This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/5shtjSwYY1wV6rWlUfcIKGn6yqo.roa File: 5shtjSwYY1wV6rWlUfcIKGn6yqo.roa (raw, json) Hash identifier: VOmUNnvEDlqDrfQ2raf9GqtN9WB6Ae56gIOAstRWDXQ= Subject key identifier: E6:C8:6D:8D:2C:18:63:5C:15:EA:B5:A5:51:F7:08:28:69:FA:CA:AA Certificate issuer: /CN=4d0f2ee77621ea25c2819d4eac95c581877e30cd Certificate serial: 019B7DCB0A95BB032B5AD90FD0FA4940A806 Authority key identifier: 4D:0F:2E:E7:76:21:EA:25:C2:81:9D:4E:AC:95:C5:81:87:7E:30:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/5shtjSwYY1wV6rWlUfcIKGn6yqo.roa Signing time: Fri 02 Jan 2026 08:20:16 +0000 ROA not before: Fri 02 Jan 2026 08:20:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58340 IP address blocks: 83.146.128.0/20 maxlen: 20 193.177.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.crl rsync://rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.mft rsync://rpki.ripe.net/repository/DEFAULT/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:0a:95:bb:03:2b:5a:d9:0f:d0:fa:49:40:a8:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d0f2ee77621ea25c2819d4eac95c581877e30cd Validity Not Before: Jan 2 08:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e6c86d8d2c18635c15eab5a551f7082869facaaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f5:01:1a:ce:84:56:9f:08:34:a1:be:82:8a: c8:1c:09:68:9d:a3:c1:21:a4:6a:cd:c3:cb:0e:c7: d8:ac:c8:15:55:ad:ef:13:62:ca:81:06:6f:60:39: 74:43:a4:e5:16:1e:3f:6e:93:45:90:a8:26:60:a1: a3:ce:6d:24:2f:94:e4:08:a7:34:8e:69:c4:e3:83: e7:60:a4:aa:3f:03:cf:00:44:21:bb:25:8f:00:10: 1b:4a:f2:d1:0b:9a:c4:d2:fa:1d:2c:37:53:a2:02: 9f:1b:e0:84:8a:93:15:bc:04:5b:63:05:9e:b0:b8: 46:3d:ef:c9:d1:61:78:6c:b1:55:b1:86:3d:31:61: 23:8f:22:0f:39:3b:64:f0:4a:be:f8:21:ea:77:1b: 14:cb:b0:80:36:5a:74:e5:d0:5c:c1:53:f8:72:cf: 00:7d:d3:e4:00:cc:1c:12:2c:ff:3c:85:18:e2:c5: 58:e2:de:b8:f9:67:38:e2:65:52:ce:0f:94:4c:07: 6e:29:a4:c5:b8:eb:81:6b:47:3a:fb:c8:9b:50:d0: 92:8d:be:0d:b8:30:f2:9e:68:44:ab:2f:de:f8:fd: c7:53:37:20:61:aa:16:35:91:36:45:6b:05:ac:33: 6a:91:c0:2f:81:f1:19:ae:04:dc:67:07:2b:90:42: 1a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:C8:6D:8D:2C:18:63:5C:15:EA:B5:A5:51:F7:08:28:69:FA:CA:AA X509v3 Authority Key Identifier: keyid:4D:0F:2E:E7:76:21:EA:25:C2:81:9D:4E:AC:95:C5:81:87:7E:30:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/5shtjSwYY1wV6rWlUfcIKGn6yqo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.146.128.0/20 193.177.188.0/22 Signature Algorithm: sha256WithRSAEncryption a2:c0:33:b0:a1:8b:d7:1a:38:f8:01:31:23:dc:5d:b2:ee:c8: 20:ac:06:c8:c3:6f:71:2e:84:97:50:17:2a:76:51:03:2c:9a: 5b:9e:94:ca:c1:6a:93:42:2c:c6:90:f7:02:40:1e:54:31:13: 0b:97:3a:60:85:a3:68:8e:7e:7d:7d:08:ce:55:71:cf:8f:23: 91:ac:7e:aa:05:6c:23:c9:51:d1:09:44:5e:69:b4:74:ac:27: 35:21:d9:aa:fd:e9:3e:74:b6:67:62:50:56:91:07:e6:9b:80: 75:14:5a:32:7e:53:48:11:f7:2c:bd:a1:e6:1a:90:df:70:ca: 8d:6e:6e:2f:cc:5c:2c:b4:d3:65:e1:c0:06:a1:34:7b:0e:b8: 89:13:33:e9:a6:47:fe:64:dd:ac:3a:92:b9:a6:be:2a:6f:86: 02:18:9b:87:54:e3:92:b4:6b:fc:4f:da:d8:52:7c:c0:f5:c1: 67:77:28:ab:09:73:04:96:06:fa:31:46:5a:3e:53:9f:1c:2a: 0c:10:d1:24:31:90:a9:cc:2e:f4:fb:5e:15:22:e0:bf:08:3a: 0a:35:45:3e:1e:e9:49:a5:dc:99:d1:4f:58:85:69:64:f9:f7: 31:61:72:f9:4e:1b:2f:d1:b8:2e:94:e2:ad:07:8a:bf:9e:c6: c4:a4:90:65 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9ywqVuwMrWtkP0PpJQKgGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkMGYyZWU3NzYyMWVhMjVjMjgxOWQ0ZWFjOTVjNTgxODc3 ZTMwY2QwHhcNMjYwMTAyMDgyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNmM4NmQ4ZDJjMTg2MzVjMTVlYWI1YTU1MWY3MDgyODY5ZmFjYWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovUBGs6EVp8INKG+gorIHAlonaPB IaRqzcPLDsfYrMgVVa3vE2LKgQZvYDl0Q6TlFh4/bpNFkKgmYKGjzm0kL5TkCKc0 jmnE44PnYKSqPwPPAEQhuyWPABAbSvLRC5rE0vodLDdTogKfG+CEipMVvARbYwWe sLhGPe/J0WF4bLFVsYY9MWEjjyIPOTtk8Eq++CHqdxsUy7CANlp05dBcwVP4cs8A fdPkAMwcEiz/PIUY4sVY4t64+Wc44mVSzg+UTAduKaTFuOuBa0c6+8ibUNCSjb4N uDDynmhEqy/e+P3HUzcgYaoWNZE2RWsFrDNqkcAvgfEZrgTcZwcrkEIaPwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFObIbY0sGGNcFeq1pVH3CChp+sqqMB8GA1UdIwQY MBaAFE0PLud2IeolwoGdTqyVxYGHfjDNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFE4dTUzWWg2aVhDZ1oxT3JKWEZnWWQtTU0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9lODI4YjctYjFkOC00ZjQwLWJkMzAt N2MwNDk3OTEzYWYwLzEvNXNodGpTd1lZMXdWNnJXbFVmY0lLR242eXFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC9lODI4YjctYjFkOC00ZjQwLWJkMzAtN2MwNDk3OTEzYWYw LzEvVFE4dTUzWWg2aVhDZ1oxT3JKWEZnWWQtTU0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEU5KAAwQC wbG8MA0GCSqGSIb3DQEBCwUAA4IBAQCiwDOwoYvXGjj4ATEj3F2y7sggrAbIw29x LoSXUBcqdlEDLJpbnpTKwWqTQizGkPcCQB5UMRMLlzpghaNojn59fQjOVXHPjyOR rH6qBWwjyVHRCUReabR0rCc1Idmq/ek+dLZnYlBWkQfmm4B1FFoyflNIEfcsvaHm GpDfcMqNbm4vzFwstNNl4cAGoTR7DriJEzPppkf+ZN2sOpK5pr4qb4YCGJuHVOOS tGv8T9rYUnzA9cFndyirCXMElgb6MUZaPlOfHCoMENEkMZCpzC70+14VIuC/CDoK NUU+HulJpdyZ0U9YhWlk+fcxYXL5Thsv0bgulOKtB4q/nsbEpJBl -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:13 2026 by rpki-client