This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/eb8461-ab07-45c7-b9d6-d41a1a084c35/1/5bnhJYFPOsYDLyzjgUMjNOoQVxk.roa File: 5bnhJYFPOsYDLyzjgUMjNOoQVxk.roa (raw, json) Hash identifier: 4/9Kwtc7pVMZkf2C3AcfJB/4wzcdsheoGFzOOPKCvXs= Subject key identifier: E5:B9:E1:25:81:4F:3A:C6:03:2F:2C:E3:81:43:23:34:EA:10:57:19 Certificate issuer: /CN=0e931a7cf2da94ccd4a2afce23f392d4061d56f9 Certificate serial: 019B7D5C2FA21C7C3031441DD565C633C712 Authority key identifier: 0E:93:1A:7C:F2:DA:94:CC:D4:A2:AF:CE:23:F3:92:D4:06:1D:56:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DpMafPLalMzUoq_OI_OS1AYdVvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/eb8461-ab07-45c7-b9d6-d41a1a084c35/1/5bnhJYFPOsYDLyzjgUMjNOoQVxk.roa Signing time: Fri 02 Jan 2026 06:19:12 +0000 ROA not before: Fri 02 Jan 2026 06:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58273 IP address blocks: 194.31.184.0/22 maxlen: 24 2a09:1880::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/eb8461-ab07-45c7-b9d6-d41a1a084c35/1/DpMafPLalMzUoq_OI_OS1AYdVvk.crl rsync://rpki.ripe.net/repository/DEFAULT/98/eb8461-ab07-45c7-b9d6-d41a1a084c35/1/DpMafPLalMzUoq_OI_OS1AYdVvk.mft rsync://rpki.ripe.net/repository/DEFAULT/DpMafPLalMzUoq_OI_OS1AYdVvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:2f:a2:1c:7c:30:31:44:1d:d5:65:c6:33:c7:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e931a7cf2da94ccd4a2afce23f392d4061d56f9 Validity Not Before: Jan 2 06:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e5b9e125814f3ac6032f2ce381432334ea105719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:13:48:85:90:f5:b5:99:5a:30:e1:05:e7:8f: 63:38:18:12:ed:6b:f9:70:3c:93:b8:b7:c5:79:e1: 5b:77:21:58:58:1d:d6:29:9b:e2:bb:26:88:46:9f: d3:b5:96:27:5d:e9:33:1c:92:32:dc:26:70:bc:e2: f8:9b:a4:6e:96:73:a5:06:2c:f0:d8:8d:e3:78:3b: ca:c8:ff:91:c1:51:01:34:19:4c:7d:8d:8e:f2:cf: 2d:dc:14:d6:8d:a6:2f:58:5a:fa:20:88:c2:97:86: 27:b0:c4:cd:09:c6:43:4e:79:87:0a:6b:b2:02:ad: 61:65:c9:fb:c7:d4:22:3d:98:32:61:0f:03:fd:4c: 42:74:2f:3f:54:58:a5:be:a2:d1:13:bd:ca:75:0d: 41:a5:00:97:73:40:28:b1:1e:03:82:01:c0:e1:6d: 22:3b:5c:26:41:61:99:c1:81:f3:fc:38:28:b8:66: f8:14:ba:3b:55:9a:fd:46:83:b5:cd:38:01:12:95: d8:e2:33:1b:c6:f9:50:3b:fa:44:a6:aa:0a:45:c6: a3:0a:fe:59:2d:b7:60:40:e3:b9:38:b4:49:b0:be: d1:d6:72:8d:bd:7f:18:e4:85:49:f2:5c:69:c2:f5: 44:39:2f:55:9d:31:8c:de:3f:d1:7f:e2:48:02:74: 63:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:B9:E1:25:81:4F:3A:C6:03:2F:2C:E3:81:43:23:34:EA:10:57:19 X509v3 Authority Key Identifier: keyid:0E:93:1A:7C:F2:DA:94:CC:D4:A2:AF:CE:23:F3:92:D4:06:1D:56:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpMafPLalMzUoq_OI_OS1AYdVvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/eb8461-ab07-45c7-b9d6-d41a1a084c35/1/5bnhJYFPOsYDLyzjgUMjNOoQVxk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/eb8461-ab07-45c7-b9d6-d41a1a084c35/1/DpMafPLalMzUoq_OI_OS1AYdVvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.31.184.0/22 IPv6: 2a09:1880::/29 Signature Algorithm: sha256WithRSAEncryption 5f:c0:71:b2:83:4c:7d:bb:af:99:96:18:37:36:4e:5e:67:47: 00:3b:1b:73:c7:66:6b:9d:c5:93:13:b7:e5:58:a1:fb:68:91: f7:90:95:47:ca:dc:ce:49:9d:26:1f:a2:67:ca:2e:c5:14:7d: ef:78:31:48:d1:fd:22:1d:41:17:7d:15:35:4b:67:10:c0:10: a3:71:e1:2a:1c:13:e7:ea:42:99:55:48:b7:86:96:c5:5b:62: 91:ec:ee:a7:29:ba:c8:d2:b5:a2:7b:e4:2a:0d:86:a8:b2:75: 6f:4a:24:63:05:5e:29:25:ea:c6:26:b2:fb:30:91:5d:c8:2a: 3f:8f:b5:91:c7:6e:c3:fc:21:d0:8d:77:c9:89:06:1a:f1:31: fa:71:46:a6:10:5f:dc:f7:0a:7f:20:4d:84:1a:df:b0:57:d3: ac:84:1f:0a:16:16:46:77:83:92:8c:71:41:8f:a8:18:18:fb: 5f:1f:0d:63:70:c4:59:a4:cc:57:a3:44:8a:c0:8a:a7:ff:b5: 87:e0:91:54:8f:81:6a:8f:07:59:2e:4a:97:2c:92:ac:21:f0: 45:2c:b4:24:f1:eb:c0:f4:66:0c:1d:9e:be:8f:7f:04:78:ac: 52:8e:03:cf:ad:cf:53:1c:8e:3c:e3:74:25:09:44:48:db:93: 2b:d2:47:89 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9XC+iHHwwMUQd1WXGM8cSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlOTMxYTdjZjJkYTk0Y2NkNGEyYWZjZTIzZjM5MmQ0MDYx ZDU2ZjkwHhcNMjYwMTAyMDYxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNWI5ZTEyNTgxNGYzYWM2MDMyZjJjZTM4MTQzMjMzNGVhMTA1NzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxNIhZD1tZlaMOEF549jOBgS7Wv5 cDyTuLfFeeFbdyFYWB3WKZviuyaIRp/TtZYnXekzHJIy3CZwvOL4m6RulnOlBizw 2I3jeDvKyP+RwVEBNBlMfY2O8s8t3BTWjaYvWFr6IIjCl4YnsMTNCcZDTnmHCmuy Aq1hZcn7x9QiPZgyYQ8D/UxCdC8/VFilvqLRE73KdQ1BpQCXc0AosR4DggHA4W0i O1wmQWGZwYHz/DgouGb4FLo7VZr9RoO1zTgBEpXY4jMbxvlQO/pEpqoKRcajCv5Z LbdgQOO5OLRJsL7R1nKNvX8Y5IVJ8lxpwvVEOS9VnTGM3j/Rf+JIAnRj0wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOW54SWBTzrGAy8s44FDIzTqEFcZMB8GA1UdIwQY MBaAFA6TGnzy2pTM1KKvziPzktQGHVb5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHBNYWZQTGFsTXpVb3FfT0lfT1MxQVlkVnZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9lYjg0NjEtYWIwNy00NWM3LWI5ZDYt ZDQxYTFhMDg0YzM1LzEvNWJuaEpZRlBPc1lETHl6amdVTWpOT29RVnhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC9lYjg0NjEtYWIwNy00NWM3LWI5ZDYtZDQxYTFhMDg0YzM1 LzEvRHBNYWZQTGFsTXpVb3FfT0lfT1MxQVlkVnZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCwh+4MA0E AgACMAcDBQMqCRiAMA0GCSqGSIb3DQEBCwUAA4IBAQBfwHGyg0x9u6+Zlhg3Nk5e Z0cAOxtzx2ZrncWTE7flWKH7aJH3kJVHytzOSZ0mH6Jnyi7FFH3veDFI0f0iHUEX fRU1S2cQwBCjceEqHBPn6kKZVUi3hpbFW2KR7O6nKbrI0rWie+QqDYaosnVvSiRj BV4pJerGJrL7MJFdyCo/j7WRx27D/CHQjXfJiQYa8TH6cUamEF/c9wp/IE2EGt+w V9OshB8KFhZGd4OSjHFBj6gYGPtfHw1jcMRZpMxXo0SKwIqn/7WH4JFUj4FqjwdZ LkqXLJKsIfBFLLQk8evA9GYMHZ6+j38EeKxSjgPPrc9THI4843QlCURI25Mr0keJ -----END CERTIFICATE-----Generated at Tue Jan 27 02:08:13 2026 by rpki-client