This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/5Y_cyUGtgROLZskx2yCw7OjFyEA.roa File: 5Y_cyUGtgROLZskx2yCw7OjFyEA.roa (raw, json) Hash identifier: BAHyfRAH/YEG/HpJsoGVqnK9w5abRBABKS5r3Zw4GVQ= Subject key identifier: E5:8F:DC:C9:41:AD:81:13:8B:66:C9:31:DB:20:B0:EC:E8:C5:C8:40 Certificate issuer: /CN=e8cf15bf6b1f2690f20901d1896e2d880fe8886e Certificate serial: 019B7D5C92736A134B67F155084E95C8D9F6 Authority key identifier: E8:CF:15:BF:6B:1F:26:90:F2:09:01:D1:89:6E:2D:88:0F:E8:88:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/5Y_cyUGtgROLZskx2yCw7OjFyEA.roa Signing time: Fri 02 Jan 2026 06:19:37 +0000 ROA not before: Fri 02 Jan 2026 06:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49588 IP address blocks: 176.101.192.0/19 maxlen: 19 193.169.134.0/24 maxlen: 24 193.169.135.0/24 maxlen: 24 2001:67c:2c44::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.crl rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.mft rsync://rpki.ripe.net/repository/DEFAULT/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:92:73:6a:13:4b:67:f1:55:08:4e:95:c8:d9:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8cf15bf6b1f2690f20901d1896e2d880fe8886e Validity Not Before: Jan 2 06:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e58fdcc941ad81138b66c931db20b0ece8c5c840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:76:e2:96:c4:aa:90:08:fb:f3:04:62:48:ee: 1c:c7:6b:c4:bd:45:62:00:8d:93:73:ec:f9:60:97: fd:a5:b5:39:f3:7f:7b:0f:f0:f7:2c:5a:23:ab:dd: d6:f9:75:96:13:dd:ad:1c:92:cf:43:ba:44:9e:ec: 09:de:0a:de:70:43:ae:8a:ea:9c:49:22:2c:d9:6a: 54:79:fd:33:36:09:b0:ee:98:89:a8:1e:4c:78:a9: c9:db:e2:20:22:f4:ad:a9:55:0b:a0:98:fc:2a:99: 39:65:2f:a5:fd:5d:72:17:74:87:7c:26:82:c7:e5: cd:69:45:fe:83:75:78:71:fc:ac:e7:99:32:3d:ec: 05:68:ab:d7:37:cd:65:86:df:e7:28:94:44:33:9d: 8c:07:29:68:da:a3:d4:ea:36:e5:0c:f6:ce:b4:01: 23:a1:81:b7:43:75:6e:71:1a:03:71:b5:dd:84:ae: 86:c3:20:2c:ba:37:cf:06:41:d4:3f:5c:4d:61:cc: 77:93:2c:0d:15:30:85:1d:1a:e5:d4:f0:61:78:dd: cd:32:43:bc:e9:79:6c:59:d9:f7:3b:d8:2a:ff:93: 0b:d7:4d:77:6a:a4:63:6d:df:d5:83:3f:3e:96:3f: 6f:66:ee:b3:3b:d5:62:d7:6a:d4:b3:29:a9:33:47: 58:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:8F:DC:C9:41:AD:81:13:8B:66:C9:31:DB:20:B0:EC:E8:C5:C8:40 X509v3 Authority Key Identifier: keyid:E8:CF:15:BF:6B:1F:26:90:F2:09:01:D1:89:6E:2D:88:0F:E8:88:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/5Y_cyUGtgROLZskx2yCw7OjFyEA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.101.192.0/19 193.169.134.0/23 IPv6: 2001:67c:2c44::/48 Signature Algorithm: sha256WithRSAEncryption 85:8c:d8:60:08:bc:fe:eb:57:46:7d:8b:85:54:25:43:95:12: 84:b0:d7:97:35:89:e0:c0:b1:18:b1:4f:98:6d:cf:99:04:0f: 6a:d3:03:88:14:7c:7e:7f:57:f5:75:ea:36:27:3b:60:91:45: 50:2b:56:7d:b1:8f:b8:1a:7d:80:35:c0:11:0c:e6:07:d5:2f: c8:c2:1b:51:88:89:87:3f:79:d3:7f:f3:2d:69:0d:a7:2d:f1: 49:60:39:e8:d1:f3:3d:88:4d:83:97:4b:66:04:d1:2a:ab:26: ba:e4:00:08:4f:4b:f8:79:65:05:15:14:3e:e6:91:96:3a:60: 55:9d:52:71:eb:c4:43:f3:a4:e4:db:ef:47:91:33:dc:e8:96: 16:66:e9:48:b0:23:92:64:5a:b1:13:94:ab:cd:8c:de:88:75: 84:2d:14:cc:0c:58:97:01:a4:57:13:87:76:cb:11:dc:80:be: d4:27:ba:17:02:73:b2:fe:4b:71:20:d4:a2:54:42:f4:0e:03: aa:0b:88:ad:f5:9f:11:e2:ff:14:03:0a:59:98:5d:bf:4f:95: 25:06:12:ca:17:66:bd:60:1d:57:b2:a1:79:34:d0:39:f9:99: de:13:96:89:c5:05:58:56:90:e5:58:d7:8c:ab:0e:c3:95:49: 1a:ab:8f:64 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt9XJJzahNLZ/FVCE6VyNn2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4Y2YxNWJmNmIxZjI2OTBmMjA5MDFkMTg5NmUyZDg4MGZl ODg4NmUwHhcNMjYwMTAyMDYxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNThmZGNjOTQxYWQ4MTEzOGI2NmM5MzFkYjIwYjBlY2U4YzVjODQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXbilsSqkAj78wRiSO4cx2vEvUVi AI2Tc+z5YJf9pbU58397D/D3LFojq93W+XWWE92tHJLPQ7pEnuwJ3grecEOuiuqc SSIs2WpUef0zNgmw7piJqB5MeKnJ2+IgIvStqVULoJj8Kpk5ZS+l/V1yF3SHfCaC x+XNaUX+g3V4cfys55kyPewFaKvXN81lht/nKJREM52MBylo2qPU6jblDPbOtAEj oYG3Q3VucRoDcbXdhK6GwyAsujfPBkHUP1xNYcx3kywNFTCFHRrl1PBheN3NMkO8 6XlsWdn3O9gq/5ML1013aqRjbd/Vgz8+lj9vZu6zO9Vi12rUsympM0dY5wIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFOWP3MlBrYETi2bJMdsgsOzoxchAMB8GA1UdIwQY MBaAFOjPFb9rHyaQ8gkB0YluLYgP6IhuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNk04VnYyc2ZKcER5Q1FIUmlXNHRpQV9vaUc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9kODM1NzYtYzY4NS00NjI0LTlkODgt OTkxMWZhOTg0ZTJlLzEvNVlfY3lVR3RnUk9MWnNreDJ5Q3c3T2pGeUVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9kODM1NzYtYzY4NS00NjI0LTlkODgtOTkxMWZhOTg0ZTJl LzEvNk04VnYyc2ZKcER5Q1FIUmlXNHRpQV9vaUc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQFsGXAAwQB wamGMA8EAgACMAkDBwAgAQZ8LEQwDQYJKoZIhvcNAQELBQADggEBAIWM2GAIvP7r V0Z9i4VUJUOVEoSw15c1ieDAsRixT5htz5kED2rTA4gUfH5/V/V16jYnO2CRRVAr Vn2xj7gafYA1wBEM5gfVL8jCG1GIiYc/edN/8y1pDact8UlgOejR8z2ITYOXS2YE 0SqrJrrkAAhPS/h5ZQUVFD7mkZY6YFWdUnHrxEPzpOTb70eRM9zolhZm6UiwI5Jk WrETlKvNjN6IdYQtFMwMWJcBpFcTh3bLEdyAvtQnuhcCc7L+S3Eg1KJUQvQOA6oL iK31nxHi/xQDClmYXb9PlSUGEsoXZr1gHVeyoXk00Dn5md4TlonFBVhWkOVY14yr DsOVSRqrj2Q= -----END CERTIFICATE-----Generated at Mon Feb 9 20:10:19 2026 by rpki-client