This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a8bda7-2450-4ea5-827c-0f7589bc0ce0/1/5elOGKL8W_ufOBLRC6OIFTVR06A.roa File: 5elOGKL8W_ufOBLRC6OIFTVR06A.roa (raw, json) Hash identifier: SQl7NbHxEwq3Bs2wpYv3mo1sDdx/MH354NYkReyx8KQ= Subject key identifier: E5:E9:4E:18:A2:FC:5B:FB:9F:38:12:D1:0B:A3:88:15:35:51:D3:A0 Certificate issuer: /CN=41b0355793511416f14705b5e69575e0912031c1 Certificate serial: 019B0DA9A9FE6E00E9CE364789D8C7FBA2FF Authority key identifier: 41:B0:35:57:93:51:14:16:F1:47:05:B5:E6:95:75:E0:91:20:31:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbA1V5NRFBbxRwW15pV14JEgMcE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/a8bda7-2450-4ea5-827c-0f7589bc0ce0/1/5elOGKL8W_ufOBLRC6OIFTVR06A.roa Signing time: Thu 11 Dec 2025 13:46:21 +0000 ROA not before: Thu 11 Dec 2025 13:46:21 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211871 IP address blocks: 109.104.120.0/24 maxlen: 24 178.251.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/a8bda7-2450-4ea5-827c-0f7589bc0ce0/1/QbA1V5NRFBbxRwW15pV14JEgMcE.crl rsync://rpki.ripe.net/repository/DEFAULT/53/a8bda7-2450-4ea5-827c-0f7589bc0ce0/1/QbA1V5NRFBbxRwW15pV14JEgMcE.mft rsync://rpki.ripe.net/repository/DEFAULT/QbA1V5NRFBbxRwW15pV14JEgMcE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 07:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:a9:a9:fe:6e:00:e9:ce:36:47:89:d8:c7:fb:a2:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41b0355793511416f14705b5e69575e0912031c1 Validity Not Before: Dec 11 13:46:21 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e5e94e18a2fc5bfb9f3812d10ba388153551d3a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b8:cc:0e:85:0c:da:f7:67:7b:36:d1:42:86: a7:03:f0:bb:29:29:a9:54:d1:ae:9f:ce:83:22:1f: 68:4b:c3:dd:4b:32:88:68:03:28:95:ae:78:68:e3: 51:79:67:6e:81:3f:a9:32:90:08:95:eb:9b:17:95: 7f:ce:a7:fb:19:8d:66:39:a9:75:da:f5:7b:b6:67: 19:54:82:d1:10:6a:55:45:bf:ae:77:97:5b:77:6a: 53:5e:4b:58:31:86:2c:c7:21:c3:02:77:32:dd:0e: eb:eb:98:91:40:13:3b:04:3c:0e:4c:74:72:ea:2c: 83:fd:bb:35:04:b5:44:2c:33:b0:76:74:3d:80:b0: 0f:ea:92:df:59:18:9b:e8:f9:4f:16:4b:3a:cb:f9: 1a:8b:c2:29:f3:a4:c1:58:1d:11:da:3f:eb:7d:58: 7a:23:7b:bd:05:aa:7c:f7:31:df:04:71:31:e9:b7: ed:81:8c:13:46:1f:fe:bf:b4:b9:00:71:20:c9:01: 07:70:d7:17:7f:51:c2:3f:4e:a6:03:24:5b:4b:61: 36:90:e0:3f:db:cf:88:d2:4d:c1:06:6a:a5:8c:17: a5:61:a8:73:a2:62:38:b5:f4:48:f2:86:7f:e1:21: 14:f9:60:2e:eb:35:b6:0c:34:8c:5a:8f:cf:2a:72: da:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:E9:4E:18:A2:FC:5B:FB:9F:38:12:D1:0B:A3:88:15:35:51:D3:A0 X509v3 Authority Key Identifier: keyid:41:B0:35:57:93:51:14:16:F1:47:05:B5:E6:95:75:E0:91:20:31:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbA1V5NRFBbxRwW15pV14JEgMcE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a8bda7-2450-4ea5-827c-0f7589bc0ce0/1/5elOGKL8W_ufOBLRC6OIFTVR06A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a8bda7-2450-4ea5-827c-0f7589bc0ce0/1/QbA1V5NRFBbxRwW15pV14JEgMcE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.104.120.0/24 178.251.238.0/24 Signature Algorithm: sha256WithRSAEncryption 21:14:1f:d4:ea:87:0d:aa:f8:59:ef:8f:27:3d:50:1e:3a:64: 0d:53:98:fe:33:ec:e9:e0:41:94:55:8d:c9:e0:20:37:2b:40: cc:fd:98:35:f3:9a:b8:5d:10:8e:54:99:9d:15:f4:fd:45:c0: ec:5c:7c:7d:69:79:86:28:4e:43:72:e8:9f:f1:5d:24:49:74: 95:2d:81:7e:b9:81:aa:59:f5:e8:b0:49:1f:d2:97:e2:ad:d3: 20:83:4e:ca:35:c6:0a:4d:d8:51:6c:98:83:6a:98:0b:7f:f1: 7c:39:89:f8:d5:a5:84:04:02:13:e5:c7:c5:26:20:44:c2:e2: cb:0f:c0:bb:fa:2b:e4:90:3c:15:67:bc:0b:b5:a0:b7:98:7b: b0:27:9b:86:2a:b6:6b:c3:c1:16:46:7d:0d:e9:74:de:7f:a3: 1b:dd:c8:ee:c4:e2:e3:29:0a:02:b9:ce:14:bf:ad:93:10:81: d3:38:1b:aa:26:3c:ce:42:9c:15:9e:0d:e9:f7:df:f5:22:06: 73:f8:7d:e7:08:e4:be:f6:f1:c5:65:1d:99:02:f3:78:fd:41: 33:bb:33:9f:d7:3a:44:09:40:bc:15:33:fb:17:f2:6d:ec:2a: 6b:76:f4:24:a8:1e:8a:82:bf:0b:b4:39:8d:50:ff:10:b1:79: a3:be:4e:53 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsNqan+bgDpzjZHidjH+6L/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxYjAzNTU3OTM1MTE0MTZmMTQ3MDViNWU2OTU3NWUwOTEy MDMxYzEwHhcNMjUxMjExMTM0NjIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNWU5NGUxOGEyZmM1YmZiOWYzODEyZDEwYmEzODgxNTM1NTFkM2EwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7jMDoUM2vdnezbRQoanA/C7KSmp VNGun86DIh9oS8PdSzKIaAMola54aONReWdugT+pMpAIleubF5V/zqf7GY1mOal1 2vV7tmcZVILREGpVRb+ud5dbd2pTXktYMYYsxyHDAncy3Q7r65iRQBM7BDwOTHRy 6iyD/bs1BLVELDOwdnQ9gLAP6pLfWRib6PlPFks6y/kai8Ip86TBWB0R2j/rfVh6 I3u9Bap89zHfBHEx6bftgYwTRh/+v7S5AHEgyQEHcNcXf1HCP06mAyRbS2E2kOA/ 28+I0k3BBmqljBelYahzomI4tfRI8oZ/4SEU+WAu6zW2DDSMWo/PKnLajwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOXpThii/Fv7nzgS0QujiBU1UdOgMB8GA1UdIwQY MBaAFEGwNVeTURQW8UcFteaVdeCRIDHBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWJBMVY1TlJGQmJ4UndXMTVwVjE0SkVnTWNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9hOGJkYTctMjQ1MC00ZWE1LTgyN2Mt MGY3NTg5YmMwY2UwLzEvNWVsT0dLTDhXX3VmT0JMUkM2T0lGVFZSMDZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9hOGJkYTctMjQ1MC00ZWE1LTgyN2MtMGY3NTg5YmMwY2Uw LzEvUWJBMVY1TlJGQmJ4UndXMTVwVjE0SkVnTWNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAbWh4AwQA svvuMA0GCSqGSIb3DQEBCwUAA4IBAQAhFB/U6ocNqvhZ748nPVAeOmQNU5j+M+zp 4EGUVY3J4CA3K0DM/Zg185q4XRCOVJmdFfT9RcDsXHx9aXmGKE5Dcuif8V0kSXSV LYF+uYGqWfXosEkf0pfirdMgg07KNcYKTdhRbJiDapgLf/F8OYn41aWEBAIT5cfF JiBEwuLLD8C7+ivkkDwVZ7wLtaC3mHuwJ5uGKrZrw8EWRn0N6XTef6Mb3cjuxOLj KQoCuc4Uv62TEIHTOBuqJjzOQpwVng3p99/1IgZz+H3nCOS+9vHFZR2ZAvN4/UEz uzOf1zpECUC8FTP7F/Jt7CprdvQkqB6Kgr8LtDmNUP8QsXmjvk5T -----END CERTIFICATE-----Generated at Fri Dec 12 10:27:42 2025 by rpki-client