This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/I5hCyjrw2AXxjC1FvqHT6gWtqQs.roa File: I5hCyjrw2AXxjC1FvqHT6gWtqQs.roa (raw, json) Hash identifier: 5bxftc/i5qFZpB6RRZJFqNI1hX1vXDX1myfyCTO9Lmg= Subject key identifier: 23:98:42:CA:3A:F0:D8:05:F1:8C:2D:45:BE:A1:D3:EA:05:AD:A9:0B Certificate issuer: /CN=4456c14cd8724f9a909627b94e006cf69d12307b Certificate serial: 019BFE54327A934842C1C2C0C5F8FFE4F8F4 Authority key identifier: 44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/I5hCyjrw2AXxjC1FvqHT6gWtqQs.roa Signing time: Tue 27 Jan 2026 07:21:29 +0000 ROA not before: Tue 27 Jan 2026 07:21:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44654 IP address blocks: 37.252.208.0/23 maxlen: 23 37.252.208.0/24 maxlen: 24 37.252.209.0/24 maxlen: 24 37.252.210.0/23 maxlen: 23 37.252.210.0/24 maxlen: 24 37.252.211.0/24 maxlen: 24 37.252.212.0/23 maxlen: 23 37.252.212.0/24 maxlen: 24 37.252.213.0/24 maxlen: 24 37.252.215.0/24 maxlen: 24 109.205.8.0/21 maxlen: 24 109.205.9.0/24 maxlen: 24 185.36.124.0/22 maxlen: 24 185.36.124.0/23 maxlen: 23 185.36.126.0/24 maxlen: 24 2a02:d8::/32 maxlen: 48 2a02:d8:8::/48 maxlen: 48 2a02:d8:9::/48 maxlen: 48 2a02:d8:a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:54:32:7a:93:48:42:c1:c2:c0:c5:f8:ff:e4:f8:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4456c14cd8724f9a909627b94e006cf69d12307b Validity Not Before: Jan 27 07:21:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=239842ca3af0d805f18c2d45bea1d3ea05ada90b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:bf:59:06:b2:8a:82:37:0f:23:62:56:a2:33: bf:4e:fc:96:d9:3c:5d:7f:30:06:5c:b3:f1:71:e3: 14:c1:72:86:98:bf:84:65:e0:41:94:37:43:0a:a9: e9:45:28:32:87:6e:e4:9f:5d:bc:81:b7:0a:74:90: 55:40:64:af:f1:eb:5b:6e:87:3f:4c:dc:d0:0d:35: d7:b9:c6:dc:81:13:43:37:bf:2b:ea:ef:0a:a3:b9: 93:f3:9c:fa:1c:bd:54:f6:e6:97:5e:3c:04:d1:e7: 51:46:f6:44:9d:67:98:92:eb:50:5e:6a:64:c9:96: 47:f5:6f:8d:00:44:13:70:19:cf:88:aa:2b:54:f3: 58:13:c9:f8:f9:23:3c:00:f0:44:04:6f:a2:d0:fe: 8c:42:16:6b:8b:00:d5:90:31:e9:c8:39:64:0d:70: fa:eb:d6:9e:a9:df:24:b2:0c:d4:a3:28:38:82:d6: c5:42:d0:60:20:86:77:43:2c:5f:dd:03:87:f3:6c: 6e:9a:d4:66:86:d8:3c:a3:99:4a:02:e5:36:89:41: 14:cf:55:42:ff:24:28:bd:5d:1c:a5:e2:a7:85:5d: e1:14:99:d5:48:90:21:d6:09:9f:d5:60:ea:8f:4f: c1:6c:70:cd:73:be:da:b8:06:d4:e9:f9:9a:c1:88: a6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:98:42:CA:3A:F0:D8:05:F1:8C:2D:45:BE:A1:D3:EA:05:AD:A9:0B X509v3 Authority Key Identifier: keyid:44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/I5hCyjrw2AXxjC1FvqHT6gWtqQs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.252.208.0-37.252.213.255 37.252.215.0/24 109.205.8.0/21 185.36.124.0/22 IPv6: 2a02:d8::/32 Signature Algorithm: sha256WithRSAEncryption 5f:90:2e:00:cc:f9:09:01:b3:ba:0c:e7:72:bf:31:22:c3:ac: ba:3a:da:a1:97:f0:ef:a4:7e:63:60:a5:ec:e7:e3:58:4c:87: e3:48:b6:57:e2:04:92:2d:96:d4:49:10:72:3c:4d:e3:cd:04: 73:ff:f0:c7:b3:0a:05:76:1e:d8:de:e4:2b:23:4e:c2:00:9a: 4c:cf:2d:f8:f8:ca:c6:03:f8:78:fa:c6:0c:13:c1:d7:b3:7a: 64:d6:8e:76:4b:cc:94:db:80:51:28:a7:55:2a:33:29:f0:42: 98:24:23:73:33:f3:50:bc:e9:59:d9:d7:22:56:5e:f7:94:a4: 75:24:64:01:18:9a:53:11:98:41:10:6d:da:01:a6:89:36:3c: da:05:5a:96:e2:9d:81:87:ce:a3:2f:f7:48:21:5e:e0:94:1b: 88:71:1c:25:df:be:4a:a8:79:ca:b1:00:f2:3f:a4:5c:fc:7c: 97:e7:f0:bb:49:8f:07:7f:93:2b:c8:55:45:1b:50:d3:2b:bc: 41:cf:b4:b3:06:7f:b0:b7:24:e4:0f:ab:00:d7:b9:04:bf:d1: 64:0b:24:0b:f4:d0:81:29:bb:89:c3:ac:61:7f:93:df:90:dd: 1f:15:9b:4e:7b:eb:9f:6a:71:92:13:79:8c:c9:03:a1:31:e7: 61:d4:dd:ad -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISAZv+VDJ6k0hCwcLAxfj/5Pj0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NTZjMTRjZDg3MjRmOWE5MDk2MjdiOTRlMDA2Y2Y2OWQx MjMwN2IwHhcNMjYwMTI3MDcyMTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzk4NDJjYTNhZjBkODA1ZjE4YzJkNDViZWExZDNlYTA1YWRhOTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlb9ZBrKKgjcPI2JWojO/TvyW2Txd fzAGXLPxceMUwXKGmL+EZeBBlDdDCqnpRSgyh27kn128gbcKdJBVQGSv8etbboc/ TNzQDTXXucbcgRNDN78r6u8Ko7mT85z6HL1U9uaXXjwE0edRRvZEnWeYkutQXmpk yZZH9W+NAEQTcBnPiKorVPNYE8n4+SM8APBEBG+i0P6MQhZriwDVkDHpyDlkDXD6 69aeqd8ksgzUoyg4gtbFQtBgIIZ3Qyxf3QOH82xumtRmhtg8o5lKAuU2iUEUz1VC /yQovV0cpeKnhV3hFJnVSJAh1gmf1WDqj0/BbHDNc77auAbU6fmawYim9wIDAQAB o4ICMjCCAi4wHQYDVR0OBBYEFCOYQso68NgF8YwtRb6h0+oFrakLMB8GA1UdIwQY MBaAFERWwUzYck+akJYnuU4AbPadEjB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkZiQlROaHlUNXFRbGllNVRnQnM5cDBTTUhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS81ZWNmYzItZGE3MC00MzMzLThmOTYt NWI4NzgyNWMwN2VlLzEvSTVoQ3lqcncyQVh4akMxRnZxSFQ2Z1d0cVFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS81ZWNmYzItZGE3MC00MzMzLThmOTYtNWI4NzgyNWMwN2Vl LzEvUkZiQlROaHlUNXFRbGllNVRnQnM5cDBTTUhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAmBAIAATAgMAwDBAQl/NAD BAEl/NQDBAAl/NcDBANtzQgDBAK5JHwwDQQCAAIwBwMFACoCANgwDQYJKoZIhvcN AQELBQADggEBAF+QLgDM+QkBs7oM53K/MSLDrLo62qGX8O+kfmNgpezn41hMh+NI tlfiBJItltRJEHI8TePNBHP/8MezCgV2Htje5CsjTsIAmkzPLfj4ysYD+Hj6xgwT wdezemTWjnZLzJTbgFEop1UqMynwQpgkI3Mz81C86VnZ1yJWXveUpHUkZAEYmlMR mEEQbdoBpok2PNoFWpbinYGHzqMv90ghXuCUG4hxHCXfvkqoecqxAPI/pFz8fJfn 8LtJjwd/kyvIVUUbUNMrvEHPtLMGf7C3JOQPqwDXuQS/0WQLJAv00IEpu4nDrGF/ k9+Q3R8Vm057659qcZITeYzJA6Ex52HU3a0= -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:58 2026 by rpki-client