This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5gCU4R_dJ8cdk6YjdEW3GCX3xHM.roa File: 5gCU4R_dJ8cdk6YjdEW3GCX3xHM.roa (raw, json) Hash identifier: b9vqux7MTMIlytQpAA7yfzhf8eYa2ZNMUKz95ThtVj0= Subject key identifier: E6:00:94:E1:1F:DD:27:C7:1D:93:A6:23:74:45:B7:18:25:F7:C4:73 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D6A4586C4459FD76ECA00DF06F393 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5gCU4R_dJ8cdk6YjdEW3GCX3xHM.roa Signing time: Fri 02 Jan 2026 06:20:32 +0000 ROA not before: Fri 02 Jan 2026 06:20:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214271 IP address blocks: 185.238.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:6a:45:86:c4:45:9f:d7:6e:ca:00:df:06:f3:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e60094e11fdd27c71d93a6237445b71825f7c473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e3:c5:ed:a6:ff:e6:cd:84:64:69:ec:c8:6b: 6b:25:9e:c3:f3:1a:3c:b6:48:92:89:f8:70:37:3f: 54:ca:4c:8e:66:eb:b6:50:97:6e:09:6d:6a:36:12: 46:52:bd:b9:19:b2:55:1d:cc:9b:06:89:68:b6:75: f4:1a:47:4b:a6:9b:a4:98:7b:d0:89:01:b2:9d:d2: ac:a1:e6:46:f4:19:d1:ab:78:38:cd:41:f6:d7:32: 3a:66:20:58:41:49:be:4b:78:80:2f:70:77:f0:43: 07:f1:fe:e5:c8:b4:e9:56:5d:c7:97:b8:c0:ca:9a: 12:e3:af:7c:98:cc:84:02:1f:09:fe:e4:83:af:ff: 84:13:ff:0a:55:01:38:33:c8:5b:8e:18:e0:4e:22: eb:c2:60:d3:79:aa:18:d1:32:86:79:c1:36:62:01: 48:fb:0c:55:19:61:7e:4d:d0:dd:9a:b9:76:8c:00: 3f:ee:f0:ac:1b:53:73:54:f1:b0:02:32:97:63:78: d1:2f:65:71:f4:44:b8:a2:ab:88:2b:4a:c0:1e:0d: a9:4b:9a:ab:1f:80:f7:a4:9f:65:bc:98:02:03:ef: a4:59:01:37:e4:4b:72:1a:92:e9:22:d6:dc:4c:9b: ca:c7:f9:83:59:10:52:2c:e3:f8:28:85:ca:f4:d4: da:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:00:94:E1:1F:DD:27:C7:1D:93:A6:23:74:45:B7:18:25:F7:C4:73 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5gCU4R_dJ8cdk6YjdEW3GCX3xHM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.238.188.0/24 Signature Algorithm: sha256WithRSAEncryption a1:6d:27:83:2d:f8:59:f8:60:53:83:0f:5d:b4:df:e4:88:a5: ea:90:34:a0:c9:62:0c:17:00:d9:3b:bd:84:1e:d8:94:e9:94: ce:f4:a8:0b:c7:b0:c7:44:94:0b:be:0a:c1:67:cb:dc:fe:05: bc:bb:55:c8:a0:d5:49:42:89:24:64:60:6a:19:f1:91:53:9e: c3:0d:60:17:b3:8d:12:f7:9e:7c:36:bc:e5:26:2a:6e:72:f0: 9c:b2:dc:50:a2:9f:c0:27:17:a6:e2:df:db:ea:9d:23:e1:92: 16:45:20:20:19:f9:99:88:27:ba:c9:e4:72:95:62:bc:60:8a: ab:70:26:74:e3:03:3a:cb:3f:d4:23:dd:d7:e5:b1:7f:4c:79: 96:e3:55:81:d8:29:66:20:25:86:66:37:59:57:7d:ce:92:90: d5:61:ce:41:d2:0c:aa:4e:2f:0b:aa:8a:41:5e:8f:c2:c8:f6: 56:83:9b:dd:86:32:98:f6:86:9f:32:bb:1b:f9:46:12:16:62: 76:91:5e:96:2e:ed:19:c4:ae:9b:7a:23:59:b9:93:7c:20:df: 5f:09:2a:81:1c:44:71:f7:2f:da:31:74:01:a8:0c:88:f0:a3: 0a:fd:c4:c4:bc:f0:81:c0:97:85:10:77:97:64:34:82:49:0d: 77:3f:2f:69 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XWpFhsRFn9duygDfBvOTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjAwOTRlMTFmZGQyN2M3MWQ5M2E2MjM3NDQ1YjcxODI1ZjdjNDczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+PF7ab/5s2EZGnsyGtrJZ7D8xo8 tkiSifhwNz9UykyOZuu2UJduCW1qNhJGUr25GbJVHcybBolotnX0GkdLppukmHvQ iQGyndKsoeZG9BnRq3g4zUH21zI6ZiBYQUm+S3iAL3B38EMH8f7lyLTpVl3Hl7jA ypoS4698mMyEAh8J/uSDr/+EE/8KVQE4M8hbjhjgTiLrwmDTeaoY0TKGecE2YgFI +wxVGWF+TdDdmrl2jAA/7vCsG1NzVPGwAjKXY3jRL2Vx9ES4oquIK0rAHg2pS5qr H4D3pJ9lvJgCA++kWQE35EtyGpLpItbcTJvKx/mDWRBSLOP4KIXK9NTayQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOYAlOEf3SfHHZOmI3RFtxgl98RzMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvNWdDVTRSX2RKOGNkazZZamRFVzNHQ1gzeEhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAue68MA0G CSqGSIb3DQEBCwUAA4IBAQChbSeDLfhZ+GBTgw9dtN/kiKXqkDSgyWIMFwDZO72E HtiU6ZTO9KgLx7DHRJQLvgrBZ8vc/gW8u1XIoNVJQokkZGBqGfGRU57DDWAXs40S 9558NrzlJipucvCcstxQop/AJxem4t/b6p0j4ZIWRSAgGfmZiCe6yeRylWK8YIqr cCZ04wM6yz/UI93X5bF/THmW41WB2ClmICWGZjdZV33OkpDVYc5B0gyqTi8LqopB Xo/CyPZWg5vdhjKY9oafMrsb+UYSFmJ2kV6WLu0ZxK6beiNZuZN8IN9fCSqBHERx 9y/aMXQBqAyI8KMK/cTEvPCBwJeFEHeXZDSCSQ13Py9p -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:55 2026 by rpki-client