This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/kf5Z8uwtQg4_fRHhJwlsy7HUpuY.roa File: kf5Z8uwtQg4_fRHhJwlsy7HUpuY.roa (raw, json) Hash identifier: h5g52iMUxElJ8ULuCrT2oQz8CHmqTBslvGMi61f4Mws= Subject key identifier: 91:FE:59:F2:EC:2D:42:0E:3F:7D:11:E1:27:09:6C:CB:B1:D4:A6:E6 Certificate issuer: /CN=54272ff3172973c869a52212bf7ce801e1f8e783 Certificate serial: 019B7C126F8E31BF73A99D177A80D2E898FC Authority key identifier: 54:27:2F:F3:17:29:73:C8:69:A5:22:12:BF:7C:E8:01:E1:F8:E7:83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCcv8xcpc8hppSISv3zoAeH454M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/kf5Z8uwtQg4_fRHhJwlsy7HUpuY.roa Signing time: Fri 02 Jan 2026 00:19:01 +0000 ROA not before: Fri 02 Jan 2026 00:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47986 IP address blocks: 94.124.48.0/21 maxlen: 21 94.124.48.0/24 maxlen: 24 94.124.49.0/24 maxlen: 24 94.124.50.0/24 maxlen: 24 94.124.51.0/24 maxlen: 24 94.124.52.0/24 maxlen: 24 94.124.53.0/24 maxlen: 24 94.124.54.0/24 maxlen: 24 94.124.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.mft rsync://rpki.ripe.net/repository/DEFAULT/VCcv8xcpc8hppSISv3zoAeH454M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:6f:8e:31:bf:73:a9:9d:17:7a:80:d2:e8:98:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54272ff3172973c869a52212bf7ce801e1f8e783 Validity Not Before: Jan 2 00:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=91fe59f2ec2d420e3f7d11e127096ccbb1d4a6e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:85:37:6f:66:fc:fa:75:c3:56:98:8a:bd:df: 99:b2:50:f6:c7:ca:d3:9f:8a:81:7b:1a:b3:6e:0b: bf:20:e0:6f:4d:b3:73:af:13:4b:41:d8:da:d7:ae: a5:0d:0f:29:66:dd:7b:78:3a:83:93:b3:e4:3b:2c: 20:c2:66:4e:90:85:b9:82:7a:68:f4:d8:5b:51:e2: 6f:04:04:82:4a:79:20:37:8e:11:12:43:5a:38:7e: 79:35:46:5e:ac:d9:8b:be:c8:e4:9d:df:f4:66:14: 99:01:84:a7:d1:16:65:1b:66:c5:9f:6d:af:7c:76: e5:a9:28:a8:5b:fa:35:25:19:34:2e:f1:f0:d0:91: 39:9c:97:0c:0a:74:d8:ed:1b:eb:0c:f9:72:8c:1b: e2:26:9e:cf:29:e6:ab:4c:c4:9a:4b:3c:41:28:b0: 87:ec:5c:cb:60:af:9b:28:12:42:b2:d5:27:b8:1a: 67:87:33:68:08:57:bd:32:ad:c6:d6:fe:56:27:fb: 1d:c2:2e:e0:9f:91:4d:7c:56:ce:d7:31:12:c5:53: fb:59:b0:d5:38:ed:8d:4d:f5:e8:72:77:e1:31:71: bb:0d:8f:13:4c:4c:dc:f4:af:28:6f:f0:16:fa:22: 9c:f5:b9:2c:0a:5f:2e:31:11:b6:d5:aa:c6:42:27: 38:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:FE:59:F2:EC:2D:42:0E:3F:7D:11:E1:27:09:6C:CB:B1:D4:A6:E6 X509v3 Authority Key Identifier: keyid:54:27:2F:F3:17:29:73:C8:69:A5:22:12:BF:7C:E8:01:E1:F8:E7:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCcv8xcpc8hppSISv3zoAeH454M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/kf5Z8uwtQg4_fRHhJwlsy7HUpuY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.124.48.0/21 Signature Algorithm: sha256WithRSAEncryption 37:67:70:5c:fc:d9:58:0c:eb:b3:59:63:fe:df:6d:47:5d:63: d9:f5:90:21:53:02:2c:26:b5:df:b6:c2:78:ff:72:4d:1f:b8: 74:db:74:b4:ec:14:75:c3:96:bb:65:a7:14:59:60:30:2a:39: cb:35:9c:8e:02:59:b9:31:47:2a:c9:7c:86:33:dc:73:9c:43: 71:76:8f:64:b8:b5:e3:14:0e:22:0a:e7:a3:05:99:5f:80:ff: b0:40:d9:09:00:33:06:d7:42:6f:74:bb:34:56:e4:5f:e6:0b: b2:11:c6:fa:54:17:7c:13:9f:cb:eb:84:f4:8e:df:48:8e:10: 06:a6:b6:d6:9c:52:6f:a9:8e:ec:9e:d8:f1:79:21:47:02:31: 73:20:a2:ed:41:68:43:9c:a4:84:be:d0:a0:73:07:7f:80:98: 71:6a:df:41:4b:78:5f:2c:6b:95:76:c8:26:36:b0:11:42:b2: ee:ea:8d:f3:45:93:73:4a:b5:35:be:d4:b6:17:7c:e0:2e:eb: b2:4a:69:51:f0:83:87:91:df:41:d3:77:f7:bc:9c:22:55:87: c3:8c:c2:91:b1:24:01:e2:7b:ee:a5:9f:fa:e3:aa:c1:44:b6: 88:2f:2c:e4:35:30:f0:6f:b0:b4:01:1d:81:7b:b6:91:6a:9f: 65:2b:46:8d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Em+OMb9zqZ0XeoDS6Jj8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0MjcyZmYzMTcyOTczYzg2OWE1MjIxMmJmN2NlODAxZTFm OGU3ODMwHhcNMjYwMTAyMDAxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MWZlNTlmMmVjMmQ0MjBlM2Y3ZDExZTEyNzA5NmNjYmIxZDRhNmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoU3b2b8+nXDVpiKvd+ZslD2x8rT n4qBexqzbgu/IOBvTbNzrxNLQdja166lDQ8pZt17eDqDk7PkOywgwmZOkIW5gnpo 9NhbUeJvBASCSnkgN44REkNaOH55NUZerNmLvsjknd/0ZhSZAYSn0RZlG2bFn22v fHblqSioW/o1JRk0LvHw0JE5nJcMCnTY7RvrDPlyjBviJp7PKearTMSaSzxBKLCH 7FzLYK+bKBJCstUnuBpnhzNoCFe9Mq3G1v5WJ/sdwi7gn5FNfFbO1zESxVP7WbDV OO2NTfXocnfhMXG7DY8TTEzc9K8ob/AW+iKc9bksCl8uMRG21arGQic4fwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJH+WfLsLUIOP30R4ScJbMux1KbmMB8GA1UdIwQY MBaAFFQnL/MXKXPIaaUiEr986AHh+OeDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkNjdjh4Y3BjOGhwcFNJU3Yzem9BZUg0NTRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9lMjg3ZDktOWMzYi00MTIxLTkyYjYt YTFkOWU3NTRjMTJlLzEva2Y1Wjh1d3RRZzRfZlJIaEp3bHN5N0hVcHVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9lMjg3ZDktOWMzYi00MTIxLTkyYjYtYTFkOWU3NTRjMTJl LzEvVkNjdjh4Y3BjOGhwcFNJU3Yzem9BZUg0NTRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDXnwwMA0G CSqGSIb3DQEBCwUAA4IBAQA3Z3Bc/NlYDOuzWWP+321HXWPZ9ZAhUwIsJrXftsJ4 /3JNH7h023S07BR1w5a7ZacUWWAwKjnLNZyOAlm5MUcqyXyGM9xznENxdo9kuLXj FA4iCuejBZlfgP+wQNkJADMG10JvdLs0VuRf5guyEcb6VBd8E5/L64T0jt9IjhAG prbWnFJvqY7sntjxeSFHAjFzIKLtQWhDnKSEvtCgcwd/gJhxat9BS3hfLGuVdsgm NrARQrLu6o3zRZNzSrU1vtS2F3zgLuuySmlR8IOHkd9B03f3vJwiVYfDjMKRsSQB 4nvupZ/646rBRLaILyzkNTDwb7C0AR2Be7aRap9lK0aN -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:44 2026 by rpki-client