This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/rSNYP5GBWm3-oPEI24bApA49gVg.roa File: rSNYP5GBWm3-oPEI24bApA49gVg.roa (raw, json) Hash identifier: 71+TgQ/odxXBNuNJv2+D288VGtDZBORnBFrTzAkJ35U= Subject key identifier: AD:23:58:3F:91:81:5A:6D:FE:A0:F1:08:DB:86:C0:A4:0E:3D:81:58 Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Certificate serial: 019B797E23A27D11A74898DCC24B14646A24 Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/rSNYP5GBWm3-oPEI24bApA49gVg.roa Signing time: Thu 01 Jan 2026 12:17:48 +0000 ROA not before: Thu 01 Jan 2026 12:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 5.183.207.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:23:a2:7d:11:a7:48:98:dc:c2:4b:14:64:6a:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Validity Not Before: Jan 1 12:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad23583f91815a6dfea0f108db86c0a40e3d8158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d3:d9:3a:08:e9:c2:80:1c:ed:20:b1:12:9d: 8a:4f:95:a9:98:fb:86:e6:86:84:0d:fb:02:d7:91: 74:58:ce:c3:ed:49:57:11:9c:20:c7:7d:90:5f:21: 7f:04:40:2a:6b:dc:42:2d:fc:67:96:1b:00:2d:45: db:6b:bd:de:c9:80:37:02:c9:ee:4e:74:ee:ba:25: a3:b6:62:62:25:5a:a3:06:d2:d2:a2:5d:e1:6b:9e: 6f:11:9f:91:13:a4:dd:ed:f0:5d:62:aa:13:a1:29: 79:70:9f:aa:cf:59:7c:1b:58:e9:5d:2e:dd:bc:4f: 66:ea:78:92:93:88:cb:1f:2c:d3:aa:03:a4:5f:2d: ae:b0:c2:7a:df:04:0c:ef:c8:46:19:60:37:31:ba: eb:0f:6d:57:ee:1b:cf:56:79:44:96:a9:9c:31:db: e9:d4:f4:ed:e6:d8:f4:94:a6:96:5f:a3:a7:ef:5f: 8f:cc:2d:31:11:32:b3:4b:9d:46:24:c3:f2:73:88: dc:43:78:10:47:7e:e3:96:2c:21:99:82:37:dc:e6: 88:be:98:66:fa:88:d2:37:6c:9e:25:e2:29:5c:c0: 21:72:19:24:74:07:23:a0:01:3c:4e:6e:b6:14:08: 8f:66:db:25:2c:d9:31:a7:b7:b9:32:02:2e:ba:b6: 86:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:23:58:3F:91:81:5A:6D:FE:A0:F1:08:DB:86:C0:A4:0E:3D:81:58 X509v3 Authority Key Identifier: keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/rSNYP5GBWm3-oPEI24bApA49gVg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.183.207.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:22:4f:38:f3:02:c1:47:6a:79:6f:8b:5d:d7:10:86:7e:ad: 6a:d3:48:83:93:cd:35:f3:15:26:e8:3b:89:b9:34:1d:d2:0d: 08:b6:a7:fc:8b:89:96:8c:4d:ba:2a:ea:dc:cc:33:1a:62:dc: 53:13:55:4f:a0:a8:db:0e:de:32:ef:ae:9d:ba:5f:6d:91:6f: ac:ad:e2:16:64:9f:93:53:db:0e:90:b2:89:fc:12:54:4e:f4: e1:5c:a8:66:c3:1e:52:66:e3:7e:56:bb:b6:ea:05:08:9e:77: 84:37:e3:c6:3d:8c:df:66:36:4c:5d:c5:48:cf:7e:7f:9c:4f: 36:08:08:26:48:48:f7:c7:26:d3:a2:db:38:46:74:34:4e:b4: 7a:cd:b7:0a:6a:4b:33:c6:99:42:df:d8:d8:0d:ba:19:10:1e: 00:3d:66:7e:63:e5:68:90:2c:83:4c:c7:e1:ae:ed:1e:07:20: dd:37:6e:cf:0b:bb:b2:a6:3e:28:18:37:fc:4e:94:84:12:05: 4b:30:89:d7:1c:40:9e:b6:da:ed:07:c2:0f:c5:dd:ab:d0:96: ae:e9:3b:c1:a3:17:13:a9:bb:19:23:75:d8:21:33:f8:ad:82: e8:04:ed:44:30:1e:0e:a8:6f:9f:fb:19:07:1b:bc:c5:6a:03: c8:16:7b:f3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fiOifRGnSJjcwksUZGokMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi YTU3NDUwHhcNMjYwMTAxMTIxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDIzNTgzZjkxODE1YTZkZmVhMGYxMDhkYjg2YzBhNDBlM2Q4MTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3tPZOgjpwoAc7SCxEp2KT5WpmPuG 5oaEDfsC15F0WM7D7UlXEZwgx32QXyF/BEAqa9xCLfxnlhsALUXba73eyYA3Asnu TnTuuiWjtmJiJVqjBtLSol3ha55vEZ+RE6Td7fBdYqoToSl5cJ+qz1l8G1jpXS7d vE9m6niSk4jLHyzTqgOkXy2usMJ63wQM78hGGWA3MbrrD21X7hvPVnlElqmcMdvp 1PTt5tj0lKaWX6On71+PzC0xETKzS51GJMPyc4jcQ3gQR37jliwhmYI33OaIvphm +ojSN2yeJeIpXMAhchkkdAcjoAE8Tm62FAiPZtslLNkxp7e5MgIuuraGqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK0jWD+RgVpt/qDxCNuGwKQOPYFYMB8GA1UdIwQY MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt ZmVhYzI2ZWFlY2MyLzEvclNOWVA1R0JXbTMtb1BFSTI0YkFwQTQ5Z1ZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbfPMA0G CSqGSIb3DQEBCwUAA4IBAQA9Ik848wLBR2p5b4td1xCGfq1q00iDk8018xUm6DuJ uTQd0g0Itqf8i4mWjE26KurczDMaYtxTE1VPoKjbDt4y766dul9tkW+sreIWZJ+T U9sOkLKJ/BJUTvThXKhmwx5SZuN+Vru26gUInneEN+PGPYzfZjZMXcVIz35/nE82 CAgmSEj3xybTots4RnQ0TrR6zbcKakszxplC39jYDboZEB4APWZ+Y+VokCyDTMfh ru0eByDdN27PC7uypj4oGDf8TpSEEgVLMInXHECettrtB8IPxd2r0Jau6TvBoxcT qbsZI3XYITP4rYLoBO1EMB4OqG+f+xkHG7zFagPIFnvz -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:18 2026 by rpki-client