This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/1-5hcoPxERklxpYu9RmVSDCrX2so.roa File: 1-5hcoPxERklxpYu9RmVSDCrX2so.roa (raw, json) Hash identifier: cjWKbL93f88siZo0CI+/pNH3BeRARNFTcw7KVFeSOWo= Subject key identifier: FB:98:5C:A0:FC:44:46:49:71:A5:8B:BD:46:65:52:0C:2A:D7:DA:CA Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019B7BA4189850B2B81BEEFB04A085161ED3 Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/1-5hcoPxERklxpYu9RmVSDCrX2so.roa Signing time: Thu 01 Jan 2026 22:18:30 +0000 ROA not before: Thu 01 Jan 2026 22:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209728 IP address blocks: 193.34.235.0/24 maxlen: 24 193.168.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:18:98:50:b2:b8:1b:ee:fb:04:a0:85:16:1e:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Jan 1 22:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb985ca0fc44464971a58bbd4665520c2ad7daca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:39:c4:a0:ab:16:b9:25:08:65:3f:cf:0d:04: 63:53:64:c0:92:41:e2:85:20:da:d8:15:54:de:67: e3:ab:5d:ab:40:ac:6f:e3:99:b6:db:8c:03:36:f9: e1:37:be:69:c4:31:b5:14:04:d4:66:cf:d5:53:a0: 36:ab:e7:8b:d0:5d:e8:99:28:eb:ca:3f:65:eb:49: d3:c0:71:e8:93:4f:8a:e6:ed:b3:28:61:a5:9c:70: cb:64:1c:3d:3f:d1:c4:ac:25:45:00:b9:68:1a:1e: 81:9a:97:a5:ce:c0:57:6f:ab:79:3b:70:43:80:5c: 5c:a4:03:e2:15:e7:a1:94:76:97:90:c7:0e:92:b6: 2e:3c:39:ed:46:a6:93:05:cf:c0:47:88:99:49:36: 2e:6f:13:07:27:72:9d:2d:44:9b:4d:f9:85:3c:65: bc:c5:bc:95:3c:b6:fd:dd:27:b5:5c:e4:4f:a5:7f: 4e:c3:5e:52:c2:e8:92:38:74:d7:1c:13:89:fe:d5: 1f:9d:6a:e8:12:d2:d8:cd:57:3d:ed:d5:c9:a1:3a: e9:ef:ad:1e:54:61:90:54:1f:22:36:15:59:16:51: 5e:7a:45:89:30:0f:14:3b:ee:96:48:1a:ae:97:1f: 3e:9c:dc:47:86:17:a0:9e:8c:4a:be:e9:02:b4:b2: 2f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:98:5C:A0:FC:44:46:49:71:A5:8B:BD:46:65:52:0C:2A:D7:DA:CA X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/1-5hcoPxERklxpYu9RmVSDCrX2so.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.34.235.0/24 193.168.225.0/24 Signature Algorithm: sha256WithRSAEncryption c6:21:73:af:42:11:b0:c0:49:12:94:c5:f2:69:e1:2a:53:89: c6:c6:d6:c1:f5:88:f3:e1:7a:a2:46:9e:46:a7:d3:13:e4:bc: f7:33:f4:a6:b3:5a:e2:e2:88:18:7d:83:69:47:e0:0a:0d:06: 4a:e1:6f:fb:b2:5e:02:14:83:8b:bd:50:62:53:71:64:b6:a2: a1:75:cb:bb:fc:6b:87:8e:7d:31:c1:03:04:2f:05:40:eb:a6: 88:c6:9c:ec:81:8b:c6:dd:dc:45:37:18:8a:c8:be:a9:88:7b: 4c:af:e6:be:05:bf:44:c2:ac:8d:90:c9:2b:a2:91:29:5d:3d: 38:c6:6b:64:91:b8:10:d9:93:8f:77:1b:e8:73:00:d8:fe:0b: 49:ec:d0:09:68:52:7b:0a:a4:d9:a1:31:47:39:ba:67:9a:1c: fa:2f:35:d2:ed:f0:d7:99:b1:b0:b9:bd:57:04:f8:04:c0:71: 8d:7e:42:97:a2:02:0f:9e:03:cd:59:c1:40:c1:72:b4:48:82: 7d:0e:87:2f:38:e0:31:b3:70:cf:2f:ec:28:0e:ea:ff:28:b2: 50:d8:8d:f1:b3:be:d6:32:44:16:60:56:81:77:f2:2a:d2:5f: dd:d8:7b:00:dc:10:17:52:a3:03:80:7b:f6:40:b9:44:72:64: ea:5c:af:fb -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZt7pBiYULK4G+77BKCFFh7TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjYwMTAxMjIxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjk4NWNhMGZjNDQ0NjQ5NzFhNThiYmQ0NjY1NTIwYzJhZDdkYWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDnEoKsWuSUIZT/PDQRjU2TAkkHi hSDa2BVU3mfjq12rQKxv45m224wDNvnhN75pxDG1FATUZs/VU6A2q+eL0F3omSjr yj9l60nTwHHok0+K5u2zKGGlnHDLZBw9P9HErCVFALloGh6BmpelzsBXb6t5O3BD gFxcpAPiFeehlHaXkMcOkrYuPDntRqaTBc/AR4iZSTYubxMHJ3KdLUSbTfmFPGW8 xbyVPLb93Se1XORPpX9Ow15SwuiSOHTXHBOJ/tUfnWroEtLYzVc97dXJoTrp760e VGGQVB8iNhVZFlFeekWJMA8UO+6WSBqulx8+nNxHhhegnoxKvukCtLIvWwIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFPuYXKD8REZJcaWLvUZlUgwq19rKMB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvMS01aGNvUHhFUmtseHBZdTlSbVZTRENyWDJzby5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNWEvN2IyMTI5LWNjNmMtNDcxMC1iYTQxLWI1N2EzNmYyYWZj ZC8xL3FIQ1F3blhEVEFYREJ2T3pZR09KT2cxeWVDby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAMEi6wME AMGo4TANBgkqhkiG9w0BAQsFAAOCAQEAxiFzr0IRsMBJEpTF8mnhKlOJxsbWwfWI 8+F6okaeRqfTE+S89zP0prNa4uKIGH2DaUfgCg0GSuFv+7JeAhSDi71QYlNxZLai oXXLu/xrh459McEDBC8FQOumiMac7IGLxt3cRTcYisi+qYh7TK/mvgW/RMKsjZDJ K6KRKV09OMZrZJG4ENmTj3cb6HMA2P4LSezQCWhSewqk2aExRzm6Z5oc+i810u3w 15mxsLm9VwT4BMBxjX5Cl6ICD54DzVnBQMFytEiCfQ6HLzjgMbNwzy/sKA7q/yiy UNiN8bO+1jJEFmBWgXfyKtJf3dh7ANwQF1KjA4B79kC5RHJk6lyv+w== -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:10 2026 by rpki-client