This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/f5gWLGMoVs71do07jP9toMBHlGM.roa File: f5gWLGMoVs71do07jP9toMBHlGM.roa (raw, json) Hash identifier: fE5TT2rstjKMkRg2cWNBzrR2sc5zbrJgFTmX1dESgnI= Subject key identifier: 7F:98:16:2C:63:28:56:CE:F5:76:8D:3B:8C:FF:6D:A0:C0:47:94:63 Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da Certificate serial: 019B7E37A87EAEB323A1A2DCEFB4D0CA9923 Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/f5gWLGMoVs71do07jP9toMBHlGM.roa Signing time: Fri 02 Jan 2026 10:18:55 +0000 ROA not before: Fri 02 Jan 2026 10:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 4213 IP address blocks: 212.56.53.0/24 maxlen: 24 212.56.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 00:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:a8:7e:ae:b3:23:a1:a2:dc:ef:b4:d0:ca:99:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da Validity Not Before: Jan 2 10:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f98162c632856cef5768d3b8cff6da0c0479463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f3:35:d9:e5:18:42:3c:59:4f:55:ee:0f:89: 59:83:97:e2:ce:5d:a6:79:96:53:51:80:5b:09:02: 70:b2:c8:f0:f2:b5:32:a0:de:41:3a:ff:f6:f4:1e: de:7e:13:7e:fc:e0:67:30:8d:41:3e:37:7b:88:cc: a9:b3:69:c1:01:97:29:55:80:a7:72:e8:0a:6d:a5: 29:56:9f:61:97:30:bf:db:f8:6a:d1:ab:38:ec:46: d8:d5:6a:59:cf:fb:65:b2:7b:bf:ff:87:a2:88:d5: bd:86:bd:f9:ea:c0:ac:19:2a:5b:ae:4c:5c:4f:db: 5b:7c:68:6d:ab:30:67:1b:5a:1f:25:ad:09:fb:5a: 92:4b:7b:82:1a:74:8c:7a:62:76:5b:99:33:53:e5: b1:1c:73:b4:3b:21:77:01:3d:0a:23:55:0b:9c:c3: 92:9b:cf:5f:56:f8:b0:fa:6f:3e:67:92:5b:13:19: b5:01:11:68:72:58:a9:27:12:e0:17:04:23:5f:bc: 98:72:66:07:15:61:a0:a1:3f:e0:5f:c6:cb:42:c1: da:84:08:5a:37:02:8e:58:13:1c:72:4c:95:31:85: 17:42:94:8b:3b:7a:2b:2e:b7:15:bc:4d:69:e6:77: 28:73:fa:bd:39:4f:04:8c:70:66:58:52:21:da:e1: 51:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:98:16:2C:63:28:56:CE:F5:76:8D:3B:8C:FF:6D:A0:C0:47:94:63 X509v3 Authority Key Identifier: keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/f5gWLGMoVs71do07jP9toMBHlGM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.56.53.0-212.56.54.255 Signature Algorithm: sha256WithRSAEncryption af:6e:1e:7e:ee:fd:70:48:e9:b3:0e:ad:cc:f4:f0:b6:15:9c: bb:4e:92:37:8f:00:69:34:ff:37:1f:0f:5f:9e:47:d9:50:a2: 24:ec:8c:f1:59:db:fb:f6:c1:a8:57:f5:80:9c:97:18:02:3f: 29:9b:5e:7d:5c:50:78:d9:de:d0:61:27:ee:24:74:7b:eb:58: 0f:27:d5:7e:fe:42:2b:04:59:b3:57:e3:fa:03:f5:4d:17:ac: ed:27:71:61:31:22:d9:db:fd:3a:1a:6a:66:95:66:4c:e8:78: bb:13:be:c1:b3:65:f2:18:29:d5:0d:c8:fa:94:18:50:70:e7: 15:3f:e1:6e:8d:c1:7f:38:41:c0:71:e1:7c:04:26:19:5d:f7: 00:61:a3:eb:5f:0a:c0:f7:c4:c2:b9:c6:ea:85:d7:47:e9:77: 6e:c1:27:ad:27:aa:58:8e:4c:68:33:a2:02:c0:44:20:7f:60: 92:04:f9:f4:d9:45:5c:1b:88:c9:c0:33:70:50:b9:e4:a3:a6: 5c:32:07:9d:ac:54:a0:83:86:a3:7c:4e:52:4a:95:f1:b9:14: ee:66:08:e1:30:c6:d4:d6:58:0e:98:82:63:73:78:06:d7:03: bb:5a:90:61:21:6f:bf:64:80:5e:30:87:2f:57:e6:5e:b5:26: cd:ad:ec:98 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt+N6h+rrMjoaLc77TQypkjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5 NTkyZGEwHhcNMjYwMTAyMTAxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Zjk4MTYyYzYzMjg1NmNlZjU3NjhkM2I4Y2ZmNmRhMGMwNDc5NDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vM12eUYQjxZT1XuD4lZg5fizl2m eZZTUYBbCQJwssjw8rUyoN5BOv/29B7efhN+/OBnMI1BPjd7iMyps2nBAZcpVYCn cugKbaUpVp9hlzC/2/hq0as47EbY1WpZz/tlsnu//4eiiNW9hr356sCsGSpbrkxc T9tbfGhtqzBnG1ofJa0J+1qSS3uCGnSMemJ2W5kzU+WxHHO0OyF3AT0KI1ULnMOS m89fVviw+m8+Z5JbExm1ARFoclipJxLgFwQjX7yYcmYHFWGgoT/gX8bLQsHahAha NwKOWBMcckyVMYUXQpSLO3orLrcVvE1p5ncoc/q9OU8EjHBmWFIh2uFRKQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFH+YFixjKFbO9XaNO4z/baDAR5RjMB8GA1UdIwQY MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt ZjVmYjcxYjlhNTFmLzEvZjVnV0xHTW9WczcxZG8wN2pQOXRvTUJIbEdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADUODUD BADUODYwDQYJKoZIhvcNAQELBQADggEBAK9uHn7u/XBI6bMOrcz08LYVnLtOkjeP AGk0/zcfD1+eR9lQoiTsjPFZ2/v2wahX9YCclxgCPymbXn1cUHjZ3tBhJ+4kdHvr WA8n1X7+QisEWbNX4/oD9U0XrO0ncWExItnb/ToaamaVZkzoeLsTvsGzZfIYKdUN yPqUGFBw5xU/4W6NwX84QcBx4XwEJhld9wBho+tfCsD3xMK5xuqF10fpd27BJ60n qliOTGgzogLARCB/YJIE+fTZRVwbiMnAM3BQueSjplwyB52sVKCDhqN8TlJKlfG5 FO5mCOEwxtTWWA6YgmNzeAbXA7takGEhb79kgF4why9X5l61Js2t7Jg= -----END CERTIFICATE-----Generated at Fri Jan 23 04:39:26 2026 by rpki-client