This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/o_rtVjzkw0KDuX61bKwdi27cJvI.roa File: o_rtVjzkw0KDuX61bKwdi27cJvI.roa (raw, json) Hash identifier: /gFVliPW+JCCvNfNfgkacSugBlyQGtqR4HbJDxkhEjo= Subject key identifier: A3:FA:ED:56:3C:E4:C3:42:83:B9:7E:B5:6C:AC:1D:8B:6E:DC:26:F2 Certificate issuer: /CN=7a127d63ce1c9f3557390af21fc061072a525f4e Certificate serial: 019B7A5AF698B10813C130C1417E10A7EC64 Authority key identifier: 7A:12:7D:63:CE:1C:9F:35:57:39:0A:F2:1F:C0:61:07:2A:52:5F:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/o_rtVjzkw0KDuX61bKwdi27cJvI.roa Signing time: Thu 01 Jan 2026 16:19:00 +0000 ROA not before: Thu 01 Jan 2026 16:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198735 IP address blocks: 5.1.104.0/24 maxlen: 24 5.1.105.0/24 maxlen: 24 5.1.106.0/24 maxlen: 24 5.1.107.0/24 maxlen: 24 5.1.108.0/24 maxlen: 24 5.1.109.0/24 maxlen: 24 5.1.110.0/24 maxlen: 24 5.1.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 01:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:f6:98:b1:08:13:c1:30:c1:41:7e:10:a7:ec:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a127d63ce1c9f3557390af21fc061072a525f4e Validity Not Before: Jan 1 16:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a3faed563ce4c34283b97eb56cac1d8b6edc26f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e0:fd:24:a3:82:6b:88:95:f6:7f:14:91:d2: 81:1c:4c:32:27:23:3f:8a:7a:2f:8d:9c:11:79:c5: c8:ac:2e:58:11:94:47:60:26:a0:fa:e5:68:9b:29: 5b:4e:d0:69:2f:de:29:9d:a9:d4:7b:0b:57:78:6b: a7:ae:1b:5d:f1:1d:1a:9a:71:47:8d:b7:35:89:5e: b3:67:60:67:95:0a:60:96:d8:df:22:a0:37:d9:85: 10:e5:e3:35:fb:b4:50:92:7c:06:29:57:76:87:b4: 97:14:26:c3:e3:74:0e:e4:26:6f:a8:ae:8e:aa:fe: 24:d7:95:d5:52:4c:e9:77:54:d2:02:f8:6a:4b:9c: 24:26:22:da:66:51:3a:53:55:5f:b1:34:93:79:4b: e8:2c:60:d2:b3:a1:db:a1:66:ab:02:4f:ed:ee:df: e6:45:92:8d:ae:92:e6:35:b7:89:60:04:c8:3d:95: 34:e2:f8:12:30:c3:b6:f1:3f:2a:2b:c8:3a:00:4b: 36:80:49:e1:85:5f:92:a9:11:cf:d7:9c:06:00:f8: d8:39:4a:de:e0:bd:f0:61:33:3e:0d:a0:c7:6d:3d: 23:72:07:e1:91:bc:36:50:c2:35:40:27:a8:7e:1e: 2d:0d:7b:21:f7:1e:95:eb:e6:be:3b:d7:b6:ae:25: 80:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:FA:ED:56:3C:E4:C3:42:83:B9:7E:B5:6C:AC:1D:8B:6E:DC:26:F2 X509v3 Authority Key Identifier: keyid:7A:12:7D:63:CE:1C:9F:35:57:39:0A:F2:1F:C0:61:07:2A:52:5F:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/o_rtVjzkw0KDuX61bKwdi27cJvI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.1.104.0/21 Signature Algorithm: sha256WithRSAEncryption a9:1a:f3:9a:1d:fb:d5:8e:1e:e0:b2:b4:ae:b9:9c:16:30:0d: ae:47:78:9b:a2:1f:e0:ff:55:f9:4b:22:50:b5:80:67:4a:a8: 69:f9:39:19:e8:27:bf:62:dc:70:fc:73:a8:ff:40:ad:97:11: 67:01:f1:5d:e1:a7:89:5e:47:8f:b6:e4:c7:ce:52:4b:24:f2: 3a:24:2b:f9:73:1a:b6:26:6c:f5:2b:b3:52:78:70:77:67:9f: 76:4f:8f:33:90:25:3c:a0:fe:2a:cf:11:68:e3:79:24:9d:9d: 12:5b:15:51:ed:64:01:77:d0:73:c8:9f:13:ec:5d:c9:8a:99: b2:ce:98:74:70:19:6f:d5:2b:70:75:03:65:59:21:93:12:fd: d8:2b:b4:96:7d:42:e0:e0:91:8e:31:8b:45:90:50:79:d2:58: 50:00:bf:83:c6:0d:11:f6:17:0b:21:e9:41:6f:ba:6c:4d:29: 92:82:57:d4:e6:7d:48:54:39:88:05:18:fb:55:51:54:5d:3b: ea:55:71:7e:37:15:39:04:c1:47:db:cc:22:ee:26:4e:e3:82: 62:3d:e5:a5:79:94:2e:e6:c6:89:a1:62:ef:0f:62:94:5e:4f: 9a:5d:24:0d:51:45:dc:0f:15:48:dc:54:22:83:1e:76:8b:95: fa:bf:29:88 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WvaYsQgTwTDBQX4Qp+xkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhMTI3ZDYzY2UxYzlmMzU1NzM5MGFmMjFmYzA2MTA3MmE1 MjVmNGUwHhcNMjYwMTAxMTYxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhM2ZhZWQ1NjNjZTRjMzQyODNiOTdlYjU2Y2FjMWQ4YjZlZGMyNmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOD9JKOCa4iV9n8UkdKBHEwyJyM/ inovjZwRecXIrC5YEZRHYCag+uVomylbTtBpL94pnanUewtXeGunrhtd8R0amnFH jbc1iV6zZ2BnlQpgltjfIqA32YUQ5eM1+7RQknwGKVd2h7SXFCbD43QO5CZvqK6O qv4k15XVUkzpd1TSAvhqS5wkJiLaZlE6U1VfsTSTeUvoLGDSs6HboWarAk/t7t/m RZKNrpLmNbeJYATIPZU04vgSMMO28T8qK8g6AEs2gEnhhV+SqRHP15wGAPjYOUre 4L3wYTM+DaDHbT0jcgfhkbw2UMI1QCeofh4tDXsh9x6V6+a+O9e2riWAdwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKP67VY85MNCg7l+tWysHYtu3CbyMB8GA1UdIwQY MBaAFHoSfWPOHJ81VzkK8h/AYQcqUl9OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWhKOVk4NGNuelZYT1FyeUg4QmhCeXBTWDA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC82OWU1M2YtYTQ4Yy00OWIwLTkwZTQt OGQyNDgxNmQ5N2RlLzEvb19ydFZqemt3MEtEdVg2MWJLd2RpMjdjSnZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC82OWU1M2YtYTQ4Yy00OWIwLTkwZTQtOGQyNDgxNmQ5N2Rl LzEvZWhKOVk4NGNuelZYT1FyeUg4QmhCeXBTWDA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDBQFoMA0G CSqGSIb3DQEBCwUAA4IBAQCpGvOaHfvVjh7gsrSuuZwWMA2uR3iboh/g/1X5SyJQ tYBnSqhp+TkZ6Ce/Ytxw/HOo/0CtlxFnAfFd4aeJXkePtuTHzlJLJPI6JCv5cxq2 Jmz1K7NSeHB3Z592T48zkCU8oP4qzxFo43kknZ0SWxVR7WQBd9BzyJ8T7F3Jipmy zph0cBlv1StwdQNlWSGTEv3YK7SWfULg4JGOMYtFkFB50lhQAL+Dxg0R9hcLIelB b7psTSmSglfU5n1IVDmIBRj7VVFUXTvqVXF+NxU5BMFH28wi7iZO44JiPeWleZQu 5saJoWLvD2KUXk+aXSQNUUXcDxVI3FQigx52i5X6vymI -----END CERTIFICATE-----Generated at Thu Jan 29 06:16:09 2026 by rpki-client