This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/5PuKtCw0QFU1GY0J5UpP_xHtRIk.roa File: 5PuKtCw0QFU1GY0J5UpP_xHtRIk.roa (raw, json) Hash identifier: j1mFIiv449G4hXYGvmw9c0Kk7V0VX9Tiu6ckBGnez8Y= Subject key identifier: E4:FB:8A:B4:2C:34:40:55:35:19:8D:09:E5:4A:4F:FF:11:ED:44:89 Certificate issuer: /CN=12cd9add16137e8bab98d78e2a3360bc8bd6f0f1 Certificate serial: 019B797EFF28371C329F0FFF5A471D1833F2 Authority key identifier: 12:CD:9A:DD:16:13:7E:8B:AB:98:D7:8E:2A:33:60:BC:8B:D6:F0:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Es2a3RYTfourmNeOKjNgvIvW8PE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/5PuKtCw0QFU1GY0J5UpP_xHtRIk.roa Signing time: Thu 01 Jan 2026 12:18:44 +0000 ROA not before: Thu 01 Jan 2026 12:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15389 IP address blocks: 81.18.224.0/20 maxlen: 20 88.85.32.0/19 maxlen: 19 178.19.192.0/20 maxlen: 20 185.74.208.0/22 maxlen: 22 193.34.104.0/22 maxlen: 22 193.34.105.0/24 maxlen: 24 198.137.136.0/22 maxlen: 22 212.55.32.0/19 maxlen: 19 217.172.80.0/20 maxlen: 20 217.172.90.0/24 maxlen: 24 2a02:e90::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.crl rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.mft rsync://rpki.ripe.net/repository/DEFAULT/Es2a3RYTfourmNeOKjNgvIvW8PE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:ff:28:37:1c:32:9f:0f:ff:5a:47:1d:18:33:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12cd9add16137e8bab98d78e2a3360bc8bd6f0f1 Validity Not Before: Jan 1 12:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4fb8ab42c34405535198d09e54a4fff11ed4489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ba:ec:a0:92:1e:70:f5:72:61:ab:5e:52:d5: 93:45:18:1b:9d:1f:c0:e8:72:1c:0c:5c:db:a7:b9: b3:64:c7:2e:eb:a2:02:29:51:07:21:ee:4c:76:4f: a6:32:58:0c:2f:18:5f:1d:e1:74:f6:e4:96:19:16: e5:d9:f4:30:c6:8c:1f:88:1c:92:a9:be:95:9b:16: 27:51:44:12:fb:0f:11:cb:a2:4b:48:38:62:03:b4: 5f:32:5e:e0:ea:0d:1a:32:40:da:f1:94:c3:1b:25: 81:cb:4e:19:5b:33:23:d6:48:a3:5d:ed:60:06:ba: 0a:9f:00:ea:9f:66:cd:6f:d1:b6:3f:bc:9c:3c:93: 6b:b4:68:a7:eb:f5:69:e0:d6:7f:1d:d0:82:b1:55: 05:4c:96:2b:1a:4e:38:ba:f5:03:bf:32:df:3d:55: 9b:f5:c6:c6:ba:eb:dc:7d:20:d5:40:51:59:a8:1d: eb:be:95:c2:94:ff:90:b2:e8:c4:3e:22:31:51:de: 70:cf:ab:6c:ea:e0:27:cf:0d:41:37:b0:b9:33:54: 13:4e:29:32:29:34:0a:20:98:cc:6d:e0:68:6f:ce: 91:28:58:e4:18:be:54:23:1f:85:e1:9e:1b:06:b8: 92:21:e1:5d:0a:46:5c:99:49:da:c7:27:0f:65:e3: 01:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:FB:8A:B4:2C:34:40:55:35:19:8D:09:E5:4A:4F:FF:11:ED:44:89 X509v3 Authority Key Identifier: keyid:12:CD:9A:DD:16:13:7E:8B:AB:98:D7:8E:2A:33:60:BC:8B:D6:F0:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Es2a3RYTfourmNeOKjNgvIvW8PE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/5PuKtCw0QFU1GY0J5UpP_xHtRIk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.18.224.0/20 88.85.32.0/19 178.19.192.0/20 185.74.208.0/22 193.34.104.0/22 198.137.136.0/22 212.55.32.0/19 217.172.80.0/20 IPv6: 2a02:e90::/32 Signature Algorithm: sha256WithRSAEncryption aa:a5:a7:92:b6:db:14:24:64:0a:27:cf:01:c5:81:31:26:e9: 9d:36:a4:32:ed:6f:cc:0f:bf:83:f8:30:5c:6d:c1:f3:af:85: 1a:0b:a1:e2:65:6d:ee:9b:af:08:9d:1a:94:aa:f6:f8:b6:6c: 22:8e:ea:fa:de:3a:88:52:1d:fc:0a:c2:f5:61:15:b7:9a:92: f1:e0:60:52:e4:eb:43:a7:14:37:2f:4b:e8:91:cf:c1:56:fd: 2b:41:63:4d:48:30:2d:b4:0b:5e:bf:4f:37:c0:33:69:9e:40: 13:9e:b1:65:a0:e8:31:33:ea:f8:41:f6:e3:7f:ee:e7:9d:2c: 59:8a:21:cd:10:d0:1f:ec:1b:bc:b1:0f:e1:da:9c:50:a8:95: 02:a1:21:a5:0f:bf:a0:a5:3e:41:19:35:2d:13:86:39:77:f2: e2:6a:a8:79:24:a9:53:25:32:92:d8:91:08:a7:cc:b7:e3:74: 1e:61:50:14:91:dc:02:02:ac:a3:68:3b:2c:53:8a:75:12:c0: 48:11:5d:a1:ef:eb:f0:d6:3e:e9:0d:f7:71:ad:c0:20:d8:8a: ea:18:5b:4f:9d:62:e9:d7:cf:f7:cd:e2:46:62:62:8a:a4:e0: dc:9b:31:28:b5:1f:8f:6e:d8:cb:ed:85:90:0e:c5:a5:03:3a: a0:99:71:5d -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgISAZt5fv8oNxwynw//WkcdGDPyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyY2Q5YWRkMTYxMzdlOGJhYjk4ZDc4ZTJhMzM2MGJjOGJk NmYwZjEwHhcNMjYwMTAxMTIxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNGZiOGFiNDJjMzQ0MDU1MzUxOThkMDllNTRhNGZmZjExZWQ0NDg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7rsoJIecPVyYateUtWTRRgbnR/A 6HIcDFzbp7mzZMcu66ICKVEHIe5Mdk+mMlgMLxhfHeF09uSWGRbl2fQwxowfiByS qb6VmxYnUUQS+w8Ry6JLSDhiA7RfMl7g6g0aMkDa8ZTDGyWBy04ZWzMj1kijXe1g BroKnwDqn2bNb9G2P7ycPJNrtGin6/Vp4NZ/HdCCsVUFTJYrGk44uvUDvzLfPVWb 9cbGuuvcfSDVQFFZqB3rvpXClP+QsujEPiIxUd5wz6ts6uAnzw1BN7C5M1QTTiky KTQKIJjMbeBob86RKFjkGL5UIx+F4Z4bBriSIeFdCkZcmUnaxycPZeMB6wIDAQAB o4ICQjCCAj4wHQYDVR0OBBYEFOT7irQsNEBVNRmNCeVKT/8R7USJMB8GA1UdIwQY MBaAFBLNmt0WE36Lq5jXjiozYLyL1vDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXMyYTNSWVRmb3VybU5lT0tqTmd2SXZXOFBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My81N2NjNmUtOGIxYS00ODI3LTk5OWMt MTcyZGY2YmNkNDViLzEvNVB1S3RDdzBRRlUxR1kwSjVVcFBfeEh0UklrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My81N2NjNmUtOGIxYS00ODI3LTk5OWMtMTcyZGY2YmNkNDVi LzEvRXMyYTNSWVRmb3VybU5lT0tqTmd2SXZXOFBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQEURLgAwQF WFUgAwQEshPAAwQCuUrQAwQCwSJoAwQCxomIAwQF1DcgAwQE2axQMA0EAgACMAcD BQAqAg6QMA0GCSqGSIb3DQEBCwUAA4IBAQCqpaeSttsUJGQKJ88BxYExJumdNqQy 7W/MD7+D+DBcbcHzr4UaC6HiZW3um68InRqUqvb4tmwijur63jqIUh38CsL1YRW3 mpLx4GBS5OtDpxQ3L0vokc/BVv0rQWNNSDAttAtev083wDNpnkATnrFloOgxM+r4 Qfbjf+7nnSxZiiHNENAf7Bu8sQ/h2pxQqJUCoSGlD7+gpT5BGTUtE4Y5d/Liaqh5 JKlTJTKS2JEIp8y343QeYVAUkdwCAqyjaDssU4p1EsBIEV2h7+vw1j7pDfdxrcAg 2IrqGFtPnWLp18/3zeJGYmKKpODcmzEotR+PbtjL7YWQDsWlAzqgmXFd -----END CERTIFICATE-----Generated at Tue Feb 10 04:53:38 2026 by rpki-client