This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/5NIB5XtXsVArTMCyK6NEk5mss5o.roa File: 5NIB5XtXsVArTMCyK6NEk5mss5o.roa (raw, json) Hash identifier: 9HDbFzMHMrqWLAZxWBzN+PVMVXNb2YerDNeP++wAVA8= Subject key identifier: E4:D2:01:E5:7B:57:B1:50:2B:4C:C0:B2:2B:A3:44:93:99:AC:B3:9A Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019BB67C8DDAD746C39D8C3864E69EF1CF8C Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/5NIB5XtXsVArTMCyK6NEk5mss5o.roa Signing time: Tue 13 Jan 2026 08:32:54 +0000 ROA not before: Tue 13 Jan 2026 08:32:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49981 IP address blocks: 188.213.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b6:7c:8d:da:d7:46:c3:9d:8c:38:64:e6:9e:f1:cf:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Jan 13 08:32:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4d201e57b57b1502b4cc0b22ba3449399acb39a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:16:4f:45:fb:b6:7e:5e:82:e4:ff:4b:7d:4e: 9f:93:2d:68:10:55:e8:62:88:16:03:75:1a:12:a4: e1:cf:7a:9d:e2:0a:36:90:46:a8:79:6e:aa:8b:08: b6:34:df:94:13:d1:25:95:cc:82:32:7f:a5:d6:72: f0:8a:94:3e:65:47:e7:56:0b:32:23:35:1b:f4:67: 9f:c4:73:88:e7:73:43:57:c6:1d:75:d4:84:2b:c2: 2d:58:df:6c:a5:cb:0a:b9:48:03:90:b2:81:12:19: 52:69:2f:76:8e:8d:ae:25:6c:0a:3e:84:5e:87:e7: db:29:78:3f:7e:ab:35:ae:37:3e:5d:5e:86:b6:a2: 10:54:5c:65:aa:24:e0:10:89:1e:3e:bd:2e:87:57: 25:90:2a:44:fa:cd:10:f0:77:c4:3a:a3:9f:52:e5: 0f:32:45:85:5c:08:75:b2:3d:38:e7:cb:96:8e:a5: db:74:97:7f:79:b2:cc:4e:a1:92:92:1e:34:f5:75: 39:97:3b:91:04:d2:e1:7f:6f:5a:f4:02:07:9b:77: f6:ea:ff:06:71:43:e8:78:0b:ca:7b:3e:ae:7f:1d: 6a:a0:7f:af:4a:87:71:1a:5d:16:08:88:8e:3b:6a: 73:be:28:2f:d0:3f:f6:3e:a1:50:08:ee:44:23:9a: 49:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:D2:01:E5:7B:57:B1:50:2B:4C:C0:B2:2B:A3:44:93:99:AC:B3:9A X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/5NIB5XtXsVArTMCyK6NEk5mss5o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.213.216.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:6b:69:f7:55:f8:83:50:18:a5:d2:25:2e:5b:45:2b:99:be: e5:b6:9b:d5:67:c1:a3:91:ee:aa:6f:24:43:df:25:94:87:d9: 39:23:bc:0e:e4:75:c4:ae:64:f9:24:d9:76:46:d7:37:da:c6: e6:78:0f:a7:01:0a:00:44:89:f6:95:90:c1:94:07:0c:54:00: dc:e8:d7:ec:e0:15:5f:77:80:0e:25:14:4a:c0:98:22:b0:1b: eb:0d:89:3e:2e:24:76:12:45:50:3d:e6:92:6e:22:1d:c0:d9: 49:fc:84:06:12:62:43:ab:ae:a3:31:c5:d5:09:91:27:99:ef: 69:2f:7d:36:79:7b:51:37:32:61:b9:9f:76:3c:f8:a4:0b:76: 31:e4:2b:3f:47:56:f3:11:3b:c6:dc:af:34:86:a5:15:b9:1b: 29:90:33:42:c5:9f:12:c7:88:82:74:c4:71:66:4f:2e:fd:3c: cf:2f:80:75:bd:b6:68:62:84:f9:e6:be:41:2f:9a:6a:68:4f: c0:b3:1c:7c:db:1b:76:0a:f2:e0:43:51:6b:73:1b:9e:7c:c9: 36:b5:74:e7:02:53:9b:f0:0a:ed:15:4b:bc:c7:d4:b0:08:76: 6d:32:70:b9:72:e9:8b:b0:ce:62:23:6b:3c:be:80:ae:3f:9d: aa:8f:99:5b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZu2fI3a10bDnYw4ZOae8c+MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjYwMTEzMDgzMjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNGQyMDFlNTdiNTdiMTUwMmI0Y2MwYjIyYmEzNDQ5Mzk5YWNiMzlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhZPRfu2fl6C5P9LfU6fky1oEFXo YogWA3UaEqThz3qd4go2kEaoeW6qiwi2NN+UE9EllcyCMn+l1nLwipQ+ZUfnVgsy IzUb9GefxHOI53NDV8YdddSEK8ItWN9spcsKuUgDkLKBEhlSaS92jo2uJWwKPoRe h+fbKXg/fqs1rjc+XV6GtqIQVFxlqiTgEIkePr0uh1clkCpE+s0Q8HfEOqOfUuUP MkWFXAh1sj0458uWjqXbdJd/ebLMTqGSkh409XU5lzuRBNLhf29a9AIHm3f26v8G cUPoeAvKez6ufx1qoH+vSodxGl0WCIiOO2pzvigv0D/2PqFQCO5EI5pJDwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOTSAeV7V7FQK0zAsiujRJOZrLOaMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvNU5JQjVYdFhzVkFyVE1DeUs2TkVrNW1zczVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvNXYMA0G CSqGSIb3DQEBCwUAA4IBAQAda2n3VfiDUBil0iUuW0Urmb7ltpvVZ8Gjke6qbyRD 3yWUh9k5I7wO5HXErmT5JNl2Rtc32sbmeA+nAQoARIn2lZDBlAcMVADc6Nfs4BVf d4AOJRRKwJgisBvrDYk+LiR2EkVQPeaSbiIdwNlJ/IQGEmJDq66jMcXVCZEnme9p L302eXtRNzJhuZ92PPikC3Yx5Cs/R1bzETvG3K80hqUVuRspkDNCxZ8Sx4iCdMRx Zk8u/TzPL4B1vbZoYoT55r5BL5pqaE/Asxx82xt2CvLgQ1FrcxuefMk2tXTnAlOb 8ArtFUu8x9SwCHZtMnC5cumLsM5iI2s8voCuP52qj5lb -----END CERTIFICATE-----Generated at Mon Jan 19 14:38:36 2026 by rpki-client