This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/V4OAXUwr_Yrv_txVxgyVSuzZX3w.roa File: V4OAXUwr_Yrv_txVxgyVSuzZX3w.roa (raw, json) Hash identifier: XQIlYXeV6ifizyIfOjtUETRq073y4wC5uk9DBtAE+iM= Subject key identifier: 57:83:80:5D:4C:2B:FD:8A:EF:FE:DC:55:C6:0C:95:4A:EC:D9:5F:7C Certificate issuer: /CN=8acd2eb2f0618b72c646d997d3c95dd836bdd006 Certificate serial: 019B7C80DD8B4C98CF4223C511EF35A74956 Authority key identifier: 8A:CD:2E:B2:F0:61:8B:72:C6:46:D9:97:D3:C9:5D:D8:36:BD:D0:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/is0usvBhi3LGRtmX08ld2Da90AY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/V4OAXUwr_Yrv_txVxgyVSuzZX3w.roa Signing time: Fri 02 Jan 2026 02:19:38 +0000 ROA not before: Fri 02 Jan 2026 02:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15517 IP address blocks: 213.133.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft rsync://rpki.ripe.net/repository/DEFAULT/is0usvBhi3LGRtmX08ld2Da90AY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:dd:8b:4c:98:cf:42:23:c5:11:ef:35:a7:49:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8acd2eb2f0618b72c646d997d3c95dd836bdd006 Validity Not Before: Jan 2 02:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5783805d4c2bfd8aeffedc55c60c954aecd95f7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:24:58:9f:cc:27:f3:e7:7d:33:8f:17:2c:85: 3f:dc:cd:c4:79:42:3f:38:3d:14:6d:b0:d3:ec:97: 3a:30:2e:e6:1d:a6:0e:4c:5a:88:b6:77:fb:2b:dd: 36:bd:72:06:f1:18:39:1f:09:48:ea:55:74:c4:a9: 82:35:71:22:22:62:bb:fb:70:a1:9f:6c:92:b6:b3: 52:ea:14:ce:a5:99:51:46:06:2e:ad:03:c7:3d:9d: db:b3:ac:29:ae:f5:9e:44:e1:58:29:c4:6f:7c:f0: de:f8:c5:10:2f:8e:3d:7d:af:84:60:ef:03:74:d5: ad:02:7c:e4:6b:ef:47:fa:65:2f:18:ff:d1:aa:4d: 93:90:27:e3:e0:83:43:fc:67:38:af:d0:05:62:9c: b2:5a:9a:b2:03:21:f2:c4:4f:32:93:43:99:a5:43: 66:8f:0f:8a:6f:71:d7:65:2d:77:65:3f:df:b1:88: ff:8a:0e:5b:e6:28:32:63:af:45:e8:a1:bc:b8:11: 5e:ce:e1:44:65:7e:8d:1d:60:37:c9:e0:b4:8d:c8: fd:45:d2:38:e1:79:e7:15:62:ed:63:78:76:5d:a9: 07:97:d8:09:3a:bf:d7:8a:b0:f1:89:65:dd:0a:88: 3f:3a:c7:a1:5e:a7:a1:40:9d:18:41:17:0e:38:61: 02:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:83:80:5D:4C:2B:FD:8A:EF:FE:DC:55:C6:0C:95:4A:EC:D9:5F:7C X509v3 Authority Key Identifier: keyid:8A:CD:2E:B2:F0:61:8B:72:C6:46:D9:97:D3:C9:5D:D8:36:BD:D0:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/is0usvBhi3LGRtmX08ld2Da90AY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/V4OAXUwr_Yrv_txVxgyVSuzZX3w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.133.240.0/21 Signature Algorithm: sha256WithRSAEncryption 5b:2d:b1:af:95:1a:4e:8b:5b:cb:e1:0e:54:4d:d8:cc:0d:f2: 18:dd:de:86:52:00:b3:89:2f:7d:27:2a:a5:5b:f3:bf:7b:3d: 66:dd:74:62:27:52:4f:8a:52:9d:47:56:0e:94:5e:96:94:0e: aa:be:63:2a:ff:cd:23:93:01:6f:68:64:4b:64:45:67:aa:6b: b1:98:a3:d2:ac:12:10:7f:fa:52:47:2c:f9:b2:47:45:f7:3e: 19:a8:80:11:ae:01:7e:01:d2:f3:18:36:28:04:0c:82:af:d3: 22:7b:34:c9:23:a5:c2:b5:07:46:80:c3:5a:27:e8:73:e0:48: 4d:52:44:01:2a:a1:38:3f:5a:f4:38:24:ad:5a:d7:e9:9d:8a: 87:d8:38:f9:4a:82:fd:21:c9:be:bb:05:da:3a:e7:8e:1c:c1: bf:5d:67:a3:e2:da:fb:01:02:74:68:21:42:b5:1f:e7:22:86: 4b:72:d8:64:79:6d:37:7b:17:c7:07:0c:01:98:9f:22:98:0b: 5e:fd:0b:13:e8:fb:60:ea:56:f5:1c:ee:bc:e9:8d:95:e9:ec: ad:e7:cd:38:7c:b0:a6:02:7f:c3:4a:e1:bb:fb:24:c9:ec:d0: d2:11:cf:b2:77:8f:05:83:2a:de:8c:83:70:30:ae:24:0a:67: bd:1e:9e:77 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gN2LTJjPQiPFEe81p0lWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhY2QyZWIyZjA2MThiNzJjNjQ2ZDk5N2QzYzk1ZGQ4MzZi ZGQwMDYwHhcNMjYwMTAyMDIxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzgzODA1ZDRjMmJmZDhhZWZmZWRjNTVjNjBjOTU0YWVjZDk1ZjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCRYn8wn8+d9M48XLIU/3M3EeUI/ OD0UbbDT7Jc6MC7mHaYOTFqItnf7K902vXIG8Rg5HwlI6lV0xKmCNXEiImK7+3Ch n2yStrNS6hTOpZlRRgYurQPHPZ3bs6wprvWeROFYKcRvfPDe+MUQL449fa+EYO8D dNWtAnzka+9H+mUvGP/Rqk2TkCfj4IND/Gc4r9AFYpyyWpqyAyHyxE8yk0OZpUNm jw+Kb3HXZS13ZT/fsYj/ig5b5igyY69F6KG8uBFezuFEZX6NHWA3yeC0jcj9RdI4 4XnnFWLtY3h2XakHl9gJOr/XirDxiWXdCog/OsehXqehQJ0YQRcOOGEChwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFeDgF1MK/2K7/7cVcYMlUrs2V98MB8GA1UdIwQY MBaAFIrNLrLwYYtyxkbZl9PJXdg2vdAGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXMwdXN2QmhpM0xHUnRtWDA4bGQyRGE5MEFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iMDU4N2MtMzFlOC00YTliLWFmNjkt Nzk0YzlkOTI4Y2RjLzEvVjRPQVhVd3JfWXJ2X3R4VnhneVZTdXpaWDN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iMDU4N2MtMzFlOC00YTliLWFmNjktNzk0YzlkOTI4Y2Rj LzEvaXMwdXN2QmhpM0xHUnRtWDA4bGQyRGE5MEFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD1YXwMA0G CSqGSIb3DQEBCwUAA4IBAQBbLbGvlRpOi1vL4Q5UTdjMDfIY3d6GUgCziS99Jyql W/O/ez1m3XRiJ1JPilKdR1YOlF6WlA6qvmMq/80jkwFvaGRLZEVnqmuxmKPSrBIQ f/pSRyz5skdF9z4ZqIARrgF+AdLzGDYoBAyCr9MiezTJI6XCtQdGgMNaJ+hz4EhN UkQBKqE4P1r0OCStWtfpnYqH2Dj5SoL9Icm+uwXaOueOHMG/XWej4tr7AQJ0aCFC tR/nIoZLcthkeW03exfHBwwBmJ8imAte/QsT6Ptg6lb1HO686Y2V6eyt5804fLCm An/DSuG7+yTJ7NDSEc+yd48FgyrejINwMK4kCme9Hp53 -----END CERTIFICATE-----Generated at Tue Jan 27 07:12:19 2026 by rpki-client