This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/5zVSKcJaPsXj2Cbi8_dkp0M1n5o.roa File: 5zVSKcJaPsXj2Cbi8_dkp0M1n5o.roa (raw, json) Hash identifier: 4jlaZxhWTA1CCnRRprrMPJev1XSLyXsPJzXP/xH6h+Q= Subject key identifier: E7:35:52:29:C2:5A:3E:C5:E3:D8:26:E2:F3:F7:64:A7:43:35:9F:9A Certificate issuer: /CN=f159077e043877059603caa0e3e584b1626e8f7b Certificate serial: 019B7C7FFFA357B3438E13BAF36B92AE7F48 Authority key identifier: F1:59:07:7E:04:38:77:05:96:03:CA:A0:E3:E5:84:B1:62:6E:8F:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/5zVSKcJaPsXj2Cbi8_dkp0M1n5o.roa Signing time: Fri 02 Jan 2026 02:18:41 +0000 ROA not before: Fri 02 Jan 2026 02:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30879 IP address blocks: 83.97.8.0/21 maxlen: 24 195.34.200.0/22 maxlen: 24 2a11:d940::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:ff:a3:57:b3:43:8e:13:ba:f3:6b:92:ae:7f:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f159077e043877059603caa0e3e584b1626e8f7b Validity Not Before: Jan 2 02:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e7355229c25a3ec5e3d826e2f3f764a743359f9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:73:f2:d6:f7:7b:dd:d9:c1:7e:24:ce:62:e9: b3:65:0a:8c:8a:aa:8c:39:16:52:dc:3d:11:3c:67: 2c:0d:78:6f:cb:f2:b0:86:28:c4:05:e1:17:03:a5: 4d:64:3f:ca:a3:44:9d:ae:c3:f4:c0:da:80:2a:4d: 3a:9b:65:f5:31:d6:31:33:bc:01:e6:8f:7c:a9:fe: ac:35:b2:68:d9:5c:fe:a4:80:2c:a3:94:3f:41:e1: ca:4f:09:bb:b6:c6:ff:76:c1:13:32:bd:b8:44:64: 7b:30:6c:ee:17:54:96:68:bc:38:96:d2:0a:12:83: 4c:29:88:3d:2b:c7:61:44:81:97:ca:2e:c1:61:f9: c8:81:7b:c1:4a:9c:b2:62:2f:ca:80:af:f6:64:a9: a4:7c:59:00:5e:aa:36:01:32:b8:42:0d:72:0d:59: 2d:43:e3:3b:d6:15:2c:cd:0d:bc:c4:3c:b3:91:e0: 92:7f:cf:91:4e:2f:d9:2f:08:80:e8:09:34:d1:78: 42:31:2b:48:17:0c:91:ae:7c:fa:df:d3:7a:16:4e: 04:ea:bc:c0:3d:c1:72:c8:1a:85:a0:e9:3d:c9:57: 7f:89:8f:39:a4:ca:2b:7e:de:c9:bc:28:e0:f6:16: 9c:80:d8:69:a4:e0:97:34:04:83:ab:d4:d9:c2:43: 25:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:35:52:29:C2:5A:3E:C5:E3:D8:26:E2:F3:F7:64:A7:43:35:9F:9A X509v3 Authority Key Identifier: keyid:F1:59:07:7E:04:38:77:05:96:03:CA:A0:E3:E5:84:B1:62:6E:8F:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/5zVSKcJaPsXj2Cbi8_dkp0M1n5o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.97.8.0/21 195.34.200.0/22 IPv6: 2a11:d940::/29 Signature Algorithm: sha256WithRSAEncryption 8e:e4:29:9a:85:6d:af:7e:c1:a7:6e:24:23:b1:81:2e:86:7e: f9:e3:96:52:c9:1c:b5:1b:45:04:9f:95:4a:ef:cc:d3:a9:e6: 20:35:27:7c:31:28:e9:f2:3d:76:30:01:f2:15:72:b0:72:b2: 5f:a8:8e:23:b2:cd:7e:47:9d:d6:71:6c:d6:ec:2e:5e:2d:2b: d6:69:13:d4:26:b1:74:5d:9c:e3:84:b9:68:ab:f5:b2:2d:2b: 1a:18:5f:96:e0:f4:86:4d:97:72:65:bd:fe:b3:7d:39:4b:26: 8d:ee:b6:cc:d0:8d:26:bb:1b:f4:8b:69:91:0f:28:bb:bf:68: e7:52:32:86:05:73:ff:61:11:ba:3f:a4:ff:92:55:1e:40:19: 82:73:ab:92:56:03:8d:2e:93:06:c0:06:85:74:69:2e:67:60: 3f:c1:10:97:af:87:c2:5a:4f:1f:a1:5e:99:fd:dd:60:15:3f: a3:86:a0:ea:e9:ab:29:cf:20:58:65:f8:57:34:29:fd:c7:1f: 5b:09:28:6b:e1:b4:9e:af:65:c7:69:9a:cf:f1:41:72:54:52: ed:96:f0:24:ca:02:75:d2:0f:38:61:23:c1:6e:a3:fa:44:57: ad:84:84:31:9e:b1:cd:97:16:05:fd:31:97:2b:fb:11:a1:43: 3d:7e:a8:47 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt8f/+jV7NDjhO682uSrn9IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxNTkwNzdlMDQzODc3MDU5NjAzY2FhMGUzZTU4NGIxNjI2 ZThmN2IwHhcNMjYwMTAyMDIxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzM1NTIyOWMyNWEzZWM1ZTNkODI2ZTJmM2Y3NjRhNzQzMzU5ZjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHPy1vd73dnBfiTOYumzZQqMiqqM ORZS3D0RPGcsDXhvy/KwhijEBeEXA6VNZD/Ko0SdrsP0wNqAKk06m2X1MdYxM7wB 5o98qf6sNbJo2Vz+pIAso5Q/QeHKTwm7tsb/dsETMr24RGR7MGzuF1SWaLw4ltIK EoNMKYg9K8dhRIGXyi7BYfnIgXvBSpyyYi/KgK/2ZKmkfFkAXqo2ATK4Qg1yDVkt Q+M71hUszQ28xDyzkeCSf8+RTi/ZLwiA6Ak00XhCMStIFwyRrnz639N6Fk4E6rzA PcFyyBqFoOk9yVd/iY85pMorft7JvCjg9hacgNhppOCXNASDq9TZwkMlewIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFOc1UinCWj7F49gm4vP3ZKdDNZ+aMB8GA1UdIwQY MBaAFPFZB34EOHcFlgPKoOPlhLFibo97MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFZrSGZnUTRkd1dXQThxZzQtV0VzV0p1ajNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8wYWE1NDEtZTkwZi00NmZkLWEwZGMt MDNkOTA0YzgwMmNlLzEvNXpWU0tjSmFQc1hqMkNiaThfZGtwME0xbjVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy8wYWE1NDEtZTkwZi00NmZkLWEwZGMtMDNkOTA0YzgwMmNl LzEvOFZrSGZnUTRkd1dXQThxZzQtV0VzV0p1ajNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDU2EIAwQC wyLIMA0EAgACMAcDBQMqEdlAMA0GCSqGSIb3DQEBCwUAA4IBAQCO5CmahW2vfsGn biQjsYEuhn7545ZSyRy1G0UEn5VK78zTqeYgNSd8MSjp8j12MAHyFXKwcrJfqI4j ss1+R53WcWzW7C5eLSvWaRPUJrF0XZzjhLloq/WyLSsaGF+W4PSGTZdyZb3+s305 SyaN7rbM0I0muxv0i2mRDyi7v2jnUjKGBXP/YRG6P6T/klUeQBmCc6uSVgONLpMG wAaFdGkuZ2A/wRCXr4fCWk8foV6Z/d1gFT+jhqDq6aspzyBYZfhXNCn9xx9bCShr 4bSer2XHaZrP8UFyVFLtlvAkygJ10g84YSPBbqP6RFethIQxnrHNlxYF/TGXK/sR oUM9fqhH -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:23 2026 by rpki-client