This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/5a_1BXh6OJ5EsqB5H5lDXNwNoec.roa File: 5a_1BXh6OJ5EsqB5H5lDXNwNoec.roa (raw, json) Hash identifier: RJ3VX8HghkzCma3QJ9QJO8+1DyrcpupoHfpYlwCMq0M= Subject key identifier: E5:AF:F5:05:78:7A:38:9E:44:B2:A0:79:1F:99:43:5C:DC:0D:A1:E7 Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5 Certificate serial: 019B7DCA3082A00869BE6B6EADB690EA7A52 Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/5a_1BXh6OJ5EsqB5H5lDXNwNoec.roa Signing time: Fri 02 Jan 2026 08:19:21 +0000 ROA not before: Fri 02 Jan 2026 08:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47899 IP address blocks: 94.102.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:30:82:a0:08:69:be:6b:6e:ad:b6:90:ea:7a:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5 Validity Not Before: Jan 2 08:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e5aff505787a389e44b2a0791f99435cdc0da1e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:27:97:6c:ee:1e:45:9e:28:5f:94:12:d0:2e: 63:dd:17:af:27:ec:19:6f:f1:e1:8d:10:7e:bc:8e: 90:2d:e3:7c:d0:cf:ca:fb:04:b9:fc:35:43:e7:f3: 4f:39:61:25:b3:8b:e1:da:f3:6d:d4:f5:d4:a7:00: fc:30:57:78:13:bd:a1:e0:2f:71:de:8a:a4:7c:3f: ba:80:54:88:07:74:af:ec:cc:b6:dc:d5:9f:9f:c2: 48:6d:5d:cf:9d:42:83:4c:25:5e:b4:05:be:cd:a8: bb:da:ac:cd:73:30:3c:0d:18:18:6f:0f:24:0c:b8: 0f:f8:11:41:72:86:fd:f6:c3:15:58:1a:a8:23:a3: 30:90:ae:4f:b7:4e:a4:0c:c4:62:fd:4c:64:ed:7b: d9:0f:f0:da:9a:19:75:24:98:67:5b:3c:40:25:88: 6e:d3:fc:06:93:94:70:b3:94:bb:69:7d:dd:a2:d8: 94:4f:1f:a7:b0:39:c1:2b:1e:66:ef:42:89:b1:71: 9f:4b:33:53:2a:f8:59:3d:8b:ad:38:54:c3:7c:c0: b1:dc:e3:fc:be:10:9a:f7:8f:bb:fe:9d:56:1d:a2: 77:4a:64:8b:3d:cc:a1:e3:f4:04:a6:6f:13:01:4f: 50:f7:d6:d5:51:00:1b:41:d1:79:56:3f:ec:56:b4: 03:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:AF:F5:05:78:7A:38:9E:44:B2:A0:79:1F:99:43:5C:DC:0D:A1:E7 X509v3 Authority Key Identifier: keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/5a_1BXh6OJ5EsqB5H5lDXNwNoec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.102.176.0/20 Signature Algorithm: sha256WithRSAEncryption 1d:63:24:f0:49:28:b0:52:79:ae:dd:0d:cb:1a:67:fc:b2:05: 78:1a:eb:d5:3d:b9:fd:f9:1a:b7:91:ea:82:19:be:7e:a8:04: f2:d8:a0:16:36:b0:ad:cc:55:40:24:e4:86:49:74:f0:ee:ff: a8:6e:9a:eb:42:09:1f:88:d3:8a:9c:a3:fe:2e:3f:03:25:b8: bc:e5:5e:3f:1c:ee:78:9d:e8:ca:45:32:c7:06:66:4f:77:2b: 69:0f:05:f2:96:ac:0e:3f:3f:a4:98:7b:dd:5c:fe:91:aa:aa: 2d:0e:11:58:9e:56:09:7c:84:30:3d:82:e4:2d:14:42:e0:0a: 17:a4:9b:e2:b1:7a:af:82:15:6e:f2:55:f3:c2:7e:5c:96:dc: 9b:90:88:32:ad:fa:85:81:ea:a8:b6:d4:79:80:c1:6e:e3:ec: 0d:7f:a3:b9:97:89:d1:b5:da:1d:88:ed:42:8c:42:49:d5:e6: e0:cb:b4:c7:32:51:91:1e:25:9e:4d:81:8d:95:ae:15:7b:2e: 8e:3f:ef:b6:c3:27:45:e9:a1:73:44:a4:d8:15:22:62:05:9a: 92:bc:8d:aa:72:99:fb:34:70:27:d5:47:c0:10:e8:87:89:92: 01:91:f6:78:f5:48:cb:7d:85:18:b8:cd:17:e7:4d:83:26:0c: 01:22:7c:55 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yjCCoAhpvmturbaQ6npSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZmUxYzg1OTQwOWFjNWRlNzQxNGM0OGY4NjczOTkxM2Jl NmI3ZTUwHhcNMjYwMTAyMDgxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNWFmZjUwNTc4N2EzODllNDRiMmEwNzkxZjk5NDM1Y2RjMGRhMWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyeXbO4eRZ4oX5QS0C5j3RevJ+wZ b/HhjRB+vI6QLeN80M/K+wS5/DVD5/NPOWEls4vh2vNt1PXUpwD8MFd4E72h4C9x 3oqkfD+6gFSIB3Sv7My23NWfn8JIbV3PnUKDTCVetAW+zai72qzNczA8DRgYbw8k DLgP+BFBcob99sMVWBqoI6MwkK5Pt06kDMRi/Uxk7XvZD/Damhl1JJhnWzxAJYhu 0/wGk5Rws5S7aX3dotiUTx+nsDnBKx5m70KJsXGfSzNTKvhZPYutOFTDfMCx3OP8 vhCa94+7/p1WHaJ3SmSLPcyh4/QEpm8TAU9Q99bVUQAbQdF5Vj/sVrQDFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOWv9QV4ejieRLKgeR+ZQ1zcDaHnMB8GA1UdIwQY MBaAFK7+HIWUCaxd50FMSPhnOZE75rflMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEt NDI4NDU4Njc5Y2U0LzEvNWFfMUJYaDZPSjVFc3FCNUg1bERYTndOb2VjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEtNDI4NDU4Njc5Y2U0 LzEvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEXmawMA0G CSqGSIb3DQEBCwUAA4IBAQAdYyTwSSiwUnmu3Q3LGmf8sgV4GuvVPbn9+Rq3keqC Gb5+qATy2KAWNrCtzFVAJOSGSXTw7v+obprrQgkfiNOKnKP+Lj8DJbi85V4/HO54 nejKRTLHBmZPdytpDwXylqwOPz+kmHvdXP6RqqotDhFYnlYJfIQwPYLkLRRC4AoX pJvisXqvghVu8lXzwn5cltybkIgyrfqFgeqottR5gMFu4+wNf6O5l4nRtdodiO1C jEJJ1ebgy7THMlGRHiWeTYGNla4Vey6OP++2wydF6aFzRKTYFSJiBZqSvI2qcpn7 NHAn1UfAEOiHiZIBkfZ49UjLfYUYuM0X502DJgwBInxV -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:14 2026 by rpki-client