This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/9T5_OTvwktW8zRDsIc_oghwfJK4.roa File: 9T5_OTvwktW8zRDsIc_oghwfJK4.roa (raw, json) Hash identifier: DN/iAPUdkXHSXPrEJqQVCF4jzwo8vDZFSIr5wO/Xikc= Subject key identifier: F5:3E:7F:39:3B:F0:92:D5:BC:CD:10:EC:21:CF:E8:82:1C:1F:24:AE Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10 Certificate serial: 019B929296583EF5885CD23787A2EA83BE83 Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/9T5_OTvwktW8zRDsIc_oghwfJK4.roa Signing time: Tue 06 Jan 2026 09:10:38 +0000 ROA not before: Tue 06 Jan 2026 09:10:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5650 IP address blocks: 5.182.114.0/24 maxlen: 24 77.242.159.0/24 maxlen: 24 88.151.63.0/24 maxlen: 24 88.209.221.0/24 maxlen: 24 88.209.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 03:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:92:92:96:58:3e:f5:88:5c:d2:37:87:a2:ea:83:be:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10 Validity Not Before: Jan 6 09:10:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f53e7f393bf092d5bccd10ec21cfe8821c1f24ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1a:67:8e:e0:8f:a9:65:53:be:c2:d2:11:f5: fe:fa:87:14:c7:70:9c:4d:a3:ec:a9:2e:35:5e:d4: a8:87:24:47:b9:39:7e:8e:3f:fa:e9:8d:f7:a1:44: d9:d7:69:45:89:6f:5f:9f:18:4d:6f:13:eb:b3:be: d5:3d:8e:e4:6b:95:43:a8:a8:99:47:fb:0c:bf:d3: 27:97:70:83:7b:6c:cd:f6:c0:6b:5e:93:28:29:71: 37:4b:9b:87:ce:1d:1e:1a:4f:39:34:55:d2:70:0d: 3b:1c:95:cd:1a:83:46:3f:70:e6:81:c0:23:55:73: 8c:bb:fd:24:50:65:25:c4:f9:e9:97:37:08:43:d3: 98:14:f0:63:19:62:78:e9:f9:f0:e2:2d:52:d2:fd: 8b:54:b2:8b:f9:f5:6c:a9:36:5a:6b:9b:cb:c5:97: 8a:38:ac:cf:1f:1f:cd:91:03:78:29:a2:f3:bf:dc: f7:9e:a0:db:f1:27:49:34:c2:1e:44:da:2c:cd:8f: 8b:6d:b8:e3:3b:30:01:f1:96:ec:d9:d2:36:ee:5e: 73:c1:b0:c7:2b:7e:04:57:23:4e:d0:04:99:96:61: 5e:a7:cc:1c:ae:04:ad:cc:fd:7c:28:f2:86:1e:30: 83:fd:56:ff:66:f6:f6:d3:b5:58:f4:d8:c1:24:d9: 38:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:3E:7F:39:3B:F0:92:D5:BC:CD:10:EC:21:CF:E8:82:1C:1F:24:AE X509v3 Authority Key Identifier: keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/9T5_OTvwktW8zRDsIc_oghwfJK4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.114.0/24 77.242.159.0/24 88.151.63.0/24 88.209.221.0/24 88.209.240.0/22 Signature Algorithm: sha256WithRSAEncryption 8b:74:93:7a:77:ae:f4:5f:f6:f1:0d:19:a5:90:ed:52:03:97: 74:a4:f0:e9:9d:8a:bb:5b:9b:38:c4:f2:5d:49:5d:2c:09:ee: 13:75:18:00:38:e0:8d:d1:0a:a0:42:e3:97:d9:b9:0d:76:26: df:86:b6:f9:bb:01:30:ac:73:a0:39:2b:b2:95:6d:7b:7b:d4: 56:04:fe:69:11:9a:0b:76:1c:3c:fd:fb:f4:ea:99:ea:42:5f: 07:a3:fc:02:21:42:3c:a8:f7:e0:d8:e0:9f:7c:78:1d:80:0d: 4d:ac:e2:f4:12:84:b9:d5:0e:2b:f0:b3:8c:5f:41:47:db:cb: fa:66:ba:65:85:b7:84:09:67:c7:b1:96:00:d6:31:40:a1:e3: db:35:94:01:02:80:11:fa:93:b3:59:3c:65:e2:d4:56:ae:f2: 9e:56:9e:ce:bd:6e:cb:25:51:e9:c3:6b:71:a3:9e:0d:1b:5f: b1:f3:b8:43:99:fa:03:55:3c:63:ee:09:54:91:e6:c6:fb:f2: 87:24:f7:e5:ff:6e:24:f9:ec:29:a2:14:70:14:7d:03:b9:ab: 97:00:57:5b:74:50:14:78:24:10:41:4f:17:9a:30:16:0c:9c: a6:68:1a:06:6c:61:3b:de:aa:52:c3:6b:3c:60:be:12:43:71: 57:f5:ce:de -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZuSkpZYPvWIXNI3h6Lqg76DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx MWRhMTAwHhcNMjYwMTA2MDkxMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTNlN2YzOTNiZjA5MmQ1YmNjZDEwZWMyMWNmZTg4MjFjMWYyNGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhpnjuCPqWVTvsLSEfX++ocUx3Cc TaPsqS41XtSohyRHuTl+jj/66Y33oUTZ12lFiW9fnxhNbxPrs77VPY7ka5VDqKiZ R/sMv9Mnl3CDe2zN9sBrXpMoKXE3S5uHzh0eGk85NFXScA07HJXNGoNGP3DmgcAj VXOMu/0kUGUlxPnplzcIQ9OYFPBjGWJ46fnw4i1S0v2LVLKL+fVsqTZaa5vLxZeK OKzPHx/NkQN4KaLzv9z3nqDb8SdJNMIeRNoszY+LbbjjOzAB8Zbs2dI27l5zwbDH K34EVyNO0ASZlmFep8wcrgStzP18KPKGHjCD/Vb/Zvb207VY9NjBJNk4ZQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFPU+fzk78JLVvM0Q7CHP6IIcHySuMB8GA1UdIwQY MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt N2U0ZDZmNmY2ZTY2LzEvOVQ1X09UdndrdFc4elJEc0ljX29naHdmSks0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2 LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQABbZyAwQA TfKfAwQAWJc/AwQAWNHdAwQCWNHwMA0GCSqGSIb3DQEBCwUAA4IBAQCLdJN6d670 X/bxDRmlkO1SA5d0pPDpnYq7W5s4xPJdSV0sCe4TdRgAOOCN0QqgQuOX2bkNdibf hrb5uwEwrHOgOSuylW17e9RWBP5pEZoLdhw8/fv06pnqQl8Ho/wCIUI8qPfg2OCf fHgdgA1NrOL0EoS51Q4r8LOMX0FH28v6ZrplhbeECWfHsZYA1jFAoePbNZQBAoAR +pOzWTxl4tRWrvKeVp7OvW7LJVHpw2txo54NG1+x87hDmfoDVTxj7glUkebG+/KH JPfl/24k+ewpohRwFH0DuauXAFdbdFAUeCQQQU8XmjAWDJymaBoGbGE73qpSw2s8 YL4SQ3FX9c7e -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:27 2026 by rpki-client