This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/g4p9tyK55FRpeCWOSuZ8Bmz5xrg.roa File: g4p9tyK55FRpeCWOSuZ8Bmz5xrg.roa (raw, json) Hash identifier: hjRNfDC3YP5pXhjMmniTuNmauo3ts39PcOEU3dAW+7M= Subject key identifier: 83:8A:7D:B7:22:B9:E4:54:69:78:25:8E:4A:E6:7C:06:6C:F9:C6:B8 Certificate issuer: /CN=69c67969c3c9d8fadbc9a73e3ff56361d0203b71 Certificate serial: 019B7E393C8F2559E993F07019F0983934CE Authority key identifier: 69:C6:79:69:C3:C9:D8:FA:DB:C9:A7:3E:3F:F5:63:61:D0:20:3B:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/g4p9tyK55FRpeCWOSuZ8Bmz5xrg.roa Signing time: Fri 02 Jan 2026 10:20:38 +0000 ROA not before: Fri 02 Jan 2026 10:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200380 IP address blocks: 5.102.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.mft rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:3c:8f:25:59:e9:93:f0:70:19:f0:98:39:34:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69c67969c3c9d8fadbc9a73e3ff56361d0203b71 Validity Not Before: Jan 2 10:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=838a7db722b9e4546978258e4ae67c066cf9c6b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:87:ad:f8:5a:0f:66:e5:d0:fd:2f:60:89:f3: 36:11:08:5c:cf:fb:95:81:dc:e8:ed:b9:dc:e4:e1: 36:f2:75:e7:26:6b:96:af:a6:20:26:e3:d1:e3:79: 28:25:05:90:70:c2:37:3a:e8:61:79:f9:e0:20:1d: c2:68:51:55:a9:bc:cd:0a:e4:67:b3:ae:24:c6:51: ed:d4:60:82:90:84:78:73:8b:af:fb:e3:90:bb:10: 84:09:44:bd:df:62:f6:6b:e3:05:16:7d:91:e3:05: e0:fe:53:45:64:7a:26:50:75:b9:0c:47:38:91:59: 1c:1e:bc:c6:27:98:14:39:1b:e0:82:53:2a:d1:c6: 84:6b:d7:9b:50:60:bb:db:5f:09:bb:ab:df:1a:14: 27:65:54:a2:74:7d:26:ab:3a:48:c7:ee:ca:03:ff: ab:d1:2c:9a:92:25:0e:b7:34:a2:ab:9f:80:16:ad: b6:05:58:62:fc:3f:2c:52:33:68:f3:92:18:c8:e4: 96:ea:aa:f0:8f:40:61:a1:99:bd:1d:ea:e4:0a:88: 75:90:44:2c:e0:86:75:80:db:c9:32:5b:6c:6c:a4: bd:1c:df:67:4d:3d:56:2d:ab:13:01:8d:9f:ec:ff: 78:f3:6a:4f:64:b6:3a:f4:89:d1:89:dd:58:58:76: 85:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:8A:7D:B7:22:B9:E4:54:69:78:25:8E:4A:E6:7C:06:6C:F9:C6:B8 X509v3 Authority Key Identifier: keyid:69:C6:79:69:C3:C9:D8:FA:DB:C9:A7:3E:3F:F5:63:61:D0:20:3B:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/g4p9tyK55FRpeCWOSuZ8Bmz5xrg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.102.135.0/24 Signature Algorithm: sha256WithRSAEncryption cf:57:4d:4d:95:0c:5d:4a:49:3b:cf:9c:65:e9:1a:e3:d7:dc: 4a:0c:dd:79:89:85:f8:88:93:6b:49:42:7f:4e:5d:76:93:da: 3a:82:fc:aa:0e:1f:7e:f9:0a:3f:cf:b8:9e:bc:0c:19:50:00: 3a:7c:9b:ba:35:d3:c0:60:3f:5a:21:9d:52:07:cb:ef:e0:d1: a7:dc:fe:be:19:d8:8c:d5:60:d4:4f:2b:96:db:f3:f2:43:be: cb:10:5b:86:d8:55:82:5a:bb:d1:33:2f:84:4c:98:71:d2:08: 48:ec:ce:e4:20:81:38:c9:56:00:66:a6:b2:20:95:39:75:23: c9:97:28:ed:aa:73:f7:72:06:fc:b4:a8:c2:f3:73:ab:f7:ac: cd:ac:e5:14:2d:d6:87:dd:b6:49:fb:7c:69:7a:8e:36:e6:ac: ca:9e:1f:85:d1:df:32:f8:46:f9:25:53:44:b9:5a:89:3f:23: 5f:a5:8b:e5:67:8d:0d:2a:33:65:ab:92:fd:d0:51:8b:fd:03: cd:b4:34:47:02:75:b9:41:4e:b6:1f:60:78:e4:93:5d:ac:35: f2:d9:42:9d:0c:48:3b:df:7d:20:60:36:e7:6d:72:08:54:0a: a7:07:67:4b:dc:ee:58:3e:5c:0e:28:4b:26:78:0d:8a:89:6a: 74:ee:5d:ef -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OTyPJVnpk/BwGfCYOTTOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5YzY3OTY5YzNjOWQ4ZmFkYmM5YTczZTNmZjU2MzYxZDAy MDNiNzEwHhcNMjYwMTAyMTAyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzhhN2RiNzIyYjllNDU0Njk3ODI1OGU0YWU2N2MwNjZjZjljNmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYet+FoPZuXQ/S9gifM2EQhcz/uV gdzo7bnc5OE28nXnJmuWr6YgJuPR43koJQWQcMI3OuhhefngIB3CaFFVqbzNCuRn s64kxlHt1GCCkIR4c4uv++OQuxCECUS932L2a+MFFn2R4wXg/lNFZHomUHW5DEc4 kVkcHrzGJ5gUORvgglMq0caEa9ebUGC7218Ju6vfGhQnZVSidH0mqzpIx+7KA/+r 0SyakiUOtzSiq5+AFq22BVhi/D8sUjNo85IYyOSW6qrwj0BhoZm9HerkCoh1kEQs 4IZ1gNvJMltsbKS9HN9nTT1WLasTAY2f7P9482pPZLY69InRid1YWHaFAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIOKfbciueRUaXgljkrmfAZs+ca4MB8GA1UdIwQY MBaAFGnGeWnDydj628mnPj/1Y2HQIDtxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWNaNWFjUEoyUHJieWFjLVBfVmpZZEFnTzNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9jZGJmOGYtNmU2Ny00YWIxLWJmMTgt NDhlZjhlMTExNGU0LzEvZzRwOXR5SzU1RlJwZUNXT1N1WjhCbXo1eHJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9jZGJmOGYtNmU2Ny00YWIxLWJmMTgtNDhlZjhlMTExNGU0 LzEvYWNaNWFjUEoyUHJieWFjLVBfVmpZZEFnTzNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABWaHMA0G CSqGSIb3DQEBCwUAA4IBAQDPV01NlQxdSkk7z5xl6Rrj19xKDN15iYX4iJNrSUJ/ Tl12k9o6gvyqDh9++Qo/z7ievAwZUAA6fJu6NdPAYD9aIZ1SB8vv4NGn3P6+GdiM 1WDUTyuW2/PyQ77LEFuG2FWCWrvRMy+ETJhx0ghI7M7kIIE4yVYAZqayIJU5dSPJ lyjtqnP3cgb8tKjC83Or96zNrOUULdaH3bZJ+3xpeo425qzKnh+F0d8y+Eb5JVNE uVqJPyNfpYvlZ40NKjNlq5L90FGL/QPNtDRHAnW5QU62H2B45JNdrDXy2UKdDEg7 330gYDbnbXIIVAqnB2dL3O5YPlwOKEsmeA2KiWp07l3v -----END CERTIFICATE-----Generated at Mon Feb 9 23:55:03 2026 by rpki-client