This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/5elWeBxLAe6yYejdEv5iOxl2wpY.roa File: 5elWeBxLAe6yYejdEv5iOxl2wpY.roa (raw, json) Hash identifier: cXPMx2p9BOBuSf+gbtxIhaiMUrpE5QpYWOZwherOPxc= Subject key identifier: E5:E9:56:78:1C:4B:01:EE:B2:61:E8:DD:12:FE:62:3B:19:76:C2:96 Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be Certificate serial: 019B775893EE65CCE88E4043C1A4C23B6664 Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/5elWeBxLAe6yYejdEv5iOxl2wpY.roa Signing time: Thu 01 Jan 2026 02:17:32 +0000 ROA not before: Thu 01 Jan 2026 02:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 32159 IP address blocks: 194.4.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:93:ee:65:cc:e8:8e:40:43:c1:a4:c2:3b:66:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be Validity Not Before: Jan 1 02:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e5e956781c4b01eeb261e8dd12fe623b1976c296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:61:3f:ee:89:45:b6:9d:87:90:b4:fd:fc:ce: d7:e9:21:9e:56:a8:4a:36:1e:8e:4e:2e:4c:69:f7: 15:6c:e7:4f:51:26:16:eb:95:69:fa:8e:8b:bc:3d: 8d:3c:61:d5:d1:9b:d0:29:af:99:b8:cd:63:40:00: f1:c9:8b:d3:d0:c3:00:56:35:8a:99:67:d3:7b:5a: 10:34:98:34:91:7f:17:ab:b5:e4:2f:39:68:46:97: 24:61:98:fb:7b:83:df:b6:9b:b5:e3:d9:52:a1:25: c2:62:b6:1d:c4:87:16:d6:2e:5d:13:40:b0:bf:3e: 74:35:8c:d7:b0:36:7d:8b:4c:cc:31:c5:42:0c:ba: 1b:7a:a3:9a:f2:f5:ce:fb:f7:4a:77:a6:a7:b3:75: d6:55:46:f0:2d:49:dd:15:a0:ab:4c:3c:67:48:da: 50:b6:34:c9:cc:f2:23:d6:06:65:90:37:f0:55:d2: 7a:7c:3b:2f:f6:6b:37:d1:38:88:99:13:58:94:f6: 14:12:f8:ba:f4:15:06:d5:14:d5:f4:8f:c7:a6:a1: a8:b1:58:76:54:5a:43:9e:0b:58:35:71:bd:13:82: a9:48:39:e0:9f:13:24:45:45:4e:62:95:0d:8d:a1: bc:88:e2:28:0d:a0:9c:16:42:82:23:0c:5e:78:01: 5e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:E9:56:78:1C:4B:01:EE:B2:61:E8:DD:12:FE:62:3B:19:76:C2:96 X509v3 Authority Key Identifier: keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/5elWeBxLAe6yYejdEv5iOxl2wpY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.4.55.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:97:a3:df:e5:a1:10:42:57:48:16:a7:a5:72:47:fa:19:99: 55:03:cf:5f:58:1a:95:46:83:15:00:da:2f:16:f5:64:0d:3e: 37:1f:02:66:c2:9e:91:20:08:6c:0c:03:bd:79:82:aa:6d:b3: 34:30:e6:da:07:e8:21:28:55:cb:ef:84:61:0e:3c:a6:56:73: ca:fb:7e:6b:ef:59:df:4c:c0:7f:65:4a:f7:4c:12:25:fb:77: 5d:31:4a:84:74:b1:bc:20:b0:97:dd:d0:bd:85:5f:f8:89:6e: be:f4:23:d8:25:ac:2a:21:19:c1:45:e5:e6:00:8d:8a:12:c6: 39:ab:a4:92:3b:14:20:e7:a2:08:fe:aa:44:ad:ec:45:34:1d: 5b:01:34:c1:3a:88:18:86:aa:ce:3a:67:46:84:3c:d0:1b:80: 7f:3a:36:9b:73:f4:0d:cb:96:23:90:38:b2:a0:f1:3f:97:a2: 10:6a:5b:79:40:07:f2:37:dc:08:b4:b3:5c:4d:d2:3e:3f:b5: 4d:2e:89:29:c7:49:30:50:15:95:67:7f:73:56:1e:a4:4b:42: f4:30:3c:3f:99:d3:ca:11:b1:fd:4b:b9:fd:16:0b:7a:fb:21: 4e:2d:e8:ec:af:d0:49:ad:18:f7:11:b5:0b:92:05:16:ce:db: 19:5b:33:0f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WJPuZczojkBDwaTCO2ZkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MGZiMGYxZDhiOGMxOThiMGRjODYxNThhZmJjYmM1Mjlj ZjE2YmUwHhcNMjYwMTAxMDIxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNWU5NTY3ODFjNGIwMWVlYjI2MWU4ZGQxMmZlNjIzYjE5NzZjMjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5mE/7olFtp2HkLT9/M7X6SGeVqhK Nh6OTi5MafcVbOdPUSYW65Vp+o6LvD2NPGHV0ZvQKa+ZuM1jQADxyYvT0MMAVjWK mWfTe1oQNJg0kX8Xq7XkLzloRpckYZj7e4Pftpu149lSoSXCYrYdxIcW1i5dE0Cw vz50NYzXsDZ9i0zMMcVCDLobeqOa8vXO+/dKd6ans3XWVUbwLUndFaCrTDxnSNpQ tjTJzPIj1gZlkDfwVdJ6fDsv9ms30TiImRNYlPYUEvi69BUG1RTV9I/HpqGosVh2 VFpDngtYNXG9E4KpSDngnxMkRUVOYpUNjaG8iOIoDaCcFkKCIwxeeAFeEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOXpVngcSwHusmHo3RL+YjsZdsKWMB8GA1UdIwQY MBaAFFcPsPHYuMGYsNyGFYr7y8Upzxa+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2Qt OTcyNDNlMzE2MjcyLzEvNWVsV2VCeExBZTZ5WWVqZEV2NWlPeGwyd3BZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2QtOTcyNDNlMzE2Mjcy LzEvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgQ3MA0G CSqGSIb3DQEBCwUAA4IBAQBMl6Pf5aEQQldIFqelckf6GZlVA89fWBqVRoMVANov FvVkDT43HwJmwp6RIAhsDAO9eYKqbbM0MObaB+ghKFXL74RhDjymVnPK+35r71nf TMB/ZUr3TBIl+3ddMUqEdLG8ILCX3dC9hV/4iW6+9CPYJawqIRnBReXmAI2KEsY5 q6SSOxQg56II/qpErexFNB1bATTBOogYhqrOOmdGhDzQG4B/Ojabc/QNy5YjkDiy oPE/l6IQalt5QAfyN9wItLNcTdI+P7VNLokpx0kwUBWVZ39zVh6kS0L0MDw/mdPK EbH9S7n9Fgt6+yFOLejsr9BJrRj3EbULkgUWztsZWzMP -----END CERTIFICATE-----Generated at Tue Jan 20 00:01:13 2026 by rpki-client