This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/5BkH_FT2kYT8Up6Mms34hWALsVk.roa File: 5BkH_FT2kYT8Up6Mms34hWALsVk.roa (raw, json) Hash identifier: A90bzGzBZRM1hyAV4+vbV6qC5gd9kZ3mdGVCsD3ltUI= Subject key identifier: E4:19:07:FC:54:F6:91:84:FC:52:9E:8C:9A:CD:F8:85:60:0B:B1:59 Certificate issuer: /CN=ab975db4378dfca7c2953b86d3b18dc8b218ec6b Certificate serial: 019B783449998BDCD1743E205DBC37E38C81 Authority key identifier: AB:97:5D:B4:37:8D:FC:A7:C2:95:3B:86:D3:B1:8D:C8:B2:18:EC:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5ddtDeN_KfClTuG07GNyLIY7Gs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/5BkH_FT2kYT8Up6Mms34hWALsVk.roa Signing time: Thu 01 Jan 2026 06:17:31 +0000 ROA not before: Thu 01 Jan 2026 06:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208338 IP address blocks: 45.144.4.0/23 maxlen: 23 2a0e:e740::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.mft rsync://rpki.ripe.net/repository/DEFAULT/q5ddtDeN_KfClTuG07GNyLIY7Gs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:49:99:8b:dc:d1:74:3e:20:5d:bc:37:e3:8c:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab975db4378dfca7c2953b86d3b18dc8b218ec6b Validity Not Before: Jan 1 06:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e41907fc54f69184fc529e8c9acdf885600bb159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d4:29:c9:02:53:55:73:fa:62:59:32:d8:e0: c0:71:36:da:e0:9f:a5:dd:14:48:4d:01:ac:64:0d: 8b:0c:7b:d9:e0:a0:05:a8:dc:7e:06:46:ff:1d:24: 2b:38:e7:04:39:57:17:14:5d:62:6c:3c:b3:a6:af: 24:b2:94:4b:0c:0e:4d:3a:5b:f1:4a:68:33:4c:59: d3:3e:2e:47:12:f2:37:78:7b:de:17:cc:54:8f:90: a8:8b:b2:e3:72:cc:18:a8:96:ef:fb:c6:fa:c7:b0: c3:7b:97:35:ea:01:42:e1:21:04:e3:44:fc:13:16: 0a:8f:52:e0:f0:3e:8b:4e:4e:28:88:ae:8f:5d:2c: 7e:fd:48:42:07:6e:5b:9e:b9:43:9f:4d:92:cc:63: a4:a7:01:56:c7:e6:cf:9a:0c:e8:db:ce:5d:79:cf: d5:62:80:c7:ef:47:ec:1e:3a:d6:d8:ce:8a:2c:72: 15:c1:6d:44:6f:cf:04:1e:48:6c:8c:1f:e1:33:4b: 9e:56:28:b8:19:57:e1:af:ea:18:c7:6d:c2:ba:25: 3a:8b:ab:2e:5e:72:bb:95:28:96:68:5f:be:44:76: 83:5c:c0:66:5d:0e:16:29:f9:d1:50:6c:25:22:59: eb:e1:75:17:13:37:13:fb:55:e0:7e:c8:56:68:64: 3e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:19:07:FC:54:F6:91:84:FC:52:9E:8C:9A:CD:F8:85:60:0B:B1:59 X509v3 Authority Key Identifier: keyid:AB:97:5D:B4:37:8D:FC:A7:C2:95:3B:86:D3:B1:8D:C8:B2:18:EC:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5ddtDeN_KfClTuG07GNyLIY7Gs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/5BkH_FT2kYT8Up6Mms34hWALsVk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.144.4.0/23 IPv6: 2a0e:e740::/30 Signature Algorithm: sha256WithRSAEncryption 46:c6:5e:06:09:6d:6f:e0:55:d8:a9:9f:78:7e:97:4d:54:b1: 3a:24:a5:6c:69:f2:6a:90:88:40:a7:55:9c:8a:36:6b:67:d2: db:6a:eb:73:9c:5b:2b:56:d9:bb:e8:25:06:85:ba:c9:8c:67: 03:b7:1b:22:ac:b3:23:e7:69:c8:1f:2a:8b:83:bb:45:ba:c3: c9:b6:25:ed:8f:cf:65:18:f0:41:bc:41:88:30:d7:91:c6:b4: 17:cc:ea:77:93:7f:92:24:04:32:15:06:2a:e7:60:cf:f8:57: b0:aa:8d:3f:6a:01:a1:27:73:0e:98:9b:95:2c:8a:56:48:dd: 04:e1:ca:24:42:3d:f0:d6:87:4d:04:af:7c:d8:da:61:33:f6: 5a:7e:a2:e8:a7:32:ca:a0:84:72:75:86:e8:ed:ef:81:45:48: 53:b2:93:3f:33:b8:47:ea:22:3c:5b:4a:0b:2f:76:fd:0a:a1: c1:dd:01:d0:b4:89:32:19:07:59:20:d7:ab:4f:17:5b:78:b7: 51:c9:0f:60:3b:70:e5:28:57:05:15:2b:7d:68:13:f8:ea:38: 6a:b9:78:36:c3:e0:89:9e:5e:81:f9:16:16:04:cf:3e:32:ba: 27:97:97:76:fc:6f:b2:29:40:2f:80:d7:02:f9:5d:d7:ee:97: 33:f3:2f:79 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4NEmZi9zRdD4gXbw344yBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiOTc1ZGI0Mzc4ZGZjYTdjMjk1M2I4NmQzYjE4ZGM4YjIx OGVjNmIwHhcNMjYwMTAxMDYxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDE5MDdmYzU0ZjY5MTg0ZmM1MjllOGM5YWNkZjg4NTYwMGJiMTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdQpyQJTVXP6Ylky2ODAcTba4J+l 3RRITQGsZA2LDHvZ4KAFqNx+Bkb/HSQrOOcEOVcXFF1ibDyzpq8kspRLDA5NOlvx SmgzTFnTPi5HEvI3eHveF8xUj5Coi7LjcswYqJbv+8b6x7DDe5c16gFC4SEE40T8 ExYKj1Lg8D6LTk4oiK6PXSx+/UhCB25bnrlDn02SzGOkpwFWx+bPmgzo285dec/V YoDH70fsHjrW2M6KLHIVwW1Eb88EHkhsjB/hM0ueVii4GVfhr+oYx23CuiU6i6su XnK7lSiWaF++RHaDXMBmXQ4WKfnRUGwlIlnr4XUXEzcT+1XgfshWaGQ++wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOQZB/xU9pGE/FKejJrN+IVgC7FZMB8GA1UdIwQY MBaAFKuXXbQ3jfynwpU7htOxjciyGOxrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTVkZHREZU5fS2ZDbFR1RzA3R055TElZN0dzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8xYzg2MDUtMTYzZS00MjQ1LWFmMTIt Y2RiZDU1NmUxNzQ5LzEvNUJrSF9GVDJrWVQ4VXA2TW1zMzRoV0FMc1ZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy8xYzg2MDUtMTYzZS00MjQ1LWFmMTItY2RiZDU1NmUxNzQ5 LzEvcTVkZHREZU5fS2ZDbFR1RzA3R055TElZN0dzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBLZAEMA0E AgACMAcDBQIqDudAMA0GCSqGSIb3DQEBCwUAA4IBAQBGxl4GCW1v4FXYqZ94fpdN VLE6JKVsafJqkIhAp1WcijZrZ9LbautznFsrVtm76CUGhbrJjGcDtxsirLMj52nI HyqLg7tFusPJtiXtj89lGPBBvEGIMNeRxrQXzOp3k3+SJAQyFQYq52DP+Fewqo0/ agGhJ3MOmJuVLIpWSN0E4cokQj3w1odNBK982NphM/ZafqLopzLKoIRydYbo7e+B RUhTspM/M7hH6iI8W0oLL3b9CqHB3QHQtIkyGQdZINerTxdbeLdRyQ9gO3DlKFcF FSt9aBP46jhquXg2w+CJnl6B+RYWBM8+Mronl5d2/G+yKUAvgNcC+V3X7pcz8y95 -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:45 2026 by rpki-client