This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/5J9PTB44Gn-Yy5de-Yd-HbMkHKc.roa File: 5J9PTB44Gn-Yy5de-Yd-HbMkHKc.roa (raw, json) Hash identifier: XLolcOENMNbkZmuKHwVlX16HBl+pWvZzm9UAnOXRqJ0= Subject key identifier: E4:9F:4F:4C:1E:38:1A:7F:98:CB:97:5E:F9:87:7E:1D:B3:24:1C:A7 Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Certificate serial: 019BC2BD88347DAAEEBB6EEBA21A0D89591F Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/5J9PTB44Gn-Yy5de-Yd-HbMkHKc.roa Signing time: Thu 15 Jan 2026 17:39:19 +0000 ROA not before: Thu 15 Jan 2026 17:39:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214025 IP address blocks: 14.102.234.0/24 maxlen: 24 77.111.103.0/24 maxlen: 24 89.106.14.0/24 maxlen: 24 89.106.16.0/24 maxlen: 24 89.106.22.0/24 maxlen: 24 194.36.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 19:27:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c2:bd:88:34:7d:aa:ee:bb:6e:eb:a2:1a:0d:89:59:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Validity Not Before: Jan 15 17:39:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e49f4f4c1e381a7f98cb975ef9877e1db3241ca7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b9:23:a4:da:df:37:95:55:2e:96:fd:73:33: bf:07:93:76:5c:8c:37:5d:25:b3:7f:28:9c:f8:85: 75:95:a7:7e:c1:5d:18:b0:cb:9b:38:d0:b3:c4:11: 06:c1:77:f5:1e:01:6f:91:5b:4c:60:7f:57:2f:ca: dc:d2:b3:0f:ab:01:15:56:95:05:ff:c9:8e:d1:9a: 23:d7:73:ec:44:6c:ba:3a:3f:ce:35:6f:ec:3d:7c: c3:d7:a6:9f:6f:74:cc:a0:4b:e5:47:84:1d:10:8e: 55:b1:6d:87:d8:5c:80:ae:93:c6:93:54:bc:8f:bb: d2:c5:c8:39:75:38:c5:1f:d2:96:53:9c:f7:d2:ce: 98:ea:94:70:3f:65:42:8d:3c:89:eb:6b:a9:87:0f: df:be:33:18:11:14:65:3b:9f:a4:6b:1b:cd:1e:ca: 9f:08:e6:5f:e4:70:c2:cf:70:78:40:2b:05:a2:e6: da:a4:cc:d1:d0:87:16:f9:64:23:36:0e:0d:32:d3: 74:6c:fa:b0:82:91:38:a0:4f:56:65:aa:14:1b:db: fd:87:08:32:a2:08:5e:32:03:d1:c2:2d:17:04:ed: 9f:45:da:4d:56:61:33:78:49:25:93:02:0e:b1:36: 1c:a6:e7:f8:1a:0e:01:80:e9:54:1c:2b:c1:0f:ba: 82:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:9F:4F:4C:1E:38:1A:7F:98:CB:97:5E:F9:87:7E:1D:B3:24:1C:A7 X509v3 Authority Key Identifier: keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/5J9PTB44Gn-Yy5de-Yd-HbMkHKc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 14.102.234.0/24 77.111.103.0/24 89.106.14.0/24 89.106.16.0/24 89.106.22.0/24 194.36.33.0/24 Signature Algorithm: sha256WithRSAEncryption 33:a0:a9:14:f5:d1:f4:a3:a6:c3:ef:51:55:b5:91:c6:2e:ff: 21:be:01:a6:5f:9e:79:f4:5d:b4:a0:91:30:7c:6e:28:9f:a2: 5c:03:f6:65:ba:85:fb:eb:8c:c5:b5:77:f0:ef:2f:67:6f:6a: 37:62:3a:86:e9:61:5d:c2:29:26:60:d9:78:42:1d:2e:e4:af: ca:86:bb:18:8b:90:71:35:0f:2c:19:c2:7f:be:c5:19:31:c6: 5f:8b:a9:f3:15:ef:61:0f:26:d9:bf:27:99:1d:01:c7:db:20: cb:93:1b:ba:65:62:22:d0:2b:94:0d:94:ba:40:cd:a0:c8:36: 91:38:2c:3f:97:5a:47:55:7b:a3:f2:db:f7:4c:4d:12:38:06: 35:c3:26:3f:dd:82:4f:7d:03:a7:0d:53:24:98:4f:dd:dd:c1: e6:fb:41:ab:76:9e:71:84:d6:3e:3b:66:55:1a:8f:70:3d:c7: 0b:83:c9:cd:1c:85:e9:0a:e4:c6:05:91:05:db:d2:79:e2:c9: 6a:38:48:0f:31:f3:8e:35:67:17:63:82:7f:08:78:87:44:6c: 0d:b0:6f:c7:cb:38:a1:6d:3a:97:4f:ec:ec:ed:42:83:6e:64: 5c:25:7f:ec:d0:d7:6e:33:37:cd:49:94:89:d7:d4:e5:b2:a5: bb:51:53:d4 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZvCvYg0faruu27rohoNiVkfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz MGNiNjMwHhcNMjYwMTE1MTczOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDlmNGY0YzFlMzgxYTdmOThjYjk3NWVmOTg3N2UxZGIzMjQxY2E3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrkjpNrfN5VVLpb9czO/B5N2XIw3 XSWzfyic+IV1lad+wV0YsMubONCzxBEGwXf1HgFvkVtMYH9XL8rc0rMPqwEVVpUF /8mO0Zoj13PsRGy6Oj/ONW/sPXzD16afb3TMoEvlR4QdEI5VsW2H2FyArpPGk1S8 j7vSxcg5dTjFH9KWU5z30s6Y6pRwP2VCjTyJ62uphw/fvjMYERRlO5+kaxvNHsqf COZf5HDCz3B4QCsFoubapMzR0IcW+WQjNg4NMtN0bPqwgpE4oE9WZaoUG9v9hwgy ogheMgPRwi0XBO2fRdpNVmEzeEklkwIOsTYcpuf4Gg4BgOlUHCvBD7qC3wIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFOSfT0weOBp/mMuXXvmHfh2zJBynMB8GA1UdIwQY MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt YjRiOGRiMjBiMWZiLzEvNUo5UFRCNDRHbi1ZeTVkZS1ZZC1IYk1rSEtjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQADmbqAwQA TW9nAwQAWWoOAwQAWWoQAwQAWWoWAwQAwiQhMA0GCSqGSIb3DQEBCwUAA4IBAQAz oKkU9dH0o6bD71FVtZHGLv8hvgGmX5559F20oJEwfG4on6JcA/ZluoX764zFtXfw 7y9nb2o3YjqG6WFdwikmYNl4Qh0u5K/KhrsYi5BxNQ8sGcJ/vsUZMcZfi6nzFe9h DybZvyeZHQHH2yDLkxu6ZWIi0CuUDZS6QM2gyDaROCw/l1pHVXuj8tv3TE0SOAY1 wyY/3YJPfQOnDVMkmE/d3cHm+0Grdp5xhNY+O2ZVGo9wPccLg8nNHIXpCuTGBZEF 29J54slqOEgPMfOONWcXY4J/CHiHRGwNsG/HyzihbTqXT+zs7UKDbmRcJX/s0Ndu MzfNSZSJ19TlsqW7UVPU -----END CERTIFICATE-----Generated at Mon Jan 19 05:22:59 2026 by rpki-client