This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/pCVE5lGD8Vy-ElskGtB4I6sSAjg.roa File: pCVE5lGD8Vy-ElskGtB4I6sSAjg.roa (raw, json) Hash identifier: eZJlHsrZQ1146ReM9KzwDX7BATtaYNhY9J9MSAdbqxA= Subject key identifier: A4:25:44:E6:51:83:F1:5C:BE:12:5B:24:1A:D0:78:23:AB:12:02:38 Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f Certificate serial: 019B7EA7179AD3349A2C754A19BEC7ED14F1 Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/pCVE5lGD8Vy-ElskGtB4I6sSAjg.roa Signing time: Fri 02 Jan 2026 12:20:38 +0000 ROA not before: Fri 02 Jan 2026 12:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50801 IP address blocks: 5.252.232.0/22 maxlen: 24 80.78.132.0/22 maxlen: 24 194.120.126.0/24 maxlen: 24 2a07:6f40::/29 maxlen: 48 2a0d:2140::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:17:9a:d3:34:9a:2c:75:4a:19:be:c7:ed:14:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f Validity Not Before: Jan 2 12:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a42544e65183f15cbe125b241ad07823ab120238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:fd:48:b9:d6:19:2d:b3:e3:27:8d:0a:a9:d3: 80:2c:84:85:93:4b:7c:b0:c7:01:d8:2d:6b:6c:a4: 8b:c0:d7:fa:78:d3:3a:5e:17:1c:13:99:a6:2f:91: 39:13:4f:d2:7b:ce:19:49:bc:9f:ff:4b:f6:bf:3d: f5:65:61:0e:43:c2:a5:1f:8e:8a:31:ee:53:13:63: ed:d5:31:11:cc:98:a0:a9:e1:a7:10:40:64:9d:b2: 55:63:ab:61:a1:e7:f6:c0:74:b7:fc:49:82:8e:89: a2:a1:18:01:65:f7:d5:f2:a0:66:63:68:c1:52:27: 03:72:55:e2:3e:01:b6:b1:fd:cd:37:16:6f:65:0a: ff:91:7e:5f:7f:5f:2a:aa:8d:e9:81:0e:06:cc:88: c0:b2:97:05:80:a1:ff:ed:27:c7:6c:ee:9e:44:23: c7:18:4a:0f:5b:95:30:0c:2e:b2:59:fe:c6:b8:cb: 20:d5:50:d8:59:90:c5:ca:ec:7b:23:e5:51:2d:85: 82:2a:0a:d1:a2:b2:95:e5:ab:45:22:15:e2:9f:9f: c5:28:f6:39:37:ee:41:eb:34:d1:b9:36:97:2a:ab: 8d:72:86:ed:ad:ed:e1:d8:b0:08:b7:b5:8b:38:60: 3a:19:1a:23:36:84:dd:f9:85:80:8e:da:bf:f4:28: d2:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:25:44:E6:51:83:F1:5C:BE:12:5B:24:1A:D0:78:23:AB:12:02:38 X509v3 Authority Key Identifier: keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/pCVE5lGD8Vy-ElskGtB4I6sSAjg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.252.232.0/22 80.78.132.0/22 194.120.126.0/24 IPv6: 2a07:6f40::/29 2a0d:2140::/29 Signature Algorithm: sha256WithRSAEncryption 74:e7:d2:a8:c2:2d:19:40:2d:04:b5:1e:1a:c2:59:b8:61:2b: 7f:26:0d:26:ca:41:6c:78:24:6d:10:a4:fe:27:09:dc:c8:d9: c4:b8:1d:87:2d:a9:6f:8c:1c:4e:a1:5a:8f:33:1f:8b:5c:be: 59:95:14:4c:d4:ab:4f:23:58:93:ae:7f:0d:9c:7b:f8:9a:12: f6:0e:0c:4b:6c:f6:38:64:c6:dd:c2:4f:78:fd:65:aa:fd:08: f5:4a:fb:75:10:33:a8:d6:7f:69:b0:56:ba:a0:7b:3e:30:74: 0c:e6:1b:96:e0:2e:60:86:69:62:c4:71:fa:ed:e6:60:f6:11: ee:43:76:17:7a:ce:00:29:d3:2c:d8:a5:72:cb:5f:ad:b6:99: 25:25:79:45:92:d5:22:e8:43:0a:05:bb:01:39:be:47:ee:cd: 9e:aa:87:3f:c2:71:ed:1d:80:e7:ff:84:51:93:70:40:e4:4b: 6a:53:6e:a5:df:7f:e3:a7:1b:3d:ec:43:ee:cf:ac:03:08:18: 60:05:0b:28:cc:28:d6:26:0f:97:86:3b:15:e2:7e:a6:d0:67: d2:ec:da:fb:f2:26:bc:c1:b3:18:8c:43:aa:b0:bb:9f:eb:42: 72:f9:83:3b:f0:ed:72:cf:d4:7f:5a:e8:b0:a0:59:44:97:1b: 5b:2d:d5:dd -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt+pxea0zSaLHVKGb7H7RTxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNGFjNjExNjE0ZGQxNjVkOTQ1NTcyOTZlZDdlZDQ2Yzhm YzAyNWYwHhcNMjYwMTAyMTIyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDI1NDRlNjUxODNmMTVjYmUxMjViMjQxYWQwNzgyM2FiMTIwMjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmf1IudYZLbPjJ40KqdOALISFk0t8 sMcB2C1rbKSLwNf6eNM6XhccE5mmL5E5E0/Se84ZSbyf/0v2vz31ZWEOQ8KlH46K Me5TE2Pt1TERzJigqeGnEEBknbJVY6thoef2wHS3/EmCjomioRgBZffV8qBmY2jB UicDclXiPgG2sf3NNxZvZQr/kX5ff18qqo3pgQ4GzIjAspcFgKH/7SfHbO6eRCPH GEoPW5UwDC6yWf7GuMsg1VDYWZDFyux7I+VRLYWCKgrRorKV5atFIhXin5/FKPY5 N+5B6zTRuTaXKquNcobtre3h2LAIt7WLOGA6GRojNoTd+YWAjtq/9CjSXwIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFKQlROZRg/FcvhJbJBrQeCOrEgI4MB8GA1UdIwQY MBaAFOFKxhFhTdFl2UVXKW7X7UbI/AJfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUt NzBlODk4YmIzOGRkLzEvcENWRTVsR0Q4VnktRWxza0d0QjRJNnNTQWpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUtNzBlODk4YmIzOGRk LzEvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAYBAIAATASAwQCBfzoAwQC UE6EAwQAwnh+MBQEAgACMA4DBQMqB29AAwUDKg0hQDANBgkqhkiG9w0BAQsFAAOC AQEAdOfSqMItGUAtBLUeGsJZuGErfyYNJspBbHgkbRCk/icJ3MjZxLgdhy2pb4wc TqFajzMfi1y+WZUUTNSrTyNYk65/DZx7+JoS9g4MS2z2OGTG3cJPeP1lqv0I9Ur7 dRAzqNZ/abBWuqB7PjB0DOYbluAuYIZpYsRx+u3mYPYR7kN2F3rOACnTLNilcstf rbaZJSV5RZLVIuhDCgW7ATm+R+7NnqqHP8Jx7R2A5/+EUZNwQORLalNupd9/46cb PexD7s+sAwgYYAULKMwo1iYPl4Y7FeJ+ptBn0uza+/ImvMGzGIxDqrC7n+tCcvmD O/Dtcs/Uf1rosKBZRJcbWy3V3Q== -----END CERTIFICATE-----Generated at Wed Jan 21 12:18:03 2026 by rpki-client