This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/p5jfW6ha4amA42QcQVPgAaZ9Pmw.roa File: p5jfW6ha4amA42QcQVPgAaZ9Pmw.roa (raw, json) Hash identifier: hdqNSuQrQNGkaTv7LpPhrSIwMr6CxzgGsrUQLxZoMvg= Subject key identifier: A7:98:DF:5B:A8:5A:E1:A9:80:E3:64:1C:41:53:E0:01:A6:7D:3E:6C Certificate issuer: /CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45 Certificate serial: 019B7D5C4270647BB1765192D0F468C4D8A9 Authority key identifier: AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/p5jfW6ha4amA42QcQVPgAaZ9Pmw.roa Signing time: Fri 02 Jan 2026 06:19:16 +0000 ROA not before: Fri 02 Jan 2026 06:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62077 IP address blocks: 83.229.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:42:70:64:7b:b1:76:51:92:d0:f4:68:c4:d8:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45 Validity Not Before: Jan 2 06:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a798df5ba85ae1a980e3641c4153e001a67d3e6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:12:b5:23:f6:43:53:d4:5d:87:96:4f:3b:da: 6c:96:93:4e:b3:f7:f8:90:73:9b:bb:de:78:1f:56: b7:00:cb:66:f5:89:78:b4:9a:f3:43:00:43:3e:f4: d7:c7:e5:96:84:6b:9b:32:ff:ec:0c:b0:7e:d0:28: 1a:4a:6d:d5:91:5a:66:da:8e:38:2c:b0:a7:fb:14: af:ff:8a:ce:59:38:4f:e7:8d:fc:98:a1:53:61:30: a0:27:a8:99:6b:7d:58:1e:11:64:7d:eb:a6:3d:de: 78:e8:13:34:8f:22:e1:64:93:a1:21:07:96:97:5f: a5:c3:1c:73:a1:fb:3c:47:9d:e4:76:b8:59:bc:19: fe:5b:22:43:78:4f:d2:02:8b:0b:45:2c:d9:c8:28: bd:32:dd:19:77:cc:2a:5f:db:d2:51:b4:f9:b8:19: e1:42:04:59:df:04:cd:48:38:1e:c2:2d:93:cf:55: c8:c9:4d:dc:60:f9:29:b9:ac:15:28:15:82:9c:32: e7:60:96:60:ea:01:30:07:67:5d:10:e6:8b:af:73: 31:db:c8:d4:94:a9:dc:f5:5e:be:e6:1a:70:5a:58: 86:4a:c9:0a:72:89:ba:1b:f2:09:ac:40:03:6c:cd: 56:96:07:86:bf:b2:73:cc:6d:f2:49:1a:a0:cc:02: 5a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:98:DF:5B:A8:5A:E1:A9:80:E3:64:1C:41:53:E0:01:A6:7D:3E:6C X509v3 Authority Key Identifier: keyid:AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/p5jfW6ha4amA42QcQVPgAaZ9Pmw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.229.62.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:a6:3d:0f:64:05:e5:fb:c8:a5:6e:0d:0d:c8:93:79:a1:40: 17:eb:3a:9c:03:08:91:55:cd:ff:38:57:71:89:b0:d3:b8:d1: fc:5b:b5:f5:71:37:16:7d:c0:e5:7c:79:6b:98:79:3b:b4:8c: 36:17:54:6d:74:9e:57:45:f3:e6:8a:56:d6:8a:37:c6:e4:1c: d4:86:29:45:c3:b3:8a:52:eb:e1:df:e1:14:8b:c9:84:e3:56: 11:ca:2a:42:dd:d2:25:bf:89:e1:9f:65:e8:9a:2e:f3:c0:6f: 7a:0e:44:c3:ed:69:f6:dd:a2:48:f3:a1:dc:e0:79:20:6b:86: 7a:6b:5e:04:4e:a2:06:5f:1a:6f:4a:83:31:fa:63:24:46:7b: be:1f:27:db:40:f5:a4:28:02:11:84:0a:fe:e8:38:33:3a:8b: 61:69:c4:80:23:b3:aa:89:c7:be:e3:28:9e:48:e0:ba:f8:0d: 89:49:f4:a9:aa:76:98:7d:47:5b:ed:c3:93:44:b9:db:f2:39: ea:a4:cb:9c:56:c0:9e:04:ce:4d:4c:df:eb:af:5d:48:f2:77: ef:37:6e:92:c4:af:a8:bc:fb:aa:5b:02:a9:d3:7e:c4:3d:a2: 3f:5c:d9:aa:e3:fd:cc:0d:e8:b8:b5:58:8f:c5:38:82:13:33: d0:f3:68:46 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XEJwZHuxdlGS0PRoxNipMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjZjZlYTBmZmIyYWVlNGY3NmVlMWExMDQ4OTY5YjhiNTA2 NWRhNDUwHhcNMjYwMTAyMDYxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzk4ZGY1YmE4NWFlMWE5ODBlMzY0MWM0MTUzZTAwMWE2N2QzZTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhK1I/ZDU9Rdh5ZPO9pslpNOs/f4 kHObu954H1a3AMtm9Yl4tJrzQwBDPvTXx+WWhGubMv/sDLB+0CgaSm3VkVpm2o44 LLCn+xSv/4rOWThP5438mKFTYTCgJ6iZa31YHhFkfeumPd546BM0jyLhZJOhIQeW l1+lwxxzofs8R53kdrhZvBn+WyJDeE/SAosLRSzZyCi9Mt0Zd8wqX9vSUbT5uBnh QgRZ3wTNSDgewi2Tz1XIyU3cYPkpuawVKBWCnDLnYJZg6gEwB2ddEOaLr3Mx28jU lKnc9V6+5hpwWliGSskKcom6G/IJrEADbM1WlgeGv7JzzG3ySRqgzAJawQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKeY31uoWuGpgONkHEFT4AGmfT5sMB8GA1UdIwQY MBaAFKz26g/7Ku5Pdu4aEEiWm4tQZdpFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclBicURfc3E3azkyN2hvUVNKYWJpMUJsMmtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8zNDQzOWUtOWNkMi00NGM1LTljZmQt NTU1ZjNmMThlNTRmLzEvcDVqZlc2aGE0YW1BNDJRY1FWUGdBYVo5UG13LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi8zNDQzOWUtOWNkMi00NGM1LTljZmQtNTU1ZjNmMThlNTRm LzEvclBicURfc3E3azkyN2hvUVNKYWJpMUJsMmtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU+U+MA0G CSqGSIb3DQEBCwUAA4IBAQCNpj0PZAXl+8ilbg0NyJN5oUAX6zqcAwiRVc3/OFdx ibDTuNH8W7X1cTcWfcDlfHlrmHk7tIw2F1RtdJ5XRfPmilbWijfG5BzUhilFw7OK Uuvh3+EUi8mE41YRyipC3dIlv4nhn2Xomi7zwG96DkTD7Wn23aJI86Hc4Hkga4Z6 a14ETqIGXxpvSoMx+mMkRnu+HyfbQPWkKAIRhAr+6DgzOothacSAI7Oqice+4yie SOC6+A2JSfSpqnaYfUdb7cOTRLnb8jnqpMucVsCeBM5NTN/rr11I8nfvN26SxK+o vPuqWwKp037EPaI/XNmq4/3MDei4tViPxTiCEzPQ82hG -----END CERTIFICATE-----Generated at Mon Jan 26 16:57:20 2026 by rpki-client