This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/KSn1SI2kD3BF6NrlzSx96xvLCsg.roa File: KSn1SI2kD3BF6NrlzSx96xvLCsg.roa (raw, json) Hash identifier: qBeitn/EGWWGEdktzJewxufauf5bR7KJZG7tIPAcxMA= Subject key identifier: 29:29:F5:48:8D:A4:0F:70:45:E8:DA:E5:CD:2C:7D:EB:1B:CB:0A:C8 Certificate issuer: /CN=5dd7336fa915721ce3bfee217f4e99164db9532b Certificate serial: 019B79EC1CFFA4D0FEC67FD89F63B2543856 Authority key identifier: 5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/KSn1SI2kD3BF6NrlzSx96xvLCsg.roa Signing time: Thu 01 Jan 2026 14:17:55 +0000 ROA not before: Thu 01 Jan 2026 14:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 36351 IP address blocks: 5.62.22.0/24 maxlen: 24 5.62.23.0/24 maxlen: 24 5.62.33.0/24 maxlen: 24 5.62.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 08:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:1c:ff:a4:d0:fe:c6:7f:d8:9f:63:b2:54:38:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd7336fa915721ce3bfee217f4e99164db9532b Validity Not Before: Jan 1 14:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2929f5488da40f7045e8dae5cd2c7deb1bcb0ac8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1a:a8:b9:75:7f:d1:ed:ad:69:ac:f0:81:d4: 61:e1:4c:4f:39:a9:d4:1a:6b:71:19:aa:d3:3f:2c: 3c:24:e1:bd:ad:87:5a:5b:bb:71:a7:b4:a4:d6:ea: 00:d7:c6:99:97:70:3f:05:aa:1d:f8:df:bb:e6:a9: b1:a8:55:88:69:6d:f0:48:71:50:86:5e:6c:9e:69: 91:27:49:1f:df:8f:e5:ef:cb:dc:05:bb:d4:86:9f: 18:48:15:1b:d1:e6:6f:26:ab:4a:18:71:5d:02:94: 41:7e:a8:1c:35:d7:31:0f:47:79:96:5e:5a:c3:73: ab:3f:5a:26:d6:96:26:9e:fb:9e:e5:7e:23:53:ec: 30:55:3d:29:70:44:cc:6e:06:d4:07:eb:c5:cf:79: 56:70:6e:27:f7:ff:5d:f8:08:08:ca:75:d2:2d:df: 44:40:c4:87:02:19:5c:e6:d8:fb:d6:08:41:8b:3e: a6:41:ae:d5:ee:b0:91:89:a7:f2:35:d7:93:f4:3f: 84:eb:9e:6f:4b:ac:f2:75:de:7d:69:4c:da:cb:d8: 7a:9f:0f:01:7b:c2:ad:5e:14:bb:6b:41:c4:7e:bf: 6a:07:9d:47:45:0c:c2:06:79:72:14:f7:c2:d2:78: d7:2c:18:fe:e4:90:56:01:a7:59:ae:d9:2f:37:60: 41:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:29:F5:48:8D:A4:0F:70:45:E8:DA:E5:CD:2C:7D:EB:1B:CB:0A:C8 X509v3 Authority Key Identifier: keyid:5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/KSn1SI2kD3BF6NrlzSx96xvLCsg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.62.22.0/23 5.62.33.0/24 5.62.35.0/24 Signature Algorithm: sha256WithRSAEncryption 38:4a:80:88:dd:86:6b:97:26:53:c7:5e:c7:fe:8c:f1:d4:a4: 23:52:e0:cf:6d:4f:c6:61:f1:be:af:a0:0e:7b:2c:cd:57:a8: 98:c1:4a:ce:59:43:3a:fe:d5:18:9b:98:e1:ec:d5:2c:59:93: 0a:f1:d1:09:c1:45:1f:0f:66:af:84:0d:2c:fd:5c:a4:87:19: aa:66:85:80:09:42:c1:e7:b5:ab:e6:01:30:8a:ef:e3:d5:a9: ba:28:1b:a6:42:3d:0f:6d:e5:10:65:26:cb:e7:d9:d0:e0:5d: 95:a3:4a:97:ab:f7:0b:b8:a5:a2:d6:97:61:a7:c5:8d:dc:30: 66:f4:80:2c:af:98:47:c0:a8:fd:95:d7:7e:81:88:9f:40:0d: 9f:d4:77:12:56:ff:44:da:91:f5:8d:5e:d5:38:ad:9a:65:53: 5b:92:47:fc:b7:a9:f8:20:6a:9f:fd:1a:8a:ee:2d:00:34:12: 6e:7a:9d:47:99:83:87:0a:7e:b8:94:e0:49:e3:bf:36:93:ee: 7e:53:53:7e:62:8c:cd:78:a4:66:a8:78:28:8a:e9:a7:46:b8: a8:ff:24:35:7b:dd:41:5c:f2:96:88:f1:fb:2e:64:39:52:cd: c8:36:56:f6:12:27:c3:46:7f:0b:37:55:c1:b4:72:e3:58:48: 24:a2:31:cf -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt57Bz/pND+xn/Yn2OyVDhWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDczMzZmYTkxNTcyMWNlM2JmZWUyMTdmNGU5OTE2NGRi OTUzMmIwHhcNMjYwMTAxMTQxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTI5ZjU0ODhkYTQwZjcwNDVlOGRhZTVjZDJjN2RlYjFiY2IwYWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRqouXV/0e2taazwgdRh4UxPOanU GmtxGarTPyw8JOG9rYdaW7txp7Sk1uoA18aZl3A/Baod+N+75qmxqFWIaW3wSHFQ hl5snmmRJ0kf34/l78vcBbvUhp8YSBUb0eZvJqtKGHFdApRBfqgcNdcxD0d5ll5a w3OrP1om1pYmnvue5X4jU+wwVT0pcETMbgbUB+vFz3lWcG4n9/9d+AgIynXSLd9E QMSHAhlc5tj71ghBiz6mQa7V7rCRiafyNdeT9D+E655vS6zydd59aUzay9h6nw8B e8KtXhS7a0HEfr9qB51HRQzCBnlyFPfC0njXLBj+5JBWAadZrtkvN2BBTwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFCkp9UiNpA9wReja5c0sfesbywrIMB8GA1UdIwQY MBaAFF3XM2+pFXIc47/uIX9OmRZNuVMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRjemI2a1ZjaHpqdi00aGYwNlpGazI1VXlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9lNzQ0YmQtZjZkOS00Zjc0LThjMDEt OGM0YmM0NTkyN2EzLzEvS1NuMVNJMmtEM0JGNk5ybHpTeDk2eHZMQ3NnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9lNzQ0YmQtZjZkOS00Zjc0LThjMDEtOGM0YmM0NTkyN2Ez LzEvWGRjemI2a1ZjaHpqdi00aGYwNlpGazI1VXlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBBT4WAwQA BT4hAwQABT4jMA0GCSqGSIb3DQEBCwUAA4IBAQA4SoCI3YZrlyZTx17H/ozx1KQj UuDPbU/GYfG+r6AOeyzNV6iYwUrOWUM6/tUYm5jh7NUsWZMK8dEJwUUfD2avhA0s /VykhxmqZoWACULB57Wr5gEwiu/j1am6KBumQj0PbeUQZSbL59nQ4F2Vo0qXq/cL uKWi1pdhp8WN3DBm9IAsr5hHwKj9ldd+gYifQA2f1HcSVv9E2pH1jV7VOK2aZVNb kkf8t6n4IGqf/RqK7i0ANBJuep1HmYOHCn64lOBJ4782k+5+U1N+YozNeKRmqHgo iumnRrio/yQ1e91BXPKWiPH7LmQ5Us3INlb2EifDRn8LN1XBtHLjWEgkojHP -----END CERTIFICATE-----Generated at Fri Jan 2 16:26:27 2026 by rpki-client