This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/5SqsuyoErucRezmQTfvpY2XQz9g.roa File: 5SqsuyoErucRezmQTfvpY2XQz9g.roa (raw, json) Hash identifier: 2gIJFCrAFvF4esdLzO2MxH+s496fv76stiFCWqMIITM= Subject key identifier: E5:2A:AC:BB:2A:04:AE:E7:11:7B:39:90:4D:FB:E9:63:65:D0:CF:D8 Certificate issuer: /CN=c746add8dafe99f6a7d787d4479545a646f6ded8 Certificate serial: 019B7A5B5675289E3B8EA45C22E361349451 Authority key identifier: C7:46:AD:D8:DA:FE:99:F6:A7:D7:87:D4:47:95:45:A6:46:F6:DE:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0at2Nr-mfan14fUR5VFpkb23tg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/5SqsuyoErucRezmQTfvpY2XQz9g.roa Signing time: Thu 01 Jan 2026 16:19:24 +0000 ROA not before: Thu 01 Jan 2026 16:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197907 IP address blocks: 46.254.144.0/21 maxlen: 21 185.73.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.mft rsync://rpki.ripe.net/repository/DEFAULT/x0at2Nr-mfan14fUR5VFpkb23tg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:56:75:28:9e:3b:8e:a4:5c:22:e3:61:34:94:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c746add8dafe99f6a7d787d4479545a646f6ded8 Validity Not Before: Jan 1 16:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e52aacbb2a04aee7117b39904dfbe96365d0cfd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:1a:65:84:31:12:0c:3c:3a:89:90:27:79:83: 2b:9f:37:16:a8:c6:c5:2a:63:5c:4b:31:37:10:90: f3:75:f3:63:08:55:58:df:16:2a:a5:e5:30:0f:43: 8d:46:ec:47:ad:1b:40:18:57:8f:f4:7a:2c:3d:b6: b8:90:ac:3e:d0:a3:ad:b3:76:ac:d2:30:98:b4:3d: b3:37:0a:91:0b:7e:e3:48:40:e7:69:57:2b:17:49: f8:b8:f3:b7:9f:0c:15:4c:b6:3a:2e:c6:d0:3c:e7: 5e:26:08:6d:88:11:d4:f4:f1:77:2e:35:0c:75:fa: d4:d6:d6:2c:cb:f5:a4:c0:d6:4e:56:c9:c2:79:b2: c1:70:bd:63:ae:90:a0:c3:1b:9e:9d:b6:ce:3e:7f: 74:5f:7e:52:39:d7:83:b0:c2:75:4a:3a:e6:43:dc: 91:62:4a:ef:26:06:48:06:3c:ff:5f:ca:f6:bc:1c: a3:bc:9d:37:99:6b:44:a1:eb:9d:76:49:69:cc:f5: 11:ba:54:26:e7:2b:b2:5d:fd:3a:0c:64:c9:b3:9a: d5:f4:ee:48:06:2f:ee:d7:98:33:3b:80:13:4e:d6: 2c:2a:42:fc:cb:60:cd:4c:73:86:be:f7:db:c1:af: 9e:a7:db:f2:12:a0:fd:e4:aa:55:f6:88:18:4d:ef: ee:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:2A:AC:BB:2A:04:AE:E7:11:7B:39:90:4D:FB:E9:63:65:D0:CF:D8 X509v3 Authority Key Identifier: keyid:C7:46:AD:D8:DA:FE:99:F6:A7:D7:87:D4:47:95:45:A6:46:F6:DE:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0at2Nr-mfan14fUR5VFpkb23tg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/5SqsuyoErucRezmQTfvpY2XQz9g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.254.144.0/21 185.73.4.0/22 Signature Algorithm: sha256WithRSAEncryption 07:51:38:ab:ac:b5:8d:1a:6e:62:0c:3c:f1:e3:52:61:d8:b9: 06:3d:46:79:76:e2:4e:45:86:02:bb:51:7d:ef:c0:07:03:44: aa:2e:cd:61:43:9d:82:da:04:2f:62:1c:4d:64:f4:d6:66:a3: 23:bd:3f:7f:49:86:62:96:8e:19:0d:f8:d3:6d:2e:6f:3f:b6: 89:a1:4e:3a:10:5c:ec:84:99:07:72:6e:71:0f:10:f2:7b:1a: 89:6a:0e:55:a8:57:db:54:63:69:51:ca:34:ae:7b:a9:63:be: f0:cd:55:d8:ac:04:ad:1a:49:a2:cd:3e:9e:e9:bd:ec:1e:c6: 5b:c0:e8:a1:fc:6b:53:19:1f:80:d0:5e:32:40:d4:7c:aa:8d: 31:f5:02:a9:a5:ab:e5:bf:83:e0:bf:94:95:90:cf:c5:2f:ae: fe:01:ad:88:8a:4d:0e:d1:7d:53:34:cc:e2:a5:12:48:ba:3d: 87:c8:0a:27:09:c8:d9:73:ad:5e:13:15:50:1f:e9:14:9e:e4: 1e:78:6b:be:6f:2c:a9:2d:be:d3:fa:84:55:dc:f8:80:3b:42: 75:10:54:4e:03:10:5f:c7:c1:d6:07:af:0b:1a:ba:73:34:7d: f1:8a:e9:3f:ba:ee:34:5d:94:37:39:14:3a:ba:a3:dc:e2:9c: 16:51:e6:ac -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6W1Z1KJ47jqRcIuNhNJRRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NDZhZGQ4ZGFmZTk5ZjZhN2Q3ODdkNDQ3OTU0NWE2NDZm NmRlZDgwHhcNMjYwMTAxMTYxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTJhYWNiYjJhMDRhZWU3MTE3YjM5OTA0ZGZiZTk2MzY1ZDBjZmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4RplhDESDDw6iZAneYMrnzcWqMbF KmNcSzE3EJDzdfNjCFVY3xYqpeUwD0ONRuxHrRtAGFeP9HosPba4kKw+0KOts3as 0jCYtD2zNwqRC37jSEDnaVcrF0n4uPO3nwwVTLY6LsbQPOdeJghtiBHU9PF3LjUM dfrU1tYsy/WkwNZOVsnCebLBcL1jrpCgwxuenbbOPn90X35SOdeDsMJ1SjrmQ9yR YkrvJgZIBjz/X8r2vByjvJ03mWtEoeuddklpzPURulQm5yuyXf06DGTJs5rV9O5I Bi/u15gzO4ATTtYsKkL8y2DNTHOGvvfbwa+ep9vyEqD95KpV9ogYTe/uDwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOUqrLsqBK7nEXs5kE376WNl0M/YMB8GA1UdIwQY MBaAFMdGrdja/pn2p9eH1EeVRaZG9t7YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDBhdDJOci1tZmFuMTRmVVI1VkZwa2IyM3RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8zNzJhYWYtNTA2Mi00MTQ3LTg3N2It N2NiZmU3MzdhODI3LzEvNVNxc3V5b0VydWNSZXptUVRmdnBZMlhRejlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC8zNzJhYWYtNTA2Mi00MTQ3LTg3N2ItN2NiZmU3MzdhODI3 LzEveDBhdDJOci1tZmFuMTRmVVI1VkZwa2IyM3RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDLv6QAwQC uUkEMA0GCSqGSIb3DQEBCwUAA4IBAQAHUTirrLWNGm5iDDzx41Jh2LkGPUZ5duJO RYYCu1F978AHA0SqLs1hQ52C2gQvYhxNZPTWZqMjvT9/SYZilo4ZDfjTbS5vP7aJ oU46EFzshJkHcm5xDxDyexqJag5VqFfbVGNpUco0rnupY77wzVXYrAStGkmizT6e 6b3sHsZbwOih/GtTGR+A0F4yQNR8qo0x9QKppavlv4Pgv5SVkM/FL67+Aa2Iik0O 0X1TNMzipRJIuj2HyAonCcjZc61eExVQH+kUnuQeeGu+byypLb7T+oRV3PiAO0J1 EFROAxBfx8HWB68LGrpzNH3xiuk/uu40XZQ3ORQ6uqPc4pwWUeas -----END CERTIFICATE-----Generated at Mon Jan 12 00:03:30 2026 by rpki-client