This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/5cQYbD-7DHUpezqdnbIBcXmv4DA.roa File: 5cQYbD-7DHUpezqdnbIBcXmv4DA.roa (raw, json) Hash identifier: io7ufGAr5x3fAuRg8lNL/e3XVmX/nQfv49eVhzAnk0M= Subject key identifier: E5:C4:18:6C:3F:BB:0C:75:29:7B:3A:9D:9D:B2:01:71:79:AF:E0:30 Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Certificate serial: 019B77C6C62CAEA26E2FBBAA8A7B8DFE5A72 Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/5cQYbD-7DHUpezqdnbIBcXmv4DA.roa Signing time: Thu 01 Jan 2026 04:17:54 +0000 ROA not before: Thu 01 Jan 2026 04:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49505 IP address blocks: 5.10.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:c6:2c:ae:a2:6e:2f:bb:aa:8a:7b:8d:fe:5a:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Validity Not Before: Jan 1 04:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e5c4186c3fbb0c75297b3a9d9db2017179afe030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:35:3e:15:a3:f8:17:64:f7:f3:68:9f:7a:e6: ec:ed:02:1a:3e:5e:20:27:48:d3:27:21:fa:51:51: 2c:ab:23:cc:db:91:7e:e1:61:0a:a5:a1:9d:ce:f4: 41:44:3d:60:b5:15:93:6c:52:a5:58:28:48:80:6b: ca:28:b5:5f:ce:5c:db:4a:5d:48:87:90:04:af:d6: 89:4a:02:b3:2b:78:fa:e4:4f:66:6f:1a:25:bd:2a: 6d:d1:67:98:9f:b7:f2:b0:20:f5:62:82:43:50:76: ec:6c:0a:70:4a:e9:18:7c:91:f0:16:91:1e:48:c4: c8:d2:59:be:e0:27:57:d1:49:7a:34:20:0f:bf:4d: bd:b6:1d:7d:3c:dc:34:70:85:5f:f4:e8:63:f5:db: 64:01:44:14:3a:8d:cb:d6:78:85:70:66:01:80:16: 99:0f:54:a8:e4:cd:02:b1:62:2f:dc:82:03:53:26: ec:ea:04:d0:bf:6c:b6:5a:ce:01:fa:5a:a7:16:74: e9:70:8f:ce:a4:81:e9:8d:23:6b:36:fe:a8:ed:1e: d3:98:12:ca:31:05:20:a2:76:d3:a7:86:8c:d9:68: fb:dc:3c:95:ec:72:14:cb:ee:3e:b3:c2:24:c2:20: e0:a3:cb:40:74:65:16:1c:5d:06:a6:89:f7:c7:fb: 3b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:C4:18:6C:3F:BB:0C:75:29:7B:3A:9D:9D:B2:01:71:79:AF:E0:30 X509v3 Authority Key Identifier: keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/5cQYbD-7DHUpezqdnbIBcXmv4DA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.10.251.0/24 Signature Algorithm: sha256WithRSAEncryption 65:dc:28:2f:f2:a2:93:b5:13:ef:c1:44:2c:b3:d5:a6:eb:50: 41:26:3c:97:be:a9:d5:97:c2:2f:33:e4:be:01:4a:aa:85:f3: a8:2d:8c:4c:21:27:01:20:d1:85:2b:1e:71:9a:bc:33:64:9e: f5:84:2f:2e:64:b1:3f:37:69:6e:e2:c3:9f:6b:3a:f4:70:1e: a5:0b:8f:75:cf:22:20:0d:28:c2:f1:55:4f:56:ad:52:47:0a: 52:1a:b5:8d:ba:21:f5:19:0d:c7:66:39:ff:3f:8f:a8:fe:26: 8f:ef:1f:34:8c:4d:02:fe:0c:7d:96:d6:01:aa:9c:c3:06:ba: 58:b9:98:85:1e:d8:8f:56:bb:c5:44:f1:cf:4d:75:cd:90:af: 52:6a:dd:d2:fe:da:61:e6:bc:8b:86:94:81:9b:75:5e:18:ab: e0:49:da:f8:0d:91:58:5d:8e:d7:8a:f4:91:d0:01:7d:da:b0: 39:83:4a:22:85:34:5d:d4:89:a0:44:69:d6:cb:b1:24:6b:76: a6:5a:14:25:b7:8a:bc:d6:ca:df:e8:6b:a4:06:8e:50:48:ad: 99:d5:0a:75:40:22:9c:b8:a6:58:af:3e:c9:c2:1c:0c:15:e3: 59:98:66:82:70:0e:a7:2e:c8:9a:5e:a3:a6:51:91:14:a8:cb: aa:01:5f:ee -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xsYsrqJuL7uqinuN/lpyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1 MWM3N2YwHhcNMjYwMTAxMDQxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNWM0MTg2YzNmYmIwYzc1Mjk3YjNhOWQ5ZGIyMDE3MTc5YWZlMDMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDU+FaP4F2T382ifeubs7QIaPl4g J0jTJyH6UVEsqyPM25F+4WEKpaGdzvRBRD1gtRWTbFKlWChIgGvKKLVfzlzbSl1I h5AEr9aJSgKzK3j65E9mbxolvSpt0WeYn7fysCD1YoJDUHbsbApwSukYfJHwFpEe SMTI0lm+4CdX0Ul6NCAPv029th19PNw0cIVf9Ohj9dtkAUQUOo3L1niFcGYBgBaZ D1So5M0CsWIv3IIDUybs6gTQv2y2Ws4B+lqnFnTpcI/OpIHpjSNrNv6o7R7TmBLK MQUgonbTp4aM2Wj73DyV7HIUy+4+s8IkwiDgo8tAdGUWHF0Gpon3x/s7UwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOXEGGw/uwx1KXs6nZ2yAXF5r+AwMB8GA1UdIwQY MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt MmNmODA2YjJkMGYyLzEvNWNRWWJELTdESFVwZXpxZG5iSUJjWG12NERBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABQr7MA0G CSqGSIb3DQEBCwUAA4IBAQBl3Cgv8qKTtRPvwUQss9Wm61BBJjyXvqnVl8IvM+S+ AUqqhfOoLYxMIScBINGFKx5xmrwzZJ71hC8uZLE/N2lu4sOfazr0cB6lC491zyIg DSjC8VVPVq1SRwpSGrWNuiH1GQ3HZjn/P4+o/iaP7x80jE0C/gx9ltYBqpzDBrpY uZiFHtiPVrvFRPHPTXXNkK9Sat3S/tph5ryLhpSBm3VeGKvgSdr4DZFYXY7XivSR 0AF92rA5g0oihTRd1ImgRGnWy7Eka3amWhQlt4q81srf6GukBo5QSK2Z1Qp1QCKc uKZYrz7JwhwMFeNZmGaCcA6nLsiaXqOmUZEUqMuqAV/u -----END CERTIFICATE-----Generated at Wed Jan 21 12:18:03 2026 by rpki-client