This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/tUqcnLDpW9JDf6_hcyhdmCMYxjk.roa File: tUqcnLDpW9JDf6_hcyhdmCMYxjk.roa (raw, json) Hash identifier: T2Izmg46flm/WL7QRXpj2WsAQtkMjc+JTIooJeO4hfo= Subject key identifier: B5:4A:9C:9C:B0:E9:5B:D2:43:7F:AF:E1:73:28:5D:98:23:18:C6:39 Certificate issuer: /CN=72d1b5cb6fb0423986871ef01e663f365ce0d895 Certificate serial: 019B7E3874368AED4072D401B089A81BB239 Authority key identifier: 72:D1:B5:CB:6F:B0:42:39:86:87:1E:F0:1E:66:3F:36:5C:E0:D8:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/tUqcnLDpW9JDf6_hcyhdmCMYxjk.roa Signing time: Fri 02 Jan 2026 10:19:47 +0000 ROA not before: Fri 02 Jan 2026 10:19:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15600 IP address blocks: 5.145.32.0/19 maxlen: 24 185.74.128.0/22 maxlen: 22 2a00:d3e0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:74:36:8a:ed:40:72:d4:01:b0:89:a8:1b:b2:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72d1b5cb6fb0423986871ef01e663f365ce0d895 Validity Not Before: Jan 2 10:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b54a9c9cb0e95bd2437fafe173285d982318c639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b2:5c:ac:4a:9e:32:ca:2e:32:87:80:4b:55: 17:a0:4c:6a:12:02:a3:c0:be:96:00:45:6c:70:fc: 97:f6:12:4e:24:e5:ba:ad:9c:d1:bd:14:cb:32:1a: 64:c6:a9:8c:e7:71:86:80:c2:a0:6b:ab:ae:c0:ca: fc:af:5a:68:16:3d:72:32:26:2a:06:be:cd:9e:69: e2:1a:c0:e2:77:07:d8:7d:c7:a6:5e:78:44:c8:fc: f7:ac:df:13:00:6b:43:be:38:a2:36:01:e7:2b:25: 6c:d2:06:21:74:05:15:d7:95:89:1c:09:2f:62:36: 9e:d1:e4:43:46:49:e7:cf:a9:36:25:08:94:8c:1f: 2e:eb:2d:d5:b4:17:6f:9f:ab:84:a9:ec:f0:ac:3c: 93:99:37:3c:62:1e:6d:75:97:83:35:61:4c:39:ad: 90:f4:a4:3e:63:74:69:08:a0:f9:f9:2b:4b:e7:47: 92:2e:ac:c3:0e:22:c1:ca:41:08:9c:c5:ed:3c:fe: e3:85:81:36:64:02:bb:92:7f:46:75:4e:bf:c6:19: 3a:cc:80:70:02:ca:28:a9:a1:56:41:4f:de:62:74: ca:10:94:f4:4c:0e:72:50:ea:5f:50:ac:96:50:c0: ac:93:01:27:12:27:bb:e0:de:d6:e0:bf:41:36:9a: eb:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:4A:9C:9C:B0:E9:5B:D2:43:7F:AF:E1:73:28:5D:98:23:18:C6:39 X509v3 Authority Key Identifier: keyid:72:D1:B5:CB:6F:B0:42:39:86:87:1E:F0:1E:66:3F:36:5C:E0:D8:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/tUqcnLDpW9JDf6_hcyhdmCMYxjk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.145.32.0/19 185.74.128.0/22 IPv6: 2a00:d3e0::/29 Signature Algorithm: sha256WithRSAEncryption 7f:57:89:bf:f1:70:18:c0:00:1f:da:9d:a9:0a:43:07:84:f3: 0d:e8:5c:06:84:df:0c:bf:13:30:b7:46:25:55:3a:58:75:38: ac:27:37:c2:64:31:54:1d:e9:3c:0d:18:40:59:00:f7:a8:29: b5:9b:19:f2:17:0a:69:be:b1:13:0e:90:e9:e8:51:a3:fd:73: 14:32:00:8c:b6:44:04:25:87:a7:e2:85:5f:fa:18:e1:0a:34: 55:ac:8b:11:0b:d1:bd:0b:1b:c3:d1:57:d9:ef:cf:56:0f:87: b7:49:81:ac:30:3f:e9:cc:ba:b3:9b:67:da:2d:fe:ff:7f:7f: 16:b9:98:8c:43:d2:f9:46:1a:07:39:44:57:c4:63:94:73:64: 66:44:df:08:e3:8b:26:e4:12:7d:83:c1:f9:38:7d:b6:65:53: 7e:bc:62:38:93:3a:b3:92:34:53:74:18:8e:91:50:bf:1a:ec: 6d:62:b2:db:a5:11:52:6d:82:61:51:e6:b1:e1:16:7f:c1:e2: 3c:9b:4f:6e:37:92:0c:15:b3:72:ed:22:fa:38:6b:79:11:af: b3:0c:f3:fb:27:f5:dc:51:1c:d7:04:d8:8a:1f:60:c4:70:82: bd:4e:2a:da:05:ad:4b:8e:23:b5:8e:9f:be:f5:37:bb:ce:5f: 3e:c4:0e:59 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt+OHQ2iu1ActQBsImoG7I5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZDFiNWNiNmZiMDQyMzk4Njg3MWVmMDFlNjYzZjM2NWNl MGQ4OTUwHhcNMjYwMTAyMTAxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTRhOWM5Y2IwZTk1YmQyNDM3ZmFmZTE3MzI4NWQ5ODIzMThjNjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7JcrEqeMsouMoeAS1UXoExqEgKj wL6WAEVscPyX9hJOJOW6rZzRvRTLMhpkxqmM53GGgMKga6uuwMr8r1poFj1yMiYq Br7NnmniGsDidwfYfcemXnhEyPz3rN8TAGtDvjiiNgHnKyVs0gYhdAUV15WJHAkv Yjae0eRDRknnz6k2JQiUjB8u6y3VtBdvn6uEqezwrDyTmTc8Yh5tdZeDNWFMOa2Q 9KQ+Y3RpCKD5+StL50eSLqzDDiLBykEInMXtPP7jhYE2ZAK7kn9GdU6/xhk6zIBw AsooqaFWQU/eYnTKEJT0TA5yUOpfUKyWUMCskwEnEie74N7W4L9BNprrdQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFLVKnJyw6VvSQ3+v4XMoXZgjGMY5MB8GA1UdIwQY MBaAFHLRtctvsEI5hoce8B5mPzZc4NiVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3RHMXkyLXdRam1HaHg3d0htWV9ObHpnMkpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9hNjAwZjUtOTQyOC00ODVjLWI0MmUt NjRkZTM0ZjFmNDY0LzEvdFVxY25MRHBXOUpEZjZfaGN5aGRtQ01ZeGprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9hNjAwZjUtOTQyOC00ODVjLWI0MmUtNjRkZTM0ZjFmNDY0 LzEvY3RHMXkyLXdRam1HaHg3d0htWV9ObHpnMkpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQFBZEgAwQC uUqAMA0EAgACMAcDBQMqANPgMA0GCSqGSIb3DQEBCwUAA4IBAQB/V4m/8XAYwAAf 2p2pCkMHhPMN6FwGhN8MvxMwt0YlVTpYdTisJzfCZDFUHek8DRhAWQD3qCm1mxny FwppvrETDpDp6FGj/XMUMgCMtkQEJYen4oVf+hjhCjRVrIsRC9G9CxvD0VfZ789W D4e3SYGsMD/pzLqzm2faLf7/f38WuZiMQ9L5RhoHOURXxGOUc2RmRN8I44sm5BJ9 g8H5OH22ZVN+vGI4kzqzkjRTdBiOkVC/GuxtYrLbpRFSbYJhUeax4RZ/weI8m09u N5IMFbNy7SL6OGt5Ea+zDPP7J/XcURzXBNiKH2DEcIK9TiraBa1LjiO1jp++9Te7 zl8+xA5Z -----END CERTIFICATE-----Generated at Mon Jan 26 20:42:32 2026 by rpki-client