This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/60277c-d037-485c-a4b0-db3993cc5125/1/5trZT8H8b8qEyleVSfGYnOWywrY.roa File: 5trZT8H8b8qEyleVSfGYnOWywrY.roa (raw, json) Hash identifier: eOu11Ek0FyJBzZ2HRO2uveVNcG5F2I/J6cQ5U17P66g= Subject key identifier: E6:DA:D9:4F:C1:FC:6F:CA:84:CA:57:95:49:F1:98:9C:E5:B2:C2:B6 Certificate issuer: /CN=bcfee2ff686de889c3f58df1d9f5e2b78d641de4 Certificate serial: 019B7758944562AB3FFB0227C70F12F78AFE Authority key identifier: BC:FE:E2:FF:68:6D:E8:89:C3:F5:8D:F1:D9:F5:E2:B7:8D:64:1D:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP7i_2ht6InD9Y3x2fXit41kHeQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/60277c-d037-485c-a4b0-db3993cc5125/1/5trZT8H8b8qEyleVSfGYnOWywrY.roa Signing time: Thu 01 Jan 2026 02:17:32 +0000 ROA not before: Thu 01 Jan 2026 02:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51428 IP address blocks: 31.134.32.0/20 maxlen: 20 178.212.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/60277c-d037-485c-a4b0-db3993cc5125/1/vP7i_2ht6InD9Y3x2fXit41kHeQ.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/60277c-d037-485c-a4b0-db3993cc5125/1/vP7i_2ht6InD9Y3x2fXit41kHeQ.mft rsync://rpki.ripe.net/repository/DEFAULT/vP7i_2ht6InD9Y3x2fXit41kHeQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:94:45:62:ab:3f:fb:02:27:c7:0f:12:f7:8a:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcfee2ff686de889c3f58df1d9f5e2b78d641de4 Validity Not Before: Jan 1 02:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e6dad94fc1fc6fca84ca579549f1989ce5b2c2b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:16:f3:01:ba:79:bd:35:51:20:5a:4e:ba:58: bb:64:79:43:75:80:06:38:51:76:13:5c:aa:0d:ad: 38:c1:3a:77:20:02:5c:63:79:7b:81:7e:b3:ce:ab: d5:66:fb:2c:09:32:b5:35:03:a9:ab:a3:7b:b9:17: ed:56:e2:c5:69:9b:d2:7f:54:c3:99:6a:81:b0:9e: 06:73:3f:e8:0a:61:8f:d6:50:f0:f4:9e:0b:f4:37: 08:bb:35:bd:94:41:65:1c:53:0f:16:4c:ac:79:6d: 3d:c2:49:26:c1:a0:a7:c8:ae:87:26:c5:dc:2c:ea: a2:46:7b:ef:7f:7b:52:01:3c:98:46:c9:12:e1:39: 7b:be:78:b0:ba:e6:85:47:b7:8c:37:99:85:e6:da: 18:40:0f:46:b1:17:cb:bf:30:e8:2c:57:ba:24:93: 91:28:30:51:d2:19:e7:10:19:e1:d1:d6:4a:24:c1: 36:97:64:3d:81:33:40:8c:94:e5:87:6d:6f:11:96: e5:e2:c1:c9:f8:22:3e:40:97:05:97:db:2a:43:2c: 83:1c:18:40:12:61:09:0a:20:94:3c:49:34:27:8d: 96:16:a9:c1:04:1c:ec:c8:d2:ba:29:0a:2c:07:90: c6:7b:d2:53:38:50:c3:cb:44:5d:0b:aa:da:89:67: bb:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:DA:D9:4F:C1:FC:6F:CA:84:CA:57:95:49:F1:98:9C:E5:B2:C2:B6 X509v3 Authority Key Identifier: keyid:BC:FE:E2:FF:68:6D:E8:89:C3:F5:8D:F1:D9:F5:E2:B7:8D:64:1D:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP7i_2ht6InD9Y3x2fXit41kHeQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/60277c-d037-485c-a4b0-db3993cc5125/1/5trZT8H8b8qEyleVSfGYnOWywrY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/60277c-d037-485c-a4b0-db3993cc5125/1/vP7i_2ht6InD9Y3x2fXit41kHeQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.134.32.0/20 178.212.176.0/21 Signature Algorithm: sha256WithRSAEncryption 76:4e:64:ab:a7:ef:50:93:2e:19:be:4d:01:7b:2a:2b:a7:12: f3:ca:ee:f9:71:4e:cd:59:de:47:db:b8:c4:57:3a:d2:85:9b: e0:a6:0d:94:01:0a:93:34:30:67:9a:d6:69:c4:45:a5:4c:56: f0:5b:e9:df:28:1c:f2:09:6b:4f:7a:ad:20:18:89:0f:ca:f6: 9a:30:63:05:56:b9:a3:8d:a4:d6:df:82:98:e2:48:56:30:45: de:bf:ed:0b:5d:f5:f9:92:61:8d:f2:d6:af:eb:e0:48:3d:57: 82:93:34:ea:3b:ca:4c:09:15:cf:f3:ae:c6:ed:07:3c:e9:3d: 75:05:7c:fe:a4:4d:67:bf:48:89:6e:b3:b4:a9:0e:29:8c:5f: 21:22:b9:77:34:f2:c0:97:b9:c3:8a:27:0a:80:09:5b:2c:80: 27:a3:22:8c:dd:0c:8a:4e:bc:37:53:72:56:c2:67:58:36:b8: fe:1f:cb:25:9f:16:37:c4:5f:ea:da:bc:ec:29:d9:c8:9c:81: 93:34:86:94:43:8b:ba:fe:61:8a:36:9e:a2:36:cd:9f:fb:87: ae:7d:7d:cb:43:c0:1f:02:1e:57:43:d3:a1:85:3a:8a:01:7a: 9c:65:b1:0f:b7:c4:6f:e5:0f:ec:64:61:46:0f:13:88:e1:8f: 4c:83:8e:01 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3WJRFYqs/+wInxw8S94r+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjZmVlMmZmNjg2ZGU4ODljM2Y1OGRmMWQ5ZjVlMmI3OGQ2 NDFkZTQwHhcNMjYwMTAxMDIxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNmRhZDk0ZmMxZmM2ZmNhODRjYTU3OTU0OWYxOTg5Y2U1YjJjMmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRbzAbp5vTVRIFpOuli7ZHlDdYAG OFF2E1yqDa04wTp3IAJcY3l7gX6zzqvVZvssCTK1NQOpq6N7uRftVuLFaZvSf1TD mWqBsJ4Gcz/oCmGP1lDw9J4L9DcIuzW9lEFlHFMPFkyseW09wkkmwaCnyK6HJsXc LOqiRnvvf3tSATyYRskS4Tl7vniwuuaFR7eMN5mF5toYQA9GsRfLvzDoLFe6JJOR KDBR0hnnEBnh0dZKJME2l2Q9gTNAjJTlh21vEZbl4sHJ+CI+QJcFl9sqQyyDHBhA EmEJCiCUPEk0J42WFqnBBBzsyNK6KQosB5DGe9JTOFDDy0RdC6raiWe7GQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOba2U/B/G/KhMpXlUnxmJzlssK2MB8GA1UdIwQY MBaAFLz+4v9obeiJw/WN8dn14reNZB3kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlA3aV8yaHQ2SW5EOVkzeDJmWGl0NDFrSGVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi82MDI3N2MtZDAzNy00ODVjLWE0YjAt ZGIzOTkzY2M1MTI1LzEvNXRyWlQ4SDhiOHFFeWxlVlNmR1luT1d5d3JZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi82MDI3N2MtZDAzNy00ODVjLWE0YjAtZGIzOTkzY2M1MTI1 LzEvdlA3aV8yaHQ2SW5EOVkzeDJmWGl0NDFrSGVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEH4YgAwQD stSwMA0GCSqGSIb3DQEBCwUAA4IBAQB2TmSrp+9Qky4Zvk0BeyorpxLzyu75cU7N Wd5H27jEVzrShZvgpg2UAQqTNDBnmtZpxEWlTFbwW+nfKBzyCWtPeq0gGIkPyvaa MGMFVrmjjaTW34KY4khWMEXev+0LXfX5kmGN8tav6+BIPVeCkzTqO8pMCRXP867G 7Qc86T11BXz+pE1nv0iJbrO0qQ4pjF8hIrl3NPLAl7nDiicKgAlbLIAnoyKM3QyK Trw3U3JWwmdYNrj+H8slnxY3xF/q2rzsKdnInIGTNIaUQ4u6/mGKNp6iNs2f+4eu fX3LQ8AfAh5XQ9OhhTqKAXqcZbEPt8Rv5Q/sZGFGDxOI4Y9Mg44B -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:50 2026 by rpki-client