This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/C5clDNKWWV0HBKYFKcpzORw8EhA.roa File: C5clDNKWWV0HBKYFKcpzORw8EhA.roa (raw, json) Hash identifier: XUJvNLXyYDdL2C6nEB+rx6DsIA04Nnq77ZyzZhlVv1Q= Subject key identifier: 0B:97:25:0C:D2:96:59:5D:07:04:A6:05:29:CA:73:39:1C:3C:12:10 Certificate issuer: /CN=8079afcba5a8762fb79f4e5e0d7a35ee84cd3df4 Certificate serial: 019B7CED48D1D03AA988C41C7F7221AB9F89 Authority key identifier: 80:79:AF:CB:A5:A8:76:2F:B7:9F:4E:5E:0D:7A:35:EE:84:CD:3D:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gHmvy6Wodi-3n05eDXo17oTNPfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/C5clDNKWWV0HBKYFKcpzORw8EhA.roa Signing time: Fri 02 Jan 2026 04:18:04 +0000 ROA not before: Fri 02 Jan 2026 04:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3356 IP address blocks: 193.19.196.0/24 maxlen: 24 193.19.197.0/24 maxlen: 24 194.125.246.0/24 maxlen: 24 194.125.247.0/24 maxlen: 24 195.22.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/gHmvy6Wodi-3n05eDXo17oTNPfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:48:d1:d0:3a:a9:88:c4:1c:7f:72:21:ab:9f:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8079afcba5a8762fb79f4e5e0d7a35ee84cd3df4 Validity Not Before: Jan 2 04:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b97250cd296595d0704a60529ca73391c3c1210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a9:17:36:f3:2a:1d:e3:d5:8b:e8:b9:6a:21: 9c:c2:72:1e:17:2f:8f:f1:87:f9:41:94:fe:13:1c: 61:91:9e:7b:01:50:7d:fd:ac:9a:a8:9b:1c:67:32: 9f:99:ad:e6:d5:df:91:da:1e:d2:c4:95:93:74:e4: cb:b8:b4:3f:e8:82:c2:ef:33:e2:b3:12:25:7f:a0: 6a:4f:05:c0:07:53:aa:cd:df:b5:2d:0a:08:58:52: ac:43:48:41:ef:af:49:2b:5a:68:46:1d:5a:d0:01: b0:f5:f9:95:34:ba:62:2f:4d:41:2a:fe:be:20:c4: f1:e4:c9:ce:b8:32:b3:4e:fa:7b:aa:95:b5:37:d8: 84:b2:34:7d:a1:d5:cd:4d:84:0c:dc:02:a1:1a:6f: 90:09:01:8f:e9:04:f4:a7:3b:4c:c8:94:d1:f4:9d: 10:54:b8:96:55:f0:eb:da:36:e6:d8:b2:23:a8:b0: 3a:c8:5d:99:7b:7c:29:1c:e5:7b:48:ba:23:64:21: 28:20:65:3e:63:1d:4f:3e:fa:64:4b:a3:00:b8:f3: f8:06:33:8e:b7:c1:1c:0e:c8:f1:16:77:82:06:b2: ff:c1:c2:fd:5d:3e:29:74:24:72:0a:f5:e6:37:f3: d0:0e:ae:26:fc:e5:a5:c9:5e:a1:01:cb:fe:e7:cc: 91:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:97:25:0C:D2:96:59:5D:07:04:A6:05:29:CA:73:39:1C:3C:12:10 X509v3 Authority Key Identifier: keyid:80:79:AF:CB:A5:A8:76:2F:B7:9F:4E:5E:0D:7A:35:EE:84:CD:3D:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHmvy6Wodi-3n05eDXo17oTNPfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/C5clDNKWWV0HBKYFKcpzORw8EhA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.19.196.0/23 194.125.246.0/23 195.22.158.0/24 Signature Algorithm: sha256WithRSAEncryption c5:ab:2d:96:5d:eb:25:0e:40:bd:4d:97:d9:e6:13:6f:67:10: 79:85:7f:b0:ab:d5:16:92:8a:82:b1:18:13:0d:a8:c7:f5:31: c1:31:96:56:4f:2d:8a:17:57:43:59:c1:41:74:eb:2d:de:e9: e1:8d:7d:6e:93:91:36:8c:c7:7e:13:4b:b1:b1:95:dc:03:d7: e8:98:24:93:a1:ef:94:2a:1e:bc:2d:18:1a:ae:c7:0d:12:a2: 7d:63:01:8d:53:2c:69:af:97:86:6e:99:9e:cc:1d:8d:05:cd: 0a:c1:fc:93:af:27:8a:79:a6:c3:fa:59:ad:e4:22:2e:84:0a: 84:cb:d1:9e:0e:c7:d8:1f:5b:c2:ab:44:e0:71:0e:1e:37:12: 05:91:0f:2f:47:b1:65:5b:b3:ea:ca:4f:5a:32:8b:3d:a9:12: 19:ac:80:2f:ce:15:4b:4e:ea:cd:63:8a:8c:1d:dc:0b:84:13: 51:81:6e:86:61:f2:33:6c:70:54:9f:06:a1:f3:8c:10:eb:78: 16:72:74:e6:c0:55:5b:cf:ad:d7:eb:41:99:a0:44:b2:f7:35: e3:5f:be:21:41:94:cf:2c:f5:a8:3a:99:ae:a3:34:54:e8:12: 40:4e:4c:de:32:1c:08:6b:2d:b1:65:27:92:66:37:4b:13:ac: 3c:08:38:a6 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt87UjR0DqpiMQcf3Ihq5+JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwNzlhZmNiYTVhODc2MmZiNzlmNGU1ZTBkN2EzNWVlODRj ZDNkZjQwHhcNMjYwMTAyMDQxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjk3MjUwY2QyOTY1OTVkMDcwNGE2MDUyOWNhNzMzOTFjM2MxMjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qkXNvMqHePVi+i5aiGcwnIeFy+P 8Yf5QZT+ExxhkZ57AVB9/ayaqJscZzKfma3m1d+R2h7SxJWTdOTLuLQ/6ILC7zPi sxIlf6BqTwXAB1Oqzd+1LQoIWFKsQ0hB769JK1poRh1a0AGw9fmVNLpiL01BKv6+ IMTx5MnOuDKzTvp7qpW1N9iEsjR9odXNTYQM3AKhGm+QCQGP6QT0pztMyJTR9J0Q VLiWVfDr2jbm2LIjqLA6yF2Ze3wpHOV7SLojZCEoIGU+Yx1PPvpkS6MAuPP4BjOO t8EcDsjxFneCBrL/wcL9XT4pdCRyCvXmN/PQDq4m/OWlyV6hAcv+58yRaQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFAuXJQzSllldBwSmBSnKczkcPBIQMB8GA1UdIwQY MBaAFIB5r8ulqHYvt59OXg16Ne6EzT30MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0htdnk2V29kaS0zbjA1ZURYbzE3b1ROUGZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9kNWViNmYtYjc4MS00ZDUyLTgyODMt ZDJlMTBjOTc2NDVmLzEvQzVjbEROS1dXVjBIQktZRktjcHpPUnc4RWhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9kNWViNmYtYjc4MS00ZDUyLTgyODMtZDJlMTBjOTc2NDVm LzEvZ0htdnk2V29kaS0zbjA1ZURYbzE3b1ROUGZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBwRPEAwQB wn32AwQAwxaeMA0GCSqGSIb3DQEBCwUAA4IBAQDFqy2WXeslDkC9TZfZ5hNvZxB5 hX+wq9UWkoqCsRgTDajH9THBMZZWTy2KF1dDWcFBdOst3unhjX1uk5E2jMd+E0ux sZXcA9fomCSToe+UKh68LRgarscNEqJ9YwGNUyxpr5eGbpmezB2NBc0KwfyTryeK eabD+lmt5CIuhAqEy9GeDsfYH1vCq0TgcQ4eNxIFkQ8vR7FlW7Pqyk9aMos9qRIZ rIAvzhVLTurNY4qMHdwLhBNRgW6GYfIzbHBUnwah84wQ63gWcnTmwFVbz63X60GZ oESy9zXjX74hQZTPLPWoOpmuozRU6BJATkzeMhwIay2xZSeSZjdLE6w8CDim -----END CERTIFICATE-----Generated at Fri Jan 23 16:02:19 2026 by rpki-client