This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/5IFZ-RmjX0QAE3XiRGeeU_gKW5s.roa File: 5IFZ-RmjX0QAE3XiRGeeU_gKW5s.roa (raw, json) Hash identifier: x/Xn+2RJGz1zNEVIxZWPaaeHvskHVXZOixdJtJ5ELpU= Subject key identifier: E4:81:59:F9:19:A3:5F:44:00:13:75:E2:44:67:9E:53:F8:0A:5B:9B Certificate issuer: /CN=1e050645d69ce781e490c0f3c4995ee6d4e6078b Certificate serial: 019B7C8047A8CCA3B5C7C35B8D77808DA1F3 Authority key identifier: 1E:05:06:45:D6:9C:E7:81:E4:90:C0:F3:C4:99:5E:E6:D4:E6:07:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgUGRdac54HkkMDzxJle5tTmB4s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/5IFZ-RmjX0QAE3XiRGeeU_gKW5s.roa Signing time: Fri 02 Jan 2026 02:19:00 +0000 ROA not before: Fri 02 Jan 2026 02:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35357 IP address blocks: 92.119.132.0/22 maxlen: 22 92.119.132.0/23 maxlen: 23 92.119.132.0/24 maxlen: 24 92.119.133.0/24 maxlen: 24 92.119.134.0/24 maxlen: 24 92.119.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.mft rsync://rpki.ripe.net/repository/DEFAULT/HgUGRdac54HkkMDzxJle5tTmB4s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:47:a8:cc:a3:b5:c7:c3:5b:8d:77:80:8d:a1:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e050645d69ce781e490c0f3c4995ee6d4e6078b Validity Not Before: Jan 2 02:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e48159f919a35f44001375e244679e53f80a5b9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d5:99:fe:35:46:e8:bc:d5:70:f0:3a:94:ae: 73:7d:6c:f9:44:88:01:83:2b:c7:d4:74:d3:94:a9: d8:7c:d9:f8:31:b1:aa:a5:f2:69:62:85:fe:1a:77: 7d:b8:e0:87:59:66:dc:92:8f:c0:9e:c1:eb:00:16: 09:a3:c5:d0:30:ab:b5:19:bb:96:d9:1d:43:9e:7f: f0:91:29:c4:f4:d7:4f:de:5f:2d:54:21:a7:bf:33: fd:38:2b:9d:0c:9c:2a:6b:7d:01:4e:b4:10:7d:6e: 27:db:9d:6c:c6:fb:1e:91:73:70:80:ac:3a:56:da: 8d:26:02:57:db:86:3b:04:77:77:91:89:e1:a3:13: b6:c2:03:15:b1:d3:03:55:67:91:73:ee:8d:e2:27: 04:ab:53:e7:1f:fd:80:98:16:ed:85:8c:9b:ac:f5: 02:e7:2a:e3:23:e5:63:9f:68:e7:0d:b5:fb:ac:55: a2:5d:92:d5:90:41:a8:f1:05:ec:9b:00:c3:6a:67: 4d:66:12:85:4d:d7:70:6f:d4:50:e4:ee:e8:ae:0c: f8:04:01:d1:65:3c:b3:69:d9:28:4f:15:0f:7c:26: 31:e5:5a:27:90:2c:30:45:52:a8:21:b6:12:b0:49: 13:e5:e1:36:57:11:7d:bd:b5:ce:61:f8:95:d6:8c: 8b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:81:59:F9:19:A3:5F:44:00:13:75:E2:44:67:9E:53:F8:0A:5B:9B X509v3 Authority Key Identifier: keyid:1E:05:06:45:D6:9C:E7:81:E4:90:C0:F3:C4:99:5E:E6:D4:E6:07:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgUGRdac54HkkMDzxJle5tTmB4s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/5IFZ-RmjX0QAE3XiRGeeU_gKW5s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.119.132.0/22 Signature Algorithm: sha256WithRSAEncryption 6e:35:c8:f7:64:03:1d:37:5e:f0:a9:8c:b8:4f:ce:a0:a2:5e: 56:3d:ed:19:22:f1:0c:0c:a9:02:97:63:83:fa:0a:ca:0c:08: 0a:1a:2b:15:05:34:33:de:33:46:43:7b:9f:f6:fb:bf:66:1d: ac:54:4b:69:fc:b2:02:b2:7b:19:03:c4:4f:b6:c8:99:d8:7b: 16:ab:3b:31:ef:d0:4c:5e:3b:e5:33:74:0b:f0:d4:bd:01:58: 9b:12:87:83:c6:fe:fc:c8:8e:c6:03:ef:68:0f:ec:45:23:7f: 1b:b3:f3:48:c4:2d:78:df:e1:63:1d:fb:f0:38:4a:4c:82:06: 34:45:ea:27:44:66:4c:f6:35:a5:9d:2c:fb:c5:3f:2c:81:13: 72:7d:11:5b:54:73:7c:0e:c1:b6:07:89:2f:bd:b3:44:6b:63: 82:ea:78:e2:42:5a:d0:bb:da:9d:68:83:f6:5b:51:f8:3e:ed: 3c:82:12:51:95:3a:6f:b9:8f:dc:a3:8d:47:3a:20:c2:74:05: 9e:6a:71:d6:65:8f:02:43:59:e0:2d:7a:ae:4e:e4:61:6e:aa: ae:31:7e:74:12:a5:7c:28:2d:1e:ce:15:6f:33:cc:8a:73:7f: c2:f9:17:6a:e5:e1:15:66:d6:f4:95:36:77:6f:48:1c:49:f8: e5:93:99:d2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gEeozKO1x8NbjXeAjaHzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMDUwNjQ1ZDY5Y2U3ODFlNDkwYzBmM2M0OTk1ZWU2ZDRl NjA3OGIwHhcNMjYwMTAyMDIxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDgxNTlmOTE5YTM1ZjQ0MDAxMzc1ZTI0NDY3OWU1M2Y4MGE1YjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttWZ/jVG6LzVcPA6lK5zfWz5RIgB gyvH1HTTlKnYfNn4MbGqpfJpYoX+Gnd9uOCHWWbcko/AnsHrABYJo8XQMKu1GbuW 2R1Dnn/wkSnE9NdP3l8tVCGnvzP9OCudDJwqa30BTrQQfW4n251sxvsekXNwgKw6 VtqNJgJX24Y7BHd3kYnhoxO2wgMVsdMDVWeRc+6N4icEq1PnH/2AmBbthYybrPUC 5yrjI+Vjn2jnDbX7rFWiXZLVkEGo8QXsmwDDamdNZhKFTddwb9RQ5O7orgz4BAHR ZTyzadkoTxUPfCYx5VonkCwwRVKoIbYSsEkT5eE2VxF9vbXOYfiV1oyLwQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOSBWfkZo19EABN14kRnnlP4ClubMB8GA1UdIwQY MBaAFB4FBkXWnOeB5JDA88SZXubU5geLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGdVR1JkYWM1NEhra01EenhKbGU1dFRtQjRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9jYjNhZjAtMDU2ZC00Mjc3LWE2ZGEt MjI3YTg2YzQ3MmNlLzEvNUlGWi1SbWpYMFFBRTNYaVJHZWVVX2dLVzVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9jYjNhZjAtMDU2ZC00Mjc3LWE2ZGEtMjI3YTg2YzQ3MmNl LzEvSGdVR1JkYWM1NEhra01EenhKbGU1dFRtQjRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXHeEMA0G CSqGSIb3DQEBCwUAA4IBAQBuNcj3ZAMdN17wqYy4T86gol5WPe0ZIvEMDKkCl2OD +grKDAgKGisVBTQz3jNGQ3uf9vu/Zh2sVEtp/LICsnsZA8RPtsiZ2HsWqzsx79BM XjvlM3QL8NS9AVibEoeDxv78yI7GA+9oD+xFI38bs/NIxC143+FjHfvwOEpMggY0 ReonRGZM9jWlnSz7xT8sgRNyfRFbVHN8DsG2B4kvvbNEa2OC6njiQlrQu9qdaIP2 W1H4Pu08ghJRlTpvuY/co41HOiDCdAWeanHWZY8CQ1ngLXquTuRhbqquMX50EqV8 KC0ezhVvM8yKc3/C+Rdq5eEVZtb0lTZ3b0gcSfjlk5nS -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:55 2026 by rpki-client