This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/1_5CVFQ8DbKfGicPmLjFZirzDN8.roa File: 1_5CVFQ8DbKfGicPmLjFZirzDN8.roa (raw, json) Hash identifier: KPIWyVERBO0tgiqXxqKBQt7rJ+zEMMM720A8y8T3AYg= Subject key identifier: D7:FE:42:54:54:3C:0D:B2:9F:1A:27:0F:98:B8:C5:66:2A:F3:0C:DF Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c Certificate serial: 019B7B36573F20E0A0AFAA21E8C4E8E871F6 Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/1_5CVFQ8DbKfGicPmLjFZirzDN8.roa Signing time: Thu 01 Jan 2026 20:18:37 +0000 ROA not before: Thu 01 Jan 2026 20:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9304 IP address blocks: 144.56.36.0/24 maxlen: 24 144.56.38.0/24 maxlen: 24 144.56.95.0/24 maxlen: 24 144.56.98.0/24 maxlen: 24 144.56.99.0/24 maxlen: 24 144.56.108.0/24 maxlen: 24 144.56.114.0/24 maxlen: 24 144.56.118.0/24 maxlen: 24 144.56.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 02:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:57:3f:20:e0:a0:af:aa:21:e8:c4:e8:e8:71:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16055801b775e774306321455fd463fbd9273c4c Validity Not Before: Jan 1 20:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7fe4254543c0db29f1a270f98b8c5662af30cdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:1c:ce:6a:2f:5e:dc:47:61:57:46:38:ba:a1: 85:36:2e:68:10:94:34:71:ac:f5:ac:bb:72:2d:7f: ca:18:74:a7:c7:f1:f5:56:ea:fa:b3:76:e3:ea:0a: 53:e8:9c:41:68:30:63:c6:37:93:49:46:6c:f9:f4: 42:d3:15:fb:cc:e4:64:46:04:0e:f2:80:56:1d:c7: 26:42:cf:67:be:ab:4f:e4:f2:63:4a:11:0c:2a:f0: 1a:b8:94:fb:06:41:15:3f:d7:a2:36:d9:53:9e:c9: dc:8f:48:8e:d1:b7:8d:5e:55:3e:ae:f3:3b:87:27: 6f:2d:48:f0:2c:17:35:ec:61:2b:cd:49:5f:f9:b2: b0:58:26:ff:ba:4a:c7:87:3f:5b:51:08:06:8b:c2: f2:b3:af:87:26:ce:25:63:4d:fc:ba:a0:c4:c8:65: 82:80:17:bd:91:9a:1e:65:ac:2c:78:5a:ad:ed:b6: a8:0b:4b:f9:96:9e:e5:b1:3a:e7:fa:0f:d2:1b:f6: 12:5d:64:c4:87:9c:b8:e5:01:60:44:69:c3:63:8e: e5:8d:2b:25:bf:39:58:30:67:aa:ee:8f:39:57:c3: a8:36:36:2b:39:21:92:a1:8a:a4:ee:22:7e:f4:1f: 6f:af:7f:d8:84:2c:a1:02:16:03:8c:38:d2:dc:4b: 73:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:FE:42:54:54:3C:0D:B2:9F:1A:27:0F:98:B8:C5:66:2A:F3:0C:DF X509v3 Authority Key Identifier: keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/1_5CVFQ8DbKfGicPmLjFZirzDN8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.56.36.0/24 144.56.38.0/24 144.56.95.0/24 144.56.98.0/23 144.56.108.0/24 144.56.114.0/24 144.56.118.0/24 144.56.124.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:7a:0a:3c:37:67:04:47:0f:4b:71:48:09:5b:61:8e:19:f8: ed:8b:ba:09:b2:b5:aa:c5:e8:47:1e:ab:83:fc:c4:ed:7b:b3: fe:e0:a3:e1:68:0d:c9:2a:c1:51:f5:1e:fc:a1:8f:bb:19:ff: ae:a5:40:e6:7a:98:1f:e4:1f:9f:9f:7e:a6:80:2a:94:e5:ef: 45:58:31:d9:64:af:75:57:47:1d:93:2f:b5:0d:db:b0:c4:04: 84:2f:58:7a:0e:82:a4:05:63:4f:60:c7:d1:5d:a6:19:55:5d: a7:15:e9:3e:ab:f1:39:7a:59:7c:36:08:0d:69:32:7c:c3:83: 4c:d9:8d:a4:05:67:7f:02:c6:fa:6c:e9:0c:fe:aa:ac:31:ca: 03:80:6a:61:76:ec:35:aa:3e:87:2f:af:4e:31:b4:69:e5:04: 75:50:7c:9c:bf:9c:c8:66:4e:a5:aa:25:ae:88:e3:30:f9:14: 6c:dc:70:54:c1:28:f2:5c:42:19:4d:d6:60:cb:42:a1:14:f2: 37:4f:ff:2b:48:09:76:32:88:dc:f8:e6:c0:c6:69:d8:08:a4: da:b8:8b:89:af:0e:9d:87:26:d7:9e:3f:df:21:df:a4:de:8e: 55:27:f8:86:ef:3d:87:6c:f2:c9:34:90:44:d1:22:38:1b:0b: c1:32:fe:b5 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt7Nlc/IOCgr6oh6MTo6HH2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MDU1ODAxYjc3NWU3NzQzMDYzMjE0NTVmZDQ2M2ZiZDky NzNjNGMwHhcNMjYwMTAxMjAxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkN2ZlNDI1NDU0M2MwZGIyOWYxYTI3MGY5OGI4YzU2NjJhZjMwY2RmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hzOai9e3EdhV0Y4uqGFNi5oEJQ0 caz1rLtyLX/KGHSnx/H1Vur6s3bj6gpT6JxBaDBjxjeTSUZs+fRC0xX7zORkRgQO 8oBWHccmQs9nvqtP5PJjShEMKvAauJT7BkEVP9eiNtlTnsncj0iO0beNXlU+rvM7 hydvLUjwLBc17GErzUlf+bKwWCb/ukrHhz9bUQgGi8Lys6+HJs4lY038uqDEyGWC gBe9kZoeZawseFqt7baoC0v5lp7lsTrn+g/SG/YSXWTEh5y45QFgRGnDY47ljSsl vzlYMGeq7o85V8OoNjYrOSGSoYqk7iJ+9B9vr3/YhCyhAhYDjDjS3EtzMQIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFNf+QlRUPA2ynxonD5i4xWYq8wzfMB8GA1UdIwQY MBaAFBYFWAG3ded0MGMhRV/UY/vZJzxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgt MTM1NzE3ZWYzODhhLzEvMV81Q1ZGUThEYktmR2ljUG1MakZaaXJ6RE44LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgtMTM1NzE3ZWYzODhh LzEvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAkDgkAwQA kDgmAwQAkDhfAwQBkDhiAwQAkDhsAwQAkDhyAwQAkDh2AwQAkDh8MA0GCSqGSIb3 DQEBCwUAA4IBAQCMego8N2cERw9LcUgJW2GOGfjti7oJsrWqxehHHquD/MTte7P+ 4KPhaA3JKsFR9R78oY+7Gf+upUDmepgf5B+fn36mgCqU5e9FWDHZZK91V0cdky+1 DduwxASEL1h6DoKkBWNPYMfRXaYZVV2nFek+q/E5ell8NggNaTJ8w4NM2Y2kBWd/ Asb6bOkM/qqsMcoDgGphduw1qj6HL69OMbRp5QR1UHycv5zIZk6lqiWuiOMw+RRs 3HBUwSjyXEIZTdZgy0KhFPI3T/8rSAl2Mojc+ObAxmnYCKTauIuJrw6dhybXnj/f Id+k3o5VJ/iG7z2HbPLJNJBE0SI4GwvBMv61 -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:32 2026 by rpki-client