This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/54bb50-01be-4ec6-9418-eee7fae5c037/1/BR3wphovR_RPvqDUE27elOUu4-g.roa File: BR3wphovR_RPvqDUE27elOUu4-g.roa (raw, json) Hash identifier: /d+bM8z6dvoIJGOJEV4LkgmXfHsdFv9RsRrj+TP+634= Subject key identifier: 05:1D:F0:A6:1A:2F:47:F4:4F:BE:A0:D4:13:6E:DE:94:E5:2E:E3:E8 Certificate issuer: /CN=828672cd736b57e1e3dfc7dd736f3bd8a616ba81 Certificate serial: 019B7C12C71CFD3FBCCCEC756D3E4D6695A5 Authority key identifier: 82:86:72:CD:73:6B:57:E1:E3:DF:C7:DD:73:6F:3B:D8:A6:16:BA:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/goZyzXNrV-Hj38fdc2872KYWuoE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/54bb50-01be-4ec6-9418-eee7fae5c037/1/BR3wphovR_RPvqDUE27elOUu4-g.roa Signing time: Fri 02 Jan 2026 00:19:23 +0000 ROA not before: Fri 02 Jan 2026 00:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56561 IP address blocks: 5.39.204.0/22 maxlen: 22 5.39.204.0/23 maxlen: 23 5.39.204.0/24 maxlen: 24 5.39.205.0/24 maxlen: 24 5.39.206.0/23 maxlen: 23 5.39.206.0/24 maxlen: 24 5.39.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/54bb50-01be-4ec6-9418-eee7fae5c037/1/goZyzXNrV-Hj38fdc2872KYWuoE.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/54bb50-01be-4ec6-9418-eee7fae5c037/1/goZyzXNrV-Hj38fdc2872KYWuoE.mft rsync://rpki.ripe.net/repository/DEFAULT/goZyzXNrV-Hj38fdc2872KYWuoE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:c7:1c:fd:3f:bc:cc:ec:75:6d:3e:4d:66:95:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=828672cd736b57e1e3dfc7dd736f3bd8a616ba81 Validity Not Before: Jan 2 00:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=051df0a61a2f47f44fbea0d4136ede94e52ee3e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5d:3a:82:8a:7f:47:0c:d4:df:12:a3:8a:66: 80:cc:7c:df:31:f0:b2:42:62:47:fe:c9:41:dc:31: 12:11:ee:0d:b7:70:b8:33:a8:0c:9b:bb:cc:f2:3f: c3:57:ed:38:a4:fc:d1:71:50:62:f8:a8:ef:be:df: e4:2d:a9:69:cc:fc:ca:3e:fd:01:51:88:10:73:79: 9c:42:ff:57:f6:84:96:b8:a3:a4:d3:0c:41:40:4d: 4b:fc:fa:8d:0f:6b:af:ea:15:90:3e:24:60:33:33: 21:af:59:f0:fe:c5:f0:e4:90:ae:2d:f0:96:20:a4: 9b:ba:d7:4c:31:9a:94:1f:a3:d4:98:94:24:25:47: 79:bd:1c:5e:97:30:cf:92:c0:24:49:10:6b:8d:bf: e2:b4:92:2e:f7:d0:0f:76:7b:ec:38:b2:fe:87:a9: 1a:8f:cc:31:17:e9:a1:3e:3d:5e:d2:fc:db:3d:83: 69:c4:d3:17:8d:79:db:6d:7a:f4:52:c0:bd:09:24: e6:f2:29:86:08:73:37:3b:e3:57:1d:4a:3c:fa:ac: 05:02:50:b6:cc:71:cb:ab:92:34:68:e7:cb:ea:31: c4:ec:1c:5c:05:b4:6d:c2:9b:a0:60:47:8a:e1:e2: 07:0e:5b:4a:f2:8e:c9:19:e9:8d:9e:55:95:b0:b3: 89:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:1D:F0:A6:1A:2F:47:F4:4F:BE:A0:D4:13:6E:DE:94:E5:2E:E3:E8 X509v3 Authority Key Identifier: keyid:82:86:72:CD:73:6B:57:E1:E3:DF:C7:DD:73:6F:3B:D8:A6:16:BA:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/goZyzXNrV-Hj38fdc2872KYWuoE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/54bb50-01be-4ec6-9418-eee7fae5c037/1/BR3wphovR_RPvqDUE27elOUu4-g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/54bb50-01be-4ec6-9418-eee7fae5c037/1/goZyzXNrV-Hj38fdc2872KYWuoE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.39.204.0/22 Signature Algorithm: sha256WithRSAEncryption 3f:83:e5:f4:18:6e:a8:9c:ea:97:05:12:25:a1:fd:8f:99:92: f4:b5:01:03:24:f1:ca:62:22:7b:64:e7:c1:8d:5e:7b:a6:5e: bd:ab:8f:f1:f6:ad:71:2a:77:ae:09:a4:25:d0:9e:5c:d1:6e: 3b:2c:e1:ba:28:d8:0e:7f:41:b6:f7:63:c9:7f:6d:54:8c:7a: 8d:f7:89:b3:ac:3c:e7:a4:cd:77:9a:04:50:ff:96:88:c2:58: 7b:de:ce:c3:8a:2c:ab:02:e9:88:79:fa:05:c5:c6:3b:09:ec: 49:40:cd:1e:52:90:2a:82:23:12:50:47:6f:e8:cf:6c:18:39: 0e:7b:58:9c:39:62:19:db:97:67:fc:bb:12:80:89:f9:0a:9c: 5e:c4:8f:cf:0a:d3:50:f3:7e:bc:f2:2e:d8:2c:e2:dd:8f:9b: 43:ad:33:ee:20:95:55:52:b7:c3:ff:67:11:f0:e3:87:79:48: f6:fd:9f:d3:df:9c:44:cb:ce:1b:62:f6:30:28:04:07:22:9d: 04:db:28:21:89:09:c2:80:03:99:b5:67:0e:ac:57:0b:c2:48: ef:01:82:c1:3d:a7:a2:aa:ff:67:dc:0d:7c:5d:86:84:ec:f8: fe:2f:7b:84:af:35:22:d1:c1:f6:e6:a1:93:d6:3e:ea:05:e1: b9:64:e5:0e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Escc/T+8zOx1bT5NZpWlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyODY3MmNkNzM2YjU3ZTFlM2RmYzdkZDczNmYzYmQ4YTYx NmJhODEwHhcNMjYwMTAyMDAxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTFkZjBhNjFhMmY0N2Y0NGZiZWEwZDQxMzZlZGU5NGU1MmVlM2U4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxV06gop/RwzU3xKjimaAzHzfMfCy QmJH/slB3DESEe4Nt3C4M6gMm7vM8j/DV+04pPzRcVBi+Kjvvt/kLalpzPzKPv0B UYgQc3mcQv9X9oSWuKOk0wxBQE1L/PqND2uv6hWQPiRgMzMhr1nw/sXw5JCuLfCW IKSbutdMMZqUH6PUmJQkJUd5vRxelzDPksAkSRBrjb/itJIu99APdnvsOLL+h6ka j8wxF+mhPj1e0vzbPYNpxNMXjXnbbXr0UsC9CSTm8imGCHM3O+NXHUo8+qwFAlC2 zHHLq5I0aOfL6jHE7BxcBbRtwpugYEeK4eIHDltK8o7JGemNnlWVsLOJ4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAUd8KYaL0f0T76g1BNu3pTlLuPoMB8GA1UdIwQY MBaAFIKGcs1za1fh49/H3XNvO9imFrqBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ29aeXpYTnJWLUhqMzhmZGMyODcyS1lXdW9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC81NGJiNTAtMDFiZS00ZWM2LTk0MTgt ZWVlN2ZhZTVjMDM3LzEvQlIzd3Bob3ZSX1JQdnFEVUUyN2VsT1V1NC1nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC81NGJiNTAtMDFiZS00ZWM2LTk0MTgtZWVlN2ZhZTVjMDM3 LzEvZ29aeXpYTnJWLUhqMzhmZGMyODcyS1lXdW9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBSfMMA0G CSqGSIb3DQEBCwUAA4IBAQA/g+X0GG6onOqXBRIlof2PmZL0tQEDJPHKYiJ7ZOfB jV57pl69q4/x9q1xKneuCaQl0J5c0W47LOG6KNgOf0G292PJf21UjHqN94mzrDzn pM13mgRQ/5aIwlh73s7DiiyrAumIefoFxcY7CexJQM0eUpAqgiMSUEdv6M9sGDkO e1icOWIZ25dn/LsSgIn5CpxexI/PCtNQ83688i7YLOLdj5tDrTPuIJVVUrfD/2cR 8OOHeUj2/Z/T35xEy84bYvYwKAQHIp0E2yghiQnCgAOZtWcOrFcLwkjvAYLBPaei qv9n3A18XYaE7Pj+L3uErzUi0cH25qGT1j7qBeG5ZOUO -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:29 2026 by rpki-client