This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/5G7T_ta5GRY-vaF3PWEHkN7X3lY.roa File: 5G7T_ta5GRY-vaF3PWEHkN7X3lY.roa (raw, json) Hash identifier: E1pa9lzYctomz2Si/AVGz+D9ZaUziuZd2hK3Cs63LZA= Subject key identifier: E4:6E:D3:FE:D6:B9:19:16:3E:BD:A1:77:3D:61:07:90:DE:D7:DE:56 Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Certificate serial: 019B7EA7074A767A65FD7183AF51EBE65BA6 Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/5G7T_ta5GRY-vaF3PWEHkN7X3lY.roa Signing time: Fri 02 Jan 2026 12:20:34 +0000 ROA not before: Fri 02 Jan 2026 12:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199058 IP address blocks: 2.59.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 23:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:07:4a:76:7a:65:fd:71:83:af:51:eb:e6:5b:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Validity Not Before: Jan 2 12:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e46ed3fed6b919163ebda1773d610790ded7de56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:cc:e1:08:d3:c5:04:fc:64:74:77:60:33:8a: 5b:d7:6a:67:4b:a4:cb:06:b7:05:8e:aa:f2:ea:77: 68:ec:32:4c:e6:05:ed:cc:d9:09:19:38:d3:54:07: 40:c9:6c:da:e6:db:c0:89:02:38:19:a8:28:c8:4d: 5b:f5:a2:29:9c:0c:bf:12:6b:d1:9a:3c:56:69:28: 86:c3:f5:e1:b9:8d:14:dd:8d:63:a0:a0:28:e2:48: 39:9f:f4:82:5e:2c:6e:aa:e3:4b:84:05:a4:87:da: ea:34:ee:fa:1d:70:d2:55:30:8c:51:9c:33:54:a5: 52:8a:c1:40:d7:f4:6a:b9:67:df:ed:b3:0b:a9:f7: 13:5b:c8:d9:83:2f:ce:f7:b7:1e:71:e4:6a:b4:b5: 6c:b2:68:a5:72:fd:bf:73:4b:e3:32:7c:ba:0a:4d: a6:d5:4a:7f:2c:3c:71:ba:ce:88:1d:87:99:1a:e9: 4b:84:54:aa:3c:53:60:78:03:fd:31:6d:95:11:ac: b6:b7:b4:0e:03:be:53:cc:1e:42:22:23:cf:50:23: 5f:5c:24:b3:69:b4:a2:c9:d6:74:e4:01:bd:22:f9: 37:83:95:c0:2b:a4:31:c5:fc:f6:eb:e7:c4:35:2c: 5a:70:e2:fc:7d:6e:cd:fa:e6:73:9b:2c:6c:a4:cb: ea:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:6E:D3:FE:D6:B9:19:16:3E:BD:A1:77:3D:61:07:90:DE:D7:DE:56 X509v3 Authority Key Identifier: keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/5G7T_ta5GRY-vaF3PWEHkN7X3lY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.183.0/24 Signature Algorithm: sha256WithRSAEncryption 67:6f:c6:7b:dc:ea:c4:2a:de:aa:a8:47:fd:e9:3e:53:26:22: 87:0b:16:4f:6e:c5:7e:ff:34:c1:9b:d5:a8:3f:c2:0c:e8:6a: e4:c1:59:2b:27:04:30:14:cd:7b:8f:8f:14:5f:45:a4:67:9c: 08:1f:44:c2:82:60:96:c1:81:1a:d3:f8:40:90:35:08:a0:ec: 5e:89:82:22:9f:12:6b:12:4a:cb:55:67:59:25:01:f7:6c:ab: b8:4a:ba:8d:3b:f8:e0:33:05:5c:16:9e:68:7c:dc:e5:55:82: bf:52:c3:09:be:54:6c:6f:68:38:64:a4:00:9d:fa:86:31:7a: e5:70:ba:69:cf:8f:21:8b:b9:0f:dd:8f:98:f6:b2:18:41:1c: 0d:b4:46:a7:1c:36:df:b3:15:a3:3b:cf:a5:cc:25:61:f3:67: f2:ec:85:1f:99:e5:19:b7:e9:c3:8b:aa:81:f5:1d:00:13:46: 09:52:12:88:46:25:d3:55:3f:1b:d7:28:9d:ad:40:c4:e7:a2: 27:b4:a5:50:56:0a:1a:93:ca:24:88:b0:1b:b6:42:32:a4:9f: 5b:8f:20:d7:28:ee:2e:09:f1:6c:6a:8d:6f:7d:d7:1f:d2:6c: 32:05:b1:51:5e:f4:f3:35:ef:17:10:6e:02:ca:cd:0f:73:6c: 35:7c:45:94 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pwdKdnpl/XGDr1Hr5lumMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhN2YwMzZlMjU5MjM5MWZiNDVhM2RkMzNjYWYwYjA3OTU2 OTczY2YwHhcNMjYwMTAyMTIyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDZlZDNmZWQ2YjkxOTE2M2ViZGExNzczZDYxMDc5MGRlZDdkZTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3czhCNPFBPxkdHdgM4pb12pnS6TL BrcFjqry6ndo7DJM5gXtzNkJGTjTVAdAyWza5tvAiQI4GagoyE1b9aIpnAy/EmvR mjxWaSiGw/XhuY0U3Y1joKAo4kg5n/SCXixuquNLhAWkh9rqNO76HXDSVTCMUZwz VKVSisFA1/RquWff7bMLqfcTW8jZgy/O97ceceRqtLVssmilcv2/c0vjMny6Ck2m 1Up/LDxxus6IHYeZGulLhFSqPFNgeAP9MW2VEay2t7QOA75TzB5CIiPPUCNfXCSz abSiydZ05AG9Ivk3g5XAK6Qxxfz26+fENSxacOL8fW7N+uZzmyxspMvqvwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFORu0/7WuRkWPr2hdz1hB5De195WMB8GA1UdIwQY MBaAFBp/A24lkjkftFo90zyvCweVaXPPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2It MzQwZDYyNWM2ZGJhLzEvNUc3VF90YTVHUlktdmFGM1BXRUhrTjdYM2xZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2ItMzQwZDYyNWM2ZGJh LzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAju3MA0G CSqGSIb3DQEBCwUAA4IBAQBnb8Z73OrEKt6qqEf96T5TJiKHCxZPbsV+/zTBm9Wo P8IM6GrkwVkrJwQwFM17j48UX0WkZ5wIH0TCgmCWwYEa0/hAkDUIoOxeiYIinxJr EkrLVWdZJQH3bKu4SrqNO/jgMwVcFp5ofNzlVYK/UsMJvlRsb2g4ZKQAnfqGMXrl cLppz48hi7kP3Y+Y9rIYQRwNtEanHDbfsxWjO8+lzCVh82fy7IUfmeUZt+nDi6qB 9R0AE0YJUhKIRiXTVT8b1yidrUDE56IntKVQVgoak8okiLAbtkIypJ9bjyDXKO4u CfFsao1vfdcf0mwyBbFRXvTzNe8XEG4Cys0Pc2w1fEWU -----END CERTIFICATE-----Generated at Mon Jan 5 05:00:24 2026 by rpki-client