This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/5SWkxFF0rfSk1WizV_h7pdZnY18.roa File: 5SWkxFF0rfSk1WizV_h7pdZnY18.roa (raw, json) Hash identifier: RdJuBV/CtACbr2dMN/NjbvI5mqfkbV7YQeZT9jqQmBM= Subject key identifier: E5:25:A4:C4:51:74:AD:F4:A4:D5:68:B3:57:F8:7B:A5:D6:67:63:5F Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Certificate serial: 019BAD6288801102633C9E94B1E9A1FF4467 Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/5SWkxFF0rfSk1WizV_h7pdZnY18.roa Signing time: Sun 11 Jan 2026 14:07:54 +0000 ROA not before: Sun 11 Jan 2026 14:07:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9304 IP address blocks: 45.155.240.0/24 maxlen: 24 195.114.203.0/24 maxlen: 24 213.220.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ad:62:88:80:11:02:63:3c:9e:94:b1:e9:a1:ff:44:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Validity Not Before: Jan 11 14:07:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e525a4c45174adf4a4d568b357f87ba5d667635f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:bd:ec:9b:c9:49:0d:d6:db:df:37:d0:b6:77: 7d:1f:10:c0:fc:3a:03:a7:64:73:a3:44:72:af:dc: 51:3a:af:a3:c2:41:c5:eb:5e:6b:d8:22:15:15:8e: c8:8b:7c:07:d2:f0:3f:c0:65:dd:81:a9:68:08:4c: 51:ff:5d:63:49:74:76:9a:9f:73:37:67:05:06:60: 6f:8d:ab:9f:cd:3f:f3:e1:ef:4e:3b:08:72:71:e1: 0b:36:fe:5e:26:18:9e:22:59:70:28:70:5a:39:49: 5a:69:28:db:9d:73:c6:0b:e1:7c:e8:a4:07:b3:17: c9:a1:3e:9b:53:85:2b:72:0a:f5:9d:85:c7:29:a8: 75:b2:8b:db:c4:a5:4f:6a:c4:a1:8b:ff:d7:e8:68: a4:21:84:30:3d:5e:09:b0:6d:e1:36:cd:5c:ce:bb: ac:85:05:64:e0:54:94:1a:30:b7:7d:6d:3c:b1:f6: 06:e2:3c:da:c3:71:fe:bb:23:e8:0c:85:2b:a5:f6: 41:95:b5:05:f3:d0:6c:01:55:74:74:3e:a6:e4:07: b6:b8:e8:41:ca:6a:8b:eb:a8:eb:f9:b5:c3:a2:8c: ef:b6:f0:a6:4a:25:44:cc:ee:1f:26:0b:3f:ed:46: 4e:93:b6:c1:7b:53:f1:da:d7:81:36:bd:66:5f:40: 27:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:25:A4:C4:51:74:AD:F4:A4:D5:68:B3:57:F8:7B:A5:D6:67:63:5F X509v3 Authority Key Identifier: keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/5SWkxFF0rfSk1WizV_h7pdZnY18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.155.240.0/24 195.114.203.0/24 213.220.41.0/24 Signature Algorithm: sha256WithRSAEncryption 02:23:27:8d:13:09:4e:03:5e:08:ed:4c:de:f6:72:7c:fc:84: e3:69:bc:bd:62:f2:de:a3:2e:cd:da:04:1e:67:41:6e:53:21: d2:e7:c9:26:4e:ac:0e:48:45:f7:4e:46:7c:61:82:12:15:5b: 3b:42:02:0c:11:3b:33:9a:10:bf:d0:1d:81:f6:cf:c0:a5:e8: 97:d6:c6:8e:d5:ea:06:b6:6d:e6:6b:36:45:2f:6b:60:dc:a5: e4:82:a9:59:4e:ed:6d:63:2c:a1:a7:0b:fb:fc:cd:cd:85:a1: 28:4b:a5:4f:2a:a1:a5:a7:0a:cd:3b:25:68:4c:4c:bb:1d:a2: 62:f9:10:ff:85:6a:ff:27:46:e5:31:a0:24:d1:4f:e3:8c:7f: 98:1a:b0:0b:1b:1a:ad:02:70:1f:b0:46:d0:d2:98:e7:3c:5f: 26:bf:4c:40:6f:e2:0d:8d:57:96:9b:24:89:7a:c8:9e:2c:c3: 91:10:ed:9d:31:7a:7d:e0:55:02:aa:61:c3:da:23:23:41:ca: 0d:99:cc:74:f6:02:83:b8:9b:4b:48:01:6a:a6:b1:5b:9e:bd: 47:1e:93:66:33:55:2d:8f:a0:9c:47:98:fa:68:97:c4:14:27: df:93:c7:f5:0b:a7:1a:eb:db:ac:7e:a8:8a:12:e4:32:52:bf: cb:c7:84:14 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZutYoiAEQJjPJ6Usemh/0RnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy MGFlMmUwHhcNMjYwMTExMTQwNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTI1YTRjNDUxNzRhZGY0YTRkNTY4YjM1N2Y4N2JhNWQ2Njc2MzVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmr3sm8lJDdbb3zfQtnd9HxDA/DoD p2Rzo0Ryr9xROq+jwkHF615r2CIVFY7Ii3wH0vA/wGXdgaloCExR/11jSXR2mp9z N2cFBmBvjaufzT/z4e9OOwhyceELNv5eJhieIllwKHBaOUlaaSjbnXPGC+F86KQH sxfJoT6bU4Urcgr1nYXHKah1sovbxKVPasShi//X6GikIYQwPV4JsG3hNs1czrus hQVk4FSUGjC3fW08sfYG4jzaw3H+uyPoDIUrpfZBlbUF89BsAVV0dD6m5Ae2uOhB ymqL66jr+bXDoozvtvCmSiVEzO4fJgs/7UZOk7bBe1Px2teBNr1mX0AnewIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFOUlpMRRdK30pNVos1f4e6XWZ2NfMB8GA1UdIwQY MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt MWRkZWM0Y2NlMjRjLzEvNVNXa3hGRjByZlNrMVdpelZfaDdwZFpuWTE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALZvwAwQA w3LLAwQA1dwpMA0GCSqGSIb3DQEBCwUAA4IBAQACIyeNEwlOA14I7Uze9nJ8/ITj aby9YvLeoy7N2gQeZ0FuUyHS58kmTqwOSEX3TkZ8YYISFVs7QgIMETszmhC/0B2B 9s/ApeiX1saO1eoGtm3mazZFL2tg3KXkgqlZTu1tYyyhpwv7/M3NhaEoS6VPKqGl pwrNOyVoTEy7HaJi+RD/hWr/J0blMaAk0U/jjH+YGrALGxqtAnAfsEbQ0pjnPF8m v0xAb+INjVeWmySJesieLMOREO2dMXp94FUCqmHD2iMjQcoNmcx09gKDuJtLSAFq prFbnr1HHpNmM1Utj6CcR5j6aJfEFCffk8f1C6ca69usfqiKEuQyUr/Lx4QU -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:56 2026 by rpki-client