This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/5B9j7lqy9IT3fDMRxCG6h3_cMjw.roa File: 5B9j7lqy9IT3fDMRxCG6h3_cMjw.roa (raw, json) Hash identifier: m/BPFid28iEMOvcH+Hu/lJGC2PQ7AZWB27CFpOQKp3o= Subject key identifier: E4:1F:63:EE:5A:B2:F4:84:F7:7C:33:11:C4:21:BA:87:7F:DC:32:3C Certificate issuer: /CN=51a0d9825103d9da4761efa91a60ea2ca758d003 Certificate serial: 019B7A5B4B290622DD37258382BAC938FBA0 Authority key identifier: 51:A0:D9:82:51:03:D9:DA:47:61:EF:A9:1A:60:EA:2C:A7:58:D0:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UaDZglED2dpHYe-pGmDqLKdY0AM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/5B9j7lqy9IT3fDMRxCG6h3_cMjw.roa Signing time: Thu 01 Jan 2026 16:19:21 +0000 ROA not before: Thu 01 Jan 2026 16:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 45.156.96.0/24 maxlen: 24 45.156.97.0/24 maxlen: 24 45.156.98.0/24 maxlen: 24 45.156.99.0/24 maxlen: 24 2a0f:1c80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/UaDZglED2dpHYe-pGmDqLKdY0AM.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/UaDZglED2dpHYe-pGmDqLKdY0AM.mft rsync://rpki.ripe.net/repository/DEFAULT/UaDZglED2dpHYe-pGmDqLKdY0AM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 01:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:4b:29:06:22:dd:37:25:83:82:ba:c9:38:fb:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51a0d9825103d9da4761efa91a60ea2ca758d003 Validity Not Before: Jan 1 16:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e41f63ee5ab2f484f77c3311c421ba877fdc323c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:92:07:5e:96:2e:30:5c:65:99:39:b3:2d:51: c2:03:10:42:2f:8f:ae:0b:17:fa:c2:eb:07:c7:a3: 16:90:6b:a0:e4:2c:d6:20:3f:f4:d5:94:ac:c0:61: f1:6e:f9:92:02:44:bf:af:c6:27:01:49:d9:93:7e: 01:d7:1f:d6:28:cc:9f:47:92:3a:2c:9f:03:44:1e: bc:ec:a6:5d:f3:22:75:c1:ea:95:2f:12:52:e8:c4: 19:23:8b:d7:f1:14:7f:e8:17:61:48:e5:f2:9a:b9: e1:19:19:06:79:b5:35:2e:aa:c4:49:4b:08:2b:6e: 14:c6:68:a4:a5:ed:f0:53:9e:b0:61:fc:c4:5b:6f: 72:47:62:f8:fe:2a:d1:d9:f5:d4:1c:4d:74:fb:65: f5:f8:9b:e6:dd:8b:6e:5a:8e:ca:0b:8c:51:01:24: ad:76:a1:12:8c:8e:6e:72:60:4d:60:43:9a:a1:cc: 41:6d:9c:a5:7a:a9:82:b8:43:f7:57:19:69:8f:e2: 37:47:a8:71:e0:a0:2f:01:7b:b4:24:c8:a2:46:19: f6:55:8e:b1:d2:21:c1:c3:f7:f5:66:36:f2:0d:03: 3d:c3:c0:71:50:12:3e:d0:f4:77:9a:67:1b:8b:27: 27:40:16:bf:d0:13:f2:82:46:82:52:3c:ea:4f:e1: fe:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:1F:63:EE:5A:B2:F4:84:F7:7C:33:11:C4:21:BA:87:7F:DC:32:3C X509v3 Authority Key Identifier: keyid:51:A0:D9:82:51:03:D9:DA:47:61:EF:A9:1A:60:EA:2C:A7:58:D0:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UaDZglED2dpHYe-pGmDqLKdY0AM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/5B9j7lqy9IT3fDMRxCG6h3_cMjw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/UaDZglED2dpHYe-pGmDqLKdY0AM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.156.96.0/22 IPv6: 2a0f:1c80::/29 Signature Algorithm: sha256WithRSAEncryption 78:6a:53:8d:9e:e9:2d:fd:33:ef:d3:36:0c:d0:10:27:fa:a5: 4d:ef:4b:9c:75:22:24:69:f9:e6:aa:43:7c:5c:da:09:71:ea: a3:8e:07:5e:3f:cd:54:44:7b:41:d1:ba:c9:09:1a:21:e5:45: dc:6e:4a:c6:4c:db:80:43:86:9b:d5:a5:e4:0a:9f:1c:8a:3c: 09:2f:e8:1b:45:ac:61:67:cd:6b:c2:7c:5d:d3:1d:af:b4:53: 5d:ea:ca:39:48:b3:1d:32:d0:74:72:2e:a1:90:37:1e:ea:12: fd:70:3d:bd:c1:e7:5b:8b:17:1b:4e:e9:98:6f:a4:fe:39:bd: fa:e5:d0:63:4a:9f:9d:76:d3:52:7f:99:60:46:e5:4a:2d:1a: a8:44:fd:6a:ed:f6:e3:0f:61:29:48:9c:88:9a:62:69:d5:e2: 2c:6a:37:4e:04:32:44:35:96:34:dc:f1:25:ef:f9:27:cc:12: 6c:16:d4:38:f7:69:4a:5b:c2:ca:48:fa:20:12:27:e3:59:2f: f6:cb:f0:0b:28:51:3d:0f:e5:70:ac:81:a9:d0:dd:d7:ce:40: 3c:2b:91:17:81:06:ed:31:40:9a:5d:e2:34:c4:e6:2c:5c:01: d4:f3:d3:45:6e:bb:65:e9:f5:58:47:ab:46:3f:b8:aa:9b:a0: d2:4e:c6:55 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6W0spBiLdNyWDgrrJOPugMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxYTBkOTgyNTEwM2Q5ZGE0NzYxZWZhOTFhNjBlYTJjYTc1 OGQwMDMwHhcNMjYwMTAxMTYxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDFmNjNlZTVhYjJmNDg0Zjc3YzMzMTFjNDIxYmE4NzdmZGMzMjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipIHXpYuMFxlmTmzLVHCAxBCL4+u Cxf6wusHx6MWkGug5CzWID/01ZSswGHxbvmSAkS/r8YnAUnZk34B1x/WKMyfR5I6 LJ8DRB687KZd8yJ1weqVLxJS6MQZI4vX8RR/6BdhSOXymrnhGRkGebU1LqrESUsI K24Uxmikpe3wU56wYfzEW29yR2L4/irR2fXUHE10+2X1+Jvm3YtuWo7KC4xRASSt dqESjI5ucmBNYEOaocxBbZyleqmCuEP3Vxlpj+I3R6hx4KAvAXu0JMiiRhn2VY6x 0iHBw/f1ZjbyDQM9w8BxUBI+0PR3mmcbiycnQBa/0BPygkaCUjzqT+H+rwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOQfY+5asvSE93wzEcQhuod/3DI8MB8GA1UdIwQY MBaAFFGg2YJRA9naR2HvqRpg6iynWNADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWFEWmdsRUQyZHBIWWUtcEdtRHFMS2RZMEFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9iNGY0OWItNzVlNS00ODY0LTkwOGUt NmEzZGYwMWEzMjM2LzEvNUI5ajdscXk5SVQzZkRNUnhDRzZoM19jTWp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9iNGY0OWItNzVlNS00ODY0LTkwOGUtNmEzZGYwMWEzMjM2 LzEvVWFEWmdsRUQyZHBIWWUtcEdtRHFMS2RZMEFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLZxgMA0E AgACMAcDBQMqDxyAMA0GCSqGSIb3DQEBCwUAA4IBAQB4alONnukt/TPv0zYM0BAn +qVN70ucdSIkafnmqkN8XNoJceqjjgdeP81URHtB0brJCRoh5UXcbkrGTNuAQ4ab 1aXkCp8cijwJL+gbRaxhZ81rwnxd0x2vtFNd6so5SLMdMtB0ci6hkDce6hL9cD29 wedbixcbTumYb6T+Ob365dBjSp+ddtNSf5lgRuVKLRqoRP1q7fbjD2EpSJyImmJp 1eIsajdOBDJENZY03PEl7/knzBJsFtQ492lKW8LKSPogEifjWS/2y/ALKFE9D+Vw rIGp0N3XzkA8K5EXgQbtMUCaXeI0xOYsXAHU89NFbrtl6fVYR6tGP7iqm6DSTsZV -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:27 2026 by rpki-client