This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/5anfbEI-jaspGpdleX4CIuBsAPM.roa File: 5anfbEI-jaspGpdleX4CIuBsAPM.roa (raw, json) Hash identifier: Hflhls/SMNWgATvG3eTRW4iTnqTJ1x1t05I3Ae6Iogc= Subject key identifier: E5:A9:DF:6C:42:3E:8D:AB:29:1A:97:65:79:7E:02:22:E0:6C:00:F3 Certificate issuer: /CN=c5119e75200392f1a2f08be990732d8047b28b09 Certificate serial: 019B79ED572DE9C9FF0AF8C5A08E447DA4C7 Authority key identifier: C5:11:9E:75:20:03:92:F1:A2:F0:8B:E9:90:73:2D:80:47:B2:8B:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/5anfbEI-jaspGpdleX4CIuBsAPM.roa Signing time: Thu 01 Jan 2026 14:19:16 +0000 ROA not before: Thu 01 Jan 2026 14:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57388 IP address blocks: 130.0.24.0/21 maxlen: 21 130.0.24.0/22 maxlen: 24 130.0.24.0/24 maxlen: 24 130.0.25.0/24 maxlen: 24 130.0.26.0/24 maxlen: 24 130.0.27.0/24 maxlen: 24 130.0.28.0/22 maxlen: 24 130.0.28.0/24 maxlen: 24 130.0.30.0/24 maxlen: 24 130.0.31.0/24 maxlen: 24 185.85.152.0/22 maxlen: 24 2a02:dd00::/29 maxlen: 48 2a02:dd00:1a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:57:2d:e9:c9:ff:0a:f8:c5:a0:8e:44:7d:a4:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5119e75200392f1a2f08be990732d8047b28b09 Validity Not Before: Jan 1 14:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e5a9df6c423e8dab291a9765797e0222e06c00f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:02:c3:c5:e8:af:74:9b:20:82:7e:1b:0f:35: 6a:25:97:1b:15:ad:ad:04:49:15:99:72:1f:36:0c: 88:78:67:ff:65:a1:10:63:7a:4f:10:4a:c2:6f:cc: 49:61:b9:74:06:23:a2:2f:e2:ce:57:7b:13:f5:a8: 66:ab:50:46:2d:87:b6:00:73:04:3d:81:a4:02:cb: 13:05:71:07:00:a0:56:8c:9e:70:59:26:3e:cc:cb: 0c:a6:78:76:47:4c:21:39:66:00:d0:df:5d:5a:3a: d6:92:b9:59:93:e6:2a:0e:8b:c7:9e:3e:5e:c7:06: 8e:5e:2b:6d:ee:f5:56:4b:bb:fc:39:f6:1a:75:1e: 8a:6d:17:8c:fd:02:8c:4a:c9:28:51:55:71:59:46: 26:2b:16:b7:cd:b2:52:b2:e6:72:05:c7:d5:63:06: 1c:15:da:15:b4:29:bc:f3:74:57:53:59:df:91:d2: c5:84:e7:f9:11:00:e1:c0:38:1d:e9:2e:d2:eb:fc: 75:85:ac:6a:b0:7c:d8:ea:26:b5:4e:5e:f6:c1:bd: be:60:34:1f:b1:31:73:be:88:90:fa:f0:7a:f3:06: 59:ed:38:80:02:1d:9a:ad:fc:06:a0:8b:59:b6:f8: fc:a7:71:bd:1b:d0:74:44:55:91:c2:0c:47:0f:22: 58:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:A9:DF:6C:42:3E:8D:AB:29:1A:97:65:79:7E:02:22:E0:6C:00:F3 X509v3 Authority Key Identifier: keyid:C5:11:9E:75:20:03:92:F1:A2:F0:8B:E9:90:73:2D:80:47:B2:8B:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/5anfbEI-jaspGpdleX4CIuBsAPM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.0.24.0/21 185.85.152.0/22 IPv6: 2a02:dd00::/29 Signature Algorithm: sha256WithRSAEncryption 16:23:28:99:6e:cf:39:b2:7a:dc:75:8d:a3:73:7d:5e:f7:5c: 39:f7:4a:2e:62:30:ac:e9:f0:0d:1a:e0:c7:29:b7:5f:c1:d9: 88:ba:26:8f:96:fe:02:1d:a0:1e:e8:49:20:8e:c1:2d:8a:df: 74:04:00:30:97:6e:04:a4:5a:c0:54:e4:4f:38:13:c7:3d:38: 08:e8:3e:a0:7a:b1:6e:13:c2:5d:9e:07:91:fd:69:d2:54:dc: 6c:c2:14:67:24:fe:06:5f:c6:43:9a:83:7b:9e:0b:de:6c:a4: 3d:3a:70:48:cf:c1:e8:17:ce:c9:12:5b:9f:ae:7e:0d:9c:1c: 31:60:23:ce:cd:8a:0f:17:4b:2f:a2:68:34:c2:61:07:63:a1: ec:fd:5c:4e:a0:dd:76:51:3b:27:4c:ea:16:22:46:0d:90:b8: f7:5c:84:f5:9d:3d:b7:46:bf:9d:7a:28:4e:1c:6f:85:76:23: 56:99:27:a5:f7:75:2c:eb:75:5f:2b:79:4d:14:a3:8c:e4:69: 59:12:4d:fa:4c:a2:54:1d:bf:e1:d9:87:3a:57:b1:0a:6b:d7: 0f:01:45:e6:ac:1c:7c:53:bb:f6:cd:77:a6:ef:50:cb:ef:cb: 6c:5c:87:44:e4:9e:53:c7:87:65:2f:3a:71:50:5b:3a:08:a8: 5c:cf:65:dc -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt57Vct6cn/CvjFoI5EfaTHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1MTE5ZTc1MjAwMzkyZjFhMmYwOGJlOTkwNzMyZDgwNDdi MjhiMDkwHhcNMjYwMTAxMTQxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNWE5ZGY2YzQyM2U4ZGFiMjkxYTk3NjU3OTdlMDIyMmUwNmMwMGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QLDxeivdJsggn4bDzVqJZcbFa2t BEkVmXIfNgyIeGf/ZaEQY3pPEErCb8xJYbl0BiOiL+LOV3sT9ahmq1BGLYe2AHME PYGkAssTBXEHAKBWjJ5wWSY+zMsMpnh2R0whOWYA0N9dWjrWkrlZk+YqDovHnj5e xwaOXitt7vVWS7v8OfYadR6KbReM/QKMSskoUVVxWUYmKxa3zbJSsuZyBcfVYwYc FdoVtCm883RXU1nfkdLFhOf5EQDhwDgd6S7S6/x1haxqsHzY6ia1Tl72wb2+YDQf sTFzvoiQ+vB68wZZ7TiAAh2arfwGoItZtvj8p3G9G9B0RFWRwgxHDyJYGQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFOWp32xCPo2rKRqXZXl+AiLgbADzMB8GA1UdIwQY MBaAFMURnnUgA5LxovCL6ZBzLYBHsosJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFJHZWRTQURrdkdpOEl2cGtITXRnRWV5aXdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8zMjBiYWYtNTlkYy00NmEyLWFmN2Qt ZDgxOWNlZDVkMzVhLzEvNWFuZmJFSS1qYXNwR3BkbGVYNENJdUJzQVBNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy8zMjBiYWYtNTlkYy00NmEyLWFmN2QtZDgxOWNlZDVkMzVh LzEveFJHZWRTQURrdkdpOEl2cGtITXRnRWV5aXdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDggAYAwQC uVWYMA0EAgACMAcDBQMqAt0AMA0GCSqGSIb3DQEBCwUAA4IBAQAWIyiZbs85snrc dY2jc31e91w590ouYjCs6fANGuDHKbdfwdmIuiaPlv4CHaAe6EkgjsEtit90BAAw l24EpFrAVORPOBPHPTgI6D6gerFuE8JdngeR/WnSVNxswhRnJP4GX8ZDmoN7ngve bKQ9OnBIz8HoF87JElufrn4NnBwxYCPOzYoPF0svomg0wmEHY6Hs/VxOoN12UTsn TOoWIkYNkLj3XIT1nT23Rr+deihOHG+FdiNWmSel93Us63VfK3lNFKOM5GlZEk36 TKJUHb/h2Yc6V7EKa9cPAUXmrBx8U7v2zXem71DL78tsXIdE5J5Tx4dlLzpxUFs6 CKhcz2Xc -----END CERTIFICATE-----Generated at Mon Jan 26 22:32:00 2026 by rpki-client