This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/5Oaq_9l3ZmhaBOhjzGbGvS7HRKc.roa File: 5Oaq_9l3ZmhaBOhjzGbGvS7HRKc.roa (raw, json) Hash identifier: cXhkDcDKqif8H6682mKwtEo2AE55St9SA93gZ7arpO0= Subject key identifier: E4:E6:AA:FF:D9:77:66:68:5A:04:E8:63:CC:66:C6:BD:2E:C7:44:A7 Certificate issuer: /CN=966afc14d4a19a7c2c168eb2c81d5622b30149eb Certificate serial: 019B7E38455319DFBF28E68F93696C2148A5 Authority key identifier: 96:6A:FC:14:D4:A1:9A:7C:2C:16:8E:B2:C8:1D:56:22:B3:01:49:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lmr8FNShmnwsFo6yyB1WIrMBSes.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/5Oaq_9l3ZmhaBOhjzGbGvS7HRKc.roa Signing time: Fri 02 Jan 2026 10:19:35 +0000 ROA not before: Fri 02 Jan 2026 10:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43273 IP address blocks: 5.252.172.0/22 maxlen: 22 91.196.248.0/22 maxlen: 22 91.238.168.0/22 maxlen: 22 185.149.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft rsync://rpki.ripe.net/repository/DEFAULT/lmr8FNShmnwsFo6yyB1WIrMBSes.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:45:53:19:df:bf:28:e6:8f:93:69:6c:21:48:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=966afc14d4a19a7c2c168eb2c81d5622b30149eb Validity Not Before: Jan 2 10:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4e6aaffd97766685a04e863cc66c6bd2ec744a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a3:4f:90:b7:ed:6b:f4:1f:c5:ce:08:8c:a8: b0:d4:21:90:40:41:cc:6a:a7:98:30:22:d4:a6:10: ec:42:83:d9:13:54:29:5d:83:0a:26:c8:d0:56:d9: 3d:69:16:43:69:5b:ae:fd:4b:21:47:78:6d:3a:9f: f6:d6:22:54:96:82:64:42:64:ae:ee:b3:41:3f:a4: e4:3f:d7:d6:45:09:8f:22:6a:a3:de:0d:0c:79:14: fe:0f:10:c4:93:7f:c3:0f:db:ac:f6:44:e5:89:a0: 6e:67:22:9f:5b:db:bc:52:b7:55:65:c9:8e:0f:1e: 33:76:b9:3f:3f:30:69:d3:81:54:69:01:d2:e8:19: 56:6a:af:0a:84:78:aa:9a:ea:78:10:11:c3:b5:5c: cf:57:34:f2:7d:ea:53:84:74:0b:26:14:50:1a:b1: 68:b6:4e:1f:1d:8b:7e:a2:3c:27:c9:da:79:c6:bd: d5:42:09:7c:b1:15:f6:ba:df:7e:0e:a6:73:b9:27: da:42:d6:ea:a1:7c:09:30:f9:45:9a:3b:09:e4:60: ca:14:22:e3:15:47:4f:df:8c:e2:26:ce:94:bd:4e: 7e:46:78:4e:61:9f:d7:82:ca:76:c7:6e:85:a8:99: e3:51:17:88:2c:2e:52:c7:9a:db:65:22:6a:ae:9f: d8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:E6:AA:FF:D9:77:66:68:5A:04:E8:63:CC:66:C6:BD:2E:C7:44:A7 X509v3 Authority Key Identifier: keyid:96:6A:FC:14:D4:A1:9A:7C:2C:16:8E:B2:C8:1D:56:22:B3:01:49:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmr8FNShmnwsFo6yyB1WIrMBSes.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/5Oaq_9l3ZmhaBOhjzGbGvS7HRKc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.252.172.0/22 91.196.248.0/22 91.238.168.0/22 185.149.244.0/22 Signature Algorithm: sha256WithRSAEncryption 69:28:b1:a9:a6:7b:96:31:ca:94:22:5b:e2:01:4f:41:3a:bb: f0:d8:52:5a:75:9d:59:27:7d:83:01:ef:af:29:8e:9a:63:72: f1:dd:93:03:e3:0e:dc:57:fc:ea:22:c6:85:78:72:4e:65:1e: c7:ce:07:74:1d:69:f1:82:82:32:81:4c:36:82:08:16:1f:a6: 2b:c0:90:85:df:5e:8c:7e:ff:3d:31:ce:af:31:3e:a0:ea:34: d0:57:2f:48:2f:d2:ef:fb:c7:4a:20:25:73:00:74:8b:59:b9: de:f3:60:bc:60:72:fe:53:de:49:5a:17:84:db:45:58:c0:44: e0:b5:b5:06:ab:b0:96:b6:2f:7f:59:f1:fb:c3:a7:3e:62:d6: 4d:1a:c5:28:3f:aa:65:af:56:6d:57:e9:80:ad:73:25:a4:1f: b5:80:cb:50:6b:fa:30:8b:0c:c2:ee:85:98:ae:70:c7:c1:38: 0b:8a:0e:10:86:44:39:21:4a:c0:ae:cb:76:5d:9a:64:d9:6d: e5:c4:f1:a8:1f:ac:37:a8:46:80:df:e2:fb:df:c1:cb:55:16: 01:25:0f:4a:f3:5a:f6:36:0f:03:16:9f:29:76:28:7a:ae:e1: 85:6d:a0:da:db:1a:dc:8b:39:ef:a9:82:d4:7f:0d:4e:a2:c6: 16:e7:67:f2 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt+OEVTGd+/KOaPk2lsIUilMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2NmFmYzE0ZDRhMTlhN2MyYzE2OGViMmM4MWQ1NjIyYjMw MTQ5ZWIwHhcNMjYwMTAyMTAxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNGU2YWFmZmQ5Nzc2NjY4NWEwNGU4NjNjYzY2YzZiZDJlYzc0NGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKNPkLfta/Qfxc4IjKiw1CGQQEHM aqeYMCLUphDsQoPZE1QpXYMKJsjQVtk9aRZDaVuu/UshR3htOp/21iJUloJkQmSu 7rNBP6TkP9fWRQmPImqj3g0MeRT+DxDEk3/DD9us9kTliaBuZyKfW9u8UrdVZcmO Dx4zdrk/PzBp04FUaQHS6BlWaq8KhHiqmup4EBHDtVzPVzTyfepThHQLJhRQGrFo tk4fHYt+ojwnydp5xr3VQgl8sRX2ut9+DqZzuSfaQtbqoXwJMPlFmjsJ5GDKFCLj FUdP34ziJs6UvU5+RnhOYZ/Xgsp2x26FqJnjUReILC5Sx5rbZSJqrp/YFQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFOTmqv/Zd2ZoWgToY8xmxr0ux0SnMB8GA1UdIwQY MBaAFJZq/BTUoZp8LBaOssgdViKzAUnrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbG1yOEZOU2htbndzRm82eXlCMVdJck1CU2VzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8xZjdjOTgtMThhYS00N2Q4LWFiNDEt MTE2MWVkYjliZjBlLzEvNU9hcV85bDNabWhhQk9oanpHYkd2UzdIUktjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi8xZjdjOTgtMThhYS00N2Q4LWFiNDEtMTE2MWVkYjliZjBl LzEvbG1yOEZOU2htbndzRm82eXlCMVdJck1CU2VzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCBfysAwQC W8T4AwQCW+6oAwQCuZX0MA0GCSqGSIb3DQEBCwUAA4IBAQBpKLGppnuWMcqUIlvi AU9BOrvw2FJadZ1ZJ32DAe+vKY6aY3Lx3ZMD4w7cV/zqIsaFeHJOZR7Hzgd0HWnx goIygUw2gggWH6YrwJCF316Mfv89Mc6vMT6g6jTQVy9IL9Lv+8dKICVzAHSLWbne 82C8YHL+U95JWheE20VYwETgtbUGq7CWti9/WfH7w6c+YtZNGsUoP6plr1ZtV+mA rXMlpB+1gMtQa/owiwzC7oWYrnDHwTgLig4QhkQ5IUrArst2XZpk2W3lxPGoH6w3 qEaA3+L738HLVRYBJQ9K81r2Ng8DFp8pdih6ruGFbaDa2xrciznvqYLUfw1OosYW 52fy -----END CERTIFICATE-----Generated at Tue Feb 10 00:03:13 2026 by rpki-client