Thu 01 Jan 2026 10:17:58 +0000 ROA not before: Thu 01 Jan 2026 10:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44547 IP address blocks: 5.178.100.0/24 maxlen: 24 5.178.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:6f:29:cd:d2:4c:36:80:0b:ac:be:38:17:5c:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b Validity Not Before: Jan 1 10:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=46d753ddac537e658fca6562059a996aa64aa556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:19:2e:af:a1:e9:44:99:9c:84:d6:20:70:2c: d0:bb:81:ab:74:33:19:b1:f2:71:9f:a7:a8:d0:c7: 9b:99:c7:a5:f1:70:37:04:12:a7:6f:a2:10:66:90: be:6e:22:e3:61:a9:93:58:8c:41:b7:c9:bb:d1:ce: 10:a1:1c:d8:95:1d:fa:51:3f:1e:b2:b3:c2:a8:7d: 7e:89:a8:e8:6a:47:78:6e:bb:39:82:d5:de:00:00: e5:28:2f:f8:ec:08:77:f4:d3:6a:c7:1a:e8:54:00: a1:08:89:23:5d:42:6c:c5:fa:0f:0a:0f:88:79:a7: eb:ed:c4:17:b5:06:60:e1:40:5c:16:5c:a6:5d:e8: 55:01:dd:d8:17:0f:47:e7:5b:64:30:58:c0:13:fd: 8e:84:35:1e:96:5f:d7:52:9b:7b:42:df:6b:8d:0d: ef:cc:7b:22:6f:e7:91:b9:2e:de:25:6d:3d:80:c4: ce:db:db:43:42:2a:f6:b8:f8:b2:0a:58:d8:ac:2d: dc:46:6b:8f:68:c2:c1:87:60:c1:21:ca:c1:d1:3e: f2:0d:7d:92:05:35:f7:51:9a:88:4c:23:5b:6e:01: f4:28:98:5a:26:c7:35:2c:42:69:37:a3:46:79:aa: 13:31:bd:10:60:31:10:dc:b0:c4:41:ae:df:ee:1f: fd:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:D7:53:DD:AC:53:7E:65:8F:CA:65:62:05:9A:99:6A:A6:4A:A5:56 X509v3 Authority Key Identifier: keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/RtdT3axTfmWPymViBZqZaqZKpVY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.178.100.0/24 5.178.111.0/24 Signature Algorithm: sha256WithRSAEncryption 72:bc:53:2b:ce:27:45:12:00:7e:9d:28:a6:dd:fe:16:11:93: 33:57:5c:63:64:77:b9:6f:ca:54:42:79:90:d0:ee:3a:ba:f4: a3:f3:c0:e6:96:7a:5a:12:a0:d6:21:cc:22:64:07:c4:34:b8: a1:14:04:3c:87:6e:67:98:f5:5d:a2:f1:ab:62:b7:0c:4e:a3: 06:b8:57:6e:68:14:88:51:70:e7:6a:99:57:b7:c6:d2:a1:11: af:2e:56:ed:f9:a4:c0:d7:88:60:7c:11:bf:c8:75:37:5e:11: 68:f6:d8:67:bb:b6:b4:9c:53:fe:b6:1b:3b:ae:13:21:f4:d9: 40:de:a7:0e:39:89:63:e5:d7:a8:2b:51:74:c5:83:f2:dc:fb: 63:db:65:76:4c:ac:9b:f5:07:07:2a:9e:9f:6a:db:c7:fd:45: 3f:7b:0d:a5:cf:89:55:6e:6b:7b:22:f6:b2:f3:ea:1c:7f:b1: 86:6e:dc:80:6b:3e:ea:8b:32:16:ee:0c:70:44:6d:b3:c8:fa: 4b:77:4e:b9:83:e5:07:42:86:94:f2:6c:0a:c5:b6:c0:80:81: ef:b1:11:e0:95:74:85:a8:1b:3b:4a:3c:43:2a:b8:36:f1:23: d2:74:b5:9f:c4:dc:08:dc:4f:bf:19:70:0e:8c:60:20:cc:5f: c8:59:c5:08 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EG8pzdJMNoALrL44F1ztMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzMTg4MTczMmEzZTI0NWE5NTliYzY3OWUwNDU4YzM5Zjg5 M2U0NmIwHhcNMjYwMTAxMTAxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NmQ3NTNkZGFjNTM3ZTY1OGZjYTY1NjIwNTlhOTk2YWE2NGFhNTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRkur6HpRJmchNYgcCzQu4GrdDMZ sfJxn6eo0Mebmcel8XA3BBKnb6IQZpC+biLjYamTWIxBt8m70c4QoRzYlR36UT8e srPCqH1+iajoakd4brs5gtXeAADlKC/47Ah39NNqxxroVAChCIkjXUJsxfoPCg+I eafr7cQXtQZg4UBcFlymXehVAd3YFw9H51tkMFjAE/2OhDUell/XUpt7Qt9rjQ3v zHsib+eRuS7eJW09gMTO29tDQir2uPiyCljYrC3cRmuPaMLBh2DBIcrB0T7yDX2S BTX3UZqITCNbbgH0KJhaJsc1LEJpN6NGeaoTMb0QYDEQ3LDEQa7f7h/9YwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEbXU92sU35lj8plYgWamWqmSqVWMB8GA1UdIwQY MBaAFBMYgXMqPiRalZvGeeBFjDn4k+RrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUt Y2Q2MTUyMjYxYzZmLzEvUnRkVDNheFRmbVdQeW1WaUJacVphcVpLcFZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUtY2Q2MTUyMjYxYzZm LzEvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABbJkAwQA BbJvMA0GCSqGSIb3DQEBCwUAA4IBAQByvFMrzidFEgB+nSim3f4WEZMzV1xjZHe5 b8pUQnmQ0O46uvSj88DmlnpaEqDWIcwiZAfENLihFAQ8h25nmPVdovGrYrcMTqMG uFduaBSIUXDnaplXt8bSoRGvLlbt+aTA14hgfBG/yHU3XhFo9thnu7a0nFP+ths7 rhMh9NlA3qcOOYlj5deoK1F0xYPy3Ptj22V2TKyb9QcHKp6fatvH/UU/ew2lz4lV bmt7Ivay8+ocf7GGbtyAaz7qizIW7gxwRG2zyPpLd065g+UHQoaU8mwKxbbAgIHv sRHglXSFqBs7SjxDKrg28SPSdLWfxNwI3E+/GXAOjGAgzF/IWcUI -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:12 2026 by rpki-client