This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/5lUGS6oPTLGoWnxgew7D5MIxWOg.roa File: 5lUGS6oPTLGoWnxgew7D5MIxWOg.roa (raw, json) Hash identifier: qhuiBd586lNm93JRE/rEDVYPTPi0gDSSOqw/SZXIEjw= Subject key identifier: E6:55:06:4B:AA:0F:4C:B1:A8:5A:7C:60:7B:0E:C3:E4:C2:31:58:E8 Certificate issuer: /CN=eee416590585a5d351dbbca1f0b3ca9f62ab785d Certificate serial: 019B7E39319B326578BCB1A4FA85756EE03B Authority key identifier: EE:E4:16:59:05:85:A5:D3:51:DB:BC:A1:F0:B3:CA:9F:62:AB:78:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7uQWWQWFpdNR27yh8LPKn2KreF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/5lUGS6oPTLGoWnxgew7D5MIxWOg.roa Signing time: Fri 02 Jan 2026 10:20:36 +0000 ROA not before: Fri 02 Jan 2026 10:20:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25117 IP address blocks: 193.56.242.0/23 maxlen: 24 193.56.244.0/23 maxlen: 24 193.57.120.0/23 maxlen: 24 193.57.124.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/7uQWWQWFpdNR27yh8LPKn2KreF0.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/7uQWWQWFpdNR27yh8LPKn2KreF0.mft rsync://rpki.ripe.net/repository/DEFAULT/7uQWWQWFpdNR27yh8LPKn2KreF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 22:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:31:9b:32:65:78:bc:b1:a4:fa:85:75:6e:e0:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eee416590585a5d351dbbca1f0b3ca9f62ab785d Validity Not Before: Jan 2 10:20:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e655064baa0f4cb1a85a7c607b0ec3e4c23158e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:73:1d:87:cf:89:2b:88:74:e1:72:2a:4f:72: 1d:ef:20:a1:5d:2f:e7:7d:68:6d:4e:67:63:6f:22: 27:89:53:0d:94:a9:da:84:b5:31:a2:87:6b:8a:ed: df:33:f6:43:84:56:05:9f:c4:16:a5:71:9c:27:89: 55:ff:75:0d:88:bb:f5:ef:4c:0f:30:af:be:72:05: f8:8d:78:b4:b4:11:76:2e:87:e7:85:c4:15:2d:0a: 76:c3:51:dd:1d:a1:a8:a2:1f:42:54:54:a4:64:db: 52:8b:fa:d5:0a:d6:c2:cc:4b:8a:5b:e2:53:e1:e6: cd:e1:13:43:64:19:61:44:c7:36:cf:a9:8f:c4:f4: b6:ff:ad:46:1a:e4:6f:6a:4d:58:6e:18:48:23:2d: 1a:f7:fc:00:38:49:7e:89:53:cd:45:00:d1:ae:ab: 48:25:a7:dc:48:b3:9f:16:b7:aa:15:7c:8c:31:e2: e0:81:13:a2:d4:7c:01:1c:76:9b:89:c6:85:07:4f: e4:75:28:47:bb:ad:f7:ba:66:86:75:ed:ed:56:23: 1d:01:ac:ca:33:db:c9:27:a2:ca:b2:b8:c7:ff:5c: 34:ce:69:14:f7:6d:34:2e:47:0e:bb:eb:91:86:36: 2a:40:ee:2c:bb:c9:e7:1e:ea:d1:68:23:f8:1b:49: 3c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:55:06:4B:AA:0F:4C:B1:A8:5A:7C:60:7B:0E:C3:E4:C2:31:58:E8 X509v3 Authority Key Identifier: keyid:EE:E4:16:59:05:85:A5:D3:51:DB:BC:A1:F0:B3:CA:9F:62:AB:78:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uQWWQWFpdNR27yh8LPKn2KreF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/5lUGS6oPTLGoWnxgew7D5MIxWOg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/7uQWWQWFpdNR27yh8LPKn2KreF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.56.242.0-193.56.245.255 193.57.120.0/23 193.57.124.0/23 Signature Algorithm: sha256WithRSAEncryption 81:2d:16:31:cb:07:b0:10:6d:25:c0:6c:c3:d2:44:66:80:e7: bf:3c:4a:67:c5:9d:26:85:24:45:72:0d:3c:35:bc:30:80:51: ed:50:a7:6a:a4:f5:93:83:df:74:48:8d:04:ff:c5:66:34:4f: 46:0d:ea:d9:c8:e9:e5:5b:e8:cd:21:64:27:f8:20:e8:64:7c: 67:1d:3e:11:a1:22:57:ea:88:90:32:39:3d:ed:f5:3a:c5:0c: dd:cb:42:b3:59:71:e8:4b:3e:24:6e:aa:c6:18:a3:6c:e2:ed: 8e:58:38:2d:6c:57:33:8e:30:30:1e:ef:d8:02:8c:83:e7:16: 47:db:26:9b:72:94:13:85:21:d3:90:28:cd:06:6c:4c:f4:50: 64:fb:62:32:2f:81:f8:ee:f5:fe:38:a1:b2:07:38:fe:9b:e7: 68:78:b4:cb:51:ef:2c:0f:83:8f:b3:4a:69:86:61:ae:24:5c: 64:6f:e0:82:f0:f4:1b:7b:21:c3:92:e1:0a:c7:9d:d4:09:bf: c7:f8:fb:e7:e8:e1:f4:44:cf:bf:a8:e4:8b:9a:72:7c:4a:dd: 74:bf:dd:64:fd:3a:14:30:9b:53:24:1a:75:b3:e4:97:b1:bb: db:53:c1:bd:21:f4:8a:46:f7:cb:28:55:55:e0:2c:3f:f7:e1: 29:ef:6c:4b -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt+OTGbMmV4vLGk+oV1buA7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlZTQxNjU5MDU4NWE1ZDM1MWRiYmNhMWYwYjNjYTlmNjJh Yjc4NWQwHhcNMjYwMTAyMTAyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjU1MDY0YmFhMGY0Y2IxYTg1YTdjNjA3YjBlYzNlNGMyMzE1OGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXMdh8+JK4h04XIqT3Id7yChXS/n fWhtTmdjbyIniVMNlKnahLUxoodriu3fM/ZDhFYFn8QWpXGcJ4lV/3UNiLv170wP MK++cgX4jXi0tBF2LofnhcQVLQp2w1HdHaGooh9CVFSkZNtSi/rVCtbCzEuKW+JT 4ebN4RNDZBlhRMc2z6mPxPS2/61GGuRvak1YbhhIIy0a9/wAOEl+iVPNRQDRrqtI JafcSLOfFreqFXyMMeLggROi1HwBHHabicaFB0/kdShHu633umaGde3tViMdAazK M9vJJ6LKsrjH/1w0zmkU9200LkcOu+uRhjYqQO4su8nnHurRaCP4G0k8jQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFOZVBkuqD0yxqFp8YHsOw+TCMVjoMB8GA1UdIwQY MBaAFO7kFlkFhaXTUdu8ofCzyp9iq3hdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3VRV1dRV0ZwZE5SMjd5aDhMUEtuMktyZUYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jNmFiOTQtNjViMy00NzFjLWIwOGMt MDc2YTc1MGI4NTQxLzEvNWxVR1M2b1BUTEdvV254Z2V3N0Q1TUl4V09nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9jNmFiOTQtNjViMy00NzFjLWIwOGMtMDc2YTc1MGI4NTQx LzEvN3VRV1dRV0ZwZE5SMjd5aDhMUEtuMktyZUYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAHBOPID BAHBOPQDBAHBOXgDBAHBOXwwDQYJKoZIhvcNAQELBQADggEBAIEtFjHLB7AQbSXA bMPSRGaA5788SmfFnSaFJEVyDTw1vDCAUe1Qp2qk9ZOD33RIjQT/xWY0T0YN6tnI 6eVb6M0hZCf4IOhkfGcdPhGhIlfqiJAyOT3t9TrFDN3LQrNZcehLPiRuqsYYo2zi 7Y5YOC1sVzOOMDAe79gCjIPnFkfbJptylBOFIdOQKM0GbEz0UGT7YjIvgfju9f44 obIHOP6b52h4tMtR7ywPg4+zSmmGYa4kXGRv4ILw9Bt7IcOS4QrHndQJv8f4++fo 4fREz7+o5IuacnxK3XS/3WT9OhQwm1MkGnWz5Jexu9tTwb0h9IpG98soVVXgLD/3 4SnvbEs= -----END CERTIFICATE-----Generated at Wed Jan 7 03:07:19 2026 by rpki-client