This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/I5h_-n6q20lsOaRJZ1RaRmHMf8U.roa File: I5h_-n6q20lsOaRJZ1RaRmHMf8U.roa (raw, json) Hash identifier: zer7O7oW6HZhNmqlr1aPUcsYOzbLm/tHkE6ZSX4C2TU= Subject key identifier: 23:98:7F:FA:7E:AA:DB:49:6C:39:A4:49:67:54:5A:46:61:CC:7F:C5 Certificate issuer: /CN=1acb8a70f909ae3e1fc1dbd6bdc425e08eec81b9 Certificate serial: 019B7C12C1F96A08055BF7B45DD05FB19575 Authority key identifier: 1A:CB:8A:70:F9:09:AE:3E:1F:C1:DB:D6:BD:C4:25:E0:8E:EC:81:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GsuKcPkJrj4fwdvWvcQl4I7sgbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/I5h_-n6q20lsOaRJZ1RaRmHMf8U.roa Signing time: Fri 02 Jan 2026 00:19:22 +0000 ROA not before: Fri 02 Jan 2026 00:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 92.118.21.0/24 maxlen: 24 92.118.22.0/24 maxlen: 24 92.118.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft rsync://rpki.ripe.net/repository/DEFAULT/GsuKcPkJrj4fwdvWvcQl4I7sgbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:c1:f9:6a:08:05:5b:f7:b4:5d:d0:5f:b1:95:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1acb8a70f909ae3e1fc1dbd6bdc425e08eec81b9 Validity Not Before: Jan 2 00:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=23987ffa7eaadb496c39a44967545a4661cc7fc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ae:b1:91:8b:12:4d:c0:84:f5:0e:ca:81:28: e1:f1:77:71:7c:81:30:1a:7b:aa:1c:30:47:42:25: 05:00:eb:a6:1c:f9:27:e8:7f:b4:be:6c:d6:af:2e: 9f:05:b8:13:d6:52:a1:bb:6d:60:f6:a8:ec:0a:72: 33:0c:ad:35:50:52:fa:4d:b7:c4:d0:b7:e6:df:1b: 78:c1:3d:a4:e6:2f:40:a9:db:ab:1b:39:f5:76:b9: ac:7d:4b:06:77:44:16:e8:8b:73:5c:0f:1f:dd:5e: 3a:1e:67:d5:dc:43:d5:b6:8e:e4:76:9b:92:3f:70: 34:1f:ff:22:2e:6a:33:07:e6:0a:32:98:a1:bc:b4: 5c:9f:00:b2:b2:94:4b:20:f1:ef:69:4c:0c:3b:e9: d9:0c:6a:9b:f0:41:36:b8:b9:b9:2c:fe:a0:89:50: 52:5a:24:63:0a:80:3d:8a:9e:68:8f:6e:c0:b2:33: de:fc:7b:11:8b:4b:9c:0a:c4:04:cf:55:ca:2e:58: e8:a3:cf:b1:65:91:96:a8:cb:b3:5c:23:63:dc:02: f5:a0:a1:f3:92:82:15:2b:77:17:e4:16:7f:cd:05: 3b:1a:d2:08:2d:e9:33:c1:63:7c:57:33:fb:fb:ff: 44:8b:ff:33:d7:5e:d9:70:e5:dd:04:22:f8:a2:98: 2d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:98:7F:FA:7E:AA:DB:49:6C:39:A4:49:67:54:5A:46:61:CC:7F:C5 X509v3 Authority Key Identifier: keyid:1A:CB:8A:70:F9:09:AE:3E:1F:C1:DB:D6:BD:C4:25:E0:8E:EC:81:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsuKcPkJrj4fwdvWvcQl4I7sgbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/I5h_-n6q20lsOaRJZ1RaRmHMf8U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.118.21.0-92.118.23.255 Signature Algorithm: sha256WithRSAEncryption 16:4d:0c:9c:83:93:74:4b:38:d7:b4:c0:34:9f:f4:05:20:2b: f0:6e:00:d8:69:0a:19:49:df:4a:f8:b4:31:0d:7f:7c:eb:48: 12:46:24:3d:b6:4d:f5:b9:54:39:bb:77:03:d4:a9:bd:a0:cb: ae:06:f9:25:c9:9d:fb:97:0c:e5:91:ee:d8:07:5a:07:74:0e: 98:9f:3c:42:d1:cd:2a:53:e9:50:82:ce:aa:07:c7:b0:60:c2: 8d:51:6e:88:88:30:be:3d:8b:8c:f6:11:17:48:9d:2a:fd:25: 9e:00:bf:19:f2:04:5c:6f:d3:b9:f3:4d:b8:21:24:00:e5:28: 45:10:66:70:75:56:70:30:90:52:38:80:fb:bb:90:b8:e1:d8: 09:8c:bd:27:4c:8f:c5:3b:b1:a2:12:57:50:75:06:88:c7:4c: 9c:cb:f3:5d:aa:98:34:51:80:88:46:93:00:36:41:a0:ea:23: 93:a0:2d:10:2f:cf:03:fc:1d:e6:1d:e5:5c:be:a5:53:4b:ad: 98:48:db:bd:79:d4:84:32:12:9d:5d:85:a2:9e:70:d6:aa:fa: a3:83:fd:7f:b1:d1:3d:4b:86:ff:27:4c:77:c5:45:32:b1:15: 2a:09:91:6b:da:b1:51:2f:be:75:22:76:20:7d:55:58:a0:e7: b4:dc:c6:9e -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt8EsH5aggFW/e0XdBfsZV1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhY2I4YTcwZjkwOWFlM2UxZmMxZGJkNmJkYzQyNWUwOGVl YzgxYjkwHhcNMjYwMTAyMDAxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzk4N2ZmYTdlYWFkYjQ5NmMzOWE0NDk2NzU0NWE0NjYxY2M3ZmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqq6xkYsSTcCE9Q7KgSjh8XdxfIEw GnuqHDBHQiUFAOumHPkn6H+0vmzWry6fBbgT1lKhu21g9qjsCnIzDK01UFL6TbfE 0Lfm3xt4wT2k5i9AqdurGzn1drmsfUsGd0QW6ItzXA8f3V46HmfV3EPVto7kdpuS P3A0H/8iLmozB+YKMpihvLRcnwCyspRLIPHvaUwMO+nZDGqb8EE2uLm5LP6giVBS WiRjCoA9ip5oj27AsjPe/HsRi0ucCsQEz1XKLljoo8+xZZGWqMuzXCNj3AL1oKHz koIVK3cX5BZ/zQU7GtIILekzwWN8VzP7+/9Ei/8z117ZcOXdBCL4opgtVwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFCOYf/p+qttJbDmkSWdUWkZhzH/FMB8GA1UdIwQY MBaAFBrLinD5Ca4+H8Hb1r3EJeCO7IG5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3N1S2NQa0pyajRmd2R2V3ZjUWw0STdzZ2JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9iOTQ1NmUtNGU1Mi00ZGU1LWJiZDYt NjBkZTIyNGNmYTRiLzEvSTVoXy1uNnEyMGxzT2FSSloxUmFSbUhNZjhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9iOTQ1NmUtNGU1Mi00ZGU1LWJiZDYtNjBkZTIyNGNmYTRi LzEvR3N1S2NQa0pyajRmd2R2V3ZjUWw0STdzZ2JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABcdhUD BANcdhAwDQYJKoZIhvcNAQELBQADggEBABZNDJyDk3RLONe0wDSf9AUgK/BuANhp ChlJ30r4tDENf3zrSBJGJD22TfW5VDm7dwPUqb2gy64G+SXJnfuXDOWR7tgHWgd0 DpifPELRzSpT6VCCzqoHx7Bgwo1RboiIML49i4z2ERdInSr9JZ4AvxnyBFxv07nz TbghJADlKEUQZnB1VnAwkFI4gPu7kLjh2AmMvSdMj8U7saISV1B1BojHTJzL812q mDRRgIhGkwA2QaDqI5OgLRAvzwP8HeYd5Vy+pVNLrZhI27151IQyEp1dhaKecNaq +qOD/X+x0T1Lhv8nTHfFRTKxFSoJkWvasVEvvnUidiB9VVig57Tcxp4= -----END CERTIFICATE-----Generated at Sun Jan 18 16:37:20 2026 by rpki-client