This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/5bVrHFZm_9x7DsR30S7rosICdW0.roa File: 5bVrHFZm_9x7DsR30S7rosICdW0.roa (raw, json) Hash identifier: TNCtAJMUf4J6FJnN+i2bTj70aWZ+c3ls9gu8xyrRaB4= Subject key identifier: E5:B5:6B:1C:56:66:FF:DC:7B:0E:C4:77:D1:2E:EB:A2:C2:02:75:6D Certificate issuer: /CN=5dd7336fa915721ce3bfee217f4e99164db9532b Certificate serial: 019B79EC2049CFFEDCBA5180B264BD975B46 Authority key identifier: 5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/5bVrHFZm_9x7DsR30S7rosICdW0.roa Signing time: Thu 01 Jan 2026 14:17:56 +0000 ROA not before: Thu 01 Jan 2026 14:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 5.62.21.0/24 maxlen: 24 109.68.56.0/21 maxlen: 21 193.151.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:20:49:cf:fe:dc:ba:51:80:b2:64:bd:97:5b:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd7336fa915721ce3bfee217f4e99164db9532b Validity Not Before: Jan 1 14:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e5b56b1c5666ffdc7b0ec477d12eeba2c202756d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:27:f0:1f:f1:d6:6c:b8:ed:bb:68:56:c8:b9: 8c:87:73:3c:64:8d:dd:f1:d5:c5:c9:47:96:c9:36: f1:f7:da:dc:e7:50:73:91:38:16:36:cf:8b:71:42: c7:78:5d:50:e0:a6:72:a7:f9:09:b6:3c:64:bb:c2: 13:ea:c3:49:be:3d:64:29:62:65:f2:64:98:82:3a: bb:bf:2c:32:83:7a:22:21:e9:a9:8b:28:43:36:02: 9d:f8:c0:63:8f:20:ff:01:cb:53:85:ab:e5:3e:68: 96:2d:1b:09:18:b3:48:74:8c:83:9c:36:38:cf:a7: a5:63:dc:47:67:63:2d:87:9d:42:39:31:41:45:6a: dc:48:37:07:37:d1:0a:28:fa:e2:ba:43:2c:e0:09: 8d:8d:b7:f1:ea:fd:ff:1f:e9:dd:3b:5a:99:f5:95: 94:23:67:cc:a3:fb:7f:20:3d:f8:9a:c7:e2:3f:60: ca:12:ba:ff:d1:2b:59:2f:16:23:a4:c6:d1:fd:9f: d2:a3:c3:c9:c6:e1:57:c4:a9:96:09:1f:17:48:4a: 9d:9b:46:33:7b:52:08:fe:e3:c5:58:f9:61:2a:3f: 96:05:57:68:98:d3:72:27:7b:da:4a:0e:be:94:29: e2:04:2b:33:20:67:e8:a8:6b:0a:1c:17:33:aa:f2: 5c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:B5:6B:1C:56:66:FF:DC:7B:0E:C4:77:D1:2E:EB:A2:C2:02:75:6D X509v3 Authority Key Identifier: keyid:5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/5bVrHFZm_9x7DsR30S7rosICdW0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.62.21.0/24 109.68.56.0/21 193.151.72.0/22 Signature Algorithm: sha256WithRSAEncryption 1e:ae:31:ab:18:fc:9b:c2:8c:60:93:f7:a6:94:37:34:03:94: 91:7e:98:dd:89:3a:c3:d1:27:21:9c:8c:c6:0a:7a:78:ee:65: 50:c3:24:91:6d:ce:4f:e0:a3:e3:8f:f8:78:df:be:94:34:45: 2d:c0:99:82:b4:f5:4d:e2:32:16:53:dc:d9:14:94:7e:aa:d0: a3:e4:73:45:42:ae:44:97:f7:b0:30:7a:ae:fc:e0:93:66:53: 7e:15:af:93:b4:a0:93:7c:7b:84:d7:05:3a:ae:2d:e1:d6:68: de:e9:19:72:16:cd:4f:ec:e3:d1:2a:76:3c:2a:f2:ee:65:31: a7:9b:2c:b0:ff:cc:7c:84:74:60:79:5e:95:68:e3:26:80:66: 5a:77:bc:07:7e:20:f1:2e:66:70:68:9d:f6:00:17:d2:34:12: a9:ba:51:5a:eb:79:1e:46:e8:75:ef:62:6f:52:49:30:ed:b2: dc:62:c6:59:81:75:3f:91:a6:ac:5d:fc:9f:8d:02:6b:c5:0f: 2b:95:1f:b0:c8:43:2d:39:ee:ac:eb:6f:fd:0c:34:ce:0d:fb: 38:a4:2a:92:06:42:80:2b:be:63:cc:3a:f9:ed:cb:d3:1b:0d: 3a:15:51:15:60:9f:9d:2f:a0:6a:d9:c3:6e:49:1d:9b:d5:89: ac:24:f6:50 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt57CBJz/7culGAsmS9l1tGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDczMzZmYTkxNTcyMWNlM2JmZWUyMTdmNGU5OTE2NGRi OTUzMmIwHhcNMjYwMTAxMTQxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNWI1NmIxYzU2NjZmZmRjN2IwZWM0NzdkMTJlZWJhMmMyMDI3NTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmifwH/HWbLjtu2hWyLmMh3M8ZI3d 8dXFyUeWyTbx99rc51BzkTgWNs+LcULHeF1Q4KZyp/kJtjxku8IT6sNJvj1kKWJl 8mSYgjq7vywyg3oiIempiyhDNgKd+MBjjyD/ActThavlPmiWLRsJGLNIdIyDnDY4 z6elY9xHZ2Mth51COTFBRWrcSDcHN9EKKPriukMs4AmNjbfx6v3/H+ndO1qZ9ZWU I2fMo/t/ID34msfiP2DKErr/0StZLxYjpMbR/Z/So8PJxuFXxKmWCR8XSEqdm0Yz e1II/uPFWPlhKj+WBVdomNNyJ3vaSg6+lCniBCszIGfoqGsKHBczqvJckQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFOW1axxWZv/cew7Ed9Eu66LCAnVtMB8GA1UdIwQY MBaAFF3XM2+pFXIc47/uIX9OmRZNuVMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRjemI2a1ZjaHpqdi00aGYwNlpGazI1VXlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9lNzQ0YmQtZjZkOS00Zjc0LThjMDEt OGM0YmM0NTkyN2EzLzEvNWJWckhGWm1fOXg3RHNSMzBTN3Jvc0lDZFcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9lNzQ0YmQtZjZkOS00Zjc0LThjMDEtOGM0YmM0NTkyN2Ez LzEvWGRjemI2a1ZjaHpqdi00aGYwNlpGazI1VXlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABT4VAwQD bUQ4AwQCwZdIMA0GCSqGSIb3DQEBCwUAA4IBAQAerjGrGPybwoxgk/emlDc0A5SR fpjdiTrD0SchnIzGCnp47mVQwySRbc5P4KPjj/h4376UNEUtwJmCtPVN4jIWU9zZ FJR+qtCj5HNFQq5El/ewMHqu/OCTZlN+Fa+TtKCTfHuE1wU6ri3h1mje6RlyFs1P 7OPRKnY8KvLuZTGnmyyw/8x8hHRgeV6VaOMmgGZad7wHfiDxLmZwaJ32ABfSNBKp ulFa63keRuh172JvUkkw7bLcYsZZgXU/kaasXfyfjQJrxQ8rlR+wyEMtOe6s62/9 DDTODfs4pCqSBkKAK75jzDr57cvTGw06FVEVYJ+dL6Bq2cNuSR2b1YmsJPZQ -----END CERTIFICATE-----Generated at Fri Jan 9 06:21:15 2026 by rpki-client