This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/5VBqrJ3l2bBgVNFXgKoPrPjtOoo.roa File: 5VBqrJ3l2bBgVNFXgKoPrPjtOoo.roa (raw, json) Hash identifier: pw/y5AALVmMkOsomb76pGvibV4sU9NfaodslXc53Ans= Subject key identifier: E5:50:6A:AC:9D:E5:D9:B0:60:54:D1:57:80:AA:0F:AC:F8:ED:3A:8A Certificate issuer: /CN=fa9b89f367d4fb950287701f62d4a039b7f6cb20 Certificate serial: 019B7E37CB5BDAE5DD97ECB2B838879BE6BE Authority key identifier: FA:9B:89:F3:67:D4:FB:95:02:87:70:1F:62:D4:A0:39:B7:F6:CB:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-puJ82fU-5UCh3AfYtSgObf2yyA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/5VBqrJ3l2bBgVNFXgKoPrPjtOoo.roa Signing time: Fri 02 Jan 2026 10:19:04 +0000 ROA not before: Fri 02 Jan 2026 10:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198717 IP address blocks: 37.233.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.crl rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft rsync://rpki.ripe.net/repository/DEFAULT/1-puJ82fU-5UCh3AfYtSgObf2yyA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:cb:5b:da:e5:dd:97:ec:b2:b8:38:87:9b:e6:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa9b89f367d4fb950287701f62d4a039b7f6cb20 Validity Not Before: Jan 2 10:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e5506aac9de5d9b06054d15780aa0facf8ed3a8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cb:c6:68:ea:12:c4:49:a7:a6:12:1c:5c:84: 54:25:fd:cf:47:0a:c9:04:96:10:f6:b1:6e:b6:9a: 8e:80:1e:9b:3f:ec:07:2e:21:f8:7c:9a:48:a2:43: 0e:ad:ea:9f:97:fa:ab:0d:22:84:91:e1:5b:b2:0b: 1a:d4:11:e2:c4:83:ea:24:72:d9:e5:fa:50:dc:c0: 4e:48:72:ec:0e:5d:99:31:d3:d5:65:02:a5:2b:c8: 3f:d6:f4:a4:91:b3:96:35:d0:53:a7:23:97:a5:2d: 5e:8b:75:f0:c9:f9:f7:cc:17:b7:5a:1a:4b:31:bf: ca:d5:7a:f7:30:ff:87:0f:ae:53:d7:23:f3:aa:f0: 07:15:98:ee:c3:5b:48:06:61:50:db:96:6a:42:0b: 43:ca:d5:c6:08:95:86:18:8f:28:05:bc:57:13:7e: 58:bb:67:66:0b:24:76:22:d3:5e:f1:38:44:4d:33: a4:a2:7f:15:6b:c7:09:fd:52:70:01:30:5f:56:47: 64:c4:32:e4:41:49:26:22:df:11:2e:fa:96:5e:a1: dd:b6:ef:39:6c:a5:ef:76:ce:c7:94:f0:1a:39:12: aa:37:7e:53:da:86:f5:9a:bd:56:62:f9:82:3f:64: bf:3d:d4:95:25:9c:88:ed:e6:c1:32:07:6b:98:80: 31:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:50:6A:AC:9D:E5:D9:B0:60:54:D1:57:80:AA:0F:AC:F8:ED:3A:8A X509v3 Authority Key Identifier: keyid:FA:9B:89:F3:67:D4:FB:95:02:87:70:1F:62:D4:A0:39:B7:F6:CB:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-puJ82fU-5UCh3AfYtSgObf2yyA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/5VBqrJ3l2bBgVNFXgKoPrPjtOoo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.233.96.0/20 Signature Algorithm: sha256WithRSAEncryption 00:7b:98:1d:bf:c0:03:66:f1:41:fc:f3:f7:7f:0a:4e:aa:37: 6f:95:c9:2f:47:45:81:bd:7b:f3:a5:e4:37:3b:78:df:8c:fb: 2e:ad:4c:b1:75:0e:68:df:67:6d:68:b7:7e:c5:07:52:9f:eb: 7d:5c:f4:63:a5:cd:4f:80:1c:8e:91:c0:8b:37:72:04:ec:fe: 42:25:f7:6b:89:f4:12:ab:4d:50:5b:00:ec:26:af:82:d0:86: 8c:25:f6:9f:18:24:b6:77:1a:0c:21:5f:e0:97:c6:b3:40:cc: df:8e:3c:23:d4:bb:3f:65:c1:ba:54:df:62:a4:a7:23:25:55: 94:03:9f:83:04:af:21:42:3c:42:06:91:06:df:35:e6:ab:1b: 0c:38:ea:21:4b:9a:e8:b7:5e:ff:8d:78:e7:86:34:5c:14:53: 81:f6:a3:5f:7a:e1:8b:51:69:7b:57:dc:fd:51:d3:18:ef:02: 00:c7:cf:47:d3:27:de:b5:95:f2:df:d5:45:9b:32:89:36:48: 09:d9:a2:51:27:0c:6e:28:60:6b:13:4f:b0:60:38:b2:7d:79: 7f:db:05:bb:a1:eb:c4:f9:7b:02:67:b2:71:07:89:4a:65:86: 9d:35:23:4f:30:52:dd:29:03:f3:34:fd:28:f1:ca:04:a0:70: 05:a4:32:42 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+N8tb2uXdl+yyuDiHm+a+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhOWI4OWYzNjdkNGZiOTUwMjg3NzAxZjYyZDRhMDM5Yjdm NmNiMjAwHhcNMjYwMTAyMTAxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTUwNmFhYzlkZTVkOWIwNjA1NGQxNTc4MGFhMGZhY2Y4ZWQzYThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8vGaOoSxEmnphIcXIRUJf3PRwrJ BJYQ9rFutpqOgB6bP+wHLiH4fJpIokMOreqfl/qrDSKEkeFbsgsa1BHixIPqJHLZ 5fpQ3MBOSHLsDl2ZMdPVZQKlK8g/1vSkkbOWNdBTpyOXpS1ei3Xwyfn3zBe3WhpL Mb/K1Xr3MP+HD65T1yPzqvAHFZjuw1tIBmFQ25ZqQgtDytXGCJWGGI8oBbxXE35Y u2dmCyR2ItNe8ThETTOkon8Va8cJ/VJwATBfVkdkxDLkQUkmIt8RLvqWXqHdtu85 bKXvds7HlPAaORKqN35T2ob1mr1WYvmCP2S/PdSVJZyI7ebBMgdrmIAxrwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFOVQaqyd5dmwYFTRV4CqD6z47TqKMB8GA1UdIwQY MBaAFPqbifNn1PuVAodwH2LUoDm39ssgMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1wdUo4MmZVLTVVQ2gzQWZZdFNnT2JmMnl5QS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjUvOTg5MzNhLTc1ODEtNDk3OS05MTIx LTBlMWE2OGM3NTYzYi8xLzVWQnFySjNsMmJCZ1ZORlhnS29QclBqdE9vby5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNjUvOTg5MzNhLTc1ODEtNDk3OS05MTIxLTBlMWE2OGM3NTYz Yi8xLzEtcHVKODJmVS01VUNoM0FmWXRTZ09iZjJ5eUEuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQl6WAw DQYJKoZIhvcNAQELBQADggEBAAB7mB2/wANm8UH88/d/Ck6qN2+VyS9HRYG9e/Ol 5Dc7eN+M+y6tTLF1DmjfZ21ot37FB1Kf631c9GOlzU+AHI6RwIs3cgTs/kIl92uJ 9BKrTVBbAOwmr4LQhowl9p8YJLZ3GgwhX+CXxrNAzN+OPCPUuz9lwbpU32KkpyMl VZQDn4MEryFCPEIGkQbfNearGww46iFLmui3Xv+NeOeGNFwUU4H2o1964YtRaXtX 3P1R0xjvAgDHz0fTJ961lfLf1UWbMok2SAnZolEnDG4oYGsTT7BgOLJ9eX/bBbuh 68T5ewJnsnEHiUplhp01I08wUt0pA/M0/SjxygSgcAWkMkI= -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:23 2026 by rpki-client