This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/5Td8G1bH8G9YabgY5R_ofARZKlE.roa File: 5Td8G1bH8G9YabgY5R_ofARZKlE.roa (raw, json) Hash identifier: QFfkLAAc3Xp81psZvOihgIy++MmEGbzEvXpMaHAZrbg= Subject key identifier: E5:37:7C:1B:56:C7:F0:6F:58:69:B8:18:E5:1F:E8:7C:04:59:2A:51 Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Certificate serial: 019B797E309A3F71CCB566E06E0AC6D84183 Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/5Td8G1bH8G9YabgY5R_ofARZKlE.roa Signing time: Thu 01 Jan 2026 12:17:51 +0000 ROA not before: Thu 01 Jan 2026 12:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60952 IP address blocks: 45.132.15.0/24 maxlen: 32 2a06:7a02::/48 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:30:9a:3f:71:cc:b5:66:e0:6e:0a:c6:d8:41:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Validity Not Before: Jan 1 12:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e5377c1b56c7f06f5869b818e51fe87c04592a51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d6:5e:80:73:6f:0f:ad:ce:73:ad:b2:23:d9: c3:fb:62:67:b0:5c:d9:18:eb:d3:36:49:38:6b:3c: 3b:ba:88:e2:3b:67:97:f7:36:d1:b4:2a:64:57:1d: aa:17:53:c6:7b:c0:1c:43:28:e3:ee:ba:6c:51:4f: 70:2d:5b:d9:fa:9d:a5:c6:db:c9:2a:a1:0b:8a:05: e1:6a:f1:db:24:94:40:b7:66:f9:c3:bb:8b:90:c2: 74:67:0c:e5:48:f3:f4:23:81:ab:82:9b:fa:c0:bd: 0f:f3:49:6e:df:d5:61:c7:5b:07:ea:76:56:18:87: 99:da:46:fe:45:9a:c5:fb:7d:6b:85:bc:2c:5d:e1: 62:bf:88:6b:1c:1c:83:be:fb:17:7d:cc:2f:d8:99: 52:e5:df:c1:ed:a1:1a:e2:4d:fe:07:8e:f2:b5:ba: f2:df:a8:15:79:cc:94:68:0c:df:db:ac:f3:6f:a8: 72:4f:bc:e4:7c:69:51:b2:6c:e7:78:f9:a3:d9:23: 14:ce:eb:c1:74:81:24:02:1d:8b:47:e9:b4:49:3f: 73:dc:dc:fa:d6:22:db:d1:0e:70:f9:08:c2:51:d2: 64:16:c6:c3:91:09:79:09:1e:2c:8e:e2:97:ff:39: 73:1b:74:90:ff:f9:9c:01:23:6c:9b:c7:c0:a5:c2: e4:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:37:7C:1B:56:C7:F0:6F:58:69:B8:18:E5:1F:E8:7C:04:59:2A:51 X509v3 Authority Key Identifier: keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/5Td8G1bH8G9YabgY5R_ofARZKlE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.132.15.0/24 IPv6: 2a06:7a02::/48 Signature Algorithm: sha256WithRSAEncryption 55:75:6f:c1:d3:cd:45:b9:dc:73:f4:bf:28:2a:0b:9d:a6:2d: 00:19:a7:43:0f:4f:02:cd:6d:8b:be:93:db:18:f3:8e:20:51: a6:e7:e7:60:65:a1:d0:f4:e8:70:dc:84:24:46:e1:6e:69:41: a5:86:f5:d1:9a:7e:69:4a:e2:3f:9f:98:64:46:cc:96:7a:03: 1e:fa:ab:8e:03:0f:b0:e8:da:1c:f9:28:af:d0:81:3a:61:71: 39:ed:36:2f:82:8f:60:22:85:91:d3:bf:d6:23:60:16:c9:f8: b1:9b:96:b6:c9:61:bc:10:1a:90:9f:e6:cf:b5:54:4f:d1:02: 55:77:f1:bc:96:a7:b7:f3:b0:31:eb:c7:e6:56:04:6f:04:9e: 94:c2:b8:76:e1:7e:7c:32:9d:cf:7c:d3:3e:ff:ad:95:3b:a2: 75:44:31:5b:40:60:fa:1a:d0:f6:fa:ce:03:5e:65:50:6f:ce: c5:04:4b:9f:40:cf:08:e5:da:99:ad:ce:9a:40:95:fa:22:49: a6:e4:21:6b:bf:4f:91:fd:ba:12:ce:54:6e:f9:d2:e2:9a:ce: 37:b9:8f:a1:83:3e:bc:1e:80:54:65:e1:bb:35:1e:f0:c6:b6: f6:bc:19:3b:47:0f:4d:9c:c7:92:5d:30:96:90:e6:63:13:1b: 25:95:b6:c3 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt5fjCaP3HMtWbgbgrG2EGDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi YTU3NDUwHhcNMjYwMTAxMTIxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTM3N2MxYjU2YzdmMDZmNTg2OWI4MThlNTFmZTg3YzA0NTkyYTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4NZegHNvD63Oc62yI9nD+2JnsFzZ GOvTNkk4azw7uojiO2eX9zbRtCpkVx2qF1PGe8AcQyjj7rpsUU9wLVvZ+p2lxtvJ KqELigXhavHbJJRAt2b5w7uLkMJ0ZwzlSPP0I4Grgpv6wL0P80lu39Vhx1sH6nZW GIeZ2kb+RZrF+31rhbwsXeFiv4hrHByDvvsXfcwv2JlS5d/B7aEa4k3+B47ytbry 36gVecyUaAzf26zzb6hyT7zkfGlRsmznePmj2SMUzuvBdIEkAh2LR+m0ST9z3Nz6 1iLb0Q5w+QjCUdJkFsbDkQl5CR4sjuKX/zlzG3SQ//mcASNsm8fApcLkEwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFOU3fBtWx/BvWGm4GOUf6HwEWSpRMB8GA1UdIwQY MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt ZmVhYzI2ZWFlY2MyLzEvNVRkOEcxYkg4RzlZYWJnWTVSX29mQVJaS2xFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALYQPMA8E AgACMAkDBwAqBnoCAAAwDQYJKoZIhvcNAQELBQADggEBAFV1b8HTzUW53HP0vygq C52mLQAZp0MPTwLNbYu+k9sY844gUabn52BlodD06HDchCRG4W5pQaWG9dGafmlK 4j+fmGRGzJZ6Ax76q44DD7Do2hz5KK/QgTphcTntNi+Cj2AihZHTv9YjYBbJ+LGb lrbJYbwQGpCf5s+1VE/RAlV38byWp7fzsDHrx+ZWBG8EnpTCuHbhfnwync980z7/ rZU7onVEMVtAYPoa0Pb6zgNeZVBvzsUES59Azwjl2pmtzppAlfoiSabkIWu/T5H9 uhLOVG750uKazje5j6GDPrwegFRl4bs1HvDGtva8GTtHD02cx5JdMJaQ5mMTGyWV tsM= -----END CERTIFICATE-----Generated at Mon Jan 19 20:23:57 2026 by rpki-client