This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/5cyx45wBsDWUW4HLBveZ_qT2fcI.roa File: 5cyx45wBsDWUW4HLBveZ_qT2fcI.roa (raw, json) Hash identifier: 8zrBvmy9ZVUIH/JDFlTLI0bEMjkf56i51k/bt1Lb1pQ= Subject key identifier: E5:CC:B1:E3:9C:01:B0:35:94:5B:81:CB:06:F7:99:FE:A4:F6:7D:C2 Certificate issuer: /CN=4c3789ecf67e04298c5ee44c67d8fb7f5d6d95a1 Certificate serial: 019B77C6C7A672C43F589867175ADD487B29 Authority key identifier: 4C:37:89:EC:F6:7E:04:29:8C:5E:E4:4C:67:D8:FB:7F:5D:6D:95:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/5cyx45wBsDWUW4HLBveZ_qT2fcI.roa Signing time: Thu 01 Jan 2026 04:17:54 +0000 ROA not before: Thu 01 Jan 2026 04:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47678 IP address blocks: 94.45.64.0/19 maxlen: 22 213.110.160.0/19 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 19:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:c7:a6:72:c4:3f:58:98:67:17:5a:dd:48:7b:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c3789ecf67e04298c5ee44c67d8fb7f5d6d95a1 Validity Not Before: Jan 1 04:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e5ccb1e39c01b035945b81cb06f799fea4f67dc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:5f:d5:d8:51:90:0f:b9:e2:99:5c:33:22:1b: d8:31:1f:ee:0c:c6:4c:a4:9f:ac:96:9c:b5:6a:48: ef:7b:93:0f:8a:90:35:c9:64:78:f6:b2:2b:8e:27: b3:94:80:69:63:7c:ed:88:89:93:cb:2f:8a:e1:42: 80:73:77:c3:71:da:3e:b0:30:18:53:fb:7a:a0:bb: 3d:a4:77:c8:96:60:d7:a8:08:e2:44:15:6f:77:c1: 05:e8:01:44:19:9d:28:bc:47:87:47:2c:d6:70:0e: e8:78:3e:1e:82:75:06:42:31:df:c1:ca:95:d4:06: 92:f9:74:e4:2c:2c:3d:90:50:03:c9:9a:8d:7f:7d: ea:b5:90:a6:74:26:c2:ae:7e:d9:7f:03:5f:53:81: 81:90:39:b1:ff:5b:5b:6d:19:46:24:18:00:fa:4e: 04:b6:a2:4f:e7:bc:e6:64:82:8e:c1:13:e7:99:01: a7:fe:07:e2:4b:38:03:1c:a3:4c:35:3d:ff:68:e4: a8:34:50:68:cc:56:48:b5:9f:0b:10:88:bc:b0:60: 33:1e:84:4d:cd:92:c5:4f:59:0e:63:b5:52:f4:78: d5:4e:a6:71:b9:e9:2f:4e:bd:41:30:05:f1:f1:3c: d5:90:63:f5:fd:51:d0:09:65:c6:c5:6a:0f:38:a3: 1f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:CC:B1:E3:9C:01:B0:35:94:5B:81:CB:06:F7:99:FE:A4:F6:7D:C2 X509v3 Authority Key Identifier: keyid:4C:37:89:EC:F6:7E:04:29:8C:5E:E4:4C:67:D8:FB:7F:5D:6D:95:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/5cyx45wBsDWUW4HLBveZ_qT2fcI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.45.64.0/19 213.110.160.0/19 Signature Algorithm: sha256WithRSAEncryption 2a:53:b9:50:1e:b3:49:a9:cc:4e:28:c5:83:9f:e2:2d:c4:53: 13:94:b9:46:f6:30:d0:75:7f:41:cb:49:c6:d8:c8:94:18:19: 09:d3:1f:8a:0d:fd:6d:73:c5:c5:e5:8d:c4:b8:51:e1:85:d9: a6:54:25:4d:ca:f6:9b:dd:a5:18:74:05:ed:28:51:89:06:7b: ed:c2:1f:03:d7:6b:6b:1a:1d:5e:a2:25:a7:d1:6d:ca:4d:aa: 49:a1:1d:47:4f:88:04:8b:97:a4:fc:24:1c:6d:d1:e4:5e:04: 66:45:6e:08:1f:40:1b:ea:ba:00:64:79:50:42:1e:e6:11:d6: c9:c3:9f:ed:16:07:9c:39:61:25:3d:d4:63:c9:fc:8d:d2:b6: 14:d8:7d:ef:c8:99:6e:51:a5:2b:f1:ed:b4:41:44:53:21:55: 9d:60:35:96:c2:9f:78:99:32:31:98:53:14:bb:45:e8:35:18: cd:6b:31:1a:66:f3:23:b3:61:d0:7f:6f:9f:2d:e9:48:2b:9f: d2:8c:38:05:f6:fc:b0:53:17:1b:9b:5c:15:67:b5:91:66:60: 1d:a8:51:58:83:a8:7b:0d:31:f3:e7:6b:e7:66:da:96:6c:9e: 6c:dc:06:a5:d1:6a:18:73:27:e7:79:1e:29:89:a7:d6:d9:8f: 83:59:70:29 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xsemcsQ/WJhnF1rdSHspMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMzc4OWVjZjY3ZTA0Mjk4YzVlZTQ0YzY3ZDhmYjdmNWQ2 ZDk1YTEwHhcNMjYwMTAxMDQxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNWNjYjFlMzljMDFiMDM1OTQ1YjgxY2IwNmY3OTlmZWE0ZjY3ZGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmV/V2FGQD7nimVwzIhvYMR/uDMZM pJ+slpy1akjve5MPipA1yWR49rIrjiezlIBpY3ztiImTyy+K4UKAc3fDcdo+sDAY U/t6oLs9pHfIlmDXqAjiRBVvd8EF6AFEGZ0ovEeHRyzWcA7oeD4egnUGQjHfwcqV 1AaS+XTkLCw9kFADyZqNf33qtZCmdCbCrn7ZfwNfU4GBkDmx/1tbbRlGJBgA+k4E tqJP57zmZIKOwRPnmQGn/gfiSzgDHKNMNT3/aOSoNFBozFZItZ8LEIi8sGAzHoRN zZLFT1kOY7VS9HjVTqZxuekvTr1BMAXx8TzVkGP1/VHQCWXGxWoPOKMfCQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOXMseOcAbA1lFuBywb3mf6k9n3CMB8GA1UdIwQY MBaAFEw3iez2fgQpjF7kTGfY+39dbZWhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVERlSjdQWi1CQ21NWHVSTVo5ajdmMTF0bGFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC83ZWQ3YjEtYjhmMy00M2YzLTk2ZTMt MWRjNTRkMWMwM2EzLzEvNWN5eDQ1d0JzRFdVVzRITEJ2ZVpfcVQyZmNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC83ZWQ3YjEtYjhmMy00M2YzLTk2ZTMtMWRjNTRkMWMwM2Ez LzEvVERlSjdQWi1CQ21NWHVSTVo5ajdmMTF0bGFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFXi1AAwQF 1W6gMA0GCSqGSIb3DQEBCwUAA4IBAQAqU7lQHrNJqcxOKMWDn+ItxFMTlLlG9jDQ dX9By0nG2MiUGBkJ0x+KDf1tc8XF5Y3EuFHhhdmmVCVNyvab3aUYdAXtKFGJBnvt wh8D12trGh1eoiWn0W3KTapJoR1HT4gEi5ek/CQcbdHkXgRmRW4IH0Ab6roAZHlQ Qh7mEdbJw5/tFgecOWElPdRjyfyN0rYU2H3vyJluUaUr8e20QURTIVWdYDWWwp94 mTIxmFMUu0XoNRjNazEaZvMjs2HQf2+fLelIK5/SjDgF9vywUxcbm1wVZ7WRZmAd qFFYg6h7DTHz52vnZtqWbJ5s3Aal0WoYcyfneR4piafW2Y+DWXAp -----END CERTIFICATE-----Generated at Sat Jan 10 04:00:43 2026 by rpki-client