This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/Exw5qyeOsmaTxkuI-TVnrQ12bNY.roa File: Exw5qyeOsmaTxkuI-TVnrQ12bNY.roa (raw, json) Hash identifier: 5anMOhWc/Hz9I+7ZHBfOzmKMYIxEdwwqXzXF5HG055M= Subject key identifier: 13:1C:39:AB:27:8E:B2:66:93:C6:4B:88:F9:35:67:AD:0D:76:6C:D6 Certificate issuer: /CN=69c67969c3c9d8fadbc9a73e3ff56361d0203b71 Certificate serial: 019B7E393DCD2A6F4ABCF521A74F3F7E48AE Authority key identifier: 69:C6:79:69:C3:C9:D8:FA:DB:C9:A7:3E:3F:F5:63:61:D0:20:3B:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/Exw5qyeOsmaTxkuI-TVnrQ12bNY.roa Signing time: Fri 02 Jan 2026 10:20:39 +0000 ROA not before: Fri 02 Jan 2026 10:20:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209259 IP address blocks: 5.102.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.mft rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:3d:cd:2a:6f:4a:bc:f5:21:a7:4f:3f:7e:48:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69c67969c3c9d8fadbc9a73e3ff56361d0203b71 Validity Not Before: Jan 2 10:20:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=131c39ab278eb26693c64b88f93567ad0d766cd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:7f:c2:46:b9:4d:85:bc:49:93:e5:03:f7:05: 6c:c2:1f:8e:76:07:ae:a1:63:c6:0d:cc:18:a0:a2: 6c:cc:8c:86:31:45:ff:dc:3e:1e:21:69:c3:4c:0d: 73:93:10:f9:c8:8f:aa:aa:07:d3:06:a6:32:fb:15: b3:57:31:a9:6b:54:40:ab:a9:b3:5a:0d:1f:fa:66: 65:e9:fb:f2:e3:f8:e8:7f:78:37:ed:4d:39:90:81: 1e:c0:f8:9e:99:c5:10:10:57:82:e4:3b:f5:30:2a: 40:20:ef:fd:98:35:51:b0:a3:7b:74:37:6c:52:1a: 95:5b:6d:43:a7:e1:bb:40:44:8a:37:03:a8:98:3a: 44:7c:5a:9e:07:4d:94:57:63:1e:db:4a:2d:03:2e: 36:39:74:1b:fc:a7:2a:b6:ff:e1:ac:cf:61:f1:06: 21:fe:53:3a:90:86:56:c2:16:3a:8a:f1:18:e1:30: 84:83:2b:6d:ec:6e:3e:8b:09:b1:bd:7b:b5:e6:1e: 14:1a:b8:52:d0:7c:ae:7a:ed:a4:9e:8d:ef:05:f3: 0a:dd:e3:f6:b7:a9:0c:f2:ad:30:44:27:e8:75:8a: 2f:55:eb:f8:4b:6c:27:a4:a8:c9:8b:31:3c:c4:37: c8:e6:84:a2:81:1d:83:5f:be:3c:35:19:c9:7d:18: d5:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:1C:39:AB:27:8E:B2:66:93:C6:4B:88:F9:35:67:AD:0D:76:6C:D6 X509v3 Authority Key Identifier: keyid:69:C6:79:69:C3:C9:D8:FA:DB:C9:A7:3E:3F:F5:63:61:D0:20:3B:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/Exw5qyeOsmaTxkuI-TVnrQ12bNY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.102.133.0/24 Signature Algorithm: sha256WithRSAEncryption 45:b5:19:0e:9c:91:7b:dd:be:04:5d:bc:a8:ba:52:d7:63:cf: b0:95:a8:5a:21:c8:32:df:84:9c:72:ed:51:d2:92:07:66:21: 04:27:05:11:0e:41:e9:37:28:23:09:df:1a:fb:ac:04:75:92: 82:21:c0:7c:07:09:ab:21:5b:e3:7b:3c:52:b5:46:bf:24:c0: 31:b0:bf:4d:07:f4:d6:e7:f9:fe:2b:29:93:28:45:7b:2f:b2: f6:5f:6d:71:4a:49:2a:69:78:80:a8:28:45:54:be:6f:a8:c2: 69:a0:11:4b:27:05:00:a9:64:b6:f9:52:bf:c6:33:f8:a9:e5: e1:d8:c6:ca:04:57:b5:46:fb:5a:0f:ad:5c:93:c8:c7:42:24: 6f:ee:73:1d:d6:2b:e7:e8:dd:56:c2:a9:bb:50:72:db:41:b3: 55:9b:14:49:a9:f5:b3:ab:63:f2:a1:74:2b:f8:ef:4b:ec:c1: 5d:dd:97:ef:c4:e6:87:6e:cb:a7:26:59:f3:c4:a6:d3:18:17: 53:83:83:cc:32:97:16:8f:27:96:de:2c:54:f2:9c:72:d5:cc: f7:5c:c1:d1:9e:74:be:2c:3b:b0:5b:3a:78:d4:b0:da:38:b6: 16:a9:58:7e:c5:2d:75:29:54:9a:56:99:0a:2f:cf:3f:14:a3: bd:3e:30:30 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OT3NKm9KvPUhp08/fkiuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5YzY3OTY5YzNjOWQ4ZmFkYmM5YTczZTNmZjU2MzYxZDAy MDNiNzEwHhcNMjYwMTAyMTAyMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzFjMzlhYjI3OGViMjY2OTNjNjRiODhmOTM1NjdhZDBkNzY2Y2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4X/CRrlNhbxJk+UD9wVswh+Odgeu oWPGDcwYoKJszIyGMUX/3D4eIWnDTA1zkxD5yI+qqgfTBqYy+xWzVzGpa1RAq6mz Wg0f+mZl6fvy4/jof3g37U05kIEewPiemcUQEFeC5Dv1MCpAIO/9mDVRsKN7dDds UhqVW21Dp+G7QESKNwOomDpEfFqeB02UV2Me20otAy42OXQb/Kcqtv/hrM9h8QYh /lM6kIZWwhY6ivEY4TCEgytt7G4+iwmxvXu15h4UGrhS0Hyueu2kno3vBfMK3eP2 t6kM8q0wRCfodYovVev4S2wnpKjJizE8xDfI5oSigR2DX748NRnJfRjVIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBMcOasnjrJmk8ZLiPk1Z60NdmzWMB8GA1UdIwQY MBaAFGnGeWnDydj628mnPj/1Y2HQIDtxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWNaNWFjUEoyUHJieWFjLVBfVmpZZEFnTzNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9jZGJmOGYtNmU2Ny00YWIxLWJmMTgt NDhlZjhlMTExNGU0LzEvRXh3NXF5ZU9zbWFUeGt1SS1UVm5yUTEyYk5ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9jZGJmOGYtNmU2Ny00YWIxLWJmMTgtNDhlZjhlMTExNGU0 LzEvYWNaNWFjUEoyUHJieWFjLVBfVmpZZEFnTzNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABWaFMA0G CSqGSIb3DQEBCwUAA4IBAQBFtRkOnJF73b4EXbyoulLXY8+wlahaIcgy34Sccu1R 0pIHZiEEJwURDkHpNygjCd8a+6wEdZKCIcB8BwmrIVvjezxStUa/JMAxsL9NB/TW 5/n+KymTKEV7L7L2X21xSkkqaXiAqChFVL5vqMJpoBFLJwUAqWS2+VK/xjP4qeXh 2MbKBFe1RvtaD61ck8jHQiRv7nMd1ivn6N1Wwqm7UHLbQbNVmxRJqfWzq2PyoXQr +O9L7MFd3ZfvxOaHbsunJlnzxKbTGBdTg4PMMpcWjyeW3ixU8pxy1cz3XMHRnnS+ LDuwWzp41LDaOLYWqVh+xS11KVSaVpkKL88/FKO9PjAw -----END CERTIFICATE-----Generated at Tue Feb 10 00:03:17 2026 by rpki-client