This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/GQ9oHmVrhqbw1ueu_Pk60wFQwT0.roa File: GQ9oHmVrhqbw1ueu_Pk60wFQwT0.roa (raw, json) Hash identifier: xIR+V2pRoZHqDiZfSfGurV0kCSe0HD6UwJQI7Hsc8KE= Subject key identifier: 19:0F:68:1E:65:6B:86:A6:F0:D6:E7:AE:FC:F9:3A:D3:01:50:C1:3D Certificate issuer: /CN=6f5de9f9dbbd4618857b58105c6743720a11bc6e Certificate serial: 019B7F15441E9CB52894E924ED7A6D523BB8 Authority key identifier: 6F:5D:E9:F9:DB:BD:46:18:85:7B:58:10:5C:67:43:72:0A:11:BC:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b13p-du9RhiFe1gQXGdDcgoRvG4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/GQ9oHmVrhqbw1ueu_Pk60wFQwT0.roa Signing time: Fri 02 Jan 2026 14:20:58 +0000 ROA not before: Fri 02 Jan 2026 14:20:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213298 IP address blocks: 5.187.56.0/21 maxlen: 21 5.187.56.0/24 maxlen: 24 5.187.57.0/24 maxlen: 24 5.187.58.0/24 maxlen: 24 5.187.59.0/24 maxlen: 24 5.187.60.0/24 maxlen: 24 5.187.61.0/24 maxlen: 24 5.187.62.0/24 maxlen: 24 5.187.63.0/24 maxlen: 24 2a01:41c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/b13p-du9RhiFe1gQXGdDcgoRvG4.crl rsync://rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/b13p-du9RhiFe1gQXGdDcgoRvG4.mft rsync://rpki.ripe.net/repository/DEFAULT/b13p-du9RhiFe1gQXGdDcgoRvG4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:44:1e:9c:b5:28:94:e9:24:ed:7a:6d:52:3b:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f5de9f9dbbd4618857b58105c6743720a11bc6e Validity Not Before: Jan 2 14:20:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=190f681e656b86a6f0d6e7aefcf93ad30150c13d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:82:de:8f:7f:06:d6:94:38:37:50:31:4d:2c: a1:2e:da:b5:e9:00:43:33:54:82:33:27:f6:5b:3d: db:86:b4:d6:44:10:9a:11:a4:9e:99:4c:a5:59:98: 57:82:9b:7a:7c:b6:74:c6:f3:c1:98:61:1d:4b:df: fa:1d:ff:4a:fa:23:93:d7:f1:b1:25:65:06:88:fb: f6:01:60:98:d2:1d:96:52:a5:a0:e9:fa:56:34:b6: fb:6a:5d:73:13:af:44:e0:2c:3c:d1:6b:07:59:b6: a1:11:03:54:43:84:35:75:09:ba:9d:20:77:51:67: 7b:2a:a7:d5:70:ee:a3:91:fe:96:9a:f3:e0:48:52: 7a:f8:77:ad:d6:59:d0:90:98:5e:40:f6:1c:20:a3: 72:39:3a:c9:77:99:09:f5:7e:c3:e5:89:c8:a2:f3: 9b:36:a0:f8:3e:d7:3a:22:58:f6:bd:6e:b8:ef:41: a4:9e:d3:b2:7e:12:78:a9:69:1c:0c:59:6b:ae:c8: ad:e3:5d:29:01:3f:77:0d:8e:be:25:bf:76:a4:71: 40:d3:6a:fb:5c:66:cd:dd:60:c9:af:83:05:15:38: b5:eb:8f:ed:3d:00:86:c6:94:97:d4:a0:21:b7:f5: e3:c1:66:2e:0b:1d:11:8a:ff:ed:3f:60:74:cf:1f: 7e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:0F:68:1E:65:6B:86:A6:F0:D6:E7:AE:FC:F9:3A:D3:01:50:C1:3D X509v3 Authority Key Identifier: keyid:6F:5D:E9:F9:DB:BD:46:18:85:7B:58:10:5C:67:43:72:0A:11:BC:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b13p-du9RhiFe1gQXGdDcgoRvG4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/GQ9oHmVrhqbw1ueu_Pk60wFQwT0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/b13p-du9RhiFe1gQXGdDcgoRvG4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.187.56.0/21 IPv6: 2a01:41c0::/32 Signature Algorithm: sha256WithRSAEncryption 00:d8:e8:c2:8a:7d:16:19:2f:f2:79:88:49:9c:bf:82:68:4b: 99:68:ad:c5:75:2c:67:93:17:f8:e1:2b:c0:7e:c9:b4:49:d1: 69:2c:c9:84:28:35:63:bf:c4:c8:05:b9:b7:ef:38:19:ae:7c: 5d:12:64:b1:0f:10:09:90:44:d9:7f:14:a3:14:62:b2:8a:21: 8f:14:00:3e:6f:bf:ca:23:37:13:96:a6:1b:cc:6c:ef:84:c8: 17:09:35:e2:f8:9f:4f:98:63:46:9c:0f:d9:be:40:23:e8:85: 27:b7:c3:a0:13:d4:31:65:90:30:19:f8:02:9d:d2:46:a6:ba: 08:65:c3:00:3a:e0:b2:22:ff:c7:e7:46:10:67:96:3e:14:0c: b3:b3:35:a0:1d:fc:dd:23:d1:89:36:02:d0:77:4a:c9:21:66: 3d:11:52:b2:bd:a3:3d:3f:43:16:a1:42:0f:e5:26:f1:7f:63: 0a:27:a4:19:10:a4:48:1d:15:38:39:44:61:dc:e9:91:5a:28: 9f:f8:01:97:ef:0e:9c:d8:54:39:e2:65:91:d9:12:2f:6d:52: 18:f7:37:fb:e5:89:64:09:b8:a5:c7:b3:e2:d1:f6:0c:da:d9: 4b:30:26:36:0d:99:55:82:8a:70:ac:f6:81:2a:44:3f:f3:43: 27:a2:72:5a -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/FUQenLUolOkk7XptUju4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmNWRlOWY5ZGJiZDQ2MTg4NTdiNTgxMDVjNjc0MzcyMGEx MWJjNmUwHhcNMjYwMTAyMTQyMDU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTBmNjgxZTY1NmI4NmE2ZjBkNmU3YWVmY2Y5M2FkMzAxNTBjMTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYLej38G1pQ4N1AxTSyhLtq16QBD M1SCMyf2Wz3bhrTWRBCaEaSemUylWZhXgpt6fLZ0xvPBmGEdS9/6Hf9K+iOT1/Gx JWUGiPv2AWCY0h2WUqWg6fpWNLb7al1zE69E4Cw80WsHWbahEQNUQ4Q1dQm6nSB3 UWd7KqfVcO6jkf6WmvPgSFJ6+Het1lnQkJheQPYcIKNyOTrJd5kJ9X7D5YnIovOb NqD4Ptc6Ilj2vW6470GkntOyfhJ4qWkcDFlrrsit410pAT93DY6+Jb92pHFA02r7 XGbN3WDJr4MFFTi164/tPQCGxpSX1KAht/XjwWYuCx0Riv/tP2B0zx9+4QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBkPaB5la4am8Nbnrvz5OtMBUME9MB8GA1UdIwQY MBaAFG9d6fnbvUYYhXtYEFxnQ3IKEbxuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjEzcC1kdTlSaGlGZTFnUVhHZERjZ29Sdkc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC82MWZjYjQtNTU3NC00ZTJlLWIyNTkt YWUwNTc5NGM4ZTEzLzEvR1E5b0htVnJocWJ3MXVldV9QazYwd0ZRd1QwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC82MWZjYjQtNTU3NC00ZTJlLWIyNTktYWUwNTc5NGM4ZTEz LzEvYjEzcC1kdTlSaGlGZTFnUVhHZERjZ29Sdkc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDBbs4MA0E AgACMAcDBQAqAUHAMA0GCSqGSIb3DQEBCwUAA4IBAQAA2OjCin0WGS/yeYhJnL+C aEuZaK3FdSxnkxf44SvAfsm0SdFpLMmEKDVjv8TIBbm37zgZrnxdEmSxDxAJkETZ fxSjFGKyiiGPFAA+b7/KIzcTlqYbzGzvhMgXCTXi+J9PmGNGnA/ZvkAj6IUnt8Og E9QxZZAwGfgCndJGproIZcMAOuCyIv/H50YQZ5Y+FAyzszWgHfzdI9GJNgLQd0rJ IWY9EVKyvaM9P0MWoUIP5Sbxf2MKJ6QZEKRIHRU4OURh3OmRWiif+AGX7w6c2FQ5 4mWR2RIvbVIY9zf75YlkCbilx7Pi0fYM2tlLMCY2DZlVgopwrPaBKkQ/80MnonJa -----END CERTIFICATE-----Generated at Tue Feb 10 07:25:46 2026 by rpki-client