This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/p5WK8SqdNKrQAJq8_gZrFH1Py64.roa File: p5WK8SqdNKrQAJq8_gZrFH1Py64.roa (raw, json) Hash identifier: Nm8rFW/KHjUYCTq0McUqQzXzdbDIF9y2fLjjuqM6uz0= Subject key identifier: A7:95:8A:F1:2A:9D:34:AA:D0:00:9A:BC:FE:06:6B:14:7D:4F:CB:AE Certificate issuer: /CN=8eac36ff533eb6f8f8aa65920220cfa471e5a2b1 Certificate serial: 019B77C6E9DD2D4210B443808EF64A24D0AD Authority key identifier: 8E:AC:36:FF:53:3E:B6:F8:F8:AA:65:92:02:20:CF:A4:71:E5:A2:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqw2_1M-tvj4qmWSAiDPpHHlorE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/p5WK8SqdNKrQAJq8_gZrFH1Py64.roa Signing time: Thu 01 Jan 2026 04:18:03 +0000 ROA not before: Thu 01 Jan 2026 04:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210127 IP address blocks: 194.61.132.0/22 maxlen: 24 194.61.132.0/24 maxlen: 24 194.61.133.0/24 maxlen: 24 194.61.134.0/24 maxlen: 24 194.61.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.mft rsync://rpki.ripe.net/repository/DEFAULT/jqw2_1M-tvj4qmWSAiDPpHHlorE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:e9:dd:2d:42:10:b4:43:80:8e:f6:4a:24:d0:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eac36ff533eb6f8f8aa65920220cfa471e5a2b1 Validity Not Before: Jan 1 04:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a7958af12a9d34aad0009abcfe066b147d4fcbae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:b7:95:be:e1:1b:80:31:95:13:11:bb:df:e1: 5d:81:e9:42:eb:e9:5c:d4:48:83:02:e7:05:42:4f: e7:95:10:94:14:dd:da:15:76:0c:c3:4e:9d:62:d0: 8e:16:86:20:30:6e:b3:77:6d:e3:8e:59:11:2c:96: 5c:cf:6e:b0:fc:1f:01:a8:f5:25:27:d8:38:c7:b6: 47:5f:b5:f7:03:06:f8:7c:68:09:31:7b:99:18:7c: ba:20:d0:3a:e7:ea:81:9a:2b:81:4f:03:03:d7:52: 22:85:8c:49:b2:9d:76:b4:cd:f0:6b:c3:a9:e4:20: d7:84:c4:5b:dc:eb:74:1f:9b:6d:10:20:12:00:16: 73:39:7e:c6:2f:fd:b6:6b:95:90:a2:13:eb:ee:1e: 07:3a:59:62:7a:18:d9:63:1c:d2:0e:7a:4f:62:7f: a0:ab:de:a3:3e:02:7e:a3:a2:77:bf:4d:83:27:9f: d3:55:15:f4:6b:0d:ca:ae:cb:58:87:87:bb:74:e1: 53:8b:4a:3b:c0:14:d2:e0:6c:df:4c:eb:1a:5f:38: df:49:a6:8c:33:88:1a:93:59:24:18:37:b9:13:ba: 1a:03:34:17:34:79:c4:da:bb:35:74:56:3d:ca:82: 80:d1:02:81:70:66:1f:fa:38:aa:cb:77:67:06:28: d9:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:95:8A:F1:2A:9D:34:AA:D0:00:9A:BC:FE:06:6B:14:7D:4F:CB:AE X509v3 Authority Key Identifier: keyid:8E:AC:36:FF:53:3E:B6:F8:F8:AA:65:92:02:20:CF:A4:71:E5:A2:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqw2_1M-tvj4qmWSAiDPpHHlorE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/p5WK8SqdNKrQAJq8_gZrFH1Py64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.61.132.0/22 Signature Algorithm: sha256WithRSAEncryption 50:9b:75:82:8d:e2:a4:3a:fc:7b:11:c6:9f:48:6c:6e:ac:13: 8c:2c:c3:44:5f:6a:36:5b:a1:99:04:34:48:49:f9:20:fc:f7: 23:dd:87:b6:b5:7b:ab:aa:f8:1c:ea:27:00:2e:43:c7:d4:b5: 62:21:1b:e4:f8:63:df:79:6b:38:f9:83:5b:23:df:5b:38:1a: b7:41:9f:a3:c1:ff:03:0c:38:12:49:fd:81:11:58:ad:d1:22: 3b:33:99:ea:04:9d:a9:d2:e8:48:6c:d2:a6:35:13:cd:5a:97: 33:16:33:bc:07:b6:5f:19:ea:fa:4d:98:27:b9:4b:7c:69:de: 2a:93:e8:f8:b3:ab:6d:2b:6c:f0:5c:76:dc:61:11:07:1b:3c: 0e:8f:62:98:37:25:2a:25:10:bc:29:17:2b:f5:ef:22:c8:82: 88:a8:e2:28:89:80:25:82:19:54:85:56:8a:ba:c6:08:84:bd: 75:02:84:a4:5e:52:e3:56:a1:23:2d:8e:4f:8f:a8:75:5b:0a: 83:be:fb:5b:fe:6d:ce:b1:88:fd:e6:98:47:cc:55:24:ce:48: 65:ed:89:af:f1:b9:71:e4:9f:95:b2:63:ed:ef:61:03:62:3b: c8:12:79:c2:77:91:4e:84:2d:89:0d:4d:d0:92:84:56:58:4a: 5d:da:2b:9b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xundLUIQtEOAjvZKJNCtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlYWMzNmZmNTMzZWI2ZjhmOGFhNjU5MjAyMjBjZmE0NzFl NWEyYjEwHhcNMjYwMTAxMDQxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzk1OGFmMTJhOWQzNGFhZDAwMDlhYmNmZTA2NmIxNDdkNGZjYmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7LeVvuEbgDGVExG73+FdgelC6+lc 1EiDAucFQk/nlRCUFN3aFXYMw06dYtCOFoYgMG6zd23jjlkRLJZcz26w/B8BqPUl J9g4x7ZHX7X3Awb4fGgJMXuZGHy6INA65+qBmiuBTwMD11IihYxJsp12tM3wa8Op 5CDXhMRb3Ot0H5ttECASABZzOX7GL/22a5WQohPr7h4HOlliehjZYxzSDnpPYn+g q96jPgJ+o6J3v02DJ5/TVRX0aw3KrstYh4e7dOFTi0o7wBTS4GzfTOsaXzjfSaaM M4gak1kkGDe5E7oaAzQXNHnE2rs1dFY9yoKA0QKBcGYf+jiqy3dnBijZ6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKeVivEqnTSq0ACavP4GaxR9T8uuMB8GA1UdIwQY MBaAFI6sNv9TPrb4+KplkgIgz6Rx5aKxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanF3Ml8xTS10dmo0cW1XU0FpRFBwSEhsb3JFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS82MWExNDAtMTEwZS00MTk3LThkYTUt NTZiYTE5OGQxN2YwLzEvcDVXSzhTcWROS3JRQUpxOF9nWnJGSDFQeTY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS82MWExNDAtMTEwZS00MTk3LThkYTUtNTZiYTE5OGQxN2Yw LzEvanF3Ml8xTS10dmo0cW1XU0FpRFBwSEhsb3JFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwj2EMA0G CSqGSIb3DQEBCwUAA4IBAQBQm3WCjeKkOvx7EcafSGxurBOMLMNEX2o2W6GZBDRI Sfkg/Pcj3Ye2tXurqvgc6icALkPH1LViIRvk+GPfeWs4+YNbI99bOBq3QZ+jwf8D DDgSSf2BEVit0SI7M5nqBJ2p0uhIbNKmNRPNWpczFjO8B7ZfGer6TZgnuUt8ad4q k+j4s6ttK2zwXHbcYREHGzwOj2KYNyUqJRC8KRcr9e8iyIKIqOIoiYAlghlUhVaK usYIhL11AoSkXlLjVqEjLY5Pj6h1WwqDvvtb/m3OsYj95phHzFUkzkhl7Ymv8blx 5J+VsmPt72EDYjvIEnnCd5FOhC2JDU3QkoRWWEpd2iub -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:06 2026 by rpki-client