This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/5LuAukBT-PYtoVc1x_YPxle1wsc.roa File: 5LuAukBT-PYtoVc1x_YPxle1wsc.roa (raw, json) Hash identifier: h17Dfweg2VbRUUt3KQP8Gh9v6kUcdiw65gP5QtU0txQ= Subject key identifier: E4:BB:80:BA:40:53:F8:F6:2D:A1:57:35:C7:F6:0F:C6:57:B5:C2:C7 Certificate issuer: /CN=ae83824fdc29ebe4ac286ca01844df86d4d75ec0 Certificate serial: 019B76EB4592AAA38DB55DCFB651C4E8AF4F Authority key identifier: AE:83:82:4F:DC:29:EB:E4:AC:28:6C:A0:18:44:DF:86:D4:D7:5E:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/roOCT9wp6-SsKGygGETfhtTXXsA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/5LuAukBT-PYtoVc1x_YPxle1wsc.roa Signing time: Thu 01 Jan 2026 00:18:08 +0000 ROA not before: Thu 01 Jan 2026 00:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213804 IP address blocks: 144.86.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.crl rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.mft rsync://rpki.ripe.net/repository/DEFAULT/roOCT9wp6-SsKGygGETfhtTXXsA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:45:92:aa:a3:8d:b5:5d:cf:b6:51:c4:e8:af:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae83824fdc29ebe4ac286ca01844df86d4d75ec0 Validity Not Before: Jan 1 00:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4bb80ba4053f8f62da15735c7f60fc657b5c2c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b2:ca:d4:f4:98:eb:75:13:66:3f:ed:2b:30: cd:2f:09:d2:e9:61:71:bf:e7:a9:ab:3d:3d:fe:ed: b3:8d:2a:d6:bc:90:2f:36:cb:5a:d2:4d:30:4d:74: 92:b8:87:8b:ee:83:67:14:00:03:63:ba:ff:d5:92: b4:8e:d6:9c:16:39:da:ab:04:5a:19:83:b4:a3:6a: f2:0f:e7:d4:b5:88:5c:7a:60:95:53:cc:ab:17:a7: 64:0b:db:75:85:9d:ea:6c:b8:ad:fe:99:76:2a:0e: 97:59:5e:34:23:43:96:c8:b4:c7:be:7a:e9:c7:57: f4:f8:a7:19:6b:89:b6:68:04:ce:cb:d1:30:d0:75: ac:f6:77:12:87:5a:91:66:76:cf:b2:c8:c1:39:a4: 10:02:88:b8:35:2b:d7:c7:be:7b:4a:65:2b:8a:17: a1:a8:56:ff:22:e7:3c:f0:e8:89:1f:16:4b:e9:ae: 06:19:4c:21:48:ec:4e:b1:6e:b6:12:8f:6f:0e:38: ef:da:de:d1:80:d0:ad:99:c6:dc:38:96:d1:be:fe: 49:fb:2e:5d:f5:39:fc:0d:f7:3c:fb:65:f2:20:c9: 3d:aa:93:dd:b0:7d:9b:1b:99:57:70:23:e2:cb:83: a8:07:d6:ac:9b:03:5b:60:f3:67:5b:da:7b:b0:83: 89:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:BB:80:BA:40:53:F8:F6:2D:A1:57:35:C7:F6:0F:C6:57:B5:C2:C7 X509v3 Authority Key Identifier: keyid:AE:83:82:4F:DC:29:EB:E4:AC:28:6C:A0:18:44:DF:86:D4:D7:5E:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roOCT9wp6-SsKGygGETfhtTXXsA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/5LuAukBT-PYtoVc1x_YPxle1wsc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.86.188.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:84:a1:c8:48:f7:f0:2b:3d:85:9b:3e:b9:34:69:0c:27:96: ad:8d:86:62:8b:f0:12:f6:1d:bd:31:80:1e:3b:9c:22:e7:25: c6:a6:9b:d0:6f:af:e1:ee:06:82:03:39:4f:62:70:38:7e:6a: fc:e6:3d:09:04:82:e3:62:95:63:ec:d9:ea:2b:71:4c:fa:d8: e0:4f:a9:b4:1c:37:c7:df:68:4b:49:c7:8b:28:42:00:5a:a6: 1d:28:e4:27:34:02:87:b7:95:74:aa:f6:9d:10:49:96:9d:99: 1c:ce:c1:7a:26:0f:48:98:65:3f:59:9d:6c:d3:bc:28:e8:1e: cd:c6:a3:d6:cc:73:84:d6:15:5f:4e:68:cf:d3:0e:b5:94:01: d6:a5:6d:43:3f:ea:a0:e8:a8:bb:d4:bf:40:0a:72:0e:b8:12: 68:04:d0:61:fd:d4:38:24:b5:3a:e4:ab:21:f9:4f:9a:8d:13: 52:0a:ac:b9:b8:78:53:cd:82:93:8e:2d:1a:7f:7e:7b:1c:92: ba:ef:97:2c:8b:ab:c9:a1:5d:ab:21:02:75:9d:8d:11:21:c0: 30:86:18:ec:a1:6c:6d:16:d4:91:78:bb:62:c9:4a:88:f7:cf: 65:b4:1b:44:d4:0b:a9:e6:44:99:48:06:37:25:84:a6:6d:be: 09:b1:7a:3e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt260WSqqONtV3PtlHE6K9PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlODM4MjRmZGMyOWViZTRhYzI4NmNhMDE4NDRkZjg2ZDRk NzVlYzAwHhcNMjYwMTAxMDAxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNGJiODBiYTQwNTNmOGY2MmRhMTU3MzVjN2Y2MGZjNjU3YjVjMmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7LK1PSY63UTZj/tKzDNLwnS6WFx v+epqz09/u2zjSrWvJAvNsta0k0wTXSSuIeL7oNnFAADY7r/1ZK0jtacFjnaqwRa GYO0o2ryD+fUtYhcemCVU8yrF6dkC9t1hZ3qbLit/pl2Kg6XWV40I0OWyLTHvnrp x1f0+KcZa4m2aATOy9Ew0HWs9ncSh1qRZnbPssjBOaQQAoi4NSvXx757SmUriheh qFb/Iuc88OiJHxZL6a4GGUwhSOxOsW62Eo9vDjjv2t7RgNCtmcbcOJbRvv5J+y5d 9Tn8Dfc8+2XyIMk9qpPdsH2bG5lXcCPiy4OoB9asmwNbYPNnW9p7sIOJMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOS7gLpAU/j2LaFXNcf2D8ZXtcLHMB8GA1UdIwQY MBaAFK6Dgk/cKevkrChsoBhE34bU117AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcm9PQ1Q5d3A2LVNzS0d5Z0dFVGZodFRYWHNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC83MTc0ZWUtMzA3Ni00OTZjLWIyNTkt OTcwMDU0NmI1NzExLzEvNUx1QXVrQlQtUFl0b1ZjMXhfWVB4bGUxd3NjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC83MTc0ZWUtMzA3Ni00OTZjLWIyNTktOTcwMDU0NmI1NzEx LzEvcm9PQ1Q5d3A2LVNzS0d5Z0dFVGZodFRYWHNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkFa8MA0G CSqGSIb3DQEBCwUAA4IBAQBdhKHISPfwKz2Fmz65NGkMJ5atjYZii/AS9h29MYAe O5wi5yXGppvQb6/h7gaCAzlPYnA4fmr85j0JBILjYpVj7NnqK3FM+tjgT6m0HDfH 32hLSceLKEIAWqYdKOQnNAKHt5V0qvadEEmWnZkczsF6Jg9ImGU/WZ1s07wo6B7N xqPWzHOE1hVfTmjP0w61lAHWpW1DP+qg6Ki71L9ACnIOuBJoBNBh/dQ4JLU65Ksh +U+ajRNSCqy5uHhTzYKTji0af357HJK675csi6vJoV2rIQJ1nY0RIcAwhhjsoWxt FtSReLtiyUqI989ltBtE1Aup5kSZSAY3JYSmbb4JsXo+ -----END CERTIFICATE-----Generated at Tue Feb 10 01:07:21 2026 by rpki-client