This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/S5-5DqjXjGZJI7oCJmnl6UWu9FI.roa File: S5-5DqjXjGZJI7oCJmnl6UWu9FI.roa (raw, json) Hash identifier: J0/xWoy9mQokTtRDX2HRMXfp591q5zCWCS14ynjQQ3A= Subject key identifier: 4B:9F:B9:0E:A8:D7:8C:66:49:23:BA:02:26:69:E5:E9:45:AE:F4:52 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A2DDCC3E81ED88668581B123122A9B Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/S5-5DqjXjGZJI7oCJmnl6UWu9FI.roa Signing time: Thu 01 Jan 2026 08:18:18 +0000 ROA not before: Thu 01 Jan 2026 08:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15504 IP address blocks: 87.121.106.0/24 maxlen: 24 87.121.107.0/24 maxlen: 24 93.123.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:dd:cc:3e:81:ed:88:66:85:81:b1:23:12:2a:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b9fb90ea8d78c664923ba022669e5e945aef452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d0:a4:c3:9d:0e:a9:68:b1:3d:74:1f:ec:81: 34:c4:e0:7d:db:8a:dd:c5:22:a8:de:93:71:d3:d6: b2:77:49:5a:c9:2d:78:1b:3c:c4:5f:48:53:19:e5: d3:0e:8b:7e:78:37:f9:fc:68:ed:b2:1d:58:94:b7: a8:92:c3:86:65:63:81:40:39:08:da:ab:26:ed:00: 81:3a:ae:7f:6a:71:30:d5:da:05:f1:a1:70:09:be: a0:2e:f9:08:f4:80:7d:ae:1c:c4:9e:9a:61:2f:13: a4:f0:34:fe:15:5c:f3:0b:0a:1e:6f:c8:9c:83:6a: c0:7c:78:74:da:1c:05:7a:cd:93:3e:d4:cd:04:ad: a1:3b:a7:f8:09:d0:d1:19:13:64:79:47:5b:a8:a3: fb:6f:8c:4c:45:1e:3d:5c:b6:fd:ad:f0:cd:0b:3f: 62:be:02:6e:5d:cd:42:13:3b:6c:cb:d8:db:67:12: 0f:87:87:ea:4b:e3:c2:4c:32:16:5a:97:29:ae:ac: 74:8d:a7:1a:90:8a:f5:88:d7:30:9d:03:2f:03:fe: 41:d9:3e:6f:b7:92:46:09:53:fe:d8:92:1c:ea:95: 2c:52:51:af:46:5e:9c:b8:07:d1:1e:81:35:23:f0: 98:6f:ab:3a:ba:98:94:18:50:ae:e7:91:2e:d5:c3: 79:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:9F:B9:0E:A8:D7:8C:66:49:23:BA:02:26:69:E5:E9:45:AE:F4:52 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/S5-5DqjXjGZJI7oCJmnl6UWu9FI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.121.106.0/23 93.123.19.0/24 Signature Algorithm: sha256WithRSAEncryption 52:fd:a0:16:03:bb:c7:83:89:45:bf:e3:29:70:85:f3:76:eb: 53:d6:e1:1d:a2:5f:c3:cb:0b:b7:de:da:47:8e:4c:af:34:92: 0a:a0:96:22:44:2d:07:e7:62:ed:da:8f:0f:d6:27:8d:c5:d4: 7d:2b:8b:9d:44:6f:27:4f:dc:11:32:bf:e4:28:15:12:6d:33: e7:7c:04:71:b2:10:ec:ad:3b:3f:ca:9c:76:07:44:fc:8a:75: c1:2f:18:20:a3:a4:a5:d4:7d:30:6f:70:1c:d5:14:95:c5:27: cb:40:90:0f:e3:a9:f8:a6:46:64:f2:d5:62:99:f5:a5:6d:8d: 19:d4:78:12:a3:c9:12:fc:86:10:55:ea:d3:67:fa:7f:6c:d0: b0:69:5d:db:dc:05:3e:7d:5c:55:1b:3c:e7:ce:e0:76:f0:d4: 67:dc:f7:a3:ff:9e:4d:b4:27:86:11:97:cc:f3:1a:8f:ac:8b: e4:90:2d:dd:dd:88:ea:c7:40:bf:4c:71:ec:cb:b1:c4:cf:4b: 9f:2b:de:80:cc:12:66:bf:da:5d:3a:15:ac:6b:80:7a:81:f9: 82:3f:aa:49:7f:b7:da:3a:0c:61:f9:d7:42:5c:68:cf:af:a4: f1:8f:f1:77:66:14:dd:c1:3b:e5:a1:53:78:d9:9a:29:a9:f4: 7f:04:9f:6b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4ot3MPoHtiGaFgbEjEiqbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjlmYjkwZWE4ZDc4YzY2NDkyM2JhMDIyNjY5ZTVlOTQ1YWVmNDUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNCkw50OqWixPXQf7IE0xOB924rd xSKo3pNx09ayd0layS14GzzEX0hTGeXTDot+eDf5/Gjtsh1YlLeoksOGZWOBQDkI 2qsm7QCBOq5/anEw1doF8aFwCb6gLvkI9IB9rhzEnpphLxOk8DT+FVzzCwoeb8ic g2rAfHh02hwFes2TPtTNBK2hO6f4CdDRGRNkeUdbqKP7b4xMRR49XLb9rfDNCz9i vgJuXc1CEztsy9jbZxIPh4fqS+PCTDIWWpcprqx0jacakIr1iNcwnQMvA/5B2T5v t5JGCVP+2JIc6pUsUlGvRl6cuAfRHoE1I/CYb6s6upiUGFCu55Eu1cN55QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEufuQ6o14xmSSO6AiZp5elFrvRSMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvUzUtNURxalhqR1pKSTdvQ0ptbmw2VVd1OUZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBV3lqAwQA XXsTMA0GCSqGSIb3DQEBCwUAA4IBAQBS/aAWA7vHg4lFv+MpcIXzdutT1uEdol/D ywu33tpHjkyvNJIKoJYiRC0H52Lt2o8P1ieNxdR9K4udRG8nT9wRMr/kKBUSbTPn fARxshDsrTs/ypx2B0T8inXBLxggo6Sl1H0wb3Ac1RSVxSfLQJAP46n4pkZk8tVi mfWlbY0Z1HgSo8kS/IYQVerTZ/p/bNCwaV3b3AU+fVxVGzznzuB28NRn3Pej/55N tCeGEZfM8xqPrIvkkC3d3Yjqx0C/THHsy7HEz0ufK96AzBJmv9pdOhWsa4B6gfmC P6pJf7faOgxh+ddCXGjPr6Txj/F3ZhTdwTvloVN42ZopqfR/BJ9r -----END CERTIFICATE-----Generated at Fri Jan 2 12:09:36 2026 by rpki-client