This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/5AjRQcbTGFoBtmqjHbThfBFZ4pM.roa File: 5AjRQcbTGFoBtmqjHbThfBFZ4pM.roa (raw, json) Hash identifier: EzqXI7N9hQNKnKyT09syltJncnW7R03ht+LF3Jgo9lY= Subject key identifier: E4:08:D1:41:C6:D3:18:5A:01:B6:6A:A3:1D:B4:E1:7C:11:59:E2:93 Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019B797EC6FF4EF27C73048238A866A6825E Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/5AjRQcbTGFoBtmqjHbThfBFZ4pM.roa Signing time: Thu 01 Jan 2026 12:18:30 +0000 ROA not before: Thu 01 Jan 2026 12:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 46450 IP address blocks: 188.255.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:17:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:c6:ff:4e:f2:7c:73:04:82:38:a8:66:a6:82:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Jan 1 12:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e408d141c6d3185a01b66aa31db4e17c1159e293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:64:20:a0:26:33:1a:8f:24:ad:18:30:87:2a: 7d:97:fa:d7:e2:7a:57:c3:d9:2e:81:d6:31:90:e5: 40:87:ca:a9:c5:3b:4c:3f:5c:38:f4:85:68:ad:57: 53:24:4b:27:0a:ff:6f:66:a7:e2:fa:2e:a9:08:2b: 24:3f:d2:b7:7d:14:f3:0e:89:e7:a1:ee:62:04:f8: 4e:27:62:62:b7:89:fa:d9:32:bb:fd:f4:3f:a4:d2: a6:85:d2:de:0e:0c:35:8e:1e:dd:13:96:90:b2:63: 2d:68:c6:37:d3:d9:aa:21:de:8b:76:be:27:55:ff: 89:ae:ad:8b:dd:64:08:ff:46:16:fc:e5:f2:e6:3c: b5:69:f4:13:f5:b9:70:3a:f2:ea:6c:e1:54:46:05: 4a:c3:84:cd:4d:79:49:8f:dd:82:66:5d:52:7c:ab: 42:fe:3f:d0:88:72:35:a9:30:14:e0:4f:37:2b:a9: ce:6c:8d:da:de:8c:72:36:23:95:1b:84:d3:89:b6: bb:36:80:87:07:14:65:f2:ea:73:28:43:ab:0d:fe: b4:54:93:fe:2d:60:96:a7:b4:dc:7f:fc:35:2b:9f: b6:9e:84:7e:57:16:7c:56:4b:15:08:e3:c6:28:ec: 0a:95:7a:63:65:ff:33:e8:4c:db:bc:5f:65:20:62: 00:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:08:D1:41:C6:D3:18:5A:01:B6:6A:A3:1D:B4:E1:7C:11:59:E2:93 X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/5AjRQcbTGFoBtmqjHbThfBFZ4pM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.255.222.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:37:44:60:31:73:3e:a9:4f:45:56:31:59:00:52:8e:aa:30: 22:2a:bd:77:bd:44:89:d4:5f:7d:f0:b8:6f:96:0a:c0:f6:6d: 7e:96:56:e3:a4:81:19:ac:e7:2d:df:8a:91:f5:19:84:7b:2d: 02:84:7e:34:28:e3:48:aa:57:ea:d8:e9:d5:a2:2a:a8:6d:23: 95:0c:48:f1:7d:03:cf:be:91:30:c4:60:44:fa:03:95:60:ba: e6:08:f0:19:d4:61:18:93:25:c8:4f:f7:de:b5:b2:13:e5:7e: 2d:e7:7c:d2:75:ff:66:e3:0b:88:78:7b:54:6d:00:78:12:3f: b3:b2:c9:af:c4:8e:a3:74:c7:57:68:a8:bd:e6:03:9f:b1:d6: 15:60:f8:f0:e4:88:c9:a0:e5:c4:29:22:4f:f0:01:77:d5:9c: 5d:e6:7e:82:cc:ca:c9:c1:dc:e0:b4:3c:d4:02:31:3e:36:ab: 06:dd:90:31:0c:34:13:4c:8d:6f:79:dc:09:92:f8:69:09:aa: 54:c7:7a:59:36:10:4f:79:ee:19:fb:b7:0e:d7:8d:b3:02:2a: d6:8e:dc:67:54:cc:18:7d:7d:e4:dd:97:09:93:6d:06:74:af: 9a:4d:f1:6f:1b:61:00:05:c7:9a:32:2b:36:75:80:4c:ad:85: 82:f0:32:fe -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fsb/TvJ8cwSCOKhmpoJeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjYwMTAxMTIxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDA4ZDE0MWM2ZDMxODVhMDFiNjZhYTMxZGI0ZTE3YzExNTllMjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2QgoCYzGo8krRgwhyp9l/rX4npX w9kugdYxkOVAh8qpxTtMP1w49IVorVdTJEsnCv9vZqfi+i6pCCskP9K3fRTzDonn oe5iBPhOJ2Jit4n62TK7/fQ/pNKmhdLeDgw1jh7dE5aQsmMtaMY309mqId6Ldr4n Vf+Jrq2L3WQI/0YW/OXy5jy1afQT9blwOvLqbOFURgVKw4TNTXlJj92CZl1SfKtC /j/QiHI1qTAU4E83K6nObI3a3oxyNiOVG4TTiba7NoCHBxRl8upzKEOrDf60VJP+ LWCWp7Tcf/w1K5+2noR+VxZ8VksVCOPGKOwKlXpjZf8z6EzbvF9lIGIAyQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOQI0UHG0xhaAbZqox204XwRWeKTMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvNUFqUlFjYlRHRm9CdG1xakhiVGhmQkZaNHBNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvP/eMA0G CSqGSIb3DQEBCwUAA4IBAQArN0RgMXM+qU9FVjFZAFKOqjAiKr13vUSJ1F998Lhv lgrA9m1+llbjpIEZrOct34qR9RmEey0ChH40KONIqlfq2OnVoiqobSOVDEjxfQPP vpEwxGBE+gOVYLrmCPAZ1GEYkyXIT/fetbIT5X4t53zSdf9m4wuIeHtUbQB4Ej+z ssmvxI6jdMdXaKi95gOfsdYVYPjw5IjJoOXEKSJP8AF31Zxd5n6CzMrJwdzgtDzU AjE+NqsG3ZAxDDQTTI1vedwJkvhpCapUx3pZNhBPee4Z+7cO142zAirWjtxnVMwY fX3k3ZcJk20GdK+aTfFvG2EABceaMis2dYBMrYWC8DL+ -----END CERTIFICATE-----Generated at Mon Jan 19 13:54:07 2026 by rpki-client