This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/tNW5JglowYzeXwLaOgS0Yf8zgPA.roa File: tNW5JglowYzeXwLaOgS0Yf8zgPA.roa (raw, json) Hash identifier: fs4Ze65kVG+wfhXUy+9T7N6D/TUMaczqK8frGbt5RaE= Subject key identifier: B4:D5:B9:26:09:68:C1:8C:DE:5F:02:DA:3A:04:B4:61:FF:33:80:F0 Certificate issuer: /CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f Certificate serial: 019C2793E7D4B5CAE32BE636A79D3A76AA2C Authority key identifier: 2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/tNW5JglowYzeXwLaOgS0Yf8zgPA.roa Signing time: Wed 04 Feb 2026 07:35:30 +0000 ROA not before: Wed 04 Feb 2026 07:35:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61317 IP address blocks: 5.181.14.0/24 maxlen: 24 45.150.51.0/24 maxlen: 24 45.159.180.0/24 maxlen: 24 45.159.183.0/24 maxlen: 24 94.199.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:27:93:e7:d4:b5:ca:e3:2b:e6:36:a7:9d:3a:76:aa:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f Validity Not Before: Feb 4 07:35:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4d5b9260968c18cde5f02da3a04b461ff3380f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9a:54:b4:6d:00:91:f2:2b:17:08:0d:50:23: bb:b8:2f:b1:f3:b1:5b:ae:d0:78:31:10:3f:48:42: 84:00:a4:5a:30:68:9b:7d:86:17:2b:2d:33:e7:32: 9c:fd:3b:02:dc:ea:db:a4:84:c4:b1:9a:e2:ac:bf: 85:93:a7:e4:6d:97:51:8e:01:bf:5d:dc:e6:41:8d: d7:eb:60:50:ad:c1:24:7d:f5:82:47:3b:3b:da:ef: 8f:e0:5c:30:ae:3a:ce:e6:e5:e5:4f:b8:b1:9c:5f: 0e:92:30:60:3d:53:d3:7d:b4:18:3b:9a:16:43:4b: be:67:26:af:c6:a4:6b:89:8c:4f:05:a5:a8:48:d2: c6:81:b5:49:99:84:f4:4c:70:60:ba:dc:79:b2:92: 27:65:9b:c0:1b:5d:76:e8:35:17:da:99:8e:7b:58: 41:49:2c:ba:fd:7b:d0:49:8f:19:81:0d:f5:94:c7: d2:58:1b:d0:5d:eb:08:0d:39:a3:48:5c:31:12:a3: 8f:1d:56:38:05:bd:54:95:ee:cd:23:8c:8f:27:7f: 10:09:22:23:31:6d:66:78:b0:24:e3:de:74:e8:8e: 2d:82:18:5b:5a:50:05:8e:77:85:81:41:54:f0:eb: 0c:50:e7:f2:75:2a:f5:10:96:ac:ec:6c:7d:29:2e: 8d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:D5:B9:26:09:68:C1:8C:DE:5F:02:DA:3A:04:B4:61:FF:33:80:F0 X509v3 Authority Key Identifier: keyid:2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/tNW5JglowYzeXwLaOgS0Yf8zgPA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.14.0/24 45.150.51.0/24 45.159.180.0/24 45.159.183.0/24 94.199.7.0/24 Signature Algorithm: sha256WithRSAEncryption 38:23:06:51:4a:14:e0:d7:05:8c:db:d4:4d:ef:6d:8a:aa:58: 29:5b:6e:1d:f0:05:c5:ee:f3:08:cf:f5:d6:8c:71:e3:f8:52: 81:ef:76:87:2e:32:c8:aa:1d:fb:cf:b7:d0:01:29:7f:80:ff: 2b:4a:98:98:0f:4f:e0:4a:ae:1a:ad:f9:b9:ea:2e:1e:1f:5a: 1a:68:8e:ff:07:54:c4:12:58:0c:70:37:82:c5:2d:f7:60:44: 6c:99:b4:64:a0:54:02:df:d3:c4:e5:f8:29:27:49:f2:11:46: 66:e4:3b:8c:dc:05:d7:38:93:1c:88:40:13:23:02:30:40:31: 13:62:2e:4e:94:b0:09:14:31:c0:89:d3:50:15:b2:cd:04:40: 53:6c:83:33:1c:dc:ef:86:fb:90:6d:4f:f4:a3:c0:42:df:78: d3:02:41:97:84:93:0b:2a:78:50:60:ed:94:bc:03:32:f3:10: f1:f6:bf:bc:cd:66:09:a0:54:cf:f7:9f:e3:42:5a:5f:c9:a3: a1:bf:a9:7a:0c:5f:2b:e6:e9:60:5a:73:3c:09:2e:52:3a:c4: ee:01:04:04:1d:c6:9b:cd:b1:57:d3:82:e2:d1:75:e8:f7:17: 8a:fc:e6:c0:b8:61:d0:9b:01:96:09:e4:f0:0b:a2:70:c1:e4: e2:ea:10:2a -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZwnk+fUtcrjK+Y2p506dqosMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMTE2NGE5YjUwMTNkNjJmMDUxMzQ0ZjZkZjkxZjEzYmM3 ZWNiMGYwHhcNMjYwMjA0MDczNTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNGQ1YjkyNjA5NjhjMThjZGU1ZjAyZGEzYTA0YjQ2MWZmMzM4MGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtppUtG0AkfIrFwgNUCO7uC+x87Fb rtB4MRA/SEKEAKRaMGibfYYXKy0z5zKc/TsC3OrbpITEsZrirL+Fk6fkbZdRjgG/ XdzmQY3X62BQrcEkffWCRzs72u+P4FwwrjrO5uXlT7ixnF8OkjBgPVPTfbQYO5oW Q0u+ZyavxqRriYxPBaWoSNLGgbVJmYT0THBgutx5spInZZvAG1126DUX2pmOe1hB SSy6/XvQSY8ZgQ31lMfSWBvQXesIDTmjSFwxEqOPHVY4Bb1Ule7NI4yPJ38QCSIj MW1meLAk49506I4tghhbWlAFjneFgUFU8OsMUOfydSr1EJas7Gx9KS6NnQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFLTVuSYJaMGM3l8C2joEtGH/M4DwMB8GA1UdIwQY MBaAFC4RZKm1AT1i8FE0T235HxO8fssPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEt ZmQ3ZjE3YmIxYTVjLzEvdE5XNUpnbG93WXplWHdMYU9nUzBZZjh6Z1BBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEtZmQ3ZjE3YmIxYTVj LzEvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQABbUOAwQA LZYzAwQALZ+0AwQALZ+3AwQAXscHMA0GCSqGSIb3DQEBCwUAA4IBAQA4IwZRShTg 1wWM29RN722KqlgpW24d8AXF7vMIz/XWjHHj+FKB73aHLjLIqh37z7fQASl/gP8r SpiYD0/gSq4arfm56i4eH1oaaI7/B1TEElgMcDeCxS33YERsmbRkoFQC39PE5fgp J0nyEUZm5DuM3AXXOJMciEATIwIwQDETYi5OlLAJFDHAidNQFbLNBEBTbIMzHNzv hvuQbU/0o8BC33jTAkGXhJMLKnhQYO2UvAMy8xDx9r+8zWYJoFTP95/jQlpfyaOh v6l6DF8r5ulgWnM8CS5SOsTuAQQEHcabzbFX04Li0XXo9xeK/ObAuGHQmwGWCeTw C6JwweTi6hAq -----END CERTIFICATE-----Generated at Tue Feb 10 07:11:46 2026 by rpki-client