This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/29638b-12ca-49ef-94e9-0502a6a54aab/1/I5suLRJMCcD3Q-LkLgkHzGSULk4.roa File: I5suLRJMCcD3Q-LkLgkHzGSULk4.roa (raw, json) Hash identifier: lLdnBAzP++nZyrTcfhQAr6iSYGM9RrOFuFX70aI206Q= Subject key identifier: 23:9B:2E:2D:12:4C:09:C0:F7:43:E2:E4:2E:09:07:CC:64:94:2E:4E Certificate issuer: /CN=38a0c8826c18bcd513aaa7e52081ff9fd37919fb Certificate serial: 019B7910821D28ECF284C504997B9168B179 Authority key identifier: 38:A0:C8:82:6C:18:BC:D5:13:AA:A7:E5:20:81:FF:9F:D3:79:19:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKDIgmwYvNUTqqflIIH_n9N5Gfs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/29638b-12ca-49ef-94e9-0502a6a54aab/1/I5suLRJMCcD3Q-LkLgkHzGSULk4.roa Signing time: Thu 01 Jan 2026 10:18:03 +0000 ROA not before: Thu 01 Jan 2026 10:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206853 IP address blocks: 176.110.105.0/24 maxlen: 24 188.127.252.0/24 maxlen: 24 192.33.163.0/24 maxlen: 24 192.35.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/29638b-12ca-49ef-94e9-0502a6a54aab/1/OKDIgmwYvNUTqqflIIH_n9N5Gfs.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/29638b-12ca-49ef-94e9-0502a6a54aab/1/OKDIgmwYvNUTqqflIIH_n9N5Gfs.mft rsync://rpki.ripe.net/repository/DEFAULT/OKDIgmwYvNUTqqflIIH_n9N5Gfs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:82:1d:28:ec:f2:84:c5:04:99:7b:91:68:b1:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38a0c8826c18bcd513aaa7e52081ff9fd37919fb Validity Not Before: Jan 1 10:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=239b2e2d124c09c0f743e2e42e0907cc64942e4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2f:91:f4:9f:43:f6:6c:e3:5b:87:4f:c6:79: 1f:10:10:b1:be:f9:eb:92:af:32:74:3d:12:f1:ab: be:d3:5e:d8:22:ef:36:27:d7:1d:18:ae:29:59:99: 4e:65:ea:f4:a7:b5:62:a3:18:1a:69:b9:d9:a8:52: 69:e6:83:68:18:c0:a8:3d:7a:6f:99:46:22:a2:60: 4f:76:ab:69:d0:19:f1:cf:0a:f7:b7:17:d5:d0:de: cb:24:95:2a:a1:cd:f3:a7:a2:a3:44:b3:03:0b:02: eb:e5:be:21:4a:db:02:f1:ad:5e:b6:52:64:fc:f0: 42:b7:28:ce:ce:b0:3f:9d:d8:57:d7:59:00:ca:aa: 36:10:48:1d:a8:f2:c5:73:b4:26:17:24:a7:6b:e4: a3:b2:ba:ca:05:5f:30:0c:d6:6c:2a:2e:50:18:83: fa:53:01:9d:b6:06:95:a3:a5:4f:79:9b:5f:4c:0b: 7d:c4:ee:3e:a4:74:73:71:95:e8:46:05:e9:06:4e: 57:24:44:6e:d6:c2:53:3f:a5:84:2e:06:55:f7:af: 22:cc:57:45:ae:eb:47:96:65:d0:c0:27:a2:ea:00: 26:41:c9:cc:db:52:37:19:23:68:03:d8:62:ca:22: 96:e0:5c:e5:99:59:4a:e5:17:16:c0:f2:53:c4:1a: 07:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:9B:2E:2D:12:4C:09:C0:F7:43:E2:E4:2E:09:07:CC:64:94:2E:4E X509v3 Authority Key Identifier: keyid:38:A0:C8:82:6C:18:BC:D5:13:AA:A7:E5:20:81:FF:9F:D3:79:19:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKDIgmwYvNUTqqflIIH_n9N5Gfs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/29638b-12ca-49ef-94e9-0502a6a54aab/1/I5suLRJMCcD3Q-LkLgkHzGSULk4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/29638b-12ca-49ef-94e9-0502a6a54aab/1/OKDIgmwYvNUTqqflIIH_n9N5Gfs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.110.105.0/24 188.127.252.0/24 192.33.163.0/24 192.35.205.0/24 Signature Algorithm: sha256WithRSAEncryption 26:05:7e:0e:82:3b:9b:d2:3e:f3:31:05:a2:3f:e2:f6:3a:20: 1e:f9:69:44:71:db:fe:8b:2b:9c:91:ed:61:72:e2:ec:54:d2: c5:69:6e:8d:c8:46:12:f0:7f:00:ca:64:a6:3f:c2:0e:6c:a0: 80:4e:c1:29:b8:bf:0c:17:2f:1a:45:38:1e:8d:43:fd:52:2e: d8:b9:b8:d6:e8:3c:33:f8:54:52:21:0d:bd:28:47:7a:9c:22: ad:19:e6:a7:b4:0e:50:28:78:9e:8b:60:fe:5f:ab:6d:e6:18: cb:ca:5b:82:f3:dd:26:58:8f:71:6a:ab:a1:2f:14:34:4e:b1: c3:ab:db:dc:bc:b8:09:36:92:70:d4:8b:0e:5c:d0:8a:01:1b: 87:34:9e:1e:e8:85:1a:d5:ee:f6:92:42:10:59:37:55:09:f8: 86:50:b1:fb:74:7c:da:ef:34:b6:8e:52:92:f1:a1:eb:01:4c: 61:22:35:62:66:32:00:7d:ef:87:05:dd:a0:89:d2:ad:27:ba: 6b:5f:9e:eb:ef:ce:d6:f0:bf:66:f4:24:02:74:fd:5e:41:2b: d6:84:fa:1e:39:a9:10:92:97:db:95:47:f5:af:0b:d7:89:3c: 95:71:a4:08:f7:6d:1c:46:ac:b4:cb:33:78:8a:5e:c0:02:e5: 5d:a2:f1:db -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt5EIIdKOzyhMUEmXuRaLF5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YTBjODgyNmMxOGJjZDUxM2FhYTdlNTIwODFmZjlmZDM3 OTE5ZmIwHhcNMjYwMTAxMTAxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzliMmUyZDEyNGMwOWMwZjc0M2UyZTQyZTA5MDdjYzY0OTQyZTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3S+R9J9D9mzjW4dPxnkfEBCxvvnr kq8ydD0S8au+017YIu82J9cdGK4pWZlOZer0p7VioxgaabnZqFJp5oNoGMCoPXpv mUYiomBPdqtp0Bnxzwr3txfV0N7LJJUqoc3zp6KjRLMDCwLr5b4hStsC8a1etlJk /PBCtyjOzrA/ndhX11kAyqo2EEgdqPLFc7QmFySna+SjsrrKBV8wDNZsKi5QGIP6 UwGdtgaVo6VPeZtfTAt9xO4+pHRzcZXoRgXpBk5XJERu1sJTP6WELgZV968izFdF rutHlmXQwCei6gAmQcnM21I3GSNoA9hiyiKW4FzlmVlK5RcWwPJTxBoHVQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFCObLi0STAnA90Pi5C4JB8xklC5OMB8GA1UdIwQY MBaAFDigyIJsGLzVE6qn5SCB/5/TeRn7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0tESWdtd1l2TlVUcXFmbElJSF9uOU41R2ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8yOTYzOGItMTJjYS00OWVmLTk0ZTkt MDUwMmE2YTU0YWFiLzEvSTVzdUxSSk1DY0QzUS1Ma0xna0h6R1NVTGs0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8yOTYzOGItMTJjYS00OWVmLTk0ZTktMDUwMmE2YTU0YWFi LzEvT0tESWdtd1l2TlVUcXFmbElJSF9uOU41R2ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAsG5pAwQA vH/8AwQAwCGjAwQAwCPNMA0GCSqGSIb3DQEBCwUAA4IBAQAmBX4Ogjub0j7zMQWi P+L2OiAe+WlEcdv+iyucke1hcuLsVNLFaW6NyEYS8H8AymSmP8IObKCATsEpuL8M Fy8aRTgejUP9Ui7YubjW6Dwz+FRSIQ29KEd6nCKtGeantA5QKHiei2D+X6tt5hjL yluC890mWI9xaquhLxQ0TrHDq9vcvLgJNpJw1IsOXNCKARuHNJ4e6IUa1e72kkIQ WTdVCfiGULH7dHza7zS2jlKS8aHrAUxhIjViZjIAfe+HBd2gidKtJ7prX57r787W 8L9m9CQCdP1eQSvWhPoeOakQkpfblUf1rwvXiTyVcaQI920cRqy0yzN4il7AAuVd ovHb -----END CERTIFICATE-----Generated at Tue Feb 10 03:57:17 2026 by rpki-client