This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/5kD6IuHCvqBGkvTIL1aw15a-eq8.roa File: 5kD6IuHCvqBGkvTIL1aw15a-eq8.roa (raw, json) Hash identifier: 7zOYElEzQJAaLUzKz3umism7RmjDLk8v6vzcQyKv7Uc= Subject key identifier: E6:40:FA:22:E1:C2:BE:A0:46:92:F4:C8:2F:56:B0:D7:96:BE:7A:AF Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Certificate serial: 019AB5D9B631BDE540F103EFB696B14E2EF3 Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/5kD6IuHCvqBGkvTIL1aw15a-eq8.roa Signing time: Mon 24 Nov 2025 12:32:15 +0000 ROA not before: Mon 24 Nov 2025 12:32:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 30058 IP address blocks: 88.80.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b5:d9:b6:31:bd:e5:40:f1:03:ef:b6:96:b1:4e:2e:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Validity Not Before: Nov 24 12:32:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e640fa22e1c2bea04692f4c82f56b0d796be7aaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a1:4e:5e:7a:b8:6f:f4:84:a0:8a:0d:db:02: 6a:b5:4f:65:85:8b:ab:df:52:31:30:5d:27:8e:98: cf:fd:28:1e:2c:ff:1f:87:d4:6d:6c:66:6a:b3:22: 71:6e:d0:6c:0f:18:cd:c3:a8:b5:e2:8e:ca:59:51: 52:7a:25:fd:4c:d6:d2:13:5c:c8:63:75:30:21:d1: 53:f2:a6:d5:4d:c5:8c:5b:b6:a7:45:17:bd:73:d5: 04:34:b8:28:ed:6d:eb:57:96:b1:42:ab:79:4b:7b: de:c7:1d:2e:47:83:ab:61:7d:dd:7b:86:f3:4e:81: be:ef:00:5f:55:66:bb:65:7b:24:59:36:39:9c:de: 7b:29:2f:00:4d:9a:55:00:6f:83:13:3c:c6:66:41: 3b:96:f4:3f:e7:e3:df:96:65:01:d6:f5:22:d5:69: 4e:af:48:91:5c:2e:3e:90:85:a0:94:df:be:0e:da: 5a:9e:8d:f5:2e:07:d1:70:f9:8a:ca:f7:1f:94:8c: d6:90:dd:ad:b5:e0:50:93:62:82:c4:db:75:c9:9f: 10:57:13:17:31:98:17:1f:f1:56:b6:ff:8d:17:91: 5f:8f:49:af:b7:77:1d:5d:5f:33:4e:b0:b2:31:4d: 9f:ab:9a:83:94:b6:3b:b3:44:99:23:5c:b2:5d:f1: ef:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:40:FA:22:E1:C2:BE:A0:46:92:F4:C8:2F:56:B0:D7:96:BE:7A:AF X509v3 Authority Key Identifier: keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/5kD6IuHCvqBGkvTIL1aw15a-eq8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.80.140.0/24 Signature Algorithm: sha256WithRSAEncryption 26:10:6f:b7:81:74:68:a0:16:9a:28:39:a4:af:42:dd:8a:a2: 7a:d2:59:6f:eb:07:56:fa:12:1c:f2:c6:8b:a4:30:c7:f1:03: e4:ca:19:bf:5d:9d:e9:ba:8d:68:a4:80:98:01:3e:c9:5d:5f: db:8f:e4:33:ab:78:aa:a5:23:67:da:de:e0:80:6c:a2:4e:bf: 2f:1e:36:c7:14:ec:03:16:9e:07:d4:45:8c:9d:f3:8c:35:47: b1:38:33:be:30:d6:12:83:04:e7:27:18:5d:11:38:18:5b:5d: 03:53:8f:6c:c7:f4:13:65:a2:a8:e4:27:38:af:ca:18:aa:72: 8c:ed:e0:81:43:88:af:c2:c1:8c:cd:7a:07:0b:c0:1a:ba:e9: 48:2a:f4:66:6e:49:90:77:8a:ce:ca:f3:74:59:8f:6b:7b:f8: f8:7a:69:f7:29:17:8a:de:d6:64:c3:86:d4:e4:92:0c:fa:29: b3:7a:ca:ea:39:90:5b:06:07:60:88:41:73:dd:5c:23:ef:4d: a0:cf:56:d3:94:ff:35:ac:04:df:38:12:f7:5f:ce:3d:32:fd: 43:1b:c7:a0:4a:5f:51:bd:84:56:80:d4:bb:3d:3c:0f:e4:da: 77:9a:f8:1f:d0:71:d1:32:8f:8c:d0:21:da:31:96:3a:17:5c: d9:2f:94:a2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZq12bYxveVA8QPvtpaxTi7zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2 MzFiZmIwHhcNMjUxMTI0MTIzMjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjQwZmEyMmUxYzJiZWEwNDY5MmY0YzgyZjU2YjBkNzk2YmU3YWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqFOXnq4b/SEoIoN2wJqtU9lhYur 31IxMF0njpjP/SgeLP8fh9RtbGZqsyJxbtBsDxjNw6i14o7KWVFSeiX9TNbSE1zI Y3UwIdFT8qbVTcWMW7anRRe9c9UENLgo7W3rV5axQqt5S3vexx0uR4OrYX3de4bz ToG+7wBfVWa7ZXskWTY5nN57KS8ATZpVAG+DEzzGZkE7lvQ/5+PflmUB1vUi1WlO r0iRXC4+kIWglN++Dtpano31LgfRcPmKyvcflIzWkN2tteBQk2KCxNt1yZ8QVxMX MZgXH/FWtv+NF5Ffj0mvt3cdXV8zTrCyMU2fq5qDlLY7s0SZI1yyXfHvJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOZA+iLhwr6gRpL0yC9WsNeWvnqvMB8GA1UdIwQY MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt YWI4ZjFmMzM4N2VlLzEvNWtENkl1SEN2cUJHa3ZUSUwxYXcxNWEtZXE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWFCMMA0G CSqGSIb3DQEBCwUAA4IBAQAmEG+3gXRooBaaKDmkr0LdiqJ60llv6wdW+hIc8saL pDDH8QPkyhm/XZ3puo1opICYAT7JXV/bj+Qzq3iqpSNn2t7ggGyiTr8vHjbHFOwD Fp4H1EWMnfOMNUexODO+MNYSgwTnJxhdETgYW10DU49sx/QTZaKo5Cc4r8oYqnKM 7eCBQ4ivwsGMzXoHC8AauulIKvRmbkmQd4rOyvN0WY9re/j4emn3KReK3tZkw4bU 5JIM+imzesrqOZBbBgdgiEFz3Vwj702gz1bTlP81rATfOBL3X849Mv1DG8egSl9R vYRWgNS7PTwP5Np3mvgf0HHRMo+M0CHaMZY6F1zZL5Si -----END CERTIFICATE-----Generated at Fri Dec 5 05:14:51 2025 by rpki-client