This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/5rBq9ZCmucxqNsx6FAEsf2K1qwc.roa File: 5rBq9ZCmucxqNsx6FAEsf2K1qwc.roa (raw, json) Hash identifier: TwgY5LhpU9OGwvTJkud8zuQA5jXP6Hgh8fJhs9YjFQs= Subject key identifier: E6:B0:6A:F5:90:A6:B9:CC:6A:36:CC:7A:14:01:2C:7F:62:B5:AB:07 Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9 Certificate serial: 019B79113B32EAAD50FF4A8FA861266B4FF9 Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/5rBq9ZCmucxqNsx6FAEsf2K1qwc.roa Signing time: Thu 01 Jan 2026 10:18:50 +0000 ROA not before: Thu 01 Jan 2026 10:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8100 IP address blocks: 64.137.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:3b:32:ea:ad:50:ff:4a:8f:a8:61:26:6b:4f:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9 Validity Not Before: Jan 1 10:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e6b06af590a6b9cc6a36cc7a14012c7f62b5ab07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:92:e0:b6:66:da:ef:71:78:6c:24:36:89:31: a7:80:53:69:31:50:9e:12:ca:b6:0e:b3:c1:5c:62: a9:e8:b2:5d:ae:1c:5a:1d:31:c1:12:90:03:81:45: 22:b1:29:e9:f2:28:d4:ca:59:e7:56:c7:35:4b:89: 30:f5:7f:3e:90:fa:b8:23:0f:ca:38:2e:f4:84:d0: 41:4a:da:1b:4d:72:53:ac:fa:67:bb:68:a4:42:20: 1b:d4:55:75:11:34:ea:03:ca:2a:32:0b:af:f7:64: e6:ba:23:89:89:f3:50:a0:e8:a5:7b:ad:9b:04:cb: 49:cf:29:e3:15:3e:97:72:e1:b6:4d:5a:50:80:c3: ab:39:6b:a9:a8:64:0d:04:de:11:24:32:ee:9e:27: 2f:41:75:5a:ef:1e:22:f7:5d:ee:5f:23:30:85:5e: 91:3d:23:02:78:37:9f:25:f9:b5:fe:e0:8b:95:b6: 78:b4:c8:2b:e6:51:03:2a:b5:91:87:82:7d:5f:c3: d5:18:09:8b:db:3e:93:ef:0a:dc:81:c5:07:1d:ee: 9e:5c:89:fb:74:b8:bc:21:6a:2b:46:94:42:ff:e4: 4f:bc:91:39:a9:9f:c3:61:2a:d4:ea:ee:ec:b6:f0: bd:c9:9d:f4:e6:53:07:e7:1a:37:28:ed:64:1d:38: 91:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:B0:6A:F5:90:A6:B9:CC:6A:36:CC:7A:14:01:2C:7F:62:B5:AB:07 X509v3 Authority Key Identifier: keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/5rBq9ZCmucxqNsx6FAEsf2K1qwc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.137.54.0/24 Signature Algorithm: sha256WithRSAEncryption 73:22:52:1c:9c:3b:75:71:cb:3c:45:2f:9d:2e:8e:17:19:aa: b6:68:c3:dd:ce:8b:da:6d:b7:81:76:f8:d2:50:98:f6:9f:a4: 5e:1b:9a:98:2f:23:97:20:40:74:a7:ff:5b:6f:22:29:f7:34: 11:b2:25:7f:c2:52:d0:68:90:3d:3f:e3:49:c2:0b:ce:c7:26: 6b:c4:3c:d2:8f:2f:54:7b:20:48:17:14:30:f7:e8:83:70:6e: c1:91:0a:aa:fc:61:c2:f3:23:b7:0e:bb:ff:58:15:12:db:10: c5:8d:a6:5d:b6:27:86:48:ba:0c:74:f5:9a:cd:94:7f:fe:6e: 22:33:00:24:01:3a:41:35:bd:23:8a:e0:8e:d5:6b:1a:1a:75: ef:99:e8:60:15:94:2e:f0:79:90:76:ba:2f:5f:e4:a8:4a:b6: 12:2f:fc:f5:85:55:a2:ca:9c:79:29:2a:f4:1c:ce:bc:d4:5f: b5:ef:20:23:49:6a:4c:a3:a3:1a:76:1f:0a:42:6e:d3:01:4b: bf:66:0f:37:06:31:e2:b0:7c:b2:fa:2f:28:8b:69:da:d3:33: f9:cb:b7:d0:a7:42:72:d0:9f:09:5e:49:21:58:1f:12:b3:6d: d7:d3:e3:48:39:c2:d0:96:65:9b:d7:6d:4a:28:77:c8:60:f7: a1:30:0e:7b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ETsy6q1Q/0qPqGEma0/5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj Mzg1ZTkwHhcNMjYwMTAxMTAxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNmIwNmFmNTkwYTZiOWNjNmEzNmNjN2ExNDAxMmM3ZjYyYjVhYjA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5Lgtmba73F4bCQ2iTGngFNpMVCe Esq2DrPBXGKp6LJdrhxaHTHBEpADgUUisSnp8ijUylnnVsc1S4kw9X8+kPq4Iw/K OC70hNBBStobTXJTrPpnu2ikQiAb1FV1ETTqA8oqMguv92TmuiOJifNQoOile62b BMtJzynjFT6XcuG2TVpQgMOrOWupqGQNBN4RJDLunicvQXVa7x4i913uXyMwhV6R PSMCeDefJfm1/uCLlbZ4tMgr5lEDKrWRh4J9X8PVGAmL2z6T7wrcgcUHHe6eXIn7 dLi8IWorRpRC/+RPvJE5qZ/DYSrU6u7stvC9yZ305lMH5xo3KO1kHTiRTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOawavWQprnMajbMehQBLH9itasHMB8GA1UdIwQY MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt ZmIwNzk1NWYzYWFhLzEvNXJCcTlaQ211Y3hxTnN4NkZBRXNmMksxcXdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQIk2MA0G CSqGSIb3DQEBCwUAA4IBAQBzIlIcnDt1ccs8RS+dLo4XGaq2aMPdzovabbeBdvjS UJj2n6ReG5qYLyOXIEB0p/9bbyIp9zQRsiV/wlLQaJA9P+NJwgvOxyZrxDzSjy9U eyBIFxQw9+iDcG7BkQqq/GHC8yO3Drv/WBUS2xDFjaZdtieGSLoMdPWazZR//m4i MwAkATpBNb0jiuCO1WsaGnXvmehgFZQu8HmQdrovX+SoSrYSL/z1hVWiypx5KSr0 HM681F+17yAjSWpMo6Madh8KQm7TAUu/Zg83BjHisHyy+i8oi2na0zP5y7fQp0Jy 0J8JXkkhWB8Ss23X0+NIOcLQlmWb121KKHfIYPehMA57 -----END CERTIFICATE-----Generated at Fri Jan 2 02:42:38 2026 by rpki-client