This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/t5gDJTwEX_7MnOD4QMV2-iNg9e8.roa File: t5gDJTwEX_7MnOD4QMV2-iNg9e8.roa (raw, json) Hash identifier: Av2GUWR+Q2vX5K8GexOH8XltfedpKMt8MiGL4TnfRkM= Subject key identifier: B7:98:03:25:3C:04:5F:FE:CC:9C:E0:F8:40:C5:76:FA:23:60:F5:EF Certificate issuer: /CN=d81843032164e0b62ed6da7c67557bf46895d0f0 Certificate serial: 019B7FF252285AE317C330EAA20B67E68369 Authority key identifier: D8:18:43:03:21:64:E0:B6:2E:D6:DA:7C:67:55:7B:F4:68:95:D0:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BhDAyFk4LYu1tp8Z1V79GiV0PA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/t5gDJTwEX_7MnOD4QMV2-iNg9e8.roa Signing time: Fri 02 Jan 2026 18:22:25 +0000 ROA not before: Fri 02 Jan 2026 18:22:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48620 IP address blocks: 5.159.200.0/21 maxlen: 21 94.142.64.0/19 maxlen: 19 2a00:1cd8::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.mft rsync://rpki.ripe.net/repository/DEFAULT/2BhDAyFk4LYu1tp8Z1V79GiV0PA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:52:28:5a:e3:17:c3:30:ea:a2:0b:67:e6:83:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d81843032164e0b62ed6da7c67557bf46895d0f0 Validity Not Before: Jan 2 18:22:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b79803253c045ffecc9ce0f840c576fa2360f5ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:78:55:bc:c8:3b:c3:08:a5:6b:9f:18:25:db: 54:24:be:e9:39:4c:df:cd:91:fa:d7:5b:ec:68:73: 70:a2:2c:c5:f9:32:02:a9:be:23:35:15:17:72:43: db:b6:d1:9a:11:f0:f1:c3:d5:9d:cb:f8:93:7f:e9: d9:be:81:99:76:a9:1d:25:66:af:a7:dd:ac:38:df: b2:06:a4:a6:52:f5:81:0d:eb:85:52:fd:7a:b1:78: 55:09:ab:be:ac:04:6b:49:43:2c:74:a3:d6:85:e5: 8b:ed:2b:85:06:f5:56:90:97:14:d4:08:b5:b5:e3: d9:c8:a2:82:dd:31:67:d3:32:68:0b:70:13:b7:e9: 8e:d4:76:cb:7d:71:47:de:9c:5f:8d:4a:4b:91:d2: 4c:0c:71:3c:cd:3b:3f:da:c4:a9:72:09:72:86:1e: be:2b:1d:b9:38:99:28:53:b4:87:43:01:9f:35:04: c3:24:ae:ff:c0:fd:c3:b8:c9:83:e5:6e:61:27:9e: e7:1a:90:f1:a4:1b:28:fb:4f:52:c7:98:2a:a7:31: d0:c2:07:9e:a7:f1:09:80:9f:2f:9d:6d:8b:71:7a: 77:04:05:9b:5b:4c:2e:40:18:06:17:15:f4:0f:e9: 84:c9:16:16:59:a9:58:0c:ee:4e:c1:d6:cc:e8:d2: af:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:98:03:25:3C:04:5F:FE:CC:9C:E0:F8:40:C5:76:FA:23:60:F5:EF X509v3 Authority Key Identifier: keyid:D8:18:43:03:21:64:E0:B6:2E:D6:DA:7C:67:55:7B:F4:68:95:D0:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BhDAyFk4LYu1tp8Z1V79GiV0PA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/t5gDJTwEX_7MnOD4QMV2-iNg9e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.159.200.0/21 94.142.64.0/19 IPv6: 2a00:1cd8::/29 Signature Algorithm: sha256WithRSAEncryption 9e:ce:5a:31:19:21:10:49:b7:3a:fd:2b:4c:d9:5b:43:69:9d: 00:f4:d7:f4:7d:8d:28:52:e2:50:79:71:05:98:96:2b:87:67: 11:c5:1e:d6:c7:0a:9a:53:22:bf:16:79:82:67:08:3d:d6:5f: 1d:0c:19:92:3f:31:af:08:ae:22:8e:1e:7a:0a:12:08:ea:90: cb:4f:2c:50:6a:a7:4a:99:dd:29:8f:3a:1c:78:7f:dd:67:30: 8b:bd:f8:48:8f:c4:5b:4b:cf:6a:08:63:d3:bf:c8:f3:aa:77: 0a:27:bd:3f:af:46:32:19:a6:ac:df:d8:9d:11:b8:8c:6a:d7: 8e:9a:36:88:80:31:93:af:17:40:27:cc:a4:c5:2e:bc:24:18: bb:6e:b8:76:8b:e9:58:8c:0d:ea:0c:80:5d:de:18:a6:b3:9f: 5a:d5:c7:fd:a8:1d:7d:95:f9:4b:cb:ab:e1:24:a4:ed:f3:4e: 2a:72:25:f1:73:db:e4:2a:61:cd:c5:d0:f9:ee:b6:05:2b:66: 64:7e:f6:b3:75:e1:2d:ff:00:a6:da:f0:85:e3:14:a9:5a:09: e0:7a:6d:13:03:35:dd:e6:02:64:22:14:58:a5:40:bd:80:89: 96:05:b9:ae:b5:a8:87:4d:a3:06:0d:62:77:01:20:d3:59:29: f3:4a:f3:0e -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/8lIoWuMXwzDqogtn5oNpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MTg0MzAzMjE2NGUwYjYyZWQ2ZGE3YzY3NTU3YmY0Njg5 NWQwZjAwHhcNMjYwMTAyMTgyMjI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzk4MDMyNTNjMDQ1ZmZlY2M5Y2UwZjg0MGM1NzZmYTIzNjBmNWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3hVvMg7wwila58YJdtUJL7pOUzf zZH611vsaHNwoizF+TICqb4jNRUXckPbttGaEfDxw9Wdy/iTf+nZvoGZdqkdJWav p92sON+yBqSmUvWBDeuFUv16sXhVCau+rARrSUMsdKPWheWL7SuFBvVWkJcU1Ai1 tePZyKKC3TFn0zJoC3ATt+mO1HbLfXFH3pxfjUpLkdJMDHE8zTs/2sSpcglyhh6+ Kx25OJkoU7SHQwGfNQTDJK7/wP3DuMmD5W5hJ57nGpDxpBso+09Sx5gqpzHQwgee p/EJgJ8vnW2LcXp3BAWbW0wuQBgGFxX0D+mEyRYWWalYDO5OwdbM6NKv/wIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFLeYAyU8BF/+zJzg+EDFdvojYPXvMB8GA1UdIwQY MBaAFNgYQwMhZOC2LtbafGdVe/RoldDwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkJoREF5Rms0TFl1MXRwOFoxVjc5R2lWMFBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS81YzFlZWMtMzcwMC00OWJiLWJmZWUt NjVkMzczYWI1NzNmLzEvdDVnREpUd0VYXzdNbk9ENFFNVjItaU5nOWU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS81YzFlZWMtMzcwMC00OWJiLWJmZWUtNjVkMzczYWI1NzNm LzEvMkJoREF5Rms0TFl1MXRwOFoxVjc5R2lWMFBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDBZ/IAwQF Xo5AMA0EAgACMAcDBQMqABzYMA0GCSqGSIb3DQEBCwUAA4IBAQCezloxGSEQSbc6 /StM2VtDaZ0A9Nf0fY0oUuJQeXEFmJYrh2cRxR7WxwqaUyK/FnmCZwg91l8dDBmS PzGvCK4ijh56ChII6pDLTyxQaqdKmd0pjzoceH/dZzCLvfhIj8RbS89qCGPTv8jz qncKJ70/r0YyGaas39idEbiMateOmjaIgDGTrxdAJ8ykxS68JBi7brh2i+lYjA3q DIBd3hims59a1cf9qB19lflLy6vhJKTt804qciXxc9vkKmHNxdD57rYFK2Zkfvaz deEt/wCm2vCF4xSpWgngem0TAzXd5gJkIhRYpUC9gImWBbmutaiHTaMGDWJ3ASDT WSnzSvMO -----END CERTIFICATE-----Generated at Tue Feb 10 05:55:08 2026 by rpki-client