This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/t5Tt0MsxBhyA5HT4Tcnw_wnJaDY.roa File: t5Tt0MsxBhyA5HT4Tcnw_wnJaDY.roa (raw, json) Hash identifier: zUmpmG0ctAoP0opPEvYZhEKtbqpqODKxe/NuJgegU3E= Subject key identifier: B7:94:ED:D0:CB:31:06:1C:80:E4:74:F8:4D:C9:F0:FF:09:C9:68:36 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CD9CAE6E780C72AC6EE0F399C1B58 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/t5Tt0MsxBhyA5HT4Tcnw_wnJaDY.roa Signing time: Fri 02 Jan 2026 06:19:55 +0000 ROA not before: Fri 02 Jan 2026 06:19:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198178 IP address blocks: 109.61.110.0/24 maxlen: 24 146.19.102.0/24 maxlen: 24 185.238.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:d9:ca:e6:e7:80:c7:2a:c6:ee:0f:39:9c:1b:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b794edd0cb31061c80e474f84dc9f0ff09c96836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7d:42:46:de:92:27:c8:b5:41:88:69:a5:3a: a6:49:d1:6a:8e:ce:6c:fd:34:6f:44:30:4d:b1:b1: 0d:b6:82:7c:85:d3:bb:a5:b6:36:36:7f:96:29:cd: 47:93:f6:20:0c:55:12:aa:59:5e:20:5e:a2:79:c2: 09:5f:d8:12:0a:fd:07:1b:79:4e:49:3a:b3:14:7b: 8b:48:00:0d:bc:de:e1:5f:a8:45:b8:0f:f6:a4:e8: bc:9d:93:41:af:6d:e9:ff:84:d3:3c:87:b2:ec:aa: 71:aa:f8:d8:dc:a4:4a:15:4d:05:0a:f8:db:31:76: ff:79:ef:65:48:59:b3:b6:69:4c:6c:6c:64:4b:db: ea:96:98:c1:37:0f:55:46:4b:33:94:f1:03:3b:af: e4:44:bc:a5:a7:f1:82:11:01:39:57:8b:20:75:2b: 5a:b8:03:35:bf:ca:65:a9:73:9c:f4:7a:83:cc:26: 49:a9:ac:d1:2e:0f:cc:c4:f8:e9:d1:79:fa:91:c9: c8:c4:9a:7d:4c:01:14:32:e1:8e:b3:14:f3:23:f1: d3:7c:72:2c:c5:28:3a:cf:7a:d7:54:22:15:82:5d: 8a:26:9f:32:72:78:51:12:96:14:32:d6:1f:7f:a4: ae:02:0d:78:d3:62:d3:1d:7e:0f:f7:d1:6d:f3:13: ae:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:94:ED:D0:CB:31:06:1C:80:E4:74:F8:4D:C9:F0:FF:09:C9:68:36 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/t5Tt0MsxBhyA5HT4Tcnw_wnJaDY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.61.110.0/24 146.19.102.0/24 185.238.190.0/24 Signature Algorithm: sha256WithRSAEncryption 35:53:2c:dd:e2:16:32:59:c5:56:e7:36:33:a0:49:c5:ca:f3: 68:f3:d1:e6:88:65:38:86:14:56:60:da:46:5c:d2:47:d9:28: 46:33:1a:9d:0e:31:2b:c2:a8:72:8d:d5:99:ec:3f:ca:1e:c6: 8a:90:38:15:2d:e3:98:b9:15:1f:b4:59:0e:34:0a:6c:55:89: 78:be:af:bf:6b:52:04:91:55:d2:86:70:74:62:6f:c7:db:5c: 51:7e:2f:99:ce:45:65:84:da:64:5a:47:47:5c:5a:03:9c:91: c7:3b:c7:9e:21:e9:43:e0:9f:3e:29:9d:00:58:e3:f3:e0:f7: 75:03:76:76:c7:90:db:c7:d3:29:42:4c:60:f2:59:01:e6:18: 60:77:ac:e7:e7:5c:df:05:36:5e:09:66:e9:b5:87:ae:9a:bc: d4:92:e5:a2:6b:1c:3b:b5:30:64:08:8a:55:a0:b2:be:8b:95: e5:70:6a:a4:84:13:0e:53:2d:04:2a:fd:d9:35:20:aa:a9:3d: f2:9d:04:9a:da:ff:44:99:6e:02:3a:eb:7f:b8:2b:84:78:60: 3d:4c:3e:10:db:91:c3:89:1c:21:d2:27:69:6c:fe:3b:46:b5: 62:78:4a:91:a5:f1:ae:66:2e:e2:df:81:7f:db:71:9b:50:2b: 6d:6b:59:dd -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XNnK5ueAxyrG7g85nBtYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzk0ZWRkMGNiMzEwNjFjODBlNDc0Zjg0ZGM5ZjBmZjA5Yzk2ODM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsX1CRt6SJ8i1QYhppTqmSdFqjs5s /TRvRDBNsbENtoJ8hdO7pbY2Nn+WKc1Hk/YgDFUSqlleIF6iecIJX9gSCv0HG3lO STqzFHuLSAANvN7hX6hFuA/2pOi8nZNBr23p/4TTPIey7KpxqvjY3KRKFU0FCvjb MXb/ee9lSFmztmlMbGxkS9vqlpjBNw9VRkszlPEDO6/kRLylp/GCEQE5V4sgdSta uAM1v8plqXOc9HqDzCZJqazRLg/MxPjp0Xn6kcnIxJp9TAEUMuGOsxTzI/HTfHIs xSg6z3rXVCIVgl2KJp8ycnhREpYUMtYff6SuAg1402LTHX4P99Ft8xOuJQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFLeU7dDLMQYcgOR0+E3J8P8JyWg2MB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvdDVUdDBNc3hCaHlBNUhUNFRjbndfd25KYURZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAbT1uAwQA khNmAwQAue6+MA0GCSqGSIb3DQEBCwUAA4IBAQA1Uyzd4hYyWcVW5zYzoEnFyvNo 89HmiGU4hhRWYNpGXNJH2ShGMxqdDjErwqhyjdWZ7D/KHsaKkDgVLeOYuRUftFkO NApsVYl4vq+/a1IEkVXShnB0Ym/H21xRfi+ZzkVlhNpkWkdHXFoDnJHHO8eeIelD 4J8+KZ0AWOPz4Pd1A3Z2x5Dbx9MpQkxg8lkB5hhgd6zn51zfBTZeCWbptYeumrzU kuWiaxw7tTBkCIpVoLK+i5XlcGqkhBMOUy0EKv3ZNSCqqT3ynQSa2v9EmW4COut/ uCuEeGA9TD4Q25HDiRwh0idpbP47RrVieEqRpfGuZi7i34F/23GbUCtta1nd -----END CERTIFICATE-----Generated at Fri Jan 9 13:12:03 2026 by rpki-client