This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/5tH7LLAkdhTinMcBwA5ZehHy3T8.roa File: 5tH7LLAkdhTinMcBwA5ZehHy3T8.roa (raw, json) Hash identifier: FSVoKMxOOpnoQfuC/EJwrwRY/Zx+oB/dMyYOIOIr+Us= Subject key identifier: E6:D1:FB:2C:B0:24:76:14:E2:9C:C7:01:C0:0E:59:7A:11:F2:DD:3F Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Certificate serial: 019B7B35F4D58AE43E37AEA4E72A4307F7E0 Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/5tH7LLAkdhTinMcBwA5ZehHy3T8.roa Signing time: Thu 01 Jan 2026 20:18:12 +0000 ROA not before: Thu 01 Jan 2026 20:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5511 IP address blocks: 95.170.15.0/24 maxlen: 24 95.170.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 00:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:f4:d5:8a:e4:3e:37:ae:a4:e7:2a:43:07:f7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Validity Not Before: Jan 1 20:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e6d1fb2cb0247614e29cc701c00e597a11f2dd3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8d:bc:34:b0:58:97:d6:3a:1c:a2:3c:2a:64: ea:93:55:c0:b3:c3:96:a7:22:87:a9:3b:4d:98:ba: b4:00:f6:65:bb:52:db:a5:5e:ed:86:e9:a1:f8:72: 54:a6:b5:0a:c2:18:71:7d:2a:b9:ae:dc:ef:78:f0: b4:df:c6:ac:81:3c:eb:4c:1d:64:57:af:55:f4:47: 56:0c:95:bd:35:4d:7c:6f:85:1e:d0:49:65:b7:18: c3:d7:7f:b6:a2:98:f1:0f:f4:a2:74:de:3d:ea:a5: ba:ab:1a:fe:19:84:a8:4c:64:a2:87:4d:d0:a6:a1: d0:fa:7b:f1:e0:a5:06:55:86:17:6e:b7:5a:fd:43: f0:4b:c6:c9:eb:0d:6d:99:00:57:f0:08:4b:6c:9a: 7d:ac:c4:75:d5:aa:ce:63:69:52:bf:72:ab:9c:ae: 48:2c:b2:d7:c6:26:f9:fa:72:2f:c8:0c:4b:9c:92: ed:e9:ba:34:fb:16:97:44:bd:a1:0e:fe:e4:af:6e: 42:17:a1:fb:d6:7b:73:33:38:16:c8:44:bd:98:f1: d0:a1:9e:cc:9d:e2:13:d5:ad:6a:48:bb:37:5d:fb: e4:a1:e0:2f:44:bd:cb:3d:7c:ec:94:78:4e:9a:63: 75:02:aa:37:3e:a1:f1:ba:ba:2a:81:e1:a1:8e:62: e1:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:D1:FB:2C:B0:24:76:14:E2:9C:C7:01:C0:0E:59:7A:11:F2:DD:3F X509v3 Authority Key Identifier: keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/5tH7LLAkdhTinMcBwA5ZehHy3T8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.170.15.0-95.170.16.255 Signature Algorithm: sha256WithRSAEncryption 74:10:a9:58:98:67:30:d1:48:19:81:7b:75:e8:bc:3d:d3:f3: 77:b5:34:7d:35:c8:35:af:bd:3a:75:83:a2:a9:3f:90:03:30: dc:64:4b:c7:4e:05:1e:ce:7c:c2:6e:58:54:fa:fa:fe:a4:c2: 57:50:9a:94:80:64:52:15:54:c0:33:f8:58:6a:e4:04:57:37: d8:a2:27:39:83:b8:92:3e:4b:60:04:f3:ef:67:0f:cc:c3:f3: cc:82:d2:cb:f1:7e:74:0e:aa:5a:09:63:08:74:93:f3:bc:43: 21:74:4a:26:65:13:06:f9:0b:4d:06:d2:9d:e7:31:b8:d8:ed: 8d:5d:06:c1:22:c1:38:b8:be:3e:59:30:ac:6b:9c:0b:ab:21: 71:19:ba:40:8a:5e:70:83:49:2a:3b:eb:3e:e1:f5:44:37:f3: f0:5f:cf:84:23:6b:6f:78:05:99:48:b0:82:4c:2a:0b:10:68: 1c:94:4d:e4:57:25:67:d4:09:16:79:65:f6:58:b0:57:a7:8b: cf:84:a9:dd:4a:1f:2a:6b:c2:7b:34:fa:2d:4a:67:7b:1f:da: 73:4a:7f:53:d5:89:d5:16:7b:77:2b:72:04:12:10:3d:2d:0b: 32:f0:46:dc:37:6b:42:1b:94:3e:14:d3:2c:06:7b:9d:51:24: 43:36:84:ec -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt7NfTViuQ+N66k5ypDB/fgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZTQyNWEzMmI2MmQzOTgxOGM0Y2JiMDA4MTA3NTY4NmZj NGM4ZTgwHhcNMjYwMTAxMjAxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNmQxZmIyY2IwMjQ3NjE0ZTI5Y2M3MDFjMDBlNTk3YTExZjJkZDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvI28NLBYl9Y6HKI8KmTqk1XAs8OW pyKHqTtNmLq0APZlu1LbpV7thumh+HJUprUKwhhxfSq5rtzvePC038asgTzrTB1k V69V9EdWDJW9NU18b4Ue0ElltxjD13+2opjxD/SidN496qW6qxr+GYSoTGSih03Q pqHQ+nvx4KUGVYYXbrda/UPwS8bJ6w1tmQBX8AhLbJp9rMR11arOY2lSv3KrnK5I LLLXxib5+nIvyAxLnJLt6bo0+xaXRL2hDv7kr25CF6H71ntzMzgWyES9mPHQoZ7M neIT1a1qSLs3XfvkoeAvRL3LPXzslHhOmmN1Aqo3PqHxuroqgeGhjmLhdwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFObR+yywJHYU4pzHAcAOWXoR8t0/MB8GA1UdIwQY MBaAFCDkJaMrYtOYGMTLsAgQdWhvxMjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGIt ZWNkMjk2NWNiN2U3LzEvNXRIN0xMQWtkaFRpbk1jQndBNVplaEh5M1Q4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGItZWNkMjk2NWNiN2U3 LzEvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABfqg8D BABfqhAwDQYJKoZIhvcNAQELBQADggEBAHQQqViYZzDRSBmBe3XovD3T83e1NH01 yDWvvTp1g6KpP5ADMNxkS8dOBR7OfMJuWFT6+v6kwldQmpSAZFIVVMAz+Fhq5ARX N9iiJzmDuJI+S2AE8+9nD8zD88yC0svxfnQOqloJYwh0k/O8QyF0SiZlEwb5C00G 0p3nMbjY7Y1dBsEiwTi4vj5ZMKxrnAurIXEZukCKXnCDSSo76z7h9UQ38/Bfz4Qj a294BZlIsIJMKgsQaByUTeRXJWfUCRZ5ZfZYsFeni8+Eqd1KHyprwns0+i1KZ3sf 2nNKf1PVidUWe3crcgQSED0tCzLwRtw3a0IblD4U0ywGe51RJEM2hOw= -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:09 2026 by rpki-client