This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/5dqgcQc20DZK2fFn6bpH-A8uyQ8.roa File: 5dqgcQc20DZK2fFn6bpH-A8uyQ8.roa (raw, json) Hash identifier: eVKJis7Ad9o9z5jyjcFOLQfOP7WhBCGivw8hyFer3JM= Subject key identifier: E5:DA:A0:71:07:36:D0:36:4A:D9:F1:67:E9:BA:47:F8:0F:2E:C9:0F Certificate issuer: /CN=08a297f8cfa1ce6d3fe2c526911c468a9a6318d0 Certificate serial: 019B7B35E6AB5F0C84999BE9472E82F4F5AD Authority key identifier: 08:A2:97:F8:CF:A1:CE:6D:3F:E2:C5:26:91:1C:46:8A:9A:63:18:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKKX-M-hzm0_4sUmkRxGippjGNA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/5dqgcQc20DZK2fFn6bpH-A8uyQ8.roa Signing time: Thu 01 Jan 2026 20:18:08 +0000 ROA not before: Thu 01 Jan 2026 20:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 178.213.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.crl rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.mft rsync://rpki.ripe.net/repository/DEFAULT/CKKX-M-hzm0_4sUmkRxGippjGNA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:e6:ab:5f:0c:84:99:9b:e9:47:2e:82:f4:f5:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08a297f8cfa1ce6d3fe2c526911c468a9a6318d0 Validity Not Before: Jan 1 20:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e5daa0710736d0364ad9f167e9ba47f80f2ec90f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:83:ef:a9:44:5c:ba:96:9e:f4:2d:3b:89:de: 90:f1:9f:ca:2c:3f:82:6a:4e:21:45:7e:d2:dd:99: e7:7c:b8:86:1b:c1:f3:23:46:71:12:12:61:c3:4e: 0b:86:7e:f2:04:5e:97:96:6c:8c:dd:26:d2:aa:87: bc:97:31:f1:01:84:4a:af:01:f9:19:34:56:4f:0e: b9:4a:45:cd:9a:7e:ca:36:26:85:c8:7d:9f:ce:20: 54:74:33:b5:a0:bc:62:69:99:8d:88:1c:b1:61:68: 53:e7:9b:a0:08:df:eb:d6:2b:bc:1a:c0:2b:81:0c: 80:c6:c4:a0:fe:cf:d7:45:f8:88:b7:f1:f6:a9:65: 1c:a6:94:40:b0:ba:1e:19:5b:c4:83:d3:c6:85:e8: 91:63:48:78:63:41:7c:87:be:0f:c2:d7:10:cc:c9: 71:89:42:df:e7:9e:09:d3:46:7c:c6:d5:50:cf:b5: 16:32:e0:f4:d4:88:eb:15:e7:e3:e8:18:75:be:a2: dd:cb:00:97:83:1e:b5:5d:31:6e:ed:ce:28:e7:5a: 01:96:8a:1d:40:29:92:d0:8c:9b:6f:1f:94:13:d8: 1f:4b:3c:c7:98:4b:7e:05:2f:cd:75:a5:5c:ae:69: b9:65:5b:8c:34:d0:fb:78:bf:45:e7:b5:db:c3:aa: 2b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:DA:A0:71:07:36:D0:36:4A:D9:F1:67:E9:BA:47:F8:0F:2E:C9:0F X509v3 Authority Key Identifier: keyid:08:A2:97:F8:CF:A1:CE:6D:3F:E2:C5:26:91:1C:46:8A:9A:63:18:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKKX-M-hzm0_4sUmkRxGippjGNA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/5dqgcQc20DZK2fFn6bpH-A8uyQ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.213.75.0/24 Signature Algorithm: sha256WithRSAEncryption 81:45:43:62:7f:2e:7c:bc:ed:ac:0c:36:71:6d:ed:cb:20:ad: 0e:c8:5b:d8:4f:55:4f:c5:30:45:f8:e8:77:4b:a4:f2:0c:b2: 08:84:e6:c3:f0:e3:32:3b:ba:28:32:a1:04:6a:3c:05:86:3b: 51:1d:d2:a0:c6:a9:99:de:ec:25:ea:41:59:f4:ba:02:86:39: 1c:4e:fe:63:eb:64:69:b6:2d:67:0c:59:7a:c1:d9:b1:1b:13: db:e2:c1:80:5a:c0:67:b2:60:24:cc:bd:7e:42:6b:0c:89:97: 8e:2a:15:3f:33:c2:8d:36:c1:09:f2:fb:8e:6b:ef:39:15:cb: 48:d3:64:9d:25:88:a5:68:02:d5:3b:60:fa:fa:96:79:c3:1f: 41:ec:70:af:6e:a1:28:92:aa:d7:72:a4:1e:bf:ca:f0:17:5f: 74:e2:41:74:4b:32:81:c6:05:55:a5:0e:63:19:0e:41:f7:f5: 6e:5f:b1:5a:16:20:cf:4d:f2:37:a9:89:f2:f8:11:9d:6e:ec: b3:61:91:56:f8:1c:65:c4:f7:b2:8c:5d:6d:34:ca:35:e9:4b: 22:58:b0:12:ad:6b:96:08:58:b1:5e:8c:ab:bc:0f:4a:f0:44: be:37:76:84:62:12:88:1b:6d:fa:da:9f:bd:0b:d9:4c:7d:b0: 12:3c:26:f8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NearXwyEmZvpRy6C9PWtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4YTI5N2Y4Y2ZhMWNlNmQzZmUyYzUyNjkxMWM0NjhhOWE2 MzE4ZDAwHhcNMjYwMTAxMjAxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNWRhYTA3MTA3MzZkMDM2NGFkOWYxNjdlOWJhNDdmODBmMmVjOTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4PvqURcupae9C07id6Q8Z/KLD+C ak4hRX7S3ZnnfLiGG8HzI0ZxEhJhw04Lhn7yBF6XlmyM3SbSqoe8lzHxAYRKrwH5 GTRWTw65SkXNmn7KNiaFyH2fziBUdDO1oLxiaZmNiByxYWhT55ugCN/r1iu8GsAr gQyAxsSg/s/XRfiIt/H2qWUcppRAsLoeGVvEg9PGheiRY0h4Y0F8h74PwtcQzMlx iULf554J00Z8xtVQz7UWMuD01IjrFefj6Bh1vqLdywCXgx61XTFu7c4o51oBlood QCmS0Iybbx+UE9gfSzzHmEt+BS/NdaVcrmm5ZVuMNND7eL9F57Xbw6orHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOXaoHEHNtA2StnxZ+m6R/gPLskPMB8GA1UdIwQY MBaAFAiil/jPoc5tP+LFJpEcRoqaYxjQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0tLWC1NLWh6bTBfNHNVbWtSeEdpcHBqR05BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS81ZjE1M2QtNzFkOS00NzBhLWJhMjct OTcxMTM5NTE0YmIxLzEvNWRxZ2NRYzIwRFpLMmZGbjZicEgtQTh1eVE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS81ZjE1M2QtNzFkOS00NzBhLWJhMjctOTcxMTM5NTE0YmIx LzEvQ0tLWC1NLWh6bTBfNHNVbWtSeEdpcHBqR05BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAstVLMA0G CSqGSIb3DQEBCwUAA4IBAQCBRUNify58vO2sDDZxbe3LIK0OyFvYT1VPxTBF+Oh3 S6TyDLIIhObD8OMyO7ooMqEEajwFhjtRHdKgxqmZ3uwl6kFZ9LoChjkcTv5j62Rp ti1nDFl6wdmxGxPb4sGAWsBnsmAkzL1+QmsMiZeOKhU/M8KNNsEJ8vuOa+85FctI 02SdJYilaALVO2D6+pZ5wx9B7HCvbqEokqrXcqQev8rwF1904kF0SzKBxgVVpQ5j GQ5B9/VuX7FaFiDPTfI3qYny+BGdbuyzYZFW+BxlxPeyjF1tNMo16UsiWLASrWuW CFixXoyrvA9K8ES+N3aEYhKIG2362p+9C9lMfbASPCb4 -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:00 2026 by rpki-client