This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/5XqWU2BY3l73ZvQGC5hNw2s9gDo.roa File: 5XqWU2BY3l73ZvQGC5hNw2s9gDo.roa (raw, json) Hash identifier: c54pJsIlOXW3V5kUxXIRsQeC6LHU4KLVPi5buVcibgA= Subject key identifier: E5:7A:96:53:60:58:DE:5E:F7:66:F4:06:0B:98:4D:C3:6B:3D:80:3A Certificate issuer: /CN=115dbc00433e29f2adeb038fea2fbd7048fb632f Certificate serial: 019B7B35B713E1A84982015D58FD1B8A8320 Authority key identifier: 11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/5XqWU2BY3l73ZvQGC5hNw2s9gDo.roa Signing time: Thu 01 Jan 2026 20:17:56 +0000 ROA not before: Thu 01 Jan 2026 20:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39419 IP address blocks: 195.141.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:b7:13:e1:a8:49:82:01:5d:58:fd:1b:8a:83:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=115dbc00433e29f2adeb038fea2fbd7048fb632f Validity Not Before: Jan 1 20:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e57a96536058de5ef766f4060b984dc36b3d803a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:58:1d:7d:74:8b:36:be:44:50:05:b4:c8:74: 1d:77:56:b8:6b:c7:5b:97:40:ad:96:95:56:11:ef: 94:b1:7e:a8:ef:0f:f0:77:dd:85:c1:5b:05:2c:cc: 79:3a:46:b8:08:f0:4c:02:59:28:c8:8d:65:36:f0: e4:49:2f:34:6e:d8:f3:9e:a8:9c:1f:c2:f0:fe:51: f5:68:67:10:8d:03:4b:c2:d3:cc:48:2a:e9:1f:84: c7:8b:ed:71:69:bd:01:ac:d9:97:f8:ca:8e:a6:1a: 1f:d7:45:b2:2e:ea:8d:c5:09:b0:1f:2f:b9:96:6c: 6e:06:c4:6d:6e:cb:9b:37:38:93:8b:6c:1b:85:27: 9e:23:ed:61:bb:7c:6c:62:51:81:68:35:99:26:90: d5:3d:87:a7:ec:77:7b:97:9b:bd:8f:e6:43:2c:65: 2c:b3:5c:e2:db:27:94:cb:cb:63:6c:d9:b4:c0:e6: c8:06:f9:61:63:38:93:37:89:3e:27:e3:49:03:26: a6:5f:60:55:b6:dd:69:84:0d:78:01:86:4a:a7:b3: e0:cc:bd:71:cc:b1:e9:ab:1b:6a:96:dd:e0:e9:6b: be:fc:86:a5:92:7e:d3:54:2a:a9:3b:ba:30:f6:c7: 48:a7:b1:85:f1:b5:4d:2b:94:1b:69:4c:b2:7d:1f: 7c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:7A:96:53:60:58:DE:5E:F7:66:F4:06:0B:98:4D:C3:6B:3D:80:3A X509v3 Authority Key Identifier: keyid:11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/5XqWU2BY3l73ZvQGC5hNw2s9gDo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.141.249.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:a5:b9:29:2c:c9:a4:fe:3f:c3:89:f3:ff:8e:15:12:29:7b: 85:95:4f:83:46:83:19:35:b4:77:53:d9:86:d2:d6:c1:0c:19: 36:d1:63:8a:73:dc:81:b6:f9:c7:30:2b:82:b0:db:5b:6c:4d: 5d:7e:0c:f5:1f:a4:01:d1:17:39:34:78:fa:c2:13:91:e0:73: 3a:76:21:33:f0:fc:c7:6c:e9:dc:ee:b2:87:12:de:67:3c:80: e4:0c:c5:86:bb:b4:93:e6:af:ec:0e:1e:24:ff:cf:7c:e6:9f: 41:82:18:f0:cb:4e:bb:dd:f6:09:d0:1e:7a:4b:fd:95:5c:be: b6:85:8b:3a:fd:cb:e9:0f:1b:63:d1:89:a1:a1:94:7e:2d:06: 34:ce:47:2f:5c:bb:77:fb:31:42:0e:e6:61:f1:4b:11:3c:56: a4:7e:26:29:2e:f5:eb:ea:de:a0:fc:03:17:09:c2:da:1e:6e: e2:c4:ef:6c:a3:76:d2:60:70:0d:59:27:44:f6:32:fe:eb:71: 1a:23:4f:28:28:0e:99:ba:1b:04:86:1d:b4:73:20:58:d5:fe: 0e:29:b5:d5:99:5f:0d:56:af:d5:79:64:5d:69:d4:67:94:bb: 8c:e5:30:c2:cc:b4:a2:aa:9d:6d:0f:71:87:97:e7:8d:76:ce: 1b:7f:04:04 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NbcT4ahJggFdWP0bioMgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExNWRiYzAwNDMzZTI5ZjJhZGViMDM4ZmVhMmZiZDcwNDhm YjYzMmYwHhcNMjYwMTAxMjAxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTdhOTY1MzYwNThkZTVlZjc2NmY0MDYwYjk4NGRjMzZiM2Q4MDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVgdfXSLNr5EUAW0yHQdd1a4a8db l0CtlpVWEe+UsX6o7w/wd92FwVsFLMx5Oka4CPBMAlkoyI1lNvDkSS80btjznqic H8Lw/lH1aGcQjQNLwtPMSCrpH4THi+1xab0BrNmX+MqOphof10WyLuqNxQmwHy+5 lmxuBsRtbsubNziTi2wbhSeeI+1hu3xsYlGBaDWZJpDVPYen7Hd7l5u9j+ZDLGUs s1zi2yeUy8tjbNm0wObIBvlhYziTN4k+J+NJAyamX2BVtt1phA14AYZKp7PgzL1x zLHpqxtqlt3g6Wu+/Ialkn7TVCqpO7ow9sdIp7GF8bVNK5QbaUyyfR98zwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOV6llNgWN5e92b0BguYTcNrPYA6MB8GA1UdIwQY MBaAFBFdvABDPinyresDj+ovvXBI+2MvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82NWE3MWQtMDIzNi00NGQ1LThjZTkt MjI5YjRhZTc0MmRlLzEvNVhxV1UyQlkzbDczWnZRR0M1aE53MnM5Z0RvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC82NWE3MWQtMDIzNi00NGQ1LThjZTktMjI5YjRhZTc0MmRl LzEvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw435MA0G CSqGSIb3DQEBCwUAA4IBAQBMpbkpLMmk/j/DifP/jhUSKXuFlU+DRoMZNbR3U9mG 0tbBDBk20WOKc9yBtvnHMCuCsNtbbE1dfgz1H6QB0Rc5NHj6whOR4HM6diEz8PzH bOnc7rKHEt5nPIDkDMWGu7ST5q/sDh4k/8985p9Bghjwy0673fYJ0B56S/2VXL62 hYs6/cvpDxtj0YmhoZR+LQY0zkcvXLt3+zFCDuZh8UsRPFakfiYpLvXr6t6g/AMX CcLaHm7ixO9so3bSYHANWSdE9jL+63EaI08oKA6ZuhsEhh20cyBY1f4OKbXVmV8N Vq/VeWRdadRnlLuM5TDCzLSiqp1tD3GHl+eNds4bfwQE -----END CERTIFICATE-----Generated at Sat Jan 3 04:13:12 2026 by rpki-client