This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/5BqcS5YAd2CqG1Bqr1DMz14XLBs.roa File: 5BqcS5YAd2CqG1Bqr1DMz14XLBs.roa (raw, json) Hash identifier: hc3I67ClpXYlhmM2IyIqXgYM+yQAnq3AX4m72or+MyQ= Subject key identifier: E4:1A:9C:4B:96:00:77:60:AA:1B:50:6A:AF:50:CC:CF:5E:17:2C:1B Certificate issuer: /CN=ac9a51bea1b570ffa72d9c52d1a518c24bc78c02 Certificate serial: 019B775895750134B85BBB2B87A01E881FAC Authority key identifier: AC:9A:51:BE:A1:B5:70:FF:A7:2D:9C:52:D1:A5:18:C2:4B:C7:8C:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJpRvqG1cP-nLZxS0aUYwkvHjAI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/5BqcS5YAd2CqG1Bqr1DMz14XLBs.roa Signing time: Thu 01 Jan 2026 02:17:32 +0000 ROA not before: Thu 01 Jan 2026 02:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50772 IP address blocks: 195.78.100.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft rsync://rpki.ripe.net/repository/DEFAULT/rJpRvqG1cP-nLZxS0aUYwkvHjAI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:95:75:01:34:b8:5b:bb:2b:87:a0:1e:88:1f:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a51bea1b570ffa72d9c52d1a518c24bc78c02 Validity Not Before: Jan 1 02:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e41a9c4b96007760aa1b506aaf50cccf5e172c1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7a:bf:02:4f:f9:73:b5:60:69:19:26:ee:20: 52:87:26:9b:e5:c7:66:22:41:84:04:d2:bc:7e:79: 1b:44:76:65:5d:e1:71:35:f0:95:4b:df:44:26:ff: 73:12:df:1b:08:e5:e7:63:67:6c:d5:46:9c:d8:c7: 09:f7:2f:04:4b:34:d6:2c:72:a8:23:ea:03:7a:13: 20:0c:05:83:ee:6a:f6:bd:59:50:9c:fc:8b:82:ad: 65:84:6a:97:14:0b:59:e9:02:0c:75:78:bd:e0:f3: 37:74:ad:85:29:93:77:2a:83:05:8f:ab:f2:a0:ac: 7a:ea:57:5e:ec:c7:0f:cf:24:0c:6c:c5:ca:98:56: b5:69:ef:97:ec:07:b3:27:ec:57:ca:56:f9:5b:d2: 69:b5:0c:5f:68:99:3c:8e:4c:29:da:78:c9:c1:37: e6:d1:48:d9:df:a4:f7:26:87:b1:06:65:3b:e4:5c: ad:1c:e8:54:fc:77:9e:aa:fb:79:f7:2f:9c:33:1f: 2f:24:a4:f5:80:80:9b:65:60:a6:b4:fe:88:13:69: a5:1b:57:ce:97:00:13:f1:36:55:95:70:b5:5f:89: 7f:f7:15:08:73:e3:49:e8:4f:fd:fb:47:a6:1b:fd: e9:61:4a:ae:2e:41:0c:68:24:13:0b:72:15:23:f5: fc:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:1A:9C:4B:96:00:77:60:AA:1B:50:6A:AF:50:CC:CF:5E:17:2C:1B X509v3 Authority Key Identifier: keyid:AC:9A:51:BE:A1:B5:70:FF:A7:2D:9C:52:D1:A5:18:C2:4B:C7:8C:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJpRvqG1cP-nLZxS0aUYwkvHjAI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/5BqcS5YAd2CqG1Bqr1DMz14XLBs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.78.100.0/23 Signature Algorithm: sha256WithRSAEncryption 0c:3a:85:90:f6:11:37:3e:e2:44:9a:2b:fa:f3:a3:d9:92:fb: ca:92:f6:62:3b:13:aa:02:22:27:f9:98:ae:60:36:bb:21:ce: 10:07:58:85:83:1a:c9:57:74:0f:71:7f:37:1e:76:e4:a3:cf: a4:fe:ad:8b:26:fe:61:ea:5d:d0:2b:f9:d9:fc:ba:b8:6c:f8: 0a:52:89:f0:b6:ff:dc:bb:0f:b7:1d:e6:97:6a:4d:b6:9b:3b: f4:52:71:ce:62:04:69:25:b5:e7:06:3e:ae:83:dc:13:3c:d0: f2:5f:47:6d:e3:68:7c:00:eb:01:00:2f:73:46:bc:c3:8e:e3: 20:d7:25:df:73:22:f0:f1:66:8f:d5:ee:b5:85:62:cc:53:22: 18:9d:bd:9c:2f:62:06:fd:5a:49:39:9a:cc:d8:79:f5:11:aa: 1a:01:f1:d1:ad:9c:fd:6c:b7:1f:61:95:51:1f:90:1b:15:9c: b5:59:12:ba:06:03:58:ac:43:38:ec:3b:ee:1d:4e:a0:67:cb: 22:b6:3c:6c:c5:36:2a:5a:2b:f9:d5:64:cc:bb:b8:b3:7a:7b: cf:9c:0c:05:69:39:1d:28:fe:6b:c6:dd:49:6c:5a:28:ad:8f: 6c:3a:b0:71:1b:20:ba:6c:7f:12:ca:c3:55:1c:b7:f9:df:03: df:eb:aa:8c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WJV1ATS4W7srh6AeiB+sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjOWE1MWJlYTFiNTcwZmZhNzJkOWM1MmQxYTUxOGMyNGJj NzhjMDIwHhcNMjYwMTAxMDIxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDFhOWM0Yjk2MDA3NzYwYWExYjUwNmFhZjUwY2NjZjVlMTcyYzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznq/Ak/5c7VgaRkm7iBShyab5cdm IkGEBNK8fnkbRHZlXeFxNfCVS99EJv9zEt8bCOXnY2ds1Uac2McJ9y8ESzTWLHKo I+oDehMgDAWD7mr2vVlQnPyLgq1lhGqXFAtZ6QIMdXi94PM3dK2FKZN3KoMFj6vy oKx66lde7McPzyQMbMXKmFa1ae+X7AezJ+xXylb5W9JptQxfaJk8jkwp2njJwTfm 0UjZ36T3JoexBmU75FytHOhU/Heeqvt59y+cMx8vJKT1gICbZWCmtP6IE2mlG1fO lwAT8TZVlXC1X4l/9xUIc+NJ6E/9+0emG/3pYUquLkEMaCQTC3IVI/X8twIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOQanEuWAHdgqhtQaq9QzM9eFywbMB8GA1UdIwQY MBaAFKyaUb6htXD/py2cUtGlGMJLx4wCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckpwUnZxRzFjUC1uTFp4UzBhVVl3a3ZIakFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8yZGU4N2EtMDE3Ni00ZjE5LWIwZTgt YWI1NjMwMjExZjdhLzEvNUJxY1M1WUFkMkNxRzFCcXIxRE16MTRYTEJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8yZGU4N2EtMDE3Ni00ZjE5LWIwZTgtYWI1NjMwMjExZjdh LzEvckpwUnZxRzFjUC1uTFp4UzBhVVl3a3ZIakFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw05kMA0G CSqGSIb3DQEBCwUAA4IBAQAMOoWQ9hE3PuJEmiv686PZkvvKkvZiOxOqAiIn+Ziu YDa7Ic4QB1iFgxrJV3QPcX83Hnbko8+k/q2LJv5h6l3QK/nZ/Lq4bPgKUonwtv/c uw+3HeaXak22mzv0UnHOYgRpJbXnBj6ug9wTPNDyX0dt42h8AOsBAC9zRrzDjuMg 1yXfcyLw8WaP1e61hWLMUyIYnb2cL2IG/VpJOZrM2Hn1EaoaAfHRrZz9bLcfYZVR H5AbFZy1WRK6BgNYrEM47DvuHU6gZ8sitjxsxTYqWiv51WTMu7izenvPnAwFaTkd KP5rxt1JbFoorY9sOrBxGyC6bH8SysNVHLf53wPf66qM -----END CERTIFICATE-----Generated at Mon Feb 9 20:05:16 2026 by rpki-client