This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/d-N2YiUYpoOLPomAp2JVyicVc40.roa File: d-N2YiUYpoOLPomAp2JVyicVc40.roa (raw, json) Hash identifier: zETEJQC7tB8lRhNeIGpvA+FfF5ncGBNLatmPmvMsTNQ= Subject key identifier: 77:E3:76:62:25:18:A6:83:8B:3E:89:80:A7:62:55:CA:27:15:73:8D Certificate issuer: /CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498 Certificate serial: 019B76EAF0F204DAD5620F8BA0D1227794E3 Authority key identifier: 60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/d-N2YiUYpoOLPomAp2JVyicVc40.roa Signing time: Thu 01 Jan 2026 00:17:47 +0000 ROA not before: Thu 01 Jan 2026 00:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12779 IP address blocks: 5.104.26.0/23 maxlen: 23 5.104.28.0/23 maxlen: 23 5.104.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.crl rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:f0:f2:04:da:d5:62:0f:8b:a0:d1:22:77:94:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498 Validity Not Before: Jan 1 00:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=77e376622518a6838b3e8980a76255ca2715738d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:29:1b:5a:a4:2e:c2:4f:5f:ac:aa:ed:3a:b6: fa:30:52:24:ef:26:ed:f2:63:af:d7:2e:96:96:da: 99:66:29:16:26:48:ac:b6:41:3e:79:3f:f1:33:86: 71:16:33:4d:54:ed:23:1c:70:d0:70:72:b9:75:8d: e9:f6:8f:f0:b7:dc:47:02:13:19:0d:9d:eb:83:9f: cf:81:84:b2:d8:b6:cb:9e:5a:6d:16:b3:bd:b1:52: 41:84:88:65:c4:5b:6c:32:2c:33:1e:58:1e:72:42: 43:e3:8b:0a:ec:93:0d:b8:f8:0d:46:da:c5:74:e6: 63:1e:43:21:a1:fb:2e:42:84:ce:27:ca:73:8c:a8: 8a:94:1d:d6:d1:0c:7e:62:8a:e0:b4:c1:d4:fc:84: 3f:8a:fb:7c:a0:39:ba:03:8f:41:1e:47:7b:d2:57: 9c:12:5f:a8:e0:d2:7c:c7:aa:cb:52:43:b6:37:1e: e5:e5:da:8e:f4:63:8f:fa:28:58:0f:b5:9d:23:d0: 1b:52:36:b5:ab:4b:72:18:27:d8:ec:1f:c5:ce:a5: 8f:96:1d:e4:36:2f:e6:bf:24:d8:6b:64:24:e9:bd: 61:29:0c:25:c5:76:d5:87:64:c7:fe:c7:06:dc:b5: 98:83:f5:8c:e1:35:2d:08:36:c0:0a:a2:15:3e:a5: 0e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:E3:76:62:25:18:A6:83:8B:3E:89:80:A7:62:55:CA:27:15:73:8D X509v3 Authority Key Identifier: keyid:60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/d-N2YiUYpoOLPomAp2JVyicVc40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.104.26.0-5.104.30.255 Signature Algorithm: sha256WithRSAEncryption 58:5c:bc:43:6b:06:d2:0f:69:56:c3:b8:db:3c:ed:12:12:2b: a5:9e:f1:eb:e0:55:b2:66:57:44:2d:de:4e:ef:06:a4:05:93: 6d:4e:22:7f:8a:31:56:52:3b:e3:57:00:b7:3c:49:67:45:7f: 7e:62:23:e0:82:c6:75:5e:d2:21:c0:d5:64:6b:cb:af:38:d7: 1c:39:c2:a1:c1:5b:68:1d:13:bb:ef:6f:0a:59:2c:61:1d:6a: 4a:cf:0f:ec:60:f8:88:82:a3:b0:13:9f:9c:02:12:ce:48:d6: 40:0d:78:b3:e7:69:f1:8b:54:59:8c:1d:66:2e:ba:6f:f6:cb: ca:6c:29:1f:0d:14:e0:15:dd:5f:96:e1:57:ea:3b:e4:d8:2f: 02:89:33:cf:3c:61:31:7a:f3:f1:bd:99:90:58:3d:ea:2a:07: 6c:91:72:1b:10:eb:73:2c:da:7e:d8:49:4f:7f:33:ab:64:b6: cd:75:80:9b:c9:f0:d5:4e:5d:06:cc:7d:b4:af:33:83:be:e9: 3d:d0:9a:0c:81:2a:64:25:f3:3c:09:08:eb:04:00:93:68:54: db:97:d6:04:8c:b5:be:5f:b9:b4:0e:a3:fd:ab:6e:08:4a:7c: 5e:8f:24:f1:e5:34:50:35:7e:8c:62:d4:9b:90:c2:3d:d0:20: 14:7e:2f:ed -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt26vDyBNrVYg+LoNEid5TjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwOGU2YTZhNTQwMTdkZDNiOWIyY2NlMzVmZDVhOWE3ZjJh NDU0OTgwHhcNMjYwMTAxMDAxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3N2UzNzY2MjI1MThhNjgzOGIzZTg5ODBhNzYyNTVjYTI3MTU3MzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSkbWqQuwk9frKrtOrb6MFIk7ybt 8mOv1y6WltqZZikWJkistkE+eT/xM4ZxFjNNVO0jHHDQcHK5dY3p9o/wt9xHAhMZ DZ3rg5/PgYSy2LbLnlptFrO9sVJBhIhlxFtsMiwzHlgeckJD44sK7JMNuPgNRtrF dOZjHkMhofsuQoTOJ8pzjKiKlB3W0Qx+YorgtMHU/IQ/ivt8oDm6A49BHkd70lec El+o4NJ8x6rLUkO2Nx7l5dqO9GOP+ihYD7WdI9AbUja1q0tyGCfY7B/FzqWPlh3k Ni/mvyTYa2Qk6b1hKQwlxXbVh2TH/scG3LWYg/WM4TUtCDbACqIVPqUOOQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFHfjdmIlGKaDiz6JgKdiVconFXONMB8GA1UdIwQY MBaAFGCOampUAX3TubLM41/VqafypFSYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUk1cWFsUUJmZE81c3N6alg5V3BwX0trVkpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9jMzMyOGUtMWNlOS00ZTM4LTllY2Et MjMyNDk3N2M5MzkzLzEvZC1OMllpVVlwb09MUG9tQXAySlZ5aWNWYzQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9jMzMyOGUtMWNlOS00ZTM4LTllY2EtMjMyNDk3N2M5Mzkz LzEvWUk1cWFsUUJmZE81c3N6alg5V3BwX0trVkpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAEFaBoD BAAFaB4wDQYJKoZIhvcNAQELBQADggEBAFhcvENrBtIPaVbDuNs87RISK6We8evg VbJmV0Qt3k7vBqQFk21OIn+KMVZSO+NXALc8SWdFf35iI+CCxnVe0iHA1WRry684 1xw5wqHBW2gdE7vvbwpZLGEdakrPD+xg+IiCo7ATn5wCEs5I1kANeLPnafGLVFmM HWYuum/2y8psKR8NFOAV3V+W4VfqO+TYLwKJM888YTF68/G9mZBYPeoqB2yRchsQ 63Ms2n7YSU9/M6tkts11gJvJ8NVOXQbMfbSvM4O+6T3QmgyBKmQl8zwJCOsEAJNo VNuX1gSMtb5fubQOo/2rbghKfF6PJPHlNFA1foxi1JuQwj3QIBR+L+0= -----END CERTIFICATE-----Generated at Mon Feb 2 08:06:40 2026 by rpki-client