This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/5JVkTGfIlkU1vvHq3ckCjccqO00.roa File: 5JVkTGfIlkU1vvHq3ckCjccqO00.roa (raw, json) Hash identifier: sje5UeypDn+LANdvaAEDc3Yi2e/SpydBY5rQxW9zqxs= Subject key identifier: E4:95:64:4C:67:C8:96:45:35:BE:F1:EA:DD:C9:02:8D:C7:2A:3B:4D Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019B7BA419FD19F954ABCFC506D3662CEB23 Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/5JVkTGfIlkU1vvHq3ckCjccqO00.roa Signing time: Thu 01 Jan 2026 22:18:30 +0000 ROA not before: Thu 01 Jan 2026 22:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210702 IP address blocks: 5.180.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:19:fd:19:f9:54:ab:cf:c5:06:d3:66:2c:eb:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Jan 1 22:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e495644c67c8964535bef1eaddc9028dc72a3b4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3b:e7:03:49:67:30:7d:66:6e:20:d2:86:c7: 04:45:83:a9:f9:c3:59:a5:ec:89:d0:5c:d9:cc:b7: 52:33:23:32:ac:01:e7:73:7d:12:22:fb:ca:d1:b6: 09:36:42:b6:06:78:ce:47:8e:90:26:d0:64:6a:65: 54:b1:26:89:70:cf:90:e1:91:3a:8b:a4:ee:b9:c2: a5:34:5b:6c:be:d3:58:be:68:c0:65:27:b3:ce:2f: d8:7d:4f:cf:ee:51:ab:d0:11:1f:cb:3b:67:71:f2: 09:0f:b4:a2:ca:8d:a9:68:73:76:ea:9a:59:2b:21: 19:57:7f:b8:7a:99:38:30:a5:17:00:b9:85:85:22: de:ff:c7:c9:60:7d:fa:bb:cc:44:5c:56:2e:64:9d: 29:fe:b6:ee:3e:86:94:f8:ad:b9:5b:0b:cf:33:98: 89:5d:79:29:0a:76:56:83:4e:42:ca:40:a9:88:c9: d1:df:f8:e1:48:04:ac:d5:eb:36:5d:a1:78:74:41: 2b:fd:8d:ad:00:6e:c6:19:14:73:f7:c1:14:14:c7: 23:3b:3e:78:ca:56:cb:81:b9:ab:c7:a0:38:2b:72: 33:14:4f:83:02:b2:ca:72:fd:78:9c:89:77:50:36: e5:51:c4:07:06:2c:80:58:03:d2:df:60:81:81:a7: f9:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:95:64:4C:67:C8:96:45:35:BE:F1:EA:DD:C9:02:8D:C7:2A:3B:4D X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/5JVkTGfIlkU1vvHq3ckCjccqO00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.139.0/24 Signature Algorithm: sha256WithRSAEncryption c4:96:26:18:81:74:0e:b4:19:25:78:d6:04:dd:95:af:f2:63: 72:1c:bc:f9:b0:14:aa:c9:23:ed:23:4d:86:ac:82:05:92:ce: 1f:46:e3:5d:8e:c6:fc:f9:a0:35:aa:10:7d:92:d1:84:20:ca: 44:25:50:9d:13:21:4b:35:d0:03:48:ee:32:b8:55:18:74:75: 25:d6:89:96:21:c8:9c:67:70:41:7c:78:fa:3a:12:59:ca:8b: 8b:c1:cd:15:e9:37:e3:b6:95:f0:3b:89:19:35:6d:b0:44:d8: 46:d9:1d:de:29:5b:02:7b:4d:c8:38:23:36:10:76:79:59:e2: 34:74:12:33:09:0a:84:97:35:e5:95:7d:1a:4d:2d:93:48:cc: 20:86:7d:b6:4d:37:30:65:1b:e4:85:c0:89:a9:5c:c1:97:64: e8:4d:39:d3:a6:81:ad:86:4f:ca:c1:37:e6:a7:a8:fb:a7:d6: 5c:fa:6d:da:c4:43:fb:e7:fe:d9:77:57:43:9a:10:b9:2c:85: 14:02:61:b0:a5:2f:aa:65:e3:3c:53:1a:c0:a2:e0:3f:fb:ed: 58:79:2b:dd:14:ff:e3:40:2b:79:28:3f:2f:6c:c2:6b:8d:a2: 54:27:f3:84:9f:b8:c1:89:fd:16:c1:b2:ee:97:fe:65:3c:9c: 51:02:af:f5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pBn9GflUq8/FBtNmLOsjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjYwMTAxMjIxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDk1NjQ0YzY3Yzg5NjQ1MzViZWYxZWFkZGM5MDI4ZGM3MmEzYjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTvnA0lnMH1mbiDShscERYOp+cNZ peyJ0FzZzLdSMyMyrAHnc30SIvvK0bYJNkK2BnjOR46QJtBkamVUsSaJcM+Q4ZE6 i6TuucKlNFtsvtNYvmjAZSezzi/YfU/P7lGr0BEfyztncfIJD7Siyo2paHN26ppZ KyEZV3+4epk4MKUXALmFhSLe/8fJYH36u8xEXFYuZJ0p/rbuPoaU+K25WwvPM5iJ XXkpCnZWg05CykCpiMnR3/jhSASs1es2XaF4dEEr/Y2tAG7GGRRz98EUFMcjOz54 ylbLgbmrx6A4K3IzFE+DArLKcv14nIl3UDblUcQHBiyAWAPS32CBgaf5tQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOSVZExnyJZFNb7x6t3JAo3HKjtNMB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvNUpWa1RHZklsa1UxdnZIcTNja0NqY2NxTzAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbSLMA0G CSqGSIb3DQEBCwUAA4IBAQDEliYYgXQOtBkleNYE3ZWv8mNyHLz5sBSqySPtI02G rIIFks4fRuNdjsb8+aA1qhB9ktGEIMpEJVCdEyFLNdADSO4yuFUYdHUl1omWIcic Z3BBfHj6OhJZyouLwc0V6TfjtpXwO4kZNW2wRNhG2R3eKVsCe03IOCM2EHZ5WeI0 dBIzCQqElzXllX0aTS2TSMwghn22TTcwZRvkhcCJqVzBl2ToTTnTpoGthk/KwTfm p6j7p9Zc+m3axEP75/7Zd1dDmhC5LIUUAmGwpS+qZeM8UxrAouA/++1YeSvdFP/j QCt5KD8vbMJrjaJUJ/OEn7jBif0WwbLul/5lPJxRAq/1 -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:46 2026 by rpki-client