This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/l5U5dUbp4S0purvYAX6he9vmelA.roa File: l5U5dUbp4S0purvYAX6he9vmelA.roa (raw, json) Hash identifier: Yr3i+lMd5TtZSSBs18MNM7Tk/EiymRrwtLeLAkIt3fw= Subject key identifier: 97:95:39:75:46:E9:E1:2D:29:BA:BB:D8:01:7E:A1:7B:DB:E6:7A:50 Certificate issuer: /CN=f8d6ddee34c5bb8ec0eb919ce2656bf0cd855d54 Certificate serial: 019B78A23E0B69BF64C7B4257A3DD96121B6 Authority key identifier: F8:D6:DD:EE:34:C5:BB:8E:C0:EB:91:9C:E2:65:6B:F0:CD:85:5D:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/l5U5dUbp4S0purvYAX6he9vmelA.roa Signing time: Thu 01 Jan 2026 08:17:37 +0000 ROA not before: Thu 01 Jan 2026 08:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208653 IP address blocks: 5.183.136.0/22 maxlen: 22 2a0e:dc00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:3e:0b:69:bf:64:c7:b4:25:7a:3d:d9:61:21:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8d6ddee34c5bb8ec0eb919ce2656bf0cd855d54 Validity Not Before: Jan 1 08:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9795397546e9e12d29babbd8017ea17bdbe67a50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:db:04:78:1f:5b:35:cc:fc:c0:fa:01:4a:8b: a0:7e:2a:b3:33:7c:da:0e:a0:3a:c5:1e:ec:44:32: 68:ba:2d:3b:f3:ce:af:11:68:9d:13:a6:10:6d:c2: f8:7d:30:74:98:04:ea:d7:39:0d:07:3e:cf:ad:54: 94:dd:6b:ea:a9:0b:c6:a7:e6:40:10:db:87:37:da: 1e:72:66:b4:3e:c1:eb:27:52:d4:ed:22:b6:d0:5c: 06:67:54:ab:aa:00:77:a7:f0:9f:f1:94:b1:c4:a4: 27:cf:03:ff:2c:90:08:b6:ed:8e:a7:d9:d8:66:f5: 70:64:ad:37:69:47:62:3b:ed:77:fc:8e:f4:31:fc: af:c6:42:66:55:f6:c9:25:66:45:b0:b3:a2:da:56: 9f:2f:2f:ae:b5:08:eb:db:13:92:3b:15:ae:80:f6: e4:02:c7:3a:93:11:02:47:5b:2a:42:08:89:ac:36: e9:f1:b3:ec:92:dc:51:04:cf:e3:f3:9f:72:71:39: d9:41:59:2f:6d:e5:d9:9b:55:eb:9a:8f:d6:aa:02: 74:77:98:31:91:02:ed:f2:cd:be:ba:77:a9:ba:8e: 78:de:5b:6b:39:b3:a5:bf:de:0c:d7:47:c9:17:d4: 78:9e:e1:e5:f7:e2:52:0b:0b:d0:5a:d1:87:bc:b4: d3:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:95:39:75:46:E9:E1:2D:29:BA:BB:D8:01:7E:A1:7B:DB:E6:7A:50 X509v3 Authority Key Identifier: keyid:F8:D6:DD:EE:34:C5:BB:8E:C0:EB:91:9C:E2:65:6B:F0:CD:85:5D:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/l5U5dUbp4S0purvYAX6he9vmelA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.183.136.0/22 IPv6: 2a0e:dc00::/32 Signature Algorithm: sha256WithRSAEncryption 69:19:19:8f:e3:d9:1d:36:53:51:47:5a:87:65:51:39:a9:64: 9d:0d:8a:b8:64:70:b7:50:6d:c4:35:cb:ff:2b:7d:e4:5a:2f: a4:59:32:4a:88:e1:49:05:2b:ea:be:61:46:f6:e7:0f:03:47: b0:93:8c:79:05:54:9d:90:b1:55:55:0c:bc:8c:72:88:f3:c0: 50:9b:06:42:7b:b8:d3:3e:6b:a1:d2:a2:37:06:ff:cc:71:e2: a2:16:6d:12:99:6d:29:53:06:7c:52:73:5f:ea:4c:b5:fb:f0: 25:b6:1b:06:08:b8:ab:36:28:94:01:fb:8a:9a:42:7a:95:1a: 7d:7e:0f:49:a0:ee:ef:24:82:46:43:c4:04:e4:a9:7e:b5:c5: ce:36:f3:a2:10:d0:28:c8:5a:53:c4:e0:96:bc:11:05:34:23: 8c:aa:42:72:86:68:f3:01:47:8e:64:59:73:c5:31:5c:26:bc: 83:08:3b:91:c6:f9:b6:8b:60:3b:9c:6c:4f:ab:b2:76:23:7a: f0:7e:cb:0c:e8:d1:c6:61:d7:d5:3a:81:a2:17:9b:88:ad:f5: 2d:84:23:f3:12:0a:bf:0d:6b:d1:18:3a:3e:98:de:2c:6e:b1: 84:5b:4d:0a:f9:f7:2e:05:dd:9d:16:0e:b0:9a:58:2c:84:b3: ae:c2:f5:9b -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt4oj4Lab9kx7Qlej3ZYSG2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZDZkZGVlMzRjNWJiOGVjMGViOTE5Y2UyNjU2YmYwY2Q4 NTVkNTQwHhcNMjYwMTAxMDgxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Nzk1Mzk3NTQ2ZTllMTJkMjliYWJiZDgwMTdlYTE3YmRiZTY3YTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztsEeB9bNcz8wPoBSougfiqzM3za DqA6xR7sRDJoui07886vEWidE6YQbcL4fTB0mATq1zkNBz7PrVSU3WvqqQvGp+ZA ENuHN9oecma0PsHrJ1LU7SK20FwGZ1SrqgB3p/Cf8ZSxxKQnzwP/LJAItu2Op9nY ZvVwZK03aUdiO+13/I70MfyvxkJmVfbJJWZFsLOi2lafLy+utQjr2xOSOxWugPbk Asc6kxECR1sqQgiJrDbp8bPsktxRBM/j859ycTnZQVkvbeXZm1Xrmo/WqgJ0d5gx kQLt8s2+unepuo543ltrObOlv94M10fJF9R4nuHl9+JSCwvQWtGHvLTTTQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFJeVOXVG6eEtKbq72AF+oXvb5npQMB8GA1UdIwQY MBaAFPjW3e40xbuOwOuRnOJla/DNhV1UMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1OYmQ3alRGdTQ3QTY1R2M0bVZyOE0yRlhWUS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTYvNzgzZGE1LTY1NzItNDEzZC05ZDZi LTA5NGQwZGIxYWQyYy8xL2w1VTVkVWJwNFMwcHVydllBWDZoZTl2bWVsQS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYTYvNzgzZGE1LTY1NzItNDEzZC05ZDZiLTA5NGQwZGIxYWQy Yy8xLzEtTmJkN2pURnU0N0E2NUdjNG1WcjhNMkZYVlEuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAIFt4gw DQQCAAIwBwMFACoO3AAwDQYJKoZIhvcNAQELBQADggEBAGkZGY/j2R02U1FHWodl UTmpZJ0NirhkcLdQbcQ1y/8rfeRaL6RZMkqI4UkFK+q+YUb25w8DR7CTjHkFVJ2Q sVVVDLyMcojzwFCbBkJ7uNM+a6HSojcG/8xx4qIWbRKZbSlTBnxSc1/qTLX78CW2 GwYIuKs2KJQB+4qaQnqVGn1+D0mg7u8kgkZDxATkqX61xc4286IQ0CjIWlPE4Ja8 EQU0I4yqQnKGaPMBR45kWXPFMVwmvIMIO5HG+baLYDucbE+rsnYjevB+ywzo0cZh 19U6gaIXm4it9S2EI/MSCr8Na9EYOj6Y3ixusYRbTQr59y4F3Z0WDrCaWCyEs67C 9Zs= -----END CERTIFICATE-----Generated at Tue Jan 20 04:45:26 2026 by rpki-client