This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/RO5Y64erMnkGFS_q7s72Hi1r0FU.roa File: RO5Y64erMnkGFS_q7s72Hi1r0FU.roa (raw, json) Hash identifier: AsPEDTURfYi6VUtt4C3gZ0GGPtUCjtWSs6d5iV6qUCg= Subject key identifier: 44:EE:58:EB:87:AB:32:79:06:15:2F:EA:EE:CE:F6:1E:2D:6B:D0:55 Certificate issuer: /CN=48c39de25ffa7eaf02b2a6d8c2cf6e2ceb562bf3 Certificate serial: 019B7DCA8C62690DEE114835A35AD5145FA6 Authority key identifier: 48:C3:9D:E2:5F:FA:7E:AF:02:B2:A6:D8:C2:CF:6E:2C:EB:56:2B:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SMOd4l_6fq8CsqbYws9uLOtWK_M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/RO5Y64erMnkGFS_q7s72Hi1r0FU.roa Signing time: Fri 02 Jan 2026 08:19:44 +0000 ROA not before: Fri 02 Jan 2026 08:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42867 IP address blocks: 194.143.140.0/23 maxlen: 23 194.143.140.0/24 maxlen: 24 194.143.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.mft rsync://rpki.ripe.net/repository/DEFAULT/SMOd4l_6fq8CsqbYws9uLOtWK_M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:8c:62:69:0d:ee:11:48:35:a3:5a:d5:14:5f:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48c39de25ffa7eaf02b2a6d8c2cf6e2ceb562bf3 Validity Not Before: Jan 2 08:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=44ee58eb87ab327906152feaeecef61e2d6bd055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7a:22:83:50:91:3d:e7:31:d9:e0:53:23:cc: 63:24:3f:b5:7c:40:3f:4e:c8:8f:8b:12:09:66:03: 23:8d:05:74:00:0c:1f:66:d3:81:25:05:de:22:1e: 07:dd:6e:7d:79:fd:86:75:42:89:c0:8a:49:99:e2: 05:9e:8f:a3:b1:3d:4e:db:f2:33:27:b1:a4:2c:79: 4c:3d:e7:90:87:68:a6:ac:8b:78:89:ea:29:82:9f: ce:c2:f4:fb:34:85:f8:e7:d5:4d:82:ea:c5:09:2d: 7a:e5:71:ba:23:e7:01:66:9c:6d:f5:6e:66:91:22: c7:30:25:b4:e5:97:dd:9d:24:c3:72:fb:91:cb:7d: 24:e8:ab:57:f3:63:3d:9c:4a:38:56:da:9c:33:05: a8:42:4f:73:57:37:13:07:2a:c8:d2:c9:e0:60:fa: 0e:ef:29:a2:c1:60:fc:5c:c0:5c:ce:20:ce:6f:45: d2:53:d4:d1:44:16:6a:09:68:44:0c:33:09:79:ee: 11:d7:0e:89:b4:fa:a7:b9:6e:ac:aa:11:69:39:ec: 95:83:35:6e:f0:e9:58:06:d9:4b:4d:4b:9a:5c:f9: 77:90:80:b1:92:ba:1f:28:c5:92:70:a1:b1:53:71: ae:75:d1:09:c1:b2:53:d3:89:f6:4c:33:be:7a:1d: 5a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:EE:58:EB:87:AB:32:79:06:15:2F:EA:EE:CE:F6:1E:2D:6B:D0:55 X509v3 Authority Key Identifier: keyid:48:C3:9D:E2:5F:FA:7E:AF:02:B2:A6:D8:C2:CF:6E:2C:EB:56:2B:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMOd4l_6fq8CsqbYws9uLOtWK_M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/RO5Y64erMnkGFS_q7s72Hi1r0FU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.143.140.0/23 Signature Algorithm: sha256WithRSAEncryption 8d:1a:32:2f:32:c5:c2:8f:89:f9:83:41:76:94:be:6f:99:ab: 16:83:67:18:c3:6b:cb:9b:83:59:94:ae:2d:8a:b5:f8:e1:0b: cb:25:b5:04:98:40:ff:d1:a3:20:f6:90:a2:eb:75:d4:0f:d8: 7a:52:85:e9:e0:64:5f:ac:3a:ca:d4:ad:0c:8f:9b:f3:27:4e: 33:91:0f:eb:7a:07:cc:6b:30:a0:f0:a4:17:45:b8:b8:0e:61: 26:e7:92:ea:05:1f:13:d0:21:28:e1:7d:10:5d:b9:3c:1a:b1: 83:f4:41:a5:3d:db:6b:4c:27:7c:9f:e0:f0:59:70:37:09:7c: 19:e2:15:fa:e4:d7:e3:99:8a:ac:61:53:03:81:88:2a:13:59: 7e:93:e7:11:ad:7b:66:3b:34:7b:46:17:5e:b8:a2:61:e6:65: e5:27:64:10:5d:5c:50:75:9f:32:e3:ec:73:68:5c:b3:9d:75: 94:83:cf:52:74:63:87:69:69:fc:c3:37:30:e8:1e:9f:d5:98: 17:1c:19:23:bd:83:67:a7:ac:ee:7d:2c:8f:a2:ac:05:d5:a8: cc:55:d6:db:53:00:50:23:1f:01:20:0c:4d:84:ed:13:70:14: 78:90:9c:55:a1:67:6b:7f:2b:c1:4b:e2:89:4e:f7:3b:f1:5c: 0c:40:69:b6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yoxiaQ3uEUg1o1rVFF+mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4YzM5ZGUyNWZmYTdlYWYwMmIyYTZkOGMyY2Y2ZTJjZWI1 NjJiZjMwHhcNMjYwMTAyMDgxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NGVlNThlYjg3YWIzMjc5MDYxNTJmZWFlZWNlZjYxZTJkNmJkMDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHoig1CRPecx2eBTI8xjJD+1fEA/ TsiPixIJZgMjjQV0AAwfZtOBJQXeIh4H3W59ef2GdUKJwIpJmeIFno+jsT1O2/Iz J7GkLHlMPeeQh2imrIt4ieopgp/OwvT7NIX459VNgurFCS165XG6I+cBZpxt9W5m kSLHMCW05ZfdnSTDcvuRy30k6KtX82M9nEo4VtqcMwWoQk9zVzcTByrI0sngYPoO 7ymiwWD8XMBcziDOb0XSU9TRRBZqCWhEDDMJee4R1w6JtPqnuW6sqhFpOeyVgzVu 8OlYBtlLTUuaXPl3kICxkrofKMWScKGxU3GuddEJwbJT04n2TDO+eh1agwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFETuWOuHqzJ5BhUv6u7O9h4ta9BVMB8GA1UdIwQY MBaAFEjDneJf+n6vArKm2MLPbizrVivzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU01PZDRsXzZmcThDc3FiWXdzOXVMT3RXS19NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85YmNiYWYtNDk5My00ZDA4LWI5YTgt MDM1NWVmMTE1ODljLzEvUk81WTY0ZXJNbmtHRlNfcTdzNzJIaTFyMEZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS85YmNiYWYtNDk5My00ZDA4LWI5YTgtMDM1NWVmMTE1ODlj LzEvU01PZDRsXzZmcThDc3FiWXdzOXVMT3RXS19NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwo+MMA0G CSqGSIb3DQEBCwUAA4IBAQCNGjIvMsXCj4n5g0F2lL5vmasWg2cYw2vLm4NZlK4t irX44QvLJbUEmED/0aMg9pCi63XUD9h6UoXp4GRfrDrK1K0Mj5vzJ04zkQ/regfM azCg8KQXRbi4DmEm55LqBR8T0CEo4X0QXbk8GrGD9EGlPdtrTCd8n+DwWXA3CXwZ 4hX65NfjmYqsYVMDgYgqE1l+k+cRrXtmOzR7RhdeuKJh5mXlJ2QQXVxQdZ8y4+xz aFyznXWUg89SdGOHaWn8wzcw6B6f1ZgXHBkjvYNnp6zufSyPoqwF1ajMVdbbUwBQ Ix8BIAxNhO0TcBR4kJxVoWdrfyvBS+KJTvc78VwMQGm2 -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:57 2026 by rpki-client