This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/M5qVt7ae34kVphAk4iYjA_sXTVA.roa File: M5qVt7ae34kVphAk4iYjA_sXTVA.roa (raw, json) Hash identifier: DNenw0maSTGL31Gai50q1uXUB6YmtJsec2G1+61e/LM= Subject key identifier: 33:9A:95:B7:B6:9E:DF:89:15:A6:10:24:E2:26:23:03:FB:17:4D:50 Certificate issuer: /CN=b02f0c2a2a51275bee2493a5656ecf1b612f1226 Certificate serial: 019B79109DFD08DE0FA00FCC118B5F089468 Authority key identifier: B0:2F:0C:2A:2A:51:27:5B:EE:24:93:A5:65:6E:CF:1B:61:2F:12:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/M5qVt7ae34kVphAk4iYjA_sXTVA.roa Signing time: Thu 01 Jan 2026 10:18:10 +0000 ROA not before: Thu 01 Jan 2026 10:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47123 IP address blocks: 5.253.248.0/24 maxlen: 24 5.253.249.0/24 maxlen: 24 5.253.250.0/24 maxlen: 24 5.253.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:9d:fd:08:de:0f:a0:0f:cc:11:8b:5f:08:94:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b02f0c2a2a51275bee2493a5656ecf1b612f1226 Validity Not Before: Jan 1 10:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=339a95b7b69edf8915a61024e2262303fb174d50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5c:25:ed:81:cd:e2:14:33:a0:51:3b:cf:e1: e9:d3:0f:84:af:8a:be:ac:84:74:a2:c9:1a:72:12: 34:45:56:17:a0:f1:88:fc:7c:05:5e:3c:3d:cc:91: a8:38:44:a0:6d:7b:13:f8:8c:54:bc:40:cc:5d:35: ec:f5:c2:13:43:6c:1b:84:1c:37:f3:60:67:52:77: ad:dc:76:10:b7:4b:76:89:1b:f4:2a:e1:14:7e:1b: 20:26:52:1f:78:aa:7a:21:87:d0:47:76:ae:e3:dc: 2a:f9:80:11:db:b2:2e:e7:a0:81:8e:1f:fc:e0:42: db:ae:65:b9:3e:44:5b:36:da:bd:03:e0:25:34:6e: f2:81:71:b6:da:69:74:d3:fa:7c:38:10:c0:fa:02: a7:87:e5:1f:3d:c3:5e:ef:e5:e3:65:93:9b:17:50: b9:ee:0a:5e:f5:83:0e:a2:2a:78:2d:b0:b3:44:13: 5e:0e:ed:57:9e:36:ae:3c:64:43:64:04:4f:a0:1c: 9e:3c:a0:9f:86:92:94:6e:06:7b:22:e4:c7:d7:b7: 00:30:2a:0f:f5:46:6d:99:3c:21:cb:fc:d2:2e:46: ee:5c:7e:50:55:59:de:ef:d5:4b:92:92:dc:2c:0f: 81:2c:9e:a0:c3:07:fc:04:a4:8a:53:80:6f:7f:4a: a7:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:9A:95:B7:B6:9E:DF:89:15:A6:10:24:E2:26:23:03:FB:17:4D:50 X509v3 Authority Key Identifier: keyid:B0:2F:0C:2A:2A:51:27:5B:EE:24:93:A5:65:6E:CF:1B:61:2F:12:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/M5qVt7ae34kVphAk4iYjA_sXTVA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.253.248.0/22 Signature Algorithm: sha256WithRSAEncryption 3f:9a:cf:b5:26:c4:f0:14:09:98:de:7b:5e:dc:ab:5d:5d:4f: be:96:0d:05:6a:26:71:6d:a7:a3:b3:0a:7d:06:d0:81:ca:bc: 2e:0a:2a:f7:d6:2b:f9:d2:b5:c0:d8:63:11:70:1c:12:62:9a: 72:09:68:c5:f9:c1:4d:50:42:fb:58:24:c0:41:95:fe:5c:d1: 86:d5:d9:0c:5a:31:1e:43:d6:15:c5:d4:8c:2a:4f:15:72:aa: e0:dc:e0:84:cb:20:64:1d:f7:83:12:4e:2f:bf:8f:57:18:4b: 85:62:8e:fa:49:06:e7:3a:cb:6d:be:e1:f4:f4:8b:7e:dc:0f: fa:90:04:20:2f:d7:56:c2:4c:2f:2d:89:21:58:fe:4a:25:96: 1b:9e:3b:8d:16:99:d6:a1:ab:38:bc:16:41:b0:12:5a:98:b3: ee:81:46:14:07:c9:85:d9:66:63:c5:81:e6:75:cd:99:20:2e: 92:a5:c0:d6:0f:c4:90:b7:87:79:52:48:57:9c:19:14:ff:51: cd:cf:80:b2:04:15:3a:80:67:9c:5f:78:6a:af:1e:52:cb:06: d6:8e:b8:ad:d8:82:30:d1:8b:da:7b:e3:25:c9:3a:74:21:81: db:21:51:c4:5d:66:d7:e5:f5:bd:26:89:0f:72:47:11:57:2d: 23:25:07:e5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EJ39CN4PoA/MEYtfCJRoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwMmYwYzJhMmE1MTI3NWJlZTI0OTNhNTY1NmVjZjFiNjEy ZjEyMjYwHhcNMjYwMTAxMTAxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzlhOTViN2I2OWVkZjg5MTVhNjEwMjRlMjI2MjMwM2ZiMTc0ZDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1wl7YHN4hQzoFE7z+Hp0w+Er4q+ rIR0oskachI0RVYXoPGI/HwFXjw9zJGoOESgbXsT+IxUvEDMXTXs9cITQ2wbhBw3 82BnUnet3HYQt0t2iRv0KuEUfhsgJlIfeKp6IYfQR3au49wq+YAR27Iu56CBjh/8 4ELbrmW5PkRbNtq9A+AlNG7ygXG22ml00/p8OBDA+gKnh+UfPcNe7+XjZZObF1C5 7gpe9YMOoip4LbCzRBNeDu1XnjauPGRDZARPoByePKCfhpKUbgZ7IuTH17cAMCoP 9UZtmTwhy/zSLkbuXH5QVVne79VLkpLcLA+BLJ6gwwf8BKSKU4Bvf0qnDwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDOalbe2nt+JFaYQJOImIwP7F01QMB8GA1UdIwQY MBaAFLAvDCoqUSdb7iSTpWVuzxthLxImMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0M4TUtpcFJKMXZ1SkpPbFpXN1BHMkV2RWlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9jNTkxNjItN2JkMS00YjhhLWE5ZTMt MjFmZjExMjBmYjcyLzEvTTVxVnQ3YWUzNGtWcGhBazRpWWpBX3NYVFZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9jNTkxNjItN2JkMS00YjhhLWE5ZTMtMjFmZjExMjBmYjcy LzEvc0M4TUtpcFJKMXZ1SkpPbFpXN1BHMkV2RWlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBf34MA0G CSqGSIb3DQEBCwUAA4IBAQA/ms+1JsTwFAmY3nte3KtdXU++lg0FaiZxbaejswp9 BtCByrwuCir31iv50rXA2GMRcBwSYppyCWjF+cFNUEL7WCTAQZX+XNGG1dkMWjEe Q9YVxdSMKk8Vcqrg3OCEyyBkHfeDEk4vv49XGEuFYo76SQbnOsttvuH09It+3A/6 kAQgL9dWwkwvLYkhWP5KJZYbnjuNFpnWoas4vBZBsBJamLPugUYUB8mF2WZjxYHm dc2ZIC6SpcDWD8SQt4d5UkhXnBkU/1HNz4CyBBU6gGecX3hqrx5SywbWjrit2IIw 0Yvae+MlyTp0IYHbIVHEXWbX5fW9JokPckcRVy0jJQfl -----END CERTIFICATE-----Generated at Mon Jan 26 22:36:44 2026 by rpki-client