This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/5a4DGw-2-kfHgsxaKehjNXnuCqE.roa File: 5a4DGw-2-kfHgsxaKehjNXnuCqE.roa (raw, json) Hash identifier: sUZyzh0MHY05jTMpuhKk6CIitn9nHfz+b8Hqjb1Mmtw= Subject key identifier: E5:AE:03:1B:0F:B6:FA:47:C7:82:CC:5A:29:E8:63:35:79:EE:0A:A1 Certificate issuer: /CN=d6e2694652aa298511edafbe18d2b1cdbc792638 Certificate serial: 019B7C136187904BA052E099AFFAC591A2FD Authority key identifier: D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/5a4DGw-2-kfHgsxaKehjNXnuCqE.roa Signing time: Fri 02 Jan 2026 00:20:03 +0000 ROA not before: Fri 02 Jan 2026 00:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59962 IP address blocks: 185.24.252.0/24 maxlen: 24 185.24.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:61:87:90:4b:a0:52:e0:99:af:fa:c5:91:a2:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6e2694652aa298511edafbe18d2b1cdbc792638 Validity Not Before: Jan 2 00:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e5ae031b0fb6fa47c782cc5a29e8633579ee0aa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ed:07:a5:3c:c0:2c:cc:8f:32:cc:d5:4d:91: 77:ca:7a:24:e0:15:69:18:30:be:fe:f2:0a:56:b3: 77:ab:1a:97:8d:82:0b:dd:1b:54:07:40:ed:f3:37: 59:dd:2f:4a:1e:cf:28:1b:8b:68:8b:71:c4:ec:80: e5:d6:ff:a8:f1:44:dc:c1:83:bd:79:35:a5:d4:1d: da:5a:53:e1:d9:fa:35:34:4a:8b:57:a8:ec:87:a1: 13:7c:42:23:96:1b:0c:16:2d:7b:7f:be:da:05:07: 2a:ac:76:b4:ad:5a:54:87:d2:ed:0d:8b:fa:17:c4: 21:6f:de:5f:c8:cc:13:b9:9b:5c:fe:04:24:1f:51: 6c:85:d8:d8:a5:79:7a:33:91:5d:8e:c7:11:74:55: 90:b7:5b:6d:d6:8e:71:e3:07:c4:fc:a4:a8:16:e0: ff:9a:39:b2:66:2b:9e:e7:23:09:f1:e5:d7:88:b9: d3:b1:9a:cc:91:9b:3f:12:4e:c9:a3:a9:64:4c:43: ff:5e:a2:37:ae:a8:51:bd:6c:c3:c7:5e:2b:f2:cc: 0e:83:ff:6e:dc:30:27:6d:84:bd:cb:eb:60:a7:25: 2a:3b:25:26:71:9d:87:ab:aa:d2:5b:a6:ff:66:95: fc:75:4e:38:bb:47:26:21:16:3c:e5:6f:e4:de:82: 5d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:AE:03:1B:0F:B6:FA:47:C7:82:CC:5A:29:E8:63:35:79:EE:0A:A1 X509v3 Authority Key Identifier: keyid:D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/5a4DGw-2-kfHgsxaKehjNXnuCqE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.24.252.0/23 Signature Algorithm: sha256WithRSAEncryption 9d:53:34:b1:62:14:2b:21:7f:27:69:d3:b8:46:ad:a4:6d:b2: 3b:5f:de:63:ca:ec:6b:47:74:66:96:f2:9c:4d:2e:d5:f8:b1: 3d:8c:72:fe:51:ff:17:30:6e:a5:e7:be:56:b4:8e:58:c3:15: 94:68:4c:ff:f9:5d:a6:a2:47:66:e3:49:c9:d2:b2:57:c3:a8: a1:24:0f:e1:b7:68:ee:12:14:5d:8a:20:bf:7e:ad:9a:cf:69: 7f:cc:9d:4c:4b:8d:2f:15:d4:f9:c3:41:47:8d:5d:9f:bb:1d: ab:d8:b5:50:2a:9a:5e:d5:6f:f2:5a:05:4e:11:ef:44:c6:38: d8:5e:c5:23:f3:ed:32:4d:68:8f:80:e8:c6:01:d9:7e:4b:b1: cc:7c:73:c9:12:90:4d:5e:f0:04:86:b4:f2:96:48:81:f3:3d: b1:26:c7:47:9f:7c:ec:a7:09:fa:c0:b9:9f:58:3c:35:d9:f5: 33:98:db:a3:c1:97:e0:59:27:9b:40:70:6e:26:16:e6:a2:b9: 18:c7:1d:e7:c4:5c:62:83:b2:b2:1c:39:0d:8a:d1:55:60:36: 01:34:80:fa:60:be:cf:bd:71:c8:24:e1:3e:e0:5b:df:7f:a9: 14:77:ba:0b:c3:a8:d8:c2:92:3e:dc:f7:43:d8:c9:9b:65:84: ff:22:70:29 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E2GHkEugUuCZr/rFkaL9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2ZTI2OTQ2NTJhYTI5ODUxMWVkYWZiZTE4ZDJiMWNkYmM3 OTI2MzgwHhcNMjYwMTAyMDAyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNWFlMDMxYjBmYjZmYTQ3Yzc4MmNjNWEyOWU4NjMzNTc5ZWUwYWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+0HpTzALMyPMszVTZF3ynok4BVp GDC+/vIKVrN3qxqXjYIL3RtUB0Dt8zdZ3S9KHs8oG4toi3HE7IDl1v+o8UTcwYO9 eTWl1B3aWlPh2fo1NEqLV6jsh6ETfEIjlhsMFi17f77aBQcqrHa0rVpUh9LtDYv6 F8Qhb95fyMwTuZtc/gQkH1FshdjYpXl6M5FdjscRdFWQt1tt1o5x4wfE/KSoFuD/ mjmyZiue5yMJ8eXXiLnTsZrMkZs/Ek7Jo6lkTEP/XqI3rqhRvWzDx14r8swOg/9u 3DAnbYS9y+tgpyUqOyUmcZ2Hq6rSW6b/ZpX8dU44u0cmIRY85W/k3oJd4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOWuAxsPtvpHx4LMWinoYzV57gqhMB8GA1UdIwQY MBaAFNbiaUZSqimFEe2vvhjSsc28eSY4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXVKcFJsS3FLWVVSN2EtLUdOS3h6Yng1SmpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC84Y2M1MDYtN2U3MS00NzA1LWEyODkt YjQyMzY0ODk1MDgzLzEvNWE0REd3LTIta2ZIZ3N4YUtlaGpOWG51Q3FFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC84Y2M1MDYtN2U3MS00NzA1LWEyODktYjQyMzY0ODk1MDgz LzEvMXVKcFJsS3FLWVVSN2EtLUdOS3h6Yng1SmpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuRj8MA0G CSqGSIb3DQEBCwUAA4IBAQCdUzSxYhQrIX8nadO4Rq2kbbI7X95jyuxrR3RmlvKc TS7V+LE9jHL+Uf8XMG6l575WtI5YwxWUaEz/+V2mokdm40nJ0rJXw6ihJA/ht2ju EhRdiiC/fq2az2l/zJ1MS40vFdT5w0FHjV2fux2r2LVQKppe1W/yWgVOEe9ExjjY XsUj8+0yTWiPgOjGAdl+S7HMfHPJEpBNXvAEhrTylkiB8z2xJsdHn3zspwn6wLmf WDw12fUzmNujwZfgWSebQHBuJhbmorkYxx3nxFxig7KyHDkNitFVYDYBNID6YL7P vXHIJOE+4Fvff6kUd7oLw6jYwpI+3PdD2MmbZYT/InAp -----END CERTIFICATE-----Generated at Mon Jan 26 20:42:36 2026 by rpki-client