This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/O5-mG7lTLGsSHbPOXl_2N2nSPgs.roa File: O5-mG7lTLGsSHbPOXl_2N2nSPgs.roa (raw, json) Hash identifier: hoTvW0b4Iag7FokkMuOsi13ZXqhsvaxP4WoOFPmTwHY= Subject key identifier: 3B:9F:A6:1B:B9:53:2C:6B:12:1D:B3:CE:5E:5F:F6:37:69:D2:3E:0B Certificate issuer: /CN=81300300de5005ada2bb66c268998a40c33ad23b Certificate serial: 019B7B35E368DCAE9A24C89CDD2B8B3B1CBA Authority key identifier: 81:30:03:00:DE:50:05:AD:A2:BB:66:C2:68:99:8A:40:C3:3A:D2:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/O5-mG7lTLGsSHbPOXl_2N2nSPgs.roa Signing time: Thu 01 Jan 2026 20:18:07 +0000 ROA not before: Thu 01 Jan 2026 20:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12941 IP address blocks: 193.141.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:e3:68:dc:ae:9a:24:c8:9c:dd:2b:8b:3b:1c:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81300300de5005ada2bb66c268998a40c33ad23b Validity Not Before: Jan 1 20:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3b9fa61bb9532c6b121db3ce5e5ff63769d23e0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:eb:ac:15:38:56:91:55:5d:f4:a4:63:fa:0d: 8b:2b:77:81:7b:72:c2:68:59:6d:33:2e:ed:aa:88: 73:87:77:7a:5f:5c:6c:3b:53:06:bd:da:89:b6:c6: 99:46:ff:dc:17:78:ec:83:05:51:e1:86:51:61:6d: 20:20:fe:2c:28:54:9f:fa:d7:be:ed:08:6a:ae:0a: 6d:81:5d:08:54:de:34:89:ea:f9:a1:d5:88:2c:47: 25:34:d6:c3:7a:22:f5:b0:6f:7c:40:4c:70:1d:96: 32:16:ba:10:b5:19:87:0b:ff:e2:b7:7f:d6:1d:8c: 84:a0:02:23:d3:1d:8a:ff:4d:84:ce:7a:84:52:3e: c7:0b:f0:a4:c9:37:37:20:80:94:95:4a:be:9a:08: c1:31:3c:6c:6f:63:92:71:b8:39:8a:56:30:d0:7b: 39:93:b4:0c:25:a2:c1:dc:e7:78:9f:b0:8a:52:be: 96:0b:17:a4:0d:1e:9a:c3:3e:23:d2:ed:ba:6b:b5: 10:12:75:f5:53:9e:c1:fd:0c:88:28:12:75:84:fa: 15:82:6e:0b:37:ac:a1:d7:3b:ac:82:8d:41:98:dd: 37:cd:39:c3:e2:ff:63:39:3a:ef:f0:09:a3:21:d7: 2c:b7:40:db:1b:b4:96:dc:7f:75:21:25:d3:bc:2d: 39:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:9F:A6:1B:B9:53:2C:6B:12:1D:B3:CE:5E:5F:F6:37:69:D2:3E:0B X509v3 Authority Key Identifier: keyid:81:30:03:00:DE:50:05:AD:A2:BB:66:C2:68:99:8A:40:C3:3A:D2:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/O5-mG7lTLGsSHbPOXl_2N2nSPgs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.141.176.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:d8:ff:79:ed:a1:83:73:f2:23:99:ae:65:ea:d3:cd:6b:36: 48:88:ad:fe:0f:ae:a0:b1:bd:a6:2f:18:e5:5e:cb:e1:22:c7: 1f:6e:4d:f9:d3:f1:6d:ae:22:5f:dc:4d:2c:d3:02:83:83:bb: 61:f7:48:4c:93:50:d6:76:44:6c:2d:37:b7:5b:49:e6:07:c6: 63:ab:cc:f5:ef:8b:e5:e8:ee:ef:b0:80:fa:4f:b8:75:3b:01: 3f:4d:74:d0:4e:51:13:8b:fe:16:7a:a5:40:b2:da:bb:ab:f3: b1:49:8f:11:6b:13:14:48:00:75:a5:ed:37:77:84:72:36:64: 16:ca:d6:48:3f:e3:88:c5:d3:9c:dd:1e:0a:5a:c0:1c:e2:21: af:37:48:99:5f:7d:60:9b:6c:b2:07:8b:f6:0f:8f:6f:b4:93: c8:3d:cf:6f:86:0e:4b:3e:e9:bf:32:d4:cd:4c:fc:43:04:7a: c5:e6:b2:67:34:f4:6a:2c:5b:26:fe:3f:47:a9:0d:97:cb:09: 84:83:ba:2c:af:0d:90:2e:bf:d8:5a:37:ce:6d:48:46:ee:fa: 22:ed:a4:a4:e2:c6:3c:64:f0:c9:35:cd:54:db:7a:4b:63:ab: 15:a1:0f:73:76:2f:96:c6:92:a7:f9:de:70:25:0b:6b:0c:ca: 46:4b:1e:7f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NeNo3K6aJMic3SuLOxy6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxMzAwMzAwZGU1MDA1YWRhMmJiNjZjMjY4OTk4YTQwYzMz YWQyM2IwHhcNMjYwMTAxMjAxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjlmYTYxYmI5NTMyYzZiMTIxZGIzY2U1ZTVmZjYzNzY5ZDIzZTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuusFThWkVVd9KRj+g2LK3eBe3LC aFltMy7tqohzh3d6X1xsO1MGvdqJtsaZRv/cF3jsgwVR4YZRYW0gIP4sKFSf+te+ 7QhqrgptgV0IVN40ier5odWILEclNNbDeiL1sG98QExwHZYyFroQtRmHC//it3/W HYyEoAIj0x2K/02EznqEUj7HC/CkyTc3IICUlUq+mgjBMTxsb2OScbg5ilYw0Hs5 k7QMJaLB3Od4n7CKUr6WCxekDR6awz4j0u26a7UQEnX1U57B/QyIKBJ1hPoVgm4L N6yh1zusgo1BmN03zTnD4v9jOTrv8AmjIdcst0DbG7SW3H91ISXTvC05NQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDufphu5UyxrEh2zzl5f9jdp0j4LMB8GA1UdIwQY MBaAFIEwAwDeUAWtortmwmiZikDDOtI7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1RBREFONVFCYTJpdTJiQ2FKbUtRTU02MGpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9kYmFkODgtZjgxOC00MzFlLTg3YTYt ZGZlZTk4NDAzN2FjLzEvTzUtbUc3bFRMR3NTSGJQT1hsXzJOMm5TUGdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9kYmFkODgtZjgxOC00MzFlLTg3YTYtZGZlZTk4NDAzN2Fj LzEvZ1RBREFONVFCYTJpdTJiQ2FKbUtRTU02MGpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwY2wMA0G CSqGSIb3DQEBCwUAA4IBAQBq2P957aGDc/Ijma5l6tPNazZIiK3+D66gsb2mLxjl XsvhIscfbk350/FtriJf3E0s0wKDg7th90hMk1DWdkRsLTe3W0nmB8Zjq8z174vl 6O7vsID6T7h1OwE/TXTQTlETi/4WeqVAstq7q/OxSY8RaxMUSAB1pe03d4RyNmQW ytZIP+OIxdOc3R4KWsAc4iGvN0iZX31gm2yyB4v2D49vtJPIPc9vhg5LPum/MtTN TPxDBHrF5rJnNPRqLFsm/j9HqQ2XywmEg7osrw2QLr/YWjfObUhG7voi7aSk4sY8 ZPDJNc1U23pLY6sVoQ9zdi+WxpKn+d5wJQtrDMpGSx5/ -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:53 2026 by rpki-client