This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/24qaJiwDOrxP1zsxquk-NwDQ5E8.roa File: 24qaJiwDOrxP1zsxquk-NwDQ5E8.roa (raw, json) Hash identifier: nZPwvFO1ntLr1T6ySDXPOPCKNd+HNAXDDOpN3iGJuT8= Subject key identifier: DB:8A:9A:26:2C:03:3A:BC:4F:D7:3B:31:AA:E9:3E:37:00:D0:E4:4F Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA75BF060965DADB08DEE7C25E50F1B Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/24qaJiwDOrxP1zsxquk-NwDQ5E8.roa Signing time: Fri 02 Jan 2026 12:20:55 +0000 ROA not before: Fri 02 Jan 2026 12:20:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12730 IP address blocks: 5.143.192.0/19 maxlen: 19 95.106.0.0/17 maxlen: 17 212.26.224.0/19 maxlen: 19 212.26.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:5b:f0:60:96:5d:ad:b0:8d:ee:7c:25:e5:0f:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:20:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=db8a9a262c033abc4fd73b31aae93e3700d0e44f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ff:21:07:19:b0:38:36:3a:41:f9:58:b7:c3:78: 8f:72:24:8b:9e:d7:86:b7:ac:e5:f7:4c:df:1b:0d: 3b:d1:5b:9c:87:3d:b1:22:41:27:52:07:8a:ac:2b: 59:92:94:03:f3:c7:65:52:1b:a5:b4:7e:56:7c:a3: ea:ca:b9:ee:99:89:18:c9:35:e1:88:ca:21:4b:52: 92:75:c7:87:34:b9:03:ef:fc:18:03:e6:4a:77:ef: bb:b8:c6:2b:47:fe:8e:c4:ba:44:45:e4:dc:57:44: cf:62:d5:83:c0:4c:39:57:06:d5:26:6e:eb:05:c2: 21:7b:70:39:e0:d7:bb:6d:b9:f9:3d:49:83:2a:77: f0:72:2b:56:e2:e5:09:36:e6:ca:9e:31:f2:fb:f1: bf:9a:c0:91:ff:04:14:e9:7a:bd:eb:92:9c:fc:fe: b8:04:e1:97:8b:95:37:82:34:ae:ac:2d:12:34:2d: f4:dd:ff:dd:60:ce:d2:9c:16:72:a6:d8:2a:fc:c8: a2:5f:1a:46:ec:1d:01:e7:51:d8:c4:80:67:51:39: 58:47:e5:2a:47:7a:c9:0e:4e:e8:c7:86:d9:16:78: 04:ec:01:d0:9a:66:2f:f3:5a:1e:2d:47:e6:40:ef: 9f:b4:c9:20:9d:bc:4a:53:f9:39:94:d9:7b:27:7b: 39:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:8A:9A:26:2C:03:3A:BC:4F:D7:3B:31:AA:E9:3E:37:00:D0:E4:4F X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/24qaJiwDOrxP1zsxquk-NwDQ5E8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.143.192.0/19 95.106.0.0/17 212.26.224.0/19 Signature Algorithm: sha256WithRSAEncryption 17:15:10:d0:7d:7a:c4:16:c5:8b:f3:27:9c:2d:a5:ba:ea:3d: f4:dd:99:18:ed:c8:09:4c:8f:fa:8b:6e:a8:3b:fe:df:b3:63: cf:1d:d3:df:f7:69:a9:f6:cc:4f:93:ee:42:a0:70:6a:8b:96: 38:dc:66:6e:2a:11:ec:a7:66:8b:10:f9:a1:1f:0c:fd:77:c8: 61:9e:5e:46:56:e3:16:8f:74:3a:c5:ab:a8:47:fa:df:db:7a: b4:37:92:18:96:9a:b9:30:57:15:c1:fb:18:b5:25:b0:3e:5b: 1d:f5:b2:3d:2a:b9:e2:13:d7:92:31:5b:40:17:14:39:95:25: fb:a7:69:68:18:52:1d:70:3c:5c:ed:5e:7c:1e:86:f7:ba:e0: d1:0a:cb:38:52:88:c4:4b:d4:1f:c8:8f:9b:40:c1:7b:93:82: a2:6d:4f:62:b0:b5:81:ed:93:94:25:1f:51:6c:b8:88:9e:cf: 51:a8:6c:b8:cc:b6:83:ca:58:3f:fe:53:6e:7a:a7:6f:13:94: 2f:93:bd:85:02:60:72:47:48:8b:9f:56:d6:9f:6d:fb:a6:bc: 74:12:53:d8:90:8b:e7:de:e0:6c:e3:cd:92:d7:10:cc:1c:f7: e8:29:64:a1:9e:e4:1a:b4:f4:d4:1c:d8:2a:76:b3:12:52:11: fe:8f:99:68 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+p1vwYJZdrbCN7nwl5Q8bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjhhOWEyNjJjMDMzYWJjNGZkNzNiMzFhYWU5M2UzNzAwZDBlNDRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/yEHGbA4NjpB+Vi3w3iPciSLnteG t6zl90zfGw070Vuchz2xIkEnUgeKrCtZkpQD88dlUhultH5WfKPqyrnumYkYyTXh iMohS1KSdceHNLkD7/wYA+ZKd++7uMYrR/6OxLpEReTcV0TPYtWDwEw5VwbVJm7r BcIhe3A54Ne7bbn5PUmDKnfwcitW4uUJNubKnjHy+/G/msCR/wQU6Xq965Kc/P64 BOGXi5U3gjSurC0SNC303f/dYM7SnBZyptgq/MiiXxpG7B0B51HYxIBnUTlYR+Uq R3rJDk7ox4bZFngE7AHQmmYv81oeLUfmQO+ftMkgnbxKU/k5lNl7J3s56wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNuKmiYsAzq8T9c7MarpPjcA0ORPMB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvMjRxYUppd0RPcnhQMXpzeHF1ay1Od0RRNUU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQFBY/AAwQH X2oAAwQF1BrgMA0GCSqGSIb3DQEBCwUAA4IBAQAXFRDQfXrEFsWL8yecLaW66j30 3ZkY7cgJTI/6i26oO/7fs2PPHdPf92mp9sxPk+5CoHBqi5Y43GZuKhHsp2aLEPmh Hwz9d8hhnl5GVuMWj3Q6xauoR/rf23q0N5IYlpq5MFcVwfsYtSWwPlsd9bI9Krni E9eSMVtAFxQ5lSX7p2loGFIdcDxc7V58Hob3uuDRCss4UojES9QfyI+bQMF7k4Ki bU9isLWB7ZOUJR9RbLiIns9RqGy4zLaDylg//lNueqdvE5Qvk72FAmByR0iLn1bW n237prx0ElPYkIvn3uBs482S1xDMHPfoKWShnuQatPTUHNgqdrMSUhH+j5lo -----END CERTIFICATE-----Generated at Mon Jan 26 10:15:13 2026 by rpki-client