This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/B4_h3qZ0cBInl-J4YLUVshOTjNw.roa File: B4_h3qZ0cBInl-J4YLUVshOTjNw.roa (raw, json) Hash identifier: sxHFaFskx2wqKSHiJSPph9GfI5AdMVHabJgxAgh7asc= Subject key identifier: 07:8F:E1:DE:A6:74:70:12:27:97:E2:78:60:B5:15:B2:13:93:8C:DC Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56 Certificate serial: 019B7C80606A76DC2B468C46420BDA7BEA0E Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/B4_h3qZ0cBInl-J4YLUVshOTjNw.roa Signing time: Fri 02 Jan 2026 02:19:06 +0000 ROA not before: Fri 02 Jan 2026 02:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57784 IP address blocks: 5.133.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:60:6a:76:dc:2b:46:8c:46:42:0b:da:7b:ea:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56 Validity Not Before: Jan 2 02:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=078fe1dea67470122797e27860b515b213938cdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d7:dd:50:9c:b9:20:97:1a:ec:bb:1e:2d:6a: 0e:61:4c:d1:e1:45:61:ab:42:1b:76:df:2a:2d:8b: b0:c2:91:a9:1a:30:3d:2e:8e:9d:c0:33:d6:07:5f: e6:93:87:40:45:42:fb:fd:9c:1f:d4:1d:6a:59:18: 7e:b0:a1:39:08:fe:66:e6:3f:4f:2b:4a:51:1b:fa: 47:7d:57:67:f5:cf:17:6c:f7:d6:33:bd:ab:a0:86: 82:ca:83:c0:35:4c:f4:39:3e:9f:e7:a9:76:90:e7: 0d:8f:9a:e7:af:f1:16:9c:45:d4:a6:63:26:41:a4: e2:93:27:5f:08:38:74:ae:cf:7b:bf:3a:df:c0:8f: 1a:ea:86:1d:c6:39:73:50:3e:32:86:32:a2:34:e7: 5c:19:98:65:26:73:f2:c1:b7:ef:fd:05:6a:1c:bc: 6b:b2:90:71:f8:bd:90:57:de:75:fe:a0:cd:c7:6b: f6:90:a7:c1:9f:69:c2:cd:99:13:ac:c8:9e:7a:26: 5d:46:ee:d3:9b:1a:e3:eb:c8:c4:02:0d:1e:3b:bc: 9b:7a:4e:ff:f3:a9:59:d2:8b:5e:5f:db:0d:3f:05: 72:9f:b7:66:ff:cb:1d:f1:4a:d1:6d:b9:14:05:04: db:45:e9:dd:f1:8c:9e:3a:ab:e5:2d:a3:9f:f1:8f: b7:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:8F:E1:DE:A6:74:70:12:27:97:E2:78:60:B5:15:B2:13:93:8C:DC X509v3 Authority Key Identifier: keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/B4_h3qZ0cBInl-J4YLUVshOTjNw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.133.108.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:48:fb:90:f0:f2:3a:2a:ce:2d:d8:fd:f4:38:f7:b2:9b:eb: c7:19:7f:0b:09:8a:8a:5b:6c:a3:6b:f9:0d:77:09:4b:20:30: 6c:88:ee:70:20:38:98:72:dc:0c:ac:85:b2:49:f3:e4:7b:8f: 31:1d:27:ee:89:43:4b:25:79:b8:0e:3d:99:61:55:bd:61:ff: 4e:31:53:1b:f7:cb:c2:5b:11:67:09:4c:5d:7d:46:13:17:44: 97:f7:02:5e:fc:95:c9:eb:8d:43:e0:cc:fe:f5:af:c7:42:be: a6:c0:a7:8d:6a:03:8c:5c:37:8d:9f:84:87:c7:93:e6:2c:05: a9:22:0e:34:36:48:e7:6d:2a:e5:8a:6a:31:18:91:e1:03:30: 42:7b:6d:ee:61:04:8d:05:63:ea:52:3d:c2:0a:66:62:53:00: 69:95:bf:aa:08:32:18:6a:e1:99:10:3d:e7:63:f7:59:06:b3: 37:fd:85:e4:f4:39:a0:5b:7f:13:f9:f1:b3:ac:f2:aa:a3:75: cf:15:07:ff:cd:98:14:d1:be:bc:e2:43:b5:bd:b4:5c:2a:a7: 49:e3:44:7a:c4:34:0b:b3:bc:ab:dc:93:3c:7e:10:d6:5f:2c: 29:9c:92:b9:ea:72:9e:a7:45:49:a9:f7:d9:30:61:b2:4b:72: f4:3d:68:fc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gGBqdtwrRoxGQgvae+oOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0 ZjVlNTYwHhcNMjYwMTAyMDIxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzhmZTFkZWE2NzQ3MDEyMjc5N2UyNzg2MGI1MTViMjEzOTM4Y2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttfdUJy5IJca7LseLWoOYUzR4UVh q0Ibdt8qLYuwwpGpGjA9Lo6dwDPWB1/mk4dARUL7/Zwf1B1qWRh+sKE5CP5m5j9P K0pRG/pHfVdn9c8XbPfWM72roIaCyoPANUz0OT6f56l2kOcNj5rnr/EWnEXUpmMm QaTikydfCDh0rs97vzrfwI8a6oYdxjlzUD4yhjKiNOdcGZhlJnPywbfv/QVqHLxr spBx+L2QV951/qDNx2v2kKfBn2nCzZkTrMieeiZdRu7Tmxrj68jEAg0eO7ybek7/ 86lZ0oteX9sNPwVyn7dm/8sd8UrRbbkUBQTbRend8YyeOqvlLaOf8Y+3NQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAeP4d6mdHASJ5fieGC1FbITk4zcMB8GA1UdIwQY MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt YmE5OGYxMTIyMTIxLzEvQjRfaDNxWjBjQklubC1KNFlMVVZzaE9Uak53LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABYVsMA0G CSqGSIb3DQEBCwUAA4IBAQBeSPuQ8PI6Ks4t2P30OPeym+vHGX8LCYqKW2yja/kN dwlLIDBsiO5wIDiYctwMrIWySfPke48xHSfuiUNLJXm4Dj2ZYVW9Yf9OMVMb98vC WxFnCUxdfUYTF0SX9wJe/JXJ641D4Mz+9a/HQr6mwKeNagOMXDeNn4SHx5PmLAWp Ig40NkjnbSrlimoxGJHhAzBCe23uYQSNBWPqUj3CCmZiUwBplb+qCDIYauGZED3n Y/dZBrM3/YXk9DmgW38T+fGzrPKqo3XPFQf/zZgU0b684kO1vbRcKqdJ40R6xDQL s7yr3JM8fhDWXywpnJK56nKep0VJqffZMGGyS3L0PWj8 -----END CERTIFICATE-----Generated at Sat Jan 10 03:59:12 2026 by rpki-client