This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/g5YiImNVM5fsYEAuflZqG3U_XAY.roa File: g5YiImNVM5fsYEAuflZqG3U_XAY.roa (raw, json) Hash identifier: c6WIObdowYHA4wSpEf12FgHcxl5BMjuPqmX08NYkueM= Subject key identifier: 83:96:22:22:63:55:33:97:EC:60:40:2E:7E:56:6A:1B:75:3F:5C:06 Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d Certificate serial: 019B7C12EDE245B3886D96B227B21F190184 Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/g5YiImNVM5fsYEAuflZqG3U_XAY.roa Signing time: Fri 02 Jan 2026 00:19:33 +0000 ROA not before: Fri 02 Jan 2026 00:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 138.188.174.0/23 maxlen: 24 193.247.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 00:20:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:ed:e2:45:b3:88:6d:96:b2:27:b2:1f:19:01:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d Validity Not Before: Jan 2 00:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8396222263553397ec60402e7e566a1b753f5c06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:d0:48:dd:90:52:d8:9b:14:56:85:e1:7a:53: 5e:78:79:98:f6:6c:1b:e4:17:18:66:8e:ad:8c:ee: f2:31:fb:cb:a6:35:ed:98:a5:d9:96:d3:c5:04:8a: c2:5b:06:fa:1f:a3:ab:a9:6f:18:7e:4b:73:c2:78: 1f:34:1a:87:cd:4c:bb:fa:2c:d3:37:0b:4d:e3:dc: 59:66:1d:d2:d4:43:3e:6d:0d:a9:1d:a5:ac:e2:ac: 97:bc:d7:9c:e2:5a:c6:6f:cf:8f:ff:5f:37:95:18: e9:8a:33:9e:40:9a:70:ee:ab:3b:6e:55:e3:cb:86: d7:cb:a9:26:74:9b:1d:ec:5c:60:4b:b4:fb:30:ef: 19:fb:76:ac:11:94:46:6d:82:30:9e:93:bb:69:94: 1a:6b:f7:33:b0:32:0d:86:94:25:ca:8e:62:0e:a2: f2:03:18:c3:17:cf:17:76:c7:8e:f2:92:7d:e6:01: ce:e7:1d:d0:6a:c8:cb:9f:ad:c8:f4:44:dc:65:76: be:e3:e8:23:50:b7:95:ca:3a:79:b3:4f:67:f9:84: b8:16:c9:a1:64:72:3c:ac:2e:13:82:7f:0f:ce:dd: 2f:d8:6e:8a:f3:3e:98:09:ea:68:7e:bd:12:87:20: d9:56:e3:fc:36:23:11:d4:79:b7:95:3a:c8:06:53: 43:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:96:22:22:63:55:33:97:EC:60:40:2E:7E:56:6A:1B:75:3F:5C:06 X509v3 Authority Key Identifier: keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/g5YiImNVM5fsYEAuflZqG3U_XAY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.188.174.0/23 193.247.246.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:18:5a:cf:f7:0b:f4:39:00:0e:bd:ba:0c:c1:cb:a9:7d:df: bf:c8:b0:be:80:d7:0b:31:d2:0c:67:93:42:6b:e9:4c:38:18: 8a:9d:dc:55:e4:73:ec:8b:b2:d0:6e:80:b5:f2:f2:6b:34:f4: d4:b9:15:9e:28:4e:3c:37:24:36:14:31:f6:9f:56:1e:69:dc: a3:23:86:7b:4d:58:0c:75:53:13:fd:65:37:72:0b:54:00:ad: 0e:80:22:29:f8:f7:9b:a2:3b:69:a8:09:fc:44:66:54:7f:ed: 08:0a:30:95:d9:57:d4:81:38:b3:0f:b6:c1:27:ff:f8:22:05: 86:32:39:9e:62:ae:12:4f:04:25:aa:3b:2a:b2:32:e0:c3:81: 1f:d3:43:11:4a:1f:b6:f2:39:52:ec:8c:7b:c2:d6:e7:a2:11: fa:b3:2d:1e:3c:3d:a3:c8:8b:5d:25:c4:98:ee:e5:c4:5c:11: 43:2e:b3:27:64:03:4b:41:33:b0:00:24:e8:8b:ab:69:be:0d: c5:a0:52:5c:d7:02:c5:ab:9a:3a:68:0c:0c:10:fd:93:25:2b: 28:26:c2:44:1b:36:56:04:62:34:54:50:69:5d:10:9a:08:37: c1:e2:83:98:4c:1a:75:68:87:46:3c:a4:f1:7e:79:e8:f2:ef: d7:64:0a:db -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8Eu3iRbOIbZayJ7IfGQGEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy MDRjOGQwHhcNMjYwMTAyMDAxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Mzk2MjIyMjYzNTUzMzk3ZWM2MDQwMmU3ZTU2NmExYjc1M2Y1YzA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7NBI3ZBS2JsUVoXhelNeeHmY9mwb 5BcYZo6tjO7yMfvLpjXtmKXZltPFBIrCWwb6H6OrqW8YfktzwngfNBqHzUy7+izT NwtN49xZZh3S1EM+bQ2pHaWs4qyXvNec4lrGb8+P/183lRjpijOeQJpw7qs7blXj y4bXy6kmdJsd7FxgS7T7MO8Z+3asEZRGbYIwnpO7aZQaa/czsDINhpQlyo5iDqLy AxjDF88XdseO8pJ95gHO5x3QasjLn63I9ETcZXa+4+gjULeVyjp5s09n+YS4Fsmh ZHI8rC4Tgn8Pzt0v2G6K8z6YCepofr0ShyDZVuP8NiMR1Hm3lTrIBlNDjwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIOWIiJjVTOX7GBALn5Waht1P1wGMB8GA1UdIwQY MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt YmQxOTI2NzZjOWJiLzEvZzVZaUltTlZNNWZzWUVBdWZsWnFHM1VfWEFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBiryuAwQA wff2MA0GCSqGSIb3DQEBCwUAA4IBAQB9GFrP9wv0OQAOvboMwcupfd+/yLC+gNcL MdIMZ5NCa+lMOBiKndxV5HPsi7LQboC18vJrNPTUuRWeKE48NyQ2FDH2n1Yeadyj I4Z7TVgMdVMT/WU3cgtUAK0OgCIp+PebojtpqAn8RGZUf+0ICjCV2VfUgTizD7bB J//4IgWGMjmeYq4STwQlqjsqsjLgw4Ef00MRSh+28jlS7Ix7wtbnohH6sy0ePD2j yItdJcSY7uXEXBFDLrMnZANLQTOwACToi6tpvg3FoFJc1wLFq5o6aAwMEP2TJSso JsJEGzZWBGI0VFBpXRCaCDfB4oOYTBp1aIdGPKTxfnno8u/XZArb -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:27 2026 by rpki-client