This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/5kQhTa9ppYhx0-CCDfhKsuGf-F4.roa File: 5kQhTa9ppYhx0-CCDfhKsuGf-F4.roa (raw, json) Hash identifier: Sc1YqqqQsHs863EggapJXNlkCp4JP0U2dmGwhrCZoUE= Subject key identifier: E6:44:21:4D:AF:69:A5:88:71:D3:E0:82:0D:F8:4A:B2:E1:9F:F8:5E Certificate issuer: /CN=2793bde946ae936d3cacc136a5f3239edf2431f4 Certificate serial: 019B7E386B58836FFFA1249FF6F91555D32B Authority key identifier: 27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/5kQhTa9ppYhx0-CCDfhKsuGf-F4.roa Signing time: Fri 02 Jan 2026 10:19:45 +0000 ROA not before: Fri 02 Jan 2026 10:19:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211415 IP address blocks: 81.31.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:6b:58:83:6f:ff:a1:24:9f:f6:f9:15:55:d3:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2793bde946ae936d3cacc136a5f3239edf2431f4 Validity Not Before: Jan 2 10:19:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e644214daf69a58871d3e0820df84ab2e19ff85e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f3:a1:d8:61:75:f5:ab:91:a2:e8:03:3c:72: a7:b1:dc:c3:14:13:e8:e5:25:9c:e1:ec:5e:5f:14: ab:09:a5:7b:c9:de:d2:53:5e:00:eb:7c:04:e1:e8: 0d:b0:0c:8e:f2:0b:d5:53:1f:64:16:b3:dc:ba:d0: 7c:68:0c:52:3a:c6:1a:26:ce:f3:6a:d0:11:fb:3e: 1c:2e:ab:47:b9:38:76:30:2c:8d:b0:7a:16:10:26: 3c:9c:1b:0c:91:1f:04:a4:ae:79:7b:0e:7e:48:f8: 04:cc:8c:ff:46:9b:15:d9:24:d7:03:68:33:7f:63: ee:c3:25:61:e0:b7:03:4a:72:23:09:61:61:71:fc: 59:54:e8:6a:d3:17:ec:c7:64:e3:9a:57:50:14:a1: af:86:49:53:e4:f7:d8:a8:72:d0:22:7f:48:fd:2f: d0:f3:d6:b1:71:6e:e6:0a:f4:12:4c:12:a0:5a:cb: 08:72:53:65:8c:eb:08:1c:8c:46:ac:3c:4a:99:e2: 65:a8:2d:af:b6:ad:68:36:ea:e4:90:24:26:11:cb: b5:00:0c:83:72:f0:ee:31:ad:bc:84:18:8e:b0:b6: f7:de:f4:ea:27:77:bf:81:cf:e6:3a:64:6d:b4:9d: b9:bb:f5:e9:59:92:bc:f9:69:79:47:01:80:c8:ce: 73:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:44:21:4D:AF:69:A5:88:71:D3:E0:82:0D:F8:4A:B2:E1:9F:F8:5E X509v3 Authority Key Identifier: keyid:27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/5kQhTa9ppYhx0-CCDfhKsuGf-F4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.31.198.0/24 Signature Algorithm: sha256WithRSAEncryption cb:90:4f:47:c0:67:96:01:5d:8e:fb:02:bc:4b:31:74:51:38: 07:c8:f9:57:3b:05:e1:32:02:0c:80:1e:26:c7:25:fb:27:b4: 35:92:35:98:68:1e:e5:c1:78:1d:87:fe:d7:b6:d0:40:95:ea: c2:6a:0e:2b:0c:e2:cd:88:5d:c7:29:ae:be:b7:af:3f:5c:20: 4e:7e:78:a8:f9:5c:ae:6c:68:7a:fa:94:07:f9:80:0f:c7:1f: 29:70:e3:df:f4:30:d9:d5:2c:da:1f:32:99:22:cf:5f:42:50: a0:80:ed:ce:d6:4d:05:d9:ed:70:a5:b1:b7:b1:f2:7b:5e:32: bc:9b:4e:51:81:09:a7:eb:75:cf:59:ae:3d:4a:78:64:f0:35: 2e:08:d7:c7:50:2a:ea:27:42:fe:fb:c0:9b:1a:f0:2a:80:eb: 36:96:1c:56:30:04:d4:31:dd:da:53:3c:47:af:51:c8:c2:a7: 78:57:5b:ba:0d:d6:77:05:f2:72:26:f0:ec:b0:9b:22:d6:c1: 1c:43:37:65:c8:6c:84:9e:ef:f2:4f:a9:50:9c:f0:ad:0a:de: 4b:f2:1f:88:c3:af:82:6a:19:a8:27:16:9c:ac:b3:c7:da:7e: 16:f9:bb:e0:9a:2a:2d:44:dc:7e:e8:6c:9b:af:85:70:00:10: 5f:4d:ee:b0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OGtYg2//oSSf9vkVVdMrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OTNiZGU5NDZhZTkzNmQzY2FjYzEzNmE1ZjMyMzllZGYy NDMxZjQwHhcNMjYwMTAyMTAxOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjQ0MjE0ZGFmNjlhNTg4NzFkM2UwODIwZGY4NGFiMmUxOWZmODVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvOh2GF19auRougDPHKnsdzDFBPo 5SWc4exeXxSrCaV7yd7SU14A63wE4egNsAyO8gvVUx9kFrPcutB8aAxSOsYaJs7z atAR+z4cLqtHuTh2MCyNsHoWECY8nBsMkR8EpK55ew5+SPgEzIz/RpsV2STXA2gz f2PuwyVh4LcDSnIjCWFhcfxZVOhq0xfsx2TjmldQFKGvhklT5PfYqHLQIn9I/S/Q 89axcW7mCvQSTBKgWssIclNljOsIHIxGrDxKmeJlqC2vtq1oNurkkCQmEcu1AAyD cvDuMa28hBiOsLb33vTqJ3e/gc/mOmRttJ25u/XpWZK8+Wl5RwGAyM5zMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOZEIU2vaaWIcdPggg34SrLhn/heMB8GA1UdIwQY MBaAFCeTvelGrpNtPKzBNqXzI57fJDH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjVPOTZVYXVrMjA4ck1FMnBmTWpudDhrTWZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9iZjU4ZGEtYTlkMi00MjFhLWI0M2Et OTJjM2JmNzRhOTdiLzEvNWtRaFRhOXBwWWh4MC1DQ0RmaEtzdUdmLUY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9iZjU4ZGEtYTlkMi00MjFhLWI0M2EtOTJjM2JmNzRhOTdi LzEvSjVPOTZVYXVrMjA4ck1FMnBmTWpudDhrTWZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUR/GMA0G CSqGSIb3DQEBCwUAA4IBAQDLkE9HwGeWAV2O+wK8SzF0UTgHyPlXOwXhMgIMgB4m xyX7J7Q1kjWYaB7lwXgdh/7XttBAlerCag4rDOLNiF3HKa6+t68/XCBOfnio+Vyu bGh6+pQH+YAPxx8pcOPf9DDZ1SzaHzKZIs9fQlCggO3O1k0F2e1wpbG3sfJ7XjK8 m05RgQmn63XPWa49Snhk8DUuCNfHUCrqJ0L++8CbGvAqgOs2lhxWMATUMd3aUzxH r1HIwqd4V1u6DdZ3BfJyJvDssJsi1sEcQzdlyGyEnu/yT6lQnPCtCt5L8h+Iw6+C ahmoJxacrLPH2n4W+bvgmiotRNx+6Gybr4VwABBfTe6w -----END CERTIFICATE-----Generated at Mon Jan 19 23:21:46 2026 by rpki-client