This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/i5WP_AihTIXhPy_BVXYv71HxOto.roa File: i5WP_AihTIXhPy_BVXYv71HxOto.roa (raw, json) Hash identifier: VJGbYlBp9HGyGJZxGUnm0bEpFbqRPbJagnJqTdbqGUg= Subject key identifier: 8B:95:8F:FC:08:A1:4C:85:E1:3F:2F:C1:55:76:2F:EF:51:F1:3A:DA Certificate issuer: /CN=5e67660af7523c61b7f95d08488d583e9d514f6b Certificate serial: 019B7EA4F990A500CEFE1B939A825B62A9A6 Authority key identifier: 5E:67:66:0A:F7:52:3C:61:B7:F9:5D:08:48:8D:58:3E:9D:51:4F:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/i5WP_AihTIXhPy_BVXYv71HxOto.roa Signing time: Fri 02 Jan 2026 12:18:19 +0000 ROA not before: Fri 02 Jan 2026 12:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56971 IP address blocks: 185.31.200.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 18:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:f9:90:a5:00:ce:fe:1b:93:9a:82:5b:62:a9:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e67660af7523c61b7f95d08488d583e9d514f6b Validity Not Before: Jan 2 12:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b958ffc08a14c85e13f2fc155762fef51f13ada Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c9:49:71:14:d2:d1:d3:c2:e1:78:5c:9c:16: 39:44:5d:1d:bf:e9:e3:e9:cc:eb:1e:cf:d5:47:66: 41:75:9f:20:70:af:35:0c:af:6d:6c:5a:a6:b2:2c: 75:96:c1:fd:d9:fa:0d:3d:a2:e2:97:b0:e6:19:9f: d6:92:d8:d8:5b:ca:57:6f:b2:73:ec:73:62:f9:3c: c0:10:cf:de:bc:38:74:a4:e0:41:64:a5:47:59:c7: f4:04:42:84:8a:16:70:d9:48:7c:52:af:42:65:f1: 0b:4b:39:14:1d:5d:e1:69:fb:d2:29:7b:82:bf:45: 15:2d:0e:f3:d6:9e:43:ee:63:66:aa:58:ff:30:92: 3a:d1:2b:9d:4e:b7:00:76:2c:58:bd:15:c1:b4:d7: 66:83:cd:81:5d:9c:a7:8a:d5:a1:21:d0:3b:8e:b1: 13:2d:2d:ae:d9:5f:8e:4f:c6:77:a8:ae:a8:2c:2e: b2:f7:e8:2c:7e:49:79:c9:f1:ec:4f:7a:ef:9d:43: 44:f6:b2:0b:dd:43:bc:75:4c:88:34:cb:ff:9d:a4: 2b:19:04:64:fc:ec:82:a7:95:6c:d2:51:d3:08:61: d7:cf:43:48:cc:bd:7f:a6:94:ee:b4:de:7d:a4:d3: 22:d9:45:71:c5:c7:7b:44:5b:96:5a:2c:91:28:c0: e2:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:95:8F:FC:08:A1:4C:85:E1:3F:2F:C1:55:76:2F:EF:51:F1:3A:DA X509v3 Authority Key Identifier: keyid:5E:67:66:0A:F7:52:3C:61:B7:F9:5D:08:48:8D:58:3E:9D:51:4F:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/i5WP_AihTIXhPy_BVXYv71HxOto.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.31.200.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:60:c2:15:cb:6e:a4:64:6f:f2:7c:23:fe:78:7d:79:09:ea: e3:12:00:76:6c:c6:4c:2f:03:19:26:54:68:68:78:b6:61:ce: 52:21:6d:e2:ec:9a:68:6b:6f:6b:0f:22:2c:8e:68:93:22:cc: 6e:38:1d:fd:f5:93:2b:9d:20:fe:b3:0a:61:39:c9:56:a9:8d: e8:05:52:e0:38:04:24:35:8a:9c:83:89:bb:77:ef:a6:69:47: 4d:e2:53:a2:71:57:9d:a0:e7:ac:5d:6e:ab:9b:88:03:f1:91: bd:97:ef:87:a1:fe:b6:ea:f1:f3:ac:eb:38:88:e7:2f:cc:97: 07:d3:b5:94:74:0b:ac:c0:68:57:91:26:1a:0b:16:42:92:ad: ad:17:42:58:55:41:10:a7:33:06:bc:a8:5b:54:03:b5:23:10: 91:d2:96:51:42:94:c8:cb:a4:fd:f3:89:ad:83:4c:90:0d:86: 70:f3:4e:c3:1b:25:e1:27:23:a6:ec:28:ef:0c:92:93:ed:42: ad:95:df:3a:ea:e2:db:25:16:94:12:9b:4d:45:37:8b:50:21: 16:68:72:c9:6c:de:7d:8e:be:57:e8:18:80:a9:3a:e4:f5:3d: 81:e0:1c:1d:12:fd:f4:f0:6b:7e:24:9b:26:dc:7a:15:dc:cc: 13:13:7c:4f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pPmQpQDO/huTmoJbYqmmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNjc2NjBhZjc1MjNjNjFiN2Y5NWQwODQ4OGQ1ODNlOWQ1 MTRmNmIwHhcNMjYwMTAyMTIxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Yjk1OGZmYzA4YTE0Yzg1ZTEzZjJmYzE1NTc2MmZlZjUxZjEzYWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsclJcRTS0dPC4XhcnBY5RF0dv+nj 6czrHs/VR2ZBdZ8gcK81DK9tbFqmsix1lsH92foNPaLil7DmGZ/WktjYW8pXb7Jz 7HNi+TzAEM/evDh0pOBBZKVHWcf0BEKEihZw2Uh8Uq9CZfELSzkUHV3hafvSKXuC v0UVLQ7z1p5D7mNmqlj/MJI60SudTrcAdixYvRXBtNdmg82BXZynitWhIdA7jrET LS2u2V+OT8Z3qK6oLC6y9+gsfkl5yfHsT3rvnUNE9rIL3UO8dUyINMv/naQrGQRk /OyCp5Vs0lHTCGHXz0NIzL1/ppTutN59pNMi2UVxxcd7RFuWWiyRKMDiiQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIuVj/wIoUyF4T8vwVV2L+9R8TraMB8GA1UdIwQY MBaAFF5nZgr3Ujxht/ldCEiNWD6dUU9rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWG1kbUN2ZFNQR0czLVYwSVNJMVlQcDFSVDJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85Nzg2ZGEtMWY0Yy00MDhjLWIyMDIt MDBkMmZhYzVmMDEwLzEvaTVXUF9BaWhUSVhoUHlfQlZYWXY3MUh4T3RvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85Nzg2ZGEtMWY0Yy00MDhjLWIyMDItMDBkMmZhYzVmMDEw LzEvWG1kbUN2ZFNQR0czLVYwSVNJMVlQcDFSVDJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuR/IMA0G CSqGSIb3DQEBCwUAA4IBAQAtYMIVy26kZG/yfCP+eH15CerjEgB2bMZMLwMZJlRo aHi2Yc5SIW3i7Jpoa29rDyIsjmiTIsxuOB399ZMrnSD+swphOclWqY3oBVLgOAQk NYqcg4m7d++maUdN4lOicVedoOesXW6rm4gD8ZG9l++Hof626vHzrOs4iOcvzJcH 07WUdAuswGhXkSYaCxZCkq2tF0JYVUEQpzMGvKhbVAO1IxCR0pZRQpTIy6T984mt g0yQDYZw807DGyXhJyOm7CjvDJKT7UKtld866uLbJRaUEptNRTeLUCEWaHLJbN59 jr5X6BiAqTrk9T2B4BwdEv308Gt+JJsm3HoV3MwTE3xP -----END CERTIFICATE-----Generated at Thu Feb 5 02:51:19 2026 by rpki-client