This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/rsW5iUYnR7TLiLplJu0v_TxPd_I.roa File: rsW5iUYnR7TLiLplJu0v_TxPd_I.roa (raw, json) Hash identifier: byREziZgYSJpJ8mJT7/YTVSdpgoXC6Beaa116lnuIWQ= Subject key identifier: AE:C5:B9:89:46:27:47:B4:CB:88:BA:65:26:ED:2F:FD:3C:4F:77:F2 Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Certificate serial: 019B7BA5340BEBA59E80611EFAF058F27E0A Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/rsW5iUYnR7TLiLplJu0v_TxPd_I.roa Signing time: Thu 01 Jan 2026 22:19:42 +0000 ROA not before: Thu 01 Jan 2026 22:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39135 IP address blocks: 212.5.129.0/24 maxlen: 24 212.5.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:34:0b:eb:a5:9e:80:61:1e:fa:f0:58:f2:7e:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Validity Not Before: Jan 1 22:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aec5b989462747b4cb88ba6526ed2ffd3c4f77f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:94:c0:81:6c:81:0e:5d:d5:50:3d:52:c9:c6: 7c:06:43:ba:85:58:26:68:da:cf:8e:21:af:d1:65: a7:d0:70:76:89:c9:f6:f9:f6:21:22:d3:af:33:52: 84:0f:03:55:b5:c4:6d:41:77:f6:89:02:2f:28:a5: 94:52:78:42:a7:67:a5:10:08:61:8d:5b:92:41:a6: c2:f9:a7:e1:50:02:7e:aa:25:1a:1c:e8:50:dc:14: bd:e8:0d:73:26:bc:41:1f:20:42:b0:15:5c:08:63: 82:c8:d2:e6:ea:a7:d6:d2:8e:51:98:60:2d:69:be: b6:9b:8b:9e:f8:ab:04:a8:b8:c6:e2:ee:3d:90:33: 13:f6:c1:6a:c7:ad:b1:ee:4f:45:31:9c:76:c3:a5: e9:7c:10:08:51:26:bb:47:ad:c8:a1:bc:d9:c2:0f: d0:f7:cf:9d:5c:ce:76:c3:5c:5a:39:12:a2:43:27: 2a:2d:ce:e0:b7:5a:a7:c2:d6:de:bd:c5:7c:49:05: a5:9f:e4:e3:5d:1a:dd:07:52:84:b2:2b:be:5c:a0: 77:7b:92:f6:b9:11:de:e5:d2:f2:1b:5f:35:62:20: d4:f5:13:b0:b7:0c:cf:53:d8:04:1e:59:a2:35:3f: d1:12:dc:79:4d:71:fd:6b:b8:80:af:90:57:58:89: c4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:C5:B9:89:46:27:47:B4:CB:88:BA:65:26:ED:2F:FD:3C:4F:77:F2 X509v3 Authority Key Identifier: keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/rsW5iUYnR7TLiLplJu0v_TxPd_I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.5.129.0-212.5.130.255 Signature Algorithm: sha256WithRSAEncryption 29:d3:3b:9b:35:b9:a6:51:2e:63:31:7e:d5:a5:fd:90:64:80: 03:52:a4:28:8a:00:06:19:da:6f:e0:71:82:03:a0:4f:6d:f9: ec:90:f4:ce:2b:1d:82:00:0c:42:a4:6c:39:39:3f:9b:ca:24: ea:16:4a:07:96:18:7c:26:f3:8f:5b:74:4d:d1:f7:07:a1:5e: df:52:1b:c2:97:0c:4c:8a:ae:ef:46:63:cf:a7:23:a9:c4:8b: 7c:f1:c4:93:8e:b0:de:3c:2c:c9:83:94:37:c2:44:f9:1b:f2: b7:c8:d9:ef:53:a7:3f:67:61:ee:20:7b:1c:2d:2f:ad:ec:a1: d6:2f:5f:a6:b6:a1:c8:dc:05:4a:66:76:66:c4:e1:dd:cc:d2: 9b:9f:09:83:eb:10:b0:46:de:28:c5:dd:7f:a5:c1:c6:5c:dd: 07:5f:56:63:55:7a:e3:1b:69:87:91:ed:b7:68:64:06:af:90: 78:0b:5d:4e:93:7c:19:92:c3:17:d0:d0:fa:ca:4d:51:62:6b: 1e:71:43:ad:95:e0:84:6b:c8:07:c9:67:b5:d5:f1:3a:30:b7: 83:fe:82:04:24:85:21:ad:ce:0c:48:ab:3f:74:25:a4:81:34: 1e:2b:90:9a:36:80:aa:23:b8:71:9c:ee:1d:00:7e:85:d9:7b: e2:fe:ac:ac -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt7pTQL66WegGEe+vBY8n4KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4 ZmI0YzQwHhcNMjYwMTAxMjIxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZWM1Yjk4OTQ2Mjc0N2I0Y2I4OGJhNjUyNmVkMmZmZDNjNGY3N2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJTAgWyBDl3VUD1SycZ8BkO6hVgm aNrPjiGv0WWn0HB2icn2+fYhItOvM1KEDwNVtcRtQXf2iQIvKKWUUnhCp2elEAhh jVuSQabC+afhUAJ+qiUaHOhQ3BS96A1zJrxBHyBCsBVcCGOCyNLm6qfW0o5RmGAt ab62m4ue+KsEqLjG4u49kDMT9sFqx62x7k9FMZx2w6XpfBAIUSa7R63IobzZwg/Q 98+dXM52w1xaORKiQycqLc7gt1qnwtbevcV8SQWln+TjXRrdB1KEsiu+XKB3e5L2 uRHe5dLyG181YiDU9ROwtwzPU9gEHlmiNT/REtx5TXH9a7iAr5BXWInEdQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFK7FuYlGJ0e0y4i6ZSbtL/08T3fyMB8GA1UdIwQY MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct ODcyYmEyZDlmNDRjLzEvcnNXNWlVWW5SN1RMaUxwbEp1MHZfVHhQZF9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADUBYED BADUBYIwDQYJKoZIhvcNAQELBQADggEBACnTO5s1uaZRLmMxftWl/ZBkgANSpCiK AAYZ2m/gcYIDoE9t+eyQ9M4rHYIADEKkbDk5P5vKJOoWSgeWGHwm849bdE3R9weh Xt9SG8KXDEyKru9GY8+nI6nEi3zxxJOOsN48LMmDlDfCRPkb8rfI2e9Tpz9nYe4g exwtL63sodYvX6a2ocjcBUpmdmbE4d3M0pufCYPrELBG3ijF3X+lwcZc3QdfVmNV euMbaYeR7bdoZAavkHgLXU6TfBmSwxfQ0PrKTVFiax5xQ62V4IRryAfJZ7XV8Tow t4P+ggQkhSGtzgxIqz90JaSBNB4rkJo2gKojuHGc7h0AfoXZe+L+rKw= -----END CERTIFICATE-----Generated at Mon Jan 26 11:44:24 2026 by rpki-client