This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/_5dPGZCcsdHmpRhCTkOU-sos5GE.roa File: _5dPGZCcsdHmpRhCTkOU-sos5GE.roa (raw, json) Hash identifier: /u2/VDIfFnty31Q0Cg5Ee6PvdpGvq/sk0Sz5/j6Z4z4= Subject key identifier: FF:97:4F:19:90:9C:B1:D1:E6:A5:18:42:4E:43:94:FA:CA:2C:E4:61 Certificate issuer: /CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485 Certificate serial: 019B79ECB4BD1C15FA1DADE812C82158D60B Authority key identifier: 5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/_5dPGZCcsdHmpRhCTkOU-sos5GE.roa Signing time: Thu 01 Jan 2026 14:18:34 +0000 ROA not before: Thu 01 Jan 2026 14:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29622 IP address blocks: 109.160.24.0/21 maxlen: 21 109.160.24.0/22 maxlen: 22 109.160.24.0/24 maxlen: 24 109.160.25.0/24 maxlen: 24 109.160.26.0/24 maxlen: 24 109.160.27.0/24 maxlen: 24 109.160.28.0/22 maxlen: 22 109.160.28.0/24 maxlen: 24 109.160.29.0/24 maxlen: 24 109.160.30.0/24 maxlen: 24 109.160.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:b4:bd:1c:15:fa:1d:ad:e8:12:c8:21:58:d6:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485 Validity Not Before: Jan 1 14:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff974f19909cb1d1e6a518424e4394faca2ce461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2b:47:fe:7a:3f:76:33:7d:44:e5:c3:61:17: a4:39:86:08:37:9e:32:f6:5e:c8:6f:05:6a:69:29: 82:31:d2:81:2f:57:f4:8f:14:5d:52:b4:84:3a:35: 3a:2b:5e:12:74:17:00:e3:43:66:56:f1:5d:e6:d9: 69:28:47:c2:d9:f1:ea:fb:5e:a2:51:58:64:b6:1b: 16:54:71:42:f0:fa:3a:85:aa:02:5d:54:bf:ca:1b: f8:dc:45:38:a8:1d:a5:1b:07:fc:08:5b:73:06:23: 89:d7:4f:e2:3a:ff:b5:b4:9b:81:89:fb:28:24:c0: 8d:3b:bb:49:8c:72:a1:d3:76:05:55:19:cc:3b:db: ef:fa:09:21:e4:36:71:41:71:a6:a9:57:83:9c:ba: 4e:74:85:96:b9:f6:fc:6f:60:8c:5d:a7:a7:bb:71: 00:97:81:67:55:c9:d2:31:b8:77:41:89:47:6d:09: 59:5c:2e:34:32:30:63:ba:26:e6:ba:6f:e9:45:57: ab:27:97:94:a4:55:93:6a:9d:a3:56:40:68:bc:b7: cf:6b:6c:ef:1c:e7:9d:87:fd:58:e0:89:e7:d5:9b: 19:14:26:b6:ac:d7:03:aa:31:e1:4f:b7:61:9e:0c: b4:82:2b:a6:06:a2:f0:56:4b:db:a9:d1:8d:5a:79: 6e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:97:4F:19:90:9C:B1:D1:E6:A5:18:42:4E:43:94:FA:CA:2C:E4:61 X509v3 Authority Key Identifier: keyid:5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/_5dPGZCcsdHmpRhCTkOU-sos5GE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.160.24.0/21 Signature Algorithm: sha256WithRSAEncryption 8c:ea:c2:0e:91:2e:7a:ef:aa:8c:27:3a:63:02:61:9e:65:29: c2:0a:81:6c:3a:9f:29:3f:89:fd:bd:8a:23:b2:21:ef:5e:3b: a4:45:80:51:c5:ba:ff:bc:12:04:f5:ca:68:aa:fd:3a:4c:43: 9e:11:01:ac:0c:a0:0b:c9:84:69:4b:15:10:c0:cc:c1:18:a9: 49:17:c3:62:22:aa:6c:74:b9:f1:b4:26:5f:3a:87:41:a1:53: 93:77:1d:73:58:2d:f3:7a:f5:cd:2b:7d:d5:49:53:fb:65:c9: dd:d2:e0:82:4d:e7:34:68:97:e6:b8:bc:6e:bb:39:c1:55:36: b8:cc:c2:78:b5:c0:9c:43:71:3e:17:73:81:7b:d8:cd:51:de: 27:d0:8e:59:42:55:7c:66:e4:7c:bd:9c:18:d1:62:14:c8:27: 7f:7e:c2:f7:b0:10:26:23:d1:1d:66:35:49:85:71:40:d0:cb: 2b:e9:cf:9b:71:9a:30:fa:7a:cd:68:cd:d4:a1:58:05:fe:02: cf:b0:71:74:06:42:f1:78:c8:fe:2c:c0:f0:ca:6a:a4:19:08: ed:db:02:6a:c6:c6:97:9e:3f:15:e2:c4:7b:2f:b6:d7:b0:3e: 61:fc:d7:a1:fb:ff:92:3f:3e:3d:ec:74:d5:00:01:ad:cd:5a: b5:71:ea:21 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57LS9HBX6Ha3oEsghWNYLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkODhlNGY3YTMwMjQxMmMzMTZhM2JiNTk5Y2RkMjA0MmI1 ZmY0ODUwHhcNMjYwMTAxMTQxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjk3NGYxOTkwOWNiMWQxZTZhNTE4NDI0ZTQzOTRmYWNhMmNlNDYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnitH/no/djN9ROXDYRekOYYIN54y 9l7IbwVqaSmCMdKBL1f0jxRdUrSEOjU6K14SdBcA40NmVvFd5tlpKEfC2fHq+16i UVhkthsWVHFC8Po6haoCXVS/yhv43EU4qB2lGwf8CFtzBiOJ10/iOv+1tJuBifso JMCNO7tJjHKh03YFVRnMO9vv+gkh5DZxQXGmqVeDnLpOdIWWufb8b2CMXaenu3EA l4FnVcnSMbh3QYlHbQlZXC40MjBjuibmum/pRVerJ5eUpFWTap2jVkBovLfPa2zv HOedh/1Y4Inn1ZsZFCa2rNcDqjHhT7dhngy0giumBqLwVkvbqdGNWnluiwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP+XTxmQnLHR5qUYQk5DlPrKLORhMB8GA1UdIwQY MBaAFF2I5PejAkEsMWo7tZnN0gQrX/SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGIt NTdlMWQ1YjcyYjJkLzEvXzVkUEdaQ2NzZEhtcFJoQ1RrT1Utc29zNUdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGItNTdlMWQ1YjcyYjJk LzEvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDbaAYMA0G CSqGSIb3DQEBCwUAA4IBAQCM6sIOkS5676qMJzpjAmGeZSnCCoFsOp8pP4n9vYoj siHvXjukRYBRxbr/vBIE9cpoqv06TEOeEQGsDKALyYRpSxUQwMzBGKlJF8NiIqps dLnxtCZfOodBoVOTdx1zWC3zevXNK33VSVP7Zcnd0uCCTec0aJfmuLxuuznBVTa4 zMJ4tcCcQ3E+F3OBe9jNUd4n0I5ZQlV8ZuR8vZwY0WIUyCd/fsL3sBAmI9EdZjVJ hXFA0Msr6c+bcZow+nrNaM3UoVgF/gLPsHF0BkLxeMj+LMDwymqkGQjt2wJqxsaX nj8V4sR7L7bXsD5h/Neh+/+SPz497HTVAAGtzVq1ceoh -----END CERTIFICATE-----Generated at Mon Jan 26 10:23:23 2026 by rpki-client