This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/5qHp_Qvizx1e_r_vv8Me8swsJF0.roa File: 5qHp_Qvizx1e_r_vv8Me8swsJF0.roa (raw, json) Hash identifier: EVdPpBQJMJNTi09VFkHGGdZrOzkZ9IM2pChk9wVwdDA= Subject key identifier: E6:A1:E9:FD:0B:E2:CF:1D:5E:FE:BF:EF:BF:C3:1E:F2:CC:2C:24:5D Certificate issuer: /CN=23394a125fa3ace0c47a6fe34f4086b4d3ba5588 Certificate serial: 019B7CED82E4F76662F3D5F4EDA28B379444 Authority key identifier: 23:39:4A:12:5F:A3:AC:E0:C4:7A:6F:E3:4F:40:86:B4:D3:BA:55:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/5qHp_Qvizx1e_r_vv8Me8swsJF0.roa Signing time: Fri 02 Jan 2026 04:18:18 +0000 ROA not before: Fri 02 Jan 2026 04:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214175 IP address blocks: 109.61.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft rsync://rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:82:e4:f7:66:62:f3:d5:f4:ed:a2:8b:37:94:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23394a125fa3ace0c47a6fe34f4086b4d3ba5588 Validity Not Before: Jan 2 04:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e6a1e9fd0be2cf1d5efebfefbfc31ef2cc2c245d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:71:f3:72:fb:50:98:b9:af:3a:1c:34:8a:e2: 5b:23:7c:35:02:02:90:fd:5f:e4:ad:ba:88:b6:94: 3b:cc:a3:e2:ea:96:f2:1d:d7:ba:cc:08:59:ea:2b: 34:cb:1d:d4:41:90:3f:97:dd:89:6d:8b:9d:97:9a: 48:c9:40:f9:87:16:92:26:ac:89:2e:7b:8a:da:35: 3b:5a:25:ac:ae:9e:cd:67:45:d3:99:06:6a:aa:32: d1:23:ad:b0:ee:59:55:3d:e5:93:e0:8c:90:7a:c1: 1f:99:03:5b:d2:da:db:bb:c1:1f:4f:f3:4d:ad:db: 6a:61:0c:8a:bf:5f:c1:e7:83:12:12:43:c3:af:ee: 81:ed:33:12:dd:35:bf:d2:95:ac:a3:74:7d:32:2b: 9c:40:af:ae:dc:2c:d2:1f:75:42:71:01:7d:4f:f4: 32:2d:ea:aa:2f:f9:9c:fb:80:5b:80:a5:42:49:c6: 4d:dc:a2:e3:89:57:38:3f:73:7d:4d:71:97:8b:c3: 71:11:3b:43:92:ef:05:b3:fb:ac:23:05:bb:82:4a: 40:4d:1f:a4:b5:c2:ce:83:d1:c8:88:b2:7f:49:03: dd:43:b0:2f:09:43:26:ae:0a:62:cd:56:c6:bf:7e: 14:1f:40:0c:1c:af:71:b6:8e:de:ef:06:ec:59:68: 80:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:A1:E9:FD:0B:E2:CF:1D:5E:FE:BF:EF:BF:C3:1E:F2:CC:2C:24:5D X509v3 Authority Key Identifier: keyid:23:39:4A:12:5F:A3:AC:E0:C4:7A:6F:E3:4F:40:86:B4:D3:BA:55:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/5qHp_Qvizx1e_r_vv8Me8swsJF0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.61.13.0/24 Signature Algorithm: sha256WithRSAEncryption 11:5f:19:36:53:da:e3:3f:d0:78:6e:63:e8:67:3a:00:bb:73: 68:02:3c:eb:9e:ef:33:2f:7f:10:b9:bc:e9:30:b2:7f:02:23: f7:27:af:c8:e9:7c:34:28:00:6d:fd:17:ff:52:5a:8c:1a:a0: 6f:39:06:ac:d1:2d:ee:3d:a2:13:c9:8f:d6:a9:98:44:f3:e0: 83:1e:4a:3b:da:7b:80:57:8c:16:9f:b8:55:b3:46:07:c7:7f: 57:d3:ae:91:c9:bb:99:95:bc:b0:38:eb:af:3b:60:c3:29:a0: d2:71:ba:c9:a4:ef:06:e6:c3:e1:22:b1:9b:8d:23:72:4c:1d: e3:76:85:5e:8f:7b:53:49:82:b6:a0:ed:85:6c:58:ac:af:62: bc:11:2a:12:85:d6:0d:de:ac:09:45:2a:fe:88:08:71:22:d3: 68:12:fb:0f:7b:a6:8f:77:65:b6:75:ba:92:9e:c6:bc:4c:35: 3f:f0:df:69:fe:f4:c1:54:57:a2:3c:cb:bb:09:04:e5:0d:05: cf:28:ab:b0:05:fc:ab:ce:cf:0d:db:45:19:83:44:a2:8e:67: 6a:f9:48:bf:27:d2:9e:c9:e4:3e:51:d5:1c:dc:ef:c9:b4:ce: af:9f:38:f6:03:2f:37:d5:28:b3:15:86:05:95:fe:3a:c1:3d: 18:c0:da:9d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87YLk92Zi89X07aKLN5REMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMzk0YTEyNWZhM2FjZTBjNDdhNmZlMzRmNDA4NmI0ZDNi YTU1ODgwHhcNMjYwMTAyMDQxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNmExZTlmZDBiZTJjZjFkNWVmZWJmZWZiZmMzMWVmMmNjMmMyNDVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXHzcvtQmLmvOhw0iuJbI3w1AgKQ /V/krbqItpQ7zKPi6pbyHde6zAhZ6is0yx3UQZA/l92JbYudl5pIyUD5hxaSJqyJ LnuK2jU7WiWsrp7NZ0XTmQZqqjLRI62w7llVPeWT4IyQesEfmQNb0trbu8EfT/NN rdtqYQyKv1/B54MSEkPDr+6B7TMS3TW/0pWso3R9MiucQK+u3CzSH3VCcQF9T/Qy LeqqL/mc+4BbgKVCScZN3KLjiVc4P3N9TXGXi8NxETtDku8Fs/usIwW7gkpATR+k tcLOg9HIiLJ/SQPdQ7AvCUMmrgpizVbGv34UH0AMHK9xto7e7wbsWWiAHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOah6f0L4s8dXv6/77/DHvLMLCRdMB8GA1UdIwQY MBaAFCM5ShJfo6zgxHpv409AhrTTulWIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXpsS0VsLWpyT0RFZW1falQwQ0d0Tk82VllnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9hZmQ0MTUtMGE4Ni00MzFmLWJjM2Et ZDQzMjA3ZDYyZGZlLzEvNXFIcF9Rdml6eDFlX3JfdnY4TWU4c3dzSkYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9hZmQ0MTUtMGE4Ni00MzFmLWJjM2EtZDQzMjA3ZDYyZGZl LzEvSXpsS0VsLWpyT0RFZW1falQwQ0d0Tk82VllnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbT0NMA0G CSqGSIb3DQEBCwUAA4IBAQARXxk2U9rjP9B4bmPoZzoAu3NoAjzrnu8zL38Qubzp MLJ/AiP3J6/I6Xw0KABt/Rf/UlqMGqBvOQas0S3uPaITyY/WqZhE8+CDHko72nuA V4wWn7hVs0YHx39X066RybuZlbywOOuvO2DDKaDScbrJpO8G5sPhIrGbjSNyTB3j doVej3tTSYK2oO2FbFisr2K8ESoShdYN3qwJRSr+iAhxItNoEvsPe6aPd2W2dbqS nsa8TDU/8N9p/vTBVFeiPMu7CQTlDQXPKKuwBfyrzs8N20UZg0Sijmdq+Ui/J9Ke yeQ+UdUc3O/JtM6vnzj2Ay831SizFYYFlf46wT0YwNqd -----END CERTIFICATE-----Generated at Mon Feb 9 20:08:55 2026 by rpki-client