This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/e3iOXt4kN0x8sNUsLzYrx2gh1uA.roa File: e3iOXt4kN0x8sNUsLzYrx2gh1uA.roa (raw, json) Hash identifier: wihWRQC4V6tMHjFES8yjsPfSZBAFUkTbgCOxUXuLKJQ= Subject key identifier: 7B:78:8E:5E:DE:24:37:4C:7C:B0:D5:2C:2F:36:2B:C7:68:21:D6:E0 Certificate issuer: /CN=69c67969c3c9d8fadbc9a73e3ff56361d0203b71 Certificate serial: 019B7E393C62363E0A7277D99943393362A5 Authority key identifier: 69:C6:79:69:C3:C9:D8:FA:DB:C9:A7:3E:3F:F5:63:61:D0:20:3B:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/e3iOXt4kN0x8sNUsLzYrx2gh1uA.roa Signing time: Fri 02 Jan 2026 10:20:38 +0000 ROA not before: Fri 02 Jan 2026 10:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199976 IP address blocks: 5.102.128.0/24 maxlen: 24 5.102.129.0/24 maxlen: 24 5.102.130.0/24 maxlen: 24 5.102.132.0/24 maxlen: 24 185.136.28.0/24 maxlen: 24 185.136.29.0/24 maxlen: 24 185.136.30.0/24 maxlen: 24 185.136.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.mft rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:3c:62:36:3e:0a:72:77:d9:99:43:39:33:62:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69c67969c3c9d8fadbc9a73e3ff56361d0203b71 Validity Not Before: Jan 2 10:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7b788e5ede24374c7cb0d52c2f362bc76821d6e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fd:b0:5d:34:2e:67:11:5e:32:51:26:8c:30: 1e:f5:76:34:70:85:a6:a9:7e:ad:52:60:89:3e:98: 73:8c:94:ef:b1:84:92:12:c8:03:bf:97:27:f7:af: 5b:16:98:30:de:ac:65:ab:84:40:5f:81:1a:7e:b9: ae:ec:ed:72:e8:de:64:87:b2:83:99:9b:e4:68:f5: 24:97:d5:75:75:2b:ee:6f:49:43:01:f4:ef:b3:e9: 4a:5d:99:64:5b:32:8d:fb:6a:b5:ff:88:48:90:7b: a2:e9:4b:24:8b:03:b7:08:94:68:de:ed:8e:1f:35: 3b:69:b1:6d:f2:b5:1d:27:a5:fd:ff:0e:22:62:3b: 7f:e0:e2:28:0b:3c:a1:c4:b1:07:8e:47:58:06:11: 16:90:f1:e0:1f:f5:08:eb:bf:ea:ce:be:96:10:97: 85:9d:8c:36:5e:f0:d5:13:a1:4b:9f:28:1d:7f:40: 7f:b6:c0:e1:e0:c6:2c:51:f0:dc:b7:62:c4:3c:5c: 24:25:fc:d1:ae:fd:e4:f3:1e:3d:5d:10:36:9d:f9: 2f:65:ba:9e:3b:0c:4d:38:95:22:2b:79:2c:c2:f5: 5d:2b:74:73:cb:46:b9:1d:5c:b6:6c:00:6d:75:c8: c5:1a:bc:84:7a:2e:c9:78:96:c1:ca:52:49:74:8a: ce:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:78:8E:5E:DE:24:37:4C:7C:B0:D5:2C:2F:36:2B:C7:68:21:D6:E0 X509v3 Authority Key Identifier: keyid:69:C6:79:69:C3:C9:D8:FA:DB:C9:A7:3E:3F:F5:63:61:D0:20:3B:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/e3iOXt4kN0x8sNUsLzYrx2gh1uA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.102.128.0-5.102.130.255 5.102.132.0/24 185.136.28.0/22 Signature Algorithm: sha256WithRSAEncryption 39:e9:90:ce:20:38:76:1d:32:04:29:be:1a:7c:36:c7:f7:67: 0d:9c:c4:36:93:e1:40:9d:64:e3:e4:3c:e6:9c:cb:62:68:a7: 4a:2c:55:d5:9e:8f:45:88:de:8a:02:73:6a:02:d0:cb:9b:9d: 01:26:5e:40:20:45:c1:84:f2:a7:2c:3a:78:79:db:a7:74:9d: e3:51:f5:e4:78:d5:b2:5e:f4:65:1a:37:5f:9c:1c:c9:f8:52: 52:de:76:51:b8:a7:84:da:cf:5e:a3:78:2a:3d:0d:c0:fc:62: 36:35:11:d9:c2:90:4a:2b:92:a2:1b:e5:32:1b:90:d3:f5:b9: 82:86:4c:f6:72:91:78:e2:43:63:d9:d9:b0:e6:86:cd:21:b1: 8a:eb:9e:6f:22:3e:97:a1:5d:53:3b:f2:e1:53:66:69:3e:e1: 90:55:8a:d8:39:ff:3a:d3:36:12:b0:0f:d2:bf:af:9c:6a:e1: 18:e2:8d:e2:9e:e0:45:1e:55:50:42:08:f4:5b:dd:45:01:97: 0a:37:39:d7:07:79:19:b1:3a:e6:23:7a:52:a9:63:6a:05:fc: 00:1a:76:ba:d4:84:73:ce:7f:b6:70:86:f1:3b:8b:be:b4:69: c7:e1:ec:39:b6:1d:42:b6:bc:b6:b0:74:6b:ba:1f:2a:80:86: 00:9b:10:b2 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt+OTxiNj4KcnfZmUM5M2KlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5YzY3OTY5YzNjOWQ4ZmFkYmM5YTczZTNmZjU2MzYxZDAy MDNiNzEwHhcNMjYwMTAyMTAyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Yjc4OGU1ZWRlMjQzNzRjN2NiMGQ1MmMyZjM2MmJjNzY4MjFkNmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/2wXTQuZxFeMlEmjDAe9XY0cIWm qX6tUmCJPphzjJTvsYSSEsgDv5cn969bFpgw3qxlq4RAX4Eafrmu7O1y6N5kh7KD mZvkaPUkl9V1dSvub0lDAfTvs+lKXZlkWzKN+2q1/4hIkHui6UskiwO3CJRo3u2O HzU7abFt8rUdJ6X9/w4iYjt/4OIoCzyhxLEHjkdYBhEWkPHgH/UI67/qzr6WEJeF nYw2XvDVE6FLnygdf0B/tsDh4MYsUfDct2LEPFwkJfzRrv3k8x49XRA2nfkvZbqe OwxNOJUiK3kswvVdK3Rzy0a5HVy2bABtdcjFGryEei7JeJbBylJJdIrOqwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFHt4jl7eJDdMfLDVLC82K8doIdbgMB8GA1UdIwQY MBaAFGnGeWnDydj628mnPj/1Y2HQIDtxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWNaNWFjUEoyUHJieWFjLVBfVmpZZEFnTzNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9jZGJmOGYtNmU2Ny00YWIxLWJmMTgt NDhlZjhlMTExNGU0LzEvZTNpT1h0NGtOMHg4c05Vc0x6WXJ4MmdoMXVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9jZGJmOGYtNmU2Ny00YWIxLWJmMTgtNDhlZjhlMTExNGU0 LzEvYWNaNWFjUEoyUHJieWFjLVBfVmpZZEFnTzNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAcFZoAD BAAFZoIDBAAFZoQDBAK5iBwwDQYJKoZIhvcNAQELBQADggEBADnpkM4gOHYdMgQp vhp8Nsf3Zw2cxDaT4UCdZOPkPOacy2Jop0osVdWej0WI3ooCc2oC0MubnQEmXkAg RcGE8qcsOnh526d0neNR9eR41bJe9GUaN1+cHMn4UlLedlG4p4Taz16jeCo9DcD8 YjY1EdnCkEorkqIb5TIbkNP1uYKGTPZykXjiQ2PZ2bDmhs0hsYrrnm8iPpehXVM7 8uFTZmk+4ZBVitg5/zrTNhKwD9K/r5xq4RjijeKe4EUeVVBCCPRb3UUBlwo3OdcH eRmxOuYjelKpY2oF/AAadrrUhHPOf7ZwhvE7i760acfh7Dm2HUK2vLawdGu6HyqA hgCbELI= -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:20 2026 by rpki-client