This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/5EAz5dndjgfQfjMqO-fDSjEIW8A.roa File: 5EAz5dndjgfQfjMqO-fDSjEIW8A.roa (raw, json) Hash identifier: G2Rnah1hR8UxH5++PW3B2fPR5YMOIykQT7T/Zz40bFo= Subject key identifier: E4:40:33:E5:D9:DD:8E:07:D0:7E:33:2A:3B:E7:C3:4A:31:08:5B:C0 Certificate issuer: /CN=d3a7c3be06bc45c3f12b90b185278ad4ec919756 Certificate serial: 019B7F15A93417D32754AAC67C3AF5C0CD46 Authority key identifier: D3:A7:C3:BE:06:BC:45:C3:F1:2B:90:B1:85:27:8A:D4:EC:91:97:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/5EAz5dndjgfQfjMqO-fDSjEIW8A.roa Signing time: Fri 02 Jan 2026 14:21:24 +0000 ROA not before: Fri 02 Jan 2026 14:21:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199496 IP address blocks: 45.148.88.0/22 maxlen: 27 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.crl rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:a9:34:17:d3:27:54:aa:c6:7c:3a:f5:c0:cd:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3a7c3be06bc45c3f12b90b185278ad4ec919756 Validity Not Before: Jan 2 14:21:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e44033e5d9dd8e07d07e332a3be7c34a31085bc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:84:1e:c9:d2:b7:f1:32:39:94:ac:c7:46:38: 78:68:c6:c1:ef:89:aa:e6:df:c4:3d:1e:71:53:7f: b5:5f:f1:e5:30:6e:96:46:28:bf:a3:30:75:c9:7d: fd:72:76:ac:06:fe:57:a2:96:bb:3d:24:1d:7f:4b: 32:dc:90:f9:67:17:43:73:98:40:5d:0b:22:ae:c1: c0:81:88:6a:2f:66:95:4b:ee:e1:77:0e:0f:9c:45: 33:e2:b6:ce:d6:c5:26:3c:eb:a8:c6:4e:26:b8:30: 4c:d3:43:82:0f:05:f3:e5:06:b3:13:d1:63:3c:c0: a2:a7:42:65:b3:ed:bc:c5:d7:13:e0:94:50:87:01: 59:78:52:19:bd:0f:6e:a8:03:57:0a:dc:83:15:34: d3:0f:2e:13:0e:be:af:65:98:0d:19:12:be:3e:1d: ed:13:c9:83:7a:0b:03:32:4d:3a:a3:91:70:9d:66: 4c:4b:d0:7c:1d:bb:bb:b0:26:38:e6:66:63:1f:47: 24:79:97:bb:64:b9:70:b6:82:f6:3e:5c:38:58:8e: 97:a3:27:1c:22:74:71:6a:f4:08:ea:83:e9:94:44: 1d:47:96:cb:57:47:3e:24:06:fe:02:6a:6c:62:6b: a4:8a:cc:0d:84:8a:95:5e:fa:a1:50:17:b7:7f:6d: 85:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:40:33:E5:D9:DD:8E:07:D0:7E:33:2A:3B:E7:C3:4A:31:08:5B:C0 X509v3 Authority Key Identifier: keyid:D3:A7:C3:BE:06:BC:45:C3:F1:2B:90:B1:85:27:8A:D4:EC:91:97:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/5EAz5dndjgfQfjMqO-fDSjEIW8A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.148.88.0/22 Signature Algorithm: sha256WithRSAEncryption 05:1b:50:f3:78:ff:77:fc:4a:99:20:0a:61:58:d9:f8:cb:77: e9:26:c6:3f:32:d6:4e:00:7a:a7:29:42:d0:7f:ba:94:a3:dd: 7e:9d:a2:97:7d:1c:22:fc:93:40:d4:b7:92:58:3a:c1:e8:e0: 91:e8:c8:5d:1f:13:45:e5:a9:7f:9f:35:3e:a1:b0:11:89:ab: c0:d6:c6:7c:ec:16:33:c7:68:95:b3:7a:fa:fc:95:26:8b:db: f6:39:f8:3e:ef:63:09:4b:51:e7:c7:01:91:68:dd:74:33:9d: cb:0a:12:bc:7a:54:b7:12:80:c5:a3:d4:de:5b:86:21:44:f8: e5:8b:47:96:77:2a:bb:e1:4e:89:a8:66:93:ce:79:40:c0:20: 8f:fd:cb:44:63:b5:50:7d:c0:45:83:1d:de:cf:ab:dc:e6:a7: df:45:44:01:44:33:99:37:8b:2b:9e:b5:6b:67:89:7a:00:76: b1:16:2d:e7:96:e2:99:c4:80:c0:23:e2:b3:85:22:a3:94:67: 3b:7d:40:f6:11:51:d4:9d:c7:c2:f1:ed:a2:fa:63:ea:25:dc: b1:37:d1:81:49:3e:12:a7:5a:f4:3f:6d:59:8b:d2:6e:d0:54: 6b:33:fc:07:ce:91:b8:e9:0e:39:80:32:af:23:25:b9:48:85: 20:eb:cc:3f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/Fak0F9MnVKrGfDr1wM1GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzYTdjM2JlMDZiYzQ1YzNmMTJiOTBiMTg1Mjc4YWQ0ZWM5 MTk3NTYwHhcNMjYwMTAyMTQyMTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDQwMzNlNWQ5ZGQ4ZTA3ZDA3ZTMzMmEzYmU3YzM0YTMxMDg1YmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoQeydK38TI5lKzHRjh4aMbB74mq 5t/EPR5xU3+1X/HlMG6WRii/ozB1yX39cnasBv5Xopa7PSQdf0sy3JD5ZxdDc5hA XQsirsHAgYhqL2aVS+7hdw4PnEUz4rbO1sUmPOuoxk4muDBM00OCDwXz5QazE9Fj PMCip0Jls+28xdcT4JRQhwFZeFIZvQ9uqANXCtyDFTTTDy4TDr6vZZgNGRK+Ph3t E8mDegsDMk06o5FwnWZMS9B8Hbu7sCY45mZjH0ckeZe7ZLlwtoL2Plw4WI6Xoycc InRxavQI6oPplEQdR5bLV0c+JAb+AmpsYmukiswNhIqVXvqhUBe3f22F0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFORAM+XZ3Y4H0H4zKjvnw0oxCFvAMB8GA1UdIwQY MBaAFNOnw74GvEXD8SuQsYUnitTskZdWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDZmRHZnYThSY1B4SzVDeGhTZUsxT3lSbDFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9jZWNmYjYtMDdmYi00Mjc1LWIwNmEt OGFhNTBkNjcwMzdjLzEvNUVBejVkbmRqZ2ZRZmpNcU8tZkRTakVJVzhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9jZWNmYjYtMDdmYi00Mjc1LWIwNmEtOGFhNTBkNjcwMzdj LzEvMDZmRHZnYThSY1B4SzVDeGhTZUsxT3lSbDFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZRYMA0G CSqGSIb3DQEBCwUAA4IBAQAFG1DzeP93/EqZIAphWNn4y3fpJsY/MtZOAHqnKULQ f7qUo91+naKXfRwi/JNA1LeSWDrB6OCR6MhdHxNF5al/nzU+obARiavA1sZ87BYz x2iVs3r6/JUmi9v2Ofg+72MJS1HnxwGRaN10M53LChK8elS3EoDFo9TeW4YhRPjl i0eWdyq74U6JqGaTznlAwCCP/ctEY7VQfcBFgx3ez6vc5qffRUQBRDOZN4srnrVr Z4l6AHaxFi3nluKZxIDAI+KzhSKjlGc7fUD2EVHUncfC8e2i+mPqJdyxN9GBST4S p1r0P21Zi9Ju0FRrM/wHzpG46Q45gDKvIyW5SIUg68w/ -----END CERTIFICATE-----Generated at Mon Feb 9 22:24:53 2026 by rpki-client