This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/5N096s-nFOH4_ZBqCouMJS-TbiU.roa File: 5N096s-nFOH4_ZBqCouMJS-TbiU.roa (raw, json) Hash identifier: Hh9HPS5FHpAUp4ixlEmsdD6a/vJqjzSz9yCpNR0cnOs= Subject key identifier: E4:DD:3D:EA:CF:A7:14:E1:F8:FD:90:6A:0A:8B:8C:25:2F:93:6E:25 Certificate issuer: /CN=a60cee7582e9759be016c931ab34d9285d2fc8b4 Certificate serial: 019B79ED6B44D751DD37397DC65DC2BF6D24 Authority key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/5N096s-nFOH4_ZBqCouMJS-TbiU.roa Signing time: Thu 01 Jan 2026 14:19:21 +0000 ROA not before: Thu 01 Jan 2026 14:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212335 IP address blocks: 87.248.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:6b:44:d7:51:dd:37:39:7d:c6:5d:c2:bf:6d:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4 Validity Not Before: Jan 1 14:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4dd3deacfa714e1f8fd906a0a8b8c252f936e25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:18:b0:1b:81:f6:58:f3:6e:82:e0:69:31:f6: 56:39:dd:81:f1:7c:d8:66:33:7d:5a:39:96:53:b2: dc:66:fa:40:cd:0f:6f:b8:04:a6:a3:6e:e2:c4:4a: 85:09:9d:1b:e2:c8:c4:30:8e:33:12:61:67:02:55: 3e:24:5e:60:f3:5a:fb:15:82:61:62:8f:57:08:93: 1b:10:ee:5e:da:76:95:ca:86:44:5e:de:fa:27:c9: 60:ac:39:36:f2:38:13:a2:f7:e4:ea:d5:41:66:a0: bc:d5:89:df:16:f2:ac:ee:49:98:25:4a:20:2f:34: 37:26:93:5d:4c:36:b6:bd:e8:c1:6a:07:f8:cd:12: b1:c5:e4:b8:69:c7:87:1c:1d:c7:d9:43:89:74:4a: 85:94:c2:30:a0:f7:10:b8:34:35:52:dc:e9:e8:90: ea:23:83:fd:7c:10:7f:44:11:36:54:cb:0d:22:9c: 17:51:99:64:69:82:3c:97:92:62:c4:cf:17:a4:ac: 5d:8f:bb:9b:a9:b1:e7:66:0e:18:c5:5b:15:e6:78: ae:f9:5f:75:ed:5d:b6:c6:0d:be:b3:05:a4:88:a2: 53:17:0a:53:1f:c7:c8:dc:4d:ea:51:b0:ee:11:e4: 62:53:1f:93:d6:26:25:bc:8f:73:92:13:51:b3:6c: 5c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:DD:3D:EA:CF:A7:14:E1:F8:FD:90:6A:0A:8B:8C:25:2F:93:6E:25 X509v3 Authority Key Identifier: keyid:A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/5N096s-nFOH4_ZBqCouMJS-TbiU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.248.146.0/24 Signature Algorithm: sha256WithRSAEncryption 01:90:fc:d3:d9:cd:3d:1a:c8:c9:8b:e1:10:24:06:d8:c4:c3: 00:cf:6d:8c:25:fd:e9:bf:6f:79:53:63:af:e3:d7:cb:40:88: 2f:5d:b8:54:81:c8:b2:97:4f:55:68:b5:9e:a0:e7:b1:1c:e8: 8b:5c:de:1c:28:60:a4:a0:65:ee:7b:23:fb:24:85:c7:5f:25: 2f:db:66:7f:fc:68:f8:56:0f:e1:6c:75:90:b6:60:37:2d:0d: df:78:7a:87:8c:fa:cb:fc:09:52:f8:82:93:85:fc:36:76:e1: 5f:ad:4c:ac:b9:e5:5f:4c:3e:89:62:57:92:1f:a0:a4:2d:25: a3:a8:a3:e2:a7:43:f5:47:74:aa:23:49:c6:79:77:9c:a0:61: ce:c1:08:6f:b6:5e:6c:ee:22:8d:9b:79:21:50:d9:73:91:a5: 74:41:6c:4b:5e:ea:ec:2a:1d:31:fc:84:33:fd:da:bb:f6:e0: 31:26:e0:2f:37:3f:99:27:63:4e:80:88:e4:0d:4d:ec:17:e7: 84:f1:88:e7:5b:a3:a9:b5:da:ce:90:4a:83:fc:a1:f9:4d:5d: 66:73:61:45:71:b1:9a:78:84:cb:db:16:ff:c5:01:01:97:69: 21:3b:2d:e4:72:7c:60:8d:fb:6a:11:bf:c8:f0:bd:ee:3a:80: 45:82:2b:ee -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57WtE11HdNzl9xl3Cv20kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MGNlZTc1ODJlOTc1OWJlMDE2YzkzMWFiMzRkOTI4NWQy ZmM4YjQwHhcNMjYwMTAxMTQxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNGRkM2RlYWNmYTcxNGUxZjhmZDkwNmEwYThiOGMyNTJmOTM2ZTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhiwG4H2WPNuguBpMfZWOd2B8XzY ZjN9WjmWU7LcZvpAzQ9vuASmo27ixEqFCZ0b4sjEMI4zEmFnAlU+JF5g81r7FYJh Yo9XCJMbEO5e2naVyoZEXt76J8lgrDk28jgTovfk6tVBZqC81YnfFvKs7kmYJUog LzQ3JpNdTDa2vejBagf4zRKxxeS4aceHHB3H2UOJdEqFlMIwoPcQuDQ1Utzp6JDq I4P9fBB/RBE2VMsNIpwXUZlkaYI8l5JixM8XpKxdj7ubqbHnZg4YxVsV5niu+V91 7V22xg2+swWkiKJTFwpTH8fI3E3qUbDuEeRiUx+T1iYlvI9zkhNRs2xcPwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOTdPerPpxTh+P2QagqLjCUvk24lMB8GA1UdIwQY MBaAFKYM7nWC6XWb4BbJMas02ShdL8i0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTct ZDNiMzhjZTlkYzM0LzEvNU4wOTZzLW5GT0g0X1pCcUNvdU1KUy1UYmlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTctZDNiMzhjZTlkYzM0 LzEvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV/iSMA0G CSqGSIb3DQEBCwUAA4IBAQABkPzT2c09GsjJi+EQJAbYxMMAz22MJf3pv295U2Ov 49fLQIgvXbhUgciyl09VaLWeoOexHOiLXN4cKGCkoGXueyP7JIXHXyUv22Z//Gj4 Vg/hbHWQtmA3LQ3feHqHjPrL/AlS+IKThfw2duFfrUysueVfTD6JYleSH6CkLSWj qKPip0P1R3SqI0nGeXecoGHOwQhvtl5s7iKNm3khUNlzkaV0QWxLXursKh0x/IQz /dq79uAxJuAvNz+ZJ2NOgIjkDU3sF+eE8YjnW6OptdrOkEqD/KH5TV1mc2FFcbGa eITL2xb/xQEBl2khOy3kcnxgjftqEb/I8L3uOoBFgivu -----END CERTIFICATE-----Generated at Mon Jan 19 16:51:34 2026 by rpki-client