This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5dk9e_siNFk6N8k5ZGYAIw3M18I.roa File: 5dk9e_siNFk6N8k5ZGYAIw3M18I.roa (raw, json) Hash identifier: 3A/4GQ6c+1dsJqNwX1i5HVzfRY/6UtdFZAZyQk5vRqQ= Subject key identifier: E5:D9:3D:7B:FB:22:34:59:3A:37:C9:39:64:66:00:23:0D:CC:D7:C2 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B78D6258A84920BB7722F2E9EA0234837 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5dk9e_siNFk6N8k5ZGYAIw3M18I.roa Signing time: Thu 01 Jan 2026 09:14:18 +0000 ROA not before: Thu 01 Jan 2026 09:14:18 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 208483 IP address blocks: 31.57.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:d6:25:8a:84:92:0b:b7:72:2f:2e:9e:a0:23:48:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 1 09:14:18 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e5d93d7bfb2234593a37c939646600230dccd7c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b3:67:3f:c6:10:14:ad:cb:67:29:2b:52:2e: 43:c8:80:fd:e7:ea:28:4a:9a:cb:5e:00:d4:3d:eb: f2:44:0a:02:d1:1c:08:78:2c:ba:48:47:3b:3f:8f: 7f:d2:b7:5a:b1:38:a5:3d:bd:33:65:b6:fb:23:29: 98:f7:78:33:4d:d2:c9:f2:26:78:81:12:20:14:4a: 7e:dd:90:7b:10:8d:fa:94:9a:ca:97:ff:b3:c5:db: 8d:b9:dd:99:15:fb:b0:9a:1c:cf:10:3c:4e:d9:bc: 37:65:76:e9:1d:9c:a5:2b:72:41:12:19:8d:2c:8c: f2:82:6b:23:da:5c:c0:6c:b4:08:67:91:66:b9:fc: f6:76:9e:c1:ea:87:bb:70:26:71:5e:f6:17:ad:c1: 38:ad:87:28:ea:3c:4d:1d:01:20:fe:72:64:76:a7: 1f:7f:47:d3:ca:b0:a5:5b:07:8b:b1:be:9d:7d:04: 26:cf:57:6b:ab:c9:f8:49:91:7a:0c:f7:83:38:9c: 7b:1e:1b:bf:54:b9:81:2e:53:83:44:a7:ec:cc:27: b0:18:39:93:32:2d:1b:08:54:41:14:fd:55:32:6c: 38:ef:3e:13:35:7b:26:23:80:a3:6b:87:e3:8d:a3: a7:81:bd:8d:6d:ba:40:f1:28:06:6d:ee:ca:8d:bb: fd:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:D9:3D:7B:FB:22:34:59:3A:37:C9:39:64:66:00:23:0D:CC:D7:C2 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5dk9e_siNFk6N8k5ZGYAIw3M18I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.135.0/24 Signature Algorithm: sha256WithRSAEncryption 56:17:fe:43:12:85:5d:f0:af:3e:05:a8:46:f1:bc:c9:86:cf: 49:0d:0f:a4:5a:e4:23:eb:9a:ec:51:78:4d:42:2a:5c:69:f4: 14:38:16:15:e2:3b:56:0c:f5:61:9c:dc:62:f2:8c:ee:b5:17: 36:c6:76:19:2c:18:97:88:bf:3f:ee:a1:f0:d3:ec:31:d9:2d: f5:f7:c6:b4:91:70:51:f6:40:26:a9:58:1c:39:d3:08:cc:83: 10:c3:76:fa:77:b4:bd:79:c6:1d:06:8f:a1:21:c9:45:63:61: dc:6e:1a:c8:ae:4e:7e:4f:90:a7:96:4f:b8:f6:2c:32:d9:ff: 27:60:d3:ac:85:ea:11:58:6b:87:d7:11:31:a8:51:53:cc:1a: cf:0a:28:23:99:46:19:f0:cf:d3:42:a1:92:8c:88:c2:6e:a7: 90:8d:8a:d1:07:d7:e4:4e:c7:ba:b0:a8:6a:13:62:13:b8:7d: e6:62:9d:ce:e2:ed:ce:89:1f:1d:33:1d:ba:07:22:aa:c2:17: e4:33:54:db:76:eb:de:7c:10:4c:15:88:fa:4c:26:87:42:57: 0c:3c:ac:84:25:01:ad:c5:05:8a:30:96:57:0c:12:02:26:6a: 1b:41:d9:9f:99:d0:db:19:e8:3e:0a:0c:0e:4e:57:8b:3c:fb: be:47:1c:9f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt41iWKhJILt3IvLp6gI0g3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAxMDkxNDE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNWQ5M2Q3YmZiMjIzNDU5M2EzN2M5Mzk2NDY2MDAyMzBkY2NkN2MyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbNnP8YQFK3LZykrUi5DyID95+oo SprLXgDUPevyRAoC0RwIeCy6SEc7P49/0rdasTilPb0zZbb7IymY93gzTdLJ8iZ4 gRIgFEp+3ZB7EI36lJrKl/+zxduNud2ZFfuwmhzPEDxO2bw3ZXbpHZylK3JBEhmN LIzygmsj2lzAbLQIZ5Fmufz2dp7B6oe7cCZxXvYXrcE4rYco6jxNHQEg/nJkdqcf f0fTyrClWweLsb6dfQQmz1drq8n4SZF6DPeDOJx7Hhu/VLmBLlODRKfszCewGDmT Mi0bCFRBFP1VMmw47z4TNXsmI4Cja4fjjaOngb2NbbpA8SgGbe7Kjbv95QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOXZPXv7IjRZOjfJOWRmACMNzNfCMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvNWRrOWVfc2lORms2TjhrNVpHWUFJdzNNMThJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzmHMA0G CSqGSIb3DQEBCwUAA4IBAQBWF/5DEoVd8K8+BahG8bzJhs9JDQ+kWuQj65rsUXhN QipcafQUOBYV4jtWDPVhnNxi8ozutRc2xnYZLBiXiL8/7qHw0+wx2S3198a0kXBR 9kAmqVgcOdMIzIMQw3b6d7S9ecYdBo+hIclFY2HcbhrIrk5+T5Cnlk+49iwy2f8n YNOsheoRWGuH1xExqFFTzBrPCigjmUYZ8M/TQqGSjIjCbqeQjYrRB9fkTse6sKhq E2ITuH3mYp3O4u3OiR8dMx26ByKqwhfkM1TbduvefBBMFYj6TCaHQlcMPKyEJQGt xQWKMJZXDBICJmobQdmfmdDbGeg+CgwOTleLPPu+Rxyf -----END CERTIFICATE-----Generated at Fri Jan 2 09:30:21 2026 by rpki-client