This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/5cflrPSBczVw-y9CBdznGslTCz8.roa File: 5cflrPSBczVw-y9CBdznGslTCz8.roa (raw, json) Hash identifier: e3Ui7ThS6C0Gj8prOOjSxh7lUAWtygpEnNw9xX2dtRk= Subject key identifier: E5:C7:E5:AC:F4:81:73:35:70:FB:2F:42:05:DC:E7:1A:C9:53:0B:3F Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24 Certificate serial: 019B7BA3DCD0E06D1662E42CAF7C550FFFAC Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/5cflrPSBczVw-y9CBdznGslTCz8.roa Signing time: Thu 01 Jan 2026 22:18:15 +0000 ROA not before: Thu 01 Jan 2026 22:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207713 IP address blocks: 81.90.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:dc:d0:e0:6d:16:62:e4:2c:af:7c:55:0f:ff:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24 Validity Not Before: Jan 1 22:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e5c7e5acf481733570fb2f4205dce71ac9530b3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2f:22:88:7a:15:fc:c7:b6:5c:0f:86:75:ee: 69:10:be:da:0e:11:06:df:41:f1:26:5b:71:09:c6: d7:62:7a:63:f0:b5:46:88:55:a2:d4:45:da:55:bf: 24:f6:26:27:ed:05:3e:bb:a8:7b:91:3e:26:e1:6b: d8:8f:0a:95:16:f4:46:7e:a0:7c:e7:ac:c3:17:77: 2b:55:19:5a:58:0c:4a:d3:ac:71:6e:17:65:75:6c: 17:00:a9:3c:8d:9f:da:a2:9a:72:66:d0:76:54:5d: 97:d8:cd:c2:9f:5f:9e:01:a2:bc:a4:76:d0:10:cf: d6:51:7b:f4:8b:f1:50:41:bd:6f:6b:25:d5:3f:5f: d7:b3:56:53:a9:fb:87:7e:a5:92:94:b7:ba:df:a2: 23:c9:9c:30:c9:d3:89:cb:da:5e:17:90:81:f7:5f: d8:ba:b5:c4:4c:7b:22:75:a4:4a:75:2c:ac:02:95: 1b:8d:8e:06:7a:9e:b1:4d:3f:4f:7b:4b:dd:8f:39: 26:23:16:cd:aa:b0:14:f8:90:98:5b:5f:35:71:a3: 27:8d:62:2b:f8:d5:c4:03:11:9a:1e:d8:71:f2:66: c7:20:36:f5:29:f7:04:4f:a9:c6:cb:dd:c4:43:92: 03:46:b1:39:49:13:d0:04:93:98:06:3d:4d:3f:83: a2:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:C7:E5:AC:F4:81:73:35:70:FB:2F:42:05:DC:E7:1A:C9:53:0B:3F X509v3 Authority Key Identifier: keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/5cflrPSBczVw-y9CBdznGslTCz8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.90.31.0/24 Signature Algorithm: sha256WithRSAEncryption 69:19:5b:47:ec:a9:47:a7:bb:4e:1c:e5:bf:78:09:33:14:7f: 25:ea:2b:0c:fb:94:6a:cf:29:79:b2:19:05:08:56:39:7d:01: 1a:4f:82:79:60:da:6b:41:66:02:ad:a1:07:b1:2d:23:42:cd: f8:4c:6b:1a:4c:03:30:a9:d2:8e:21:fa:04:39:97:db:41:46: dd:5c:34:ec:1c:70:5f:53:67:22:18:47:ba:10:30:8b:38:87: 37:a5:26:1a:53:bd:a1:09:23:64:e1:51:b1:90:18:0a:8b:48: 95:3a:df:ab:8f:83:cd:e9:67:88:84:93:ca:85:97:26:2e:8a: 96:cd:4a:1b:dd:8e:3e:31:e4:da:66:37:6a:de:55:9a:c6:3a: 55:0d:92:de:5c:50:ad:50:8e:d9:82:92:5c:33:ac:f0:88:c9: 4a:e9:1d:ac:b1:c3:be:7f:5b:26:2f:66:a9:7a:79:aa:97:1d: 5b:93:98:c7:dd:f8:9e:e9:f6:d4:0a:35:21:2d:e2:2f:81:01: 29:4d:35:ea:40:13:ad:d3:17:73:c9:96:87:3a:03:ce:a6:07: 80:e3:76:a1:c9:f0:ab:85:dc:2f:35:36:c4:b1:a1:02:16:c5: c6:24:4c:6c:7e:e9:a3:61:cb:a1:df:fe:b4:90:20:26:e7:66: bb:bb:5c:e5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o9zQ4G0WYuQsr3xVD/+sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MjE2ZjVjMTY1YjgyN2E3ZmQ3M2Q4MTA3YWViZDJmNjNj NjNlMjQwHhcNMjYwMTAxMjIxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNWM3ZTVhY2Y0ODE3MzM1NzBmYjJmNDIwNWRjZTcxYWM5NTMwYjNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvy8iiHoV/Me2XA+Gde5pEL7aDhEG 30HxJltxCcbXYnpj8LVGiFWi1EXaVb8k9iYn7QU+u6h7kT4m4WvYjwqVFvRGfqB8 56zDF3crVRlaWAxK06xxbhdldWwXAKk8jZ/aoppyZtB2VF2X2M3Cn1+eAaK8pHbQ EM/WUXv0i/FQQb1vayXVP1/Xs1ZTqfuHfqWSlLe636IjyZwwydOJy9peF5CB91/Y urXETHsidaRKdSysApUbjY4Gep6xTT9Pe0vdjzkmIxbNqrAU+JCYW181caMnjWIr +NXEAxGaHthx8mbHIDb1KfcET6nGy93EQ5IDRrE5SRPQBJOYBj1NP4OidQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOXH5az0gXM1cPsvQgXc5xrJUws/MB8GA1UdIwQY MBaAFEkhb1wWW4J6f9c9gQeuvS9jxj4kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQt MGRiYmMyNDllNjU3LzEvNWNmbHJQU0JjelZ3LXk5Q0Jkem5Hc2xUQ3o4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQtMGRiYmMyNDllNjU3 LzEvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUVofMA0G CSqGSIb3DQEBCwUAA4IBAQBpGVtH7KlHp7tOHOW/eAkzFH8l6isM+5Rqzyl5shkF CFY5fQEaT4J5YNprQWYCraEHsS0jQs34TGsaTAMwqdKOIfoEOZfbQUbdXDTsHHBf U2ciGEe6EDCLOIc3pSYaU72hCSNk4VGxkBgKi0iVOt+rj4PN6WeIhJPKhZcmLoqW zUob3Y4+MeTaZjdq3lWaxjpVDZLeXFCtUI7ZgpJcM6zwiMlK6R2sscO+f1smL2ap enmqlx1bk5jH3fie6fbUCjUhLeIvgQEpTTXqQBOt0xdzyZaHOgPOpgeA43ahyfCr hdwvNTbEsaECFsXGJExsfumjYcuh3/60kCAm52a7u1zl -----END CERTIFICATE-----Generated at Sat Jan 10 03:15:14 2026 by rpki-client