This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/5RrePjfBfgFsb1dfhghTvm6VuXQ.roa File: 5RrePjfBfgFsb1dfhghTvm6VuXQ.roa (raw, json) Hash identifier: kBSyv/KZQ0qJXn8NAa0tIDmtlcQIduDFV8hiLoM2Mcw= Subject key identifier: E5:1A:DE:3E:37:C1:7E:01:6C:6F:57:5F:86:08:53:BE:6E:95:B9:74 Certificate issuer: /CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342 Certificate serial: 019C2D3DD579323FBC67C4B518E86AC67E35 Authority key identifier: 8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/5RrePjfBfgFsb1dfhghTvm6VuXQ.roa Signing time: Thu 05 Feb 2026 09:59:12 +0000 ROA not before: Thu 05 Feb 2026 09:59:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212066 IP address blocks: 5.45.215.0/24 maxlen: 24 87.250.255.0/24 maxlen: 24 2a02:6b8:f::/48 maxlen: 48 2a02:6b8:215::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:2d:3d:d5:79:32:3f:bc:67:c4:b5:18:e8:6a:c6:7e:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342 Validity Not Before: Feb 5 09:59:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e51ade3e37c17e016c6f575f860853be6e95b974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:93:31:12:2a:c7:ff:c1:f7:7b:65:e8:b6:6e: 81:f5:50:8e:3d:95:0e:06:b4:8a:df:70:18:51:3a: 65:d6:58:cf:52:3c:d3:1f:4f:59:60:ed:27:9e:03: fc:f5:a1:a8:17:97:84:7f:af:87:0d:ac:7d:a2:a6: b0:cf:96:2b:fa:72:d9:55:4b:e6:1e:81:af:b5:6b: 4d:7f:29:e7:5e:1f:b2:ae:52:12:7f:f5:2f:c5:b9: 62:24:95:39:e6:91:a2:89:2e:68:c8:9d:25:2f:e3: bd:1d:73:82:2e:c5:6b:46:c4:56:1d:88:ee:ef:04: 96:27:94:5c:5e:49:44:4f:d4:19:3e:6d:2b:74:31: cd:12:5c:78:84:2e:ef:4c:63:ad:e0:b2:b5:15:5b: b1:dd:cd:df:b1:22:0b:b6:7d:70:67:86:e4:3b:45: 03:a6:a0:29:0b:d6:6c:19:bc:23:30:b3:8f:4c:1b: 8f:b9:2e:78:af:f2:ad:b3:56:43:50:b5:cc:0c:b2: 93:e2:2f:d8:bd:37:e1:84:80:0b:f3:e6:3a:0a:e8: 21:4d:37:af:db:d4:55:3c:90:75:5e:0d:3e:9b:fe: 59:c4:65:0d:f9:dd:72:d5:f5:11:b3:0d:69:11:6b: bb:b3:6a:34:65:52:d2:ca:5d:10:63:d8:e1:00:a0: ce:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:1A:DE:3E:37:C1:7E:01:6C:6F:57:5F:86:08:53:BE:6E:95:B9:74 X509v3 Authority Key Identifier: keyid:8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/5RrePjfBfgFsb1dfhghTvm6VuXQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.45.215.0/24 87.250.255.0/24 IPv6: 2a02:6b8:f::/48 2a02:6b8:215::/48 Signature Algorithm: sha256WithRSAEncryption a6:bc:f3:37:22:a1:e7:60:6a:c7:e7:c6:4f:a8:1e:e9:8a:3c: c4:16:ee:7a:b8:a0:f9:51:6b:38:19:42:1c:17:fd:fa:fa:e7: ea:df:99:3c:6e:2c:14:3f:e8:21:1d:2f:ae:98:34:1d:1c:0d: b5:08:e2:a0:81:dc:5c:78:03:e3:2d:76:b4:4d:4d:7b:68:48: ff:e7:6c:56:47:f0:b7:cc:ed:06:74:49:b0:db:64:b5:e0:fb: 4d:a8:93:04:0b:a9:8f:05:6b:13:f2:f0:46:89:63:90:42:c9: ff:6e:cd:7c:26:2f:bf:0f:04:8b:5e:40:ce:56:17:87:c2:e0: b6:41:1b:0a:3b:71:79:9a:68:71:ab:fb:47:4d:e9:2b:6f:49: d9:c4:c1:e9:a3:5a:fb:a9:d8:81:c3:4c:e4:3e:35:bd:27:84: 9a:88:2c:be:58:56:fd:fb:12:e6:f9:e0:1b:a3:46:29:29:4a: 3c:aa:5f:77:63:1c:59:bb:06:81:57:2d:98:c2:99:5c:c3:2a: 5d:55:05:cc:44:6b:ce:e4:28:65:f2:60:12:89:76:66:ab:74: 9e:da:23:59:d0:8c:4b:d1:ca:db:c1:ba:31:55:e1:a2:a0:c4: 09:7a:c4:dc:56:61:3e:91:9c:86:35:f7:70:7e:f8:d2:b5:1a: f1:90:6b:ee -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZwtPdV5Mj+8Z8S1GOhqxn41MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkODQ0MDRlNWY4YTRiMTE3YWU0NGU3M2Q1M2M0NGVjZGQ1 NzgzNDIwHhcNMjYwMjA1MDk1OTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTFhZGUzZTM3YzE3ZTAxNmM2ZjU3NWY4NjA4NTNiZTZlOTViOTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupMxEirH/8H3e2Xotm6B9VCOPZUO BrSK33AYUTpl1ljPUjzTH09ZYO0nngP89aGoF5eEf6+HDax9oqawz5Yr+nLZVUvm HoGvtWtNfynnXh+yrlISf/UvxbliJJU55pGiiS5oyJ0lL+O9HXOCLsVrRsRWHYju 7wSWJ5RcXklET9QZPm0rdDHNElx4hC7vTGOt4LK1FVux3c3fsSILtn1wZ4bkO0UD pqApC9ZsGbwjMLOPTBuPuS54r/Kts1ZDULXMDLKT4i/YvTfhhIAL8+Y6CughTTev 29RVPJB1Xg0+m/5ZxGUN+d1y1fURsw1pEWu7s2o0ZVLSyl0QY9jhAKDOUQIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFOUa3j43wX4BbG9XX4YIU75ulbl0MB8GA1UdIwQY MBaAFI2EQE5fiksReuROc9U8ROzdV4NCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvallSQVRsLUtTeEY2NUU1ejFUeEU3TjFYZzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9kNTFmNjQtNWQwNi00ZmMwLWFiNjkt MmNkOThlZTUzNTY5LzEvNVJyZVBqZkJmZ0ZzYjFkZmhnaFR2bTZWdVhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9kNTFmNjQtNWQwNi00ZmMwLWFiNjktMmNkOThlZTUzNTY5 LzEvallSQVRsLUtTeEY2NUU1ejFUeEU3TjFYZzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQABS3XAwQA V/r/MBgEAgACMBIDBwAqAga4AA8DBwAqAga4AhUwDQYJKoZIhvcNAQELBQADggEB AKa88zcioedgasfnxk+oHumKPMQW7nq4oPlRazgZQhwX/fr65+rfmTxuLBQ/6CEd L66YNB0cDbUI4qCB3Fx4A+MtdrRNTXtoSP/nbFZH8LfM7QZ0SbDbZLXg+02okwQL qY8FaxPy8EaJY5BCyf9uzXwmL78PBIteQM5WF4fC4LZBGwo7cXmaaHGr+0dN6Stv SdnEwemjWvup2IHDTOQ+Nb0nhJqILL5YVv37Eub54BujRikpSjyqX3djHFm7BoFX LZjCmVzDKl1VBcxEa87kKGXyYBKJdmardJ7aI1nQjEvRytvBujFV4aKgxAl6xNxW YT6RnIY193B++NK1GvGQa+4= -----END CERTIFICATE-----Generated at Mon Feb 9 23:46:23 2026 by rpki-client