This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/02cab5-59b4-4d90-a5db-fd214cacfb62/1/0U-cjSx-vbFV-NT594PYA8nArLg.roa File: 0U-cjSx-vbFV-NT594PYA8nArLg.roa (raw, json) Hash identifier: HUb+G3KOFlBU9/9PngolZEI4Hx103lYxj0RKTkVEA0w= Subject key identifier: D1:4F:9C:8D:2C:7E:BD:B1:55:F8:D4:F9:F7:83:D8:03:C9:C0:AC:B8 Certificate issuer: /CN=3938a81a44127741d949a355a47f3cb599389a78 Certificate serial: 019B7EA74771BA55D08E5E626DDE486D148C Authority key identifier: 39:38:A8:1A:44:12:77:41:D9:49:A3:55:A4:7F:3C:B5:99:38:9A:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTioGkQSd0HZSaNVpH88tZk4mng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/02cab5-59b4-4d90-a5db-fd214cacfb62/1/0U-cjSx-vbFV-NT594PYA8nArLg.roa Signing time: Fri 02 Jan 2026 12:20:50 +0000 ROA not before: Fri 02 Jan 2026 12:20:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211285 IP address blocks: 5.183.24.0/23 maxlen: 24 5.183.26.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/02cab5-59b4-4d90-a5db-fd214cacfb62/1/OTioGkQSd0HZSaNVpH88tZk4mng.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/02cab5-59b4-4d90-a5db-fd214cacfb62/1/OTioGkQSd0HZSaNVpH88tZk4mng.mft rsync://rpki.ripe.net/repository/DEFAULT/OTioGkQSd0HZSaNVpH88tZk4mng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:47:71:ba:55:d0:8e:5e:62:6d:de:48:6d:14:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3938a81a44127741d949a355a47f3cb599389a78 Validity Not Before: Jan 2 12:20:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d14f9c8d2c7ebdb155f8d4f9f783d803c9c0acb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:26:2c:8a:ae:b6:6f:fb:8c:a1:35:c0:26:a3: 20:b3:c5:7e:79:dd:6d:30:bf:11:0f:b8:d4:fc:81: b7:da:a8:cf:77:44:8b:13:9e:03:63:a7:14:ce:e4: f4:f3:f9:c7:83:25:f8:af:e6:a9:6b:6f:0f:17:46: 76:56:6c:22:ea:ef:d7:13:c9:69:cf:7b:2e:42:49: 91:93:c7:27:d2:68:55:ed:bf:60:2e:95:47:3e:52: e1:04:c9:21:3b:42:6b:4b:c6:85:9f:37:24:cd:ec: 17:66:29:40:23:dc:23:58:ea:45:4c:2a:69:2e:79: 3a:52:39:7b:55:57:49:4c:fd:b0:4b:4c:66:b7:12: 2e:2b:51:4f:ec:60:57:ec:77:1c:53:69:3d:b2:bf: f7:3f:fc:f7:c0:9b:d0:7d:8c:2b:78:58:1f:30:9f: 32:14:de:47:5e:80:f2:5d:b1:7d:79:22:2b:69:7e: 59:41:64:b4:cf:9c:1b:8c:a7:1d:2e:5d:56:83:a6: b4:03:9f:6e:c7:34:ac:ce:86:81:bb:72:5f:b9:de: f4:10:00:c4:b0:5e:e7:2f:27:99:a9:cf:08:9b:59: 67:77:e2:c6:8f:60:f6:87:b4:55:2e:0b:66:ea:3a: 15:2a:9f:b9:2f:fe:b1:ac:15:0a:3d:62:14:77:11: bb:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:4F:9C:8D:2C:7E:BD:B1:55:F8:D4:F9:F7:83:D8:03:C9:C0:AC:B8 X509v3 Authority Key Identifier: keyid:39:38:A8:1A:44:12:77:41:D9:49:A3:55:A4:7F:3C:B5:99:38:9A:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTioGkQSd0HZSaNVpH88tZk4mng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/02cab5-59b4-4d90-a5db-fd214cacfb62/1/0U-cjSx-vbFV-NT594PYA8nArLg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/02cab5-59b4-4d90-a5db-fd214cacfb62/1/OTioGkQSd0HZSaNVpH88tZk4mng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.183.24.0/22 Signature Algorithm: sha256WithRSAEncryption 77:01:32:af:93:19:c4:65:9a:cd:35:3d:7f:01:6d:ab:3e:05: d1:d7:33:88:7e:37:cd:05:d8:06:c2:df:49:df:17:3e:cb:51: cc:c2:98:9e:69:43:70:b7:11:2a:96:1a:7b:ba:97:ec:6a:8b: 24:72:8d:ad:a9:68:8a:28:90:e4:7c:c6:6a:8b:0e:68:80:b3: d4:cc:f1:ec:ab:7d:f4:39:25:28:25:a2:76:e2:ca:41:4f:58: 95:53:1f:d0:c3:c7:d6:41:44:80:32:33:ba:dd:94:58:a6:e8: 70:cf:8b:fd:e2:d5:ea:ea:60:51:f8:ef:5e:c7:be:31:06:45: c9:da:95:a9:f8:8d:a1:6f:da:1f:61:39:11:a9:da:d5:37:9f: 84:ff:c0:2b:ec:c4:b2:ea:69:63:ba:11:06:59:d8:7d:91:84: 79:9f:c2:79:7c:91:cd:c2:fc:be:15:6d:9e:aa:ee:d0:9b:c7: e1:3c:51:46:60:7e:e0:ac:11:6f:82:c4:4c:fa:e1:ef:c3:8e: db:eb:ec:48:8e:bc:ca:f9:5f:06:f9:72:5f:22:a9:40:2f:12: a7:e7:0c:16:70:1e:a6:09:87:3c:44:00:f1:62:cc:96:e6:b8: 16:4d:94:21:1c:c9:4d:38:a1:90:86:aa:1b:68:09:c6:fb:f2: 4b:1b:9c:45 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+p0dxulXQjl5ibd5IbRSMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MzhhODFhNDQxMjc3NDFkOTQ5YTM1NWE0N2YzY2I1OTkz ODlhNzgwHhcNMjYwMTAyMTIyMDUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTRmOWM4ZDJjN2ViZGIxNTVmOGQ0ZjlmNzgzZDgwM2M5YzBhY2I4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiYsiq62b/uMoTXAJqMgs8V+ed1t ML8RD7jU/IG32qjPd0SLE54DY6cUzuT08/nHgyX4r+apa28PF0Z2Vmwi6u/XE8lp z3suQkmRk8cn0mhV7b9gLpVHPlLhBMkhO0JrS8aFnzckzewXZilAI9wjWOpFTCpp Lnk6Ujl7VVdJTP2wS0xmtxIuK1FP7GBX7HccU2k9sr/3P/z3wJvQfYwreFgfMJ8y FN5HXoDyXbF9eSIraX5ZQWS0z5wbjKcdLl1Wg6a0A59uxzSszoaBu3Jfud70EADE sF7nLyeZqc8Im1lnd+LGj2D2h7RVLgtm6joVKp+5L/6xrBUKPWIUdxG7+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNFPnI0sfr2xVfjU+feD2APJwKy4MB8GA1UdIwQY MBaAFDk4qBpEEndB2UmjVaR/PLWZOJp4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1Rpb0drUVNkMEhaU2FOVnBIODh0Wms0bW5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wMmNhYjUtNTliNC00ZDkwLWE1ZGIt ZmQyMTRjYWNmYjYyLzEvMFUtY2pTeC12YkZWLU5UNTk0UFlBOG5BckxnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wMmNhYjUtNTliNC00ZDkwLWE1ZGItZmQyMTRjYWNmYjYy LzEvT1Rpb0drUVNkMEhaU2FOVnBIODh0Wms0bW5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBbcYMA0G CSqGSIb3DQEBCwUAA4IBAQB3ATKvkxnEZZrNNT1/AW2rPgXR1zOIfjfNBdgGwt9J 3xc+y1HMwpieaUNwtxEqlhp7upfsaoskco2tqWiKKJDkfMZqiw5ogLPUzPHsq330 OSUoJaJ24spBT1iVUx/Qw8fWQUSAMjO63ZRYpuhwz4v94tXq6mBR+O9ex74xBkXJ 2pWp+I2hb9ofYTkRqdrVN5+E/8Ar7MSy6mljuhEGWdh9kYR5n8J5fJHNwvy+FW2e qu7Qm8fhPFFGYH7grBFvgsRM+uHvw47b6+xIjrzK+V8G+XJfIqlALxKn5wwWcB6m CYc8RADxYsyW5rgWTZQhHMlNOKGQhqobaAnG+/JLG5xF -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:09 2026 by rpki-client