This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/_NBJFnlrLjlxU-NkUZtiAj1J8qo.roa File: _NBJFnlrLjlxU-NkUZtiAj1J8qo.roa (raw, json) Hash identifier: HyoiSLaZjrIA6KdMeiHJErPb4cCaz1fssEroy13+1F0= Subject key identifier: FC:D0:49:16:79:6B:2E:39:71:53:E3:64:51:9B:62:02:3D:49:F2:AA Certificate issuer: /CN=69c67969c3c9d8fadbc9a73e3ff56361d0203b71 Certificate serial: 019B7E393D40B16F0FE766D999845D882686 Authority key identifier: 69:C6:79:69:C3:C9:D8:FA:DB:C9:A7:3E:3F:F5:63:61:D0:20:3B:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/_NBJFnlrLjlxU-NkUZtiAj1J8qo.roa Signing time: Fri 02 Jan 2026 10:20:38 +0000 ROA not before: Fri 02 Jan 2026 10:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207191 IP address blocks: 5.102.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.mft rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:3d:40:b1:6f:0f:e7:66:d9:99:84:5d:88:26:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69c67969c3c9d8fadbc9a73e3ff56361d0203b71 Validity Not Before: Jan 2 10:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fcd04916796b2e397153e364519b62023d49f2aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d7:4e:be:c2:fd:ca:1b:b2:89:04:15:0b:b7: 56:bd:4a:51:f5:95:df:2e:f6:d8:90:d3:95:85:73: ef:2f:ec:c0:2d:3c:6a:f1:9f:47:32:89:18:40:47: da:bd:87:9b:03:dc:aa:ff:c9:0c:1a:bc:0a:81:b8: 8b:8e:42:df:83:95:92:42:80:cd:dd:d2:6e:b1:24: 0f:66:11:e7:09:5f:5c:15:e9:16:b7:02:70:3e:1a: d4:09:7c:d3:4b:a2:56:32:6c:f4:f5:7f:c6:91:5f: 0a:66:d4:85:c0:c5:05:4b:06:c9:6c:33:12:ca:d2: d6:b6:58:94:17:14:a9:5d:4f:28:30:59:da:fd:c3: 74:f7:c0:13:ed:cc:dd:ba:e2:d1:cc:c5:9c:e4:ed: 5d:97:0c:8c:a3:38:a4:b1:65:5b:24:61:7b:2d:1b: c7:d9:ac:69:f9:b5:2d:cb:7b:a6:4c:1f:7d:7d:9f: 0d:88:25:20:ac:cf:52:65:3c:b7:0d:d0:37:09:cf: 4c:aa:98:8f:2a:00:35:4b:7c:0e:27:4e:e3:34:74: 4c:e7:50:8f:21:06:3a:8d:0f:d5:75:40:f0:61:4d: 2d:e5:41:d5:dd:40:9e:46:37:89:48:7e:82:ec:ea: 1e:c8:51:b7:c3:05:55:fc:ef:0e:3a:6a:1a:7f:bd: 78:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:D0:49:16:79:6B:2E:39:71:53:E3:64:51:9B:62:02:3D:49:F2:AA X509v3 Authority Key Identifier: keyid:69:C6:79:69:C3:C9:D8:FA:DB:C9:A7:3E:3F:F5:63:61:D0:20:3B:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/_NBJFnlrLjlxU-NkUZtiAj1J8qo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.102.134.0/24 Signature Algorithm: sha256WithRSAEncryption 38:7f:66:18:c7:ba:ed:85:61:4d:cd:e6:7f:4e:3d:6b:e3:28: 15:fb:33:f2:ff:d5:72:3d:4a:ba:8d:40:ff:77:e6:a5:8e:31: b0:e0:f9:83:44:3d:87:45:52:62:f7:23:af:70:72:96:9a:c5: 53:51:26:19:3d:74:f7:9f:2d:01:0a:ba:78:56:32:9a:68:dc: b7:00:50:98:31:fa:87:02:86:5f:5b:05:f7:8d:e6:5b:69:8e: 00:2f:37:10:d0:c2:bd:62:32:53:d4:a7:15:57:21:64:9e:90: 44:2b:1a:30:8e:09:6b:aa:97:dd:0e:10:cf:0d:f6:57:c1:46: 61:7a:34:5d:f8:c0:f8:8e:06:ea:19:fc:98:b9:f0:cb:dd:e4: d3:5e:e4:d0:0a:8e:53:2a:c3:7b:4f:06:5d:d0:ef:60:50:fb: 34:c1:14:d6:12:d4:29:c3:7d:6c:b9:51:c9:b8:ae:fe:65:67: c7:5f:22:72:2f:35:f9:4f:aa:06:59:57:3e:86:f4:20:a3:82: 74:81:8f:3a:1f:e0:3f:90:f9:d6:89:76:0f:b2:a6:14:36:cd: 70:a0:1d:c4:d7:fc:58:67:14:89:b4:45:44:52:a9:b5:92:89: 28:33:df:86:3c:10:75:1a:5d:a1:70:2a:4e:a3:7d:d7:ee:25: f4:8c:fe:03 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OT1AsW8P52bZmYRdiCaGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5YzY3OTY5YzNjOWQ4ZmFkYmM5YTczZTNmZjU2MzYxZDAy MDNiNzEwHhcNMjYwMTAyMTAyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmY2QwNDkxNjc5NmIyZTM5NzE1M2UzNjQ1MTliNjIwMjNkNDlmMmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstdOvsL9yhuyiQQVC7dWvUpR9ZXf LvbYkNOVhXPvL+zALTxq8Z9HMokYQEfavYebA9yq/8kMGrwKgbiLjkLfg5WSQoDN 3dJusSQPZhHnCV9cFekWtwJwPhrUCXzTS6JWMmz09X/GkV8KZtSFwMUFSwbJbDMS ytLWtliUFxSpXU8oMFna/cN098AT7czduuLRzMWc5O1dlwyMoziksWVbJGF7LRvH 2axp+bUty3umTB99fZ8NiCUgrM9SZTy3DdA3Cc9MqpiPKgA1S3wOJ07jNHRM51CP IQY6jQ/VdUDwYU0t5UHV3UCeRjeJSH6C7OoeyFG3wwVV/O8OOmoaf714ZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPzQSRZ5ay45cVPjZFGbYgI9SfKqMB8GA1UdIwQY MBaAFGnGeWnDydj628mnPj/1Y2HQIDtxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWNaNWFjUEoyUHJieWFjLVBfVmpZZEFnTzNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9jZGJmOGYtNmU2Ny00YWIxLWJmMTgt NDhlZjhlMTExNGU0LzEvX05CSkZubHJMamx4VS1Oa1VadGlBajFKOHFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9jZGJmOGYtNmU2Ny00YWIxLWJmMTgtNDhlZjhlMTExNGU0 LzEvYWNaNWFjUEoyUHJieWFjLVBfVmpZZEFnTzNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABWaGMA0G CSqGSIb3DQEBCwUAA4IBAQA4f2YYx7rthWFNzeZ/Tj1r4ygV+zPy/9VyPUq6jUD/ d+aljjGw4PmDRD2HRVJi9yOvcHKWmsVTUSYZPXT3ny0BCrp4VjKaaNy3AFCYMfqH AoZfWwX3jeZbaY4ALzcQ0MK9YjJT1KcVVyFknpBEKxowjglrqpfdDhDPDfZXwUZh ejRd+MD4jgbqGfyYufDL3eTTXuTQCo5TKsN7TwZd0O9gUPs0wRTWEtQpw31suVHJ uK7+ZWfHXyJyLzX5T6oGWVc+hvQgo4J0gY86H+A/kPnWiXYPsqYUNs1woB3E1/xY ZxSJtEVEUqm1kokoM9+GPBB1Gl2hcCpOo33X7iX0jP4D -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:08 2026 by rpki-client