This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/89bb71-3fe9-42d2-a73b-13ae98aa7d33/1/5qOXZsZ0BHNAbp3kT3SWOZkhYW4.roa File: 5qOXZsZ0BHNAbp3kT3SWOZkhYW4.roa (raw, json) Hash identifier: DBxKLTH87HKe59x6vClNlaxgF86/cqJNz234XOYz+0Y= Subject key identifier: E6:A3:97:66:C6:74:04:73:40:6E:9D:E4:4F:74:96:39:99:21:61:6E Certificate issuer: /CN=8b8801543812040477d4744229466c8537d45171 Certificate serial: 019B78A28EFAFDAF082873399423C57AFB78 Authority key identifier: 8B:88:01:54:38:12:04:04:77:D4:74:42:29:46:6C:85:37:D4:51:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4gBVDgSBAR31HRCKUZshTfUUXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/89bb71-3fe9-42d2-a73b-13ae98aa7d33/1/5qOXZsZ0BHNAbp3kT3SWOZkhYW4.roa Signing time: Thu 01 Jan 2026 08:17:57 +0000 ROA not before: Thu 01 Jan 2026 08:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212885 IP address blocks: 193.163.122.0/23 maxlen: 23 193.163.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/89bb71-3fe9-42d2-a73b-13ae98aa7d33/1/i4gBVDgSBAR31HRCKUZshTfUUXE.crl rsync://rpki.ripe.net/repository/DEFAULT/69/89bb71-3fe9-42d2-a73b-13ae98aa7d33/1/i4gBVDgSBAR31HRCKUZshTfUUXE.mft rsync://rpki.ripe.net/repository/DEFAULT/i4gBVDgSBAR31HRCKUZshTfUUXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:8e:fa:fd:af:08:28:73:39:94:23:c5:7a:fb:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b8801543812040477d4744229466c8537d45171 Validity Not Before: Jan 1 08:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e6a39766c6740473406e9de44f7496399921616e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:59:23:44:3a:8b:82:e8:0a:a4:25:5c:28:86: 6d:58:06:c8:aa:63:bf:20:4d:45:8e:63:b6:19:ad: af:71:ac:bd:b7:5b:2f:19:69:91:1d:83:7f:fd:8c: c3:a4:ef:99:63:67:40:79:e5:73:ca:ea:6b:8f:4b: 9d:a1:0d:49:d9:79:b6:48:37:c6:94:9f:97:bd:fa: 11:b2:45:79:8b:62:7c:36:0b:77:7c:75:23:f4:08: db:bc:e7:c7:e0:cb:de:19:e0:28:19:b6:d2:44:a9: 8c:68:a6:00:14:bd:df:4a:7d:4c:c2:5e:3e:7e:94: 24:af:9a:56:0f:45:6f:46:49:fd:72:08:91:a8:32: 22:e1:25:03:eb:31:50:61:02:f6:65:3a:3b:5b:1b: c8:51:ed:b2:27:88:c8:0e:46:b6:05:99:02:14:50: 5a:4a:e5:a7:8f:32:e3:95:04:54:5c:8a:d6:d7:eb: 2b:46:1e:05:86:58:64:90:a8:6b:69:ec:30:64:c4: 23:ff:82:7a:44:51:af:e0:53:29:cc:e3:6f:b6:27: f4:3b:26:8b:50:ec:f4:5b:09:a5:3b:76:23:48:fa: 0e:28:23:35:ac:43:01:67:6b:c2:16:ff:2c:72:2a: 6c:26:2a:c1:26:08:a6:40:d4:03:08:44:92:33:51: c1:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:A3:97:66:C6:74:04:73:40:6E:9D:E4:4F:74:96:39:99:21:61:6E X509v3 Authority Key Identifier: keyid:8B:88:01:54:38:12:04:04:77:D4:74:42:29:46:6C:85:37:D4:51:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4gBVDgSBAR31HRCKUZshTfUUXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/89bb71-3fe9-42d2-a73b-13ae98aa7d33/1/5qOXZsZ0BHNAbp3kT3SWOZkhYW4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/89bb71-3fe9-42d2-a73b-13ae98aa7d33/1/i4gBVDgSBAR31HRCKUZshTfUUXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.163.122.0/23 Signature Algorithm: sha256WithRSAEncryption 45:4d:ba:e0:75:7a:5e:5d:88:9c:dd:0d:81:58:62:d4:4c:90: 7f:21:c1:3e:9a:cb:32:a7:1c:f5:5d:28:af:63:f6:78:b6:03: 91:91:ce:43:f6:36:22:2a:31:c6:d5:8f:21:cf:80:04:f7:c8: 05:9f:77:ce:38:6c:66:02:69:d0:27:2b:bb:2b:e4:56:b6:d2: d1:a1:25:f4:07:00:93:e6:23:f0:5f:ba:99:af:95:80:6e:1e: 4c:21:29:aa:83:df:85:a1:5f:20:72:bb:eb:25:4b:b2:e2:8e: 62:be:10:80:5b:38:53:bf:08:7a:45:fb:2b:95:f4:ca:4f:2b: ea:72:35:fc:86:07:e4:25:95:49:24:bd:e4:ce:f7:82:ac:ec: 70:ac:9b:f6:91:7d:b2:d6:b5:4c:e3:5b:d7:2c:c2:64:24:3b: 29:e4:16:53:d2:c1:9c:31:41:9e:35:f7:02:41:02:ef:ac:4e: e9:4e:c4:55:f7:50:2b:6c:e8:be:61:7b:01:b9:c3:fb:7e:ea: b8:f1:f8:0b:60:58:19:55:0d:ee:4c:4f:13:f0:7b:b0:8e:35: 6a:79:2b:07:79:75:31:4d:de:d4:b3:01:59:db:eb:be:4a:11: a8:95:b4:f0:ad:14:39:bc:5b:d4:e1:bb:5d:c7:58:6d:1a:01: 30:6a:14:c2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oo76/a8IKHM5lCPFevt4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiODgwMTU0MzgxMjA0MDQ3N2Q0NzQ0MjI5NDY2Yzg1Mzdk NDUxNzEwHhcNMjYwMTAxMDgxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNmEzOTc2NmM2NzQwNDczNDA2ZTlkZTQ0Zjc0OTYzOTk5MjE2MTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+1kjRDqLgugKpCVcKIZtWAbIqmO/ IE1FjmO2Ga2vcay9t1svGWmRHYN//YzDpO+ZY2dAeeVzyuprj0udoQ1J2Xm2SDfG lJ+XvfoRskV5i2J8Ngt3fHUj9AjbvOfH4MveGeAoGbbSRKmMaKYAFL3fSn1Mwl4+ fpQkr5pWD0VvRkn9cgiRqDIi4SUD6zFQYQL2ZTo7WxvIUe2yJ4jIDka2BZkCFFBa SuWnjzLjlQRUXIrW1+srRh4FhlhkkKhraewwZMQj/4J6RFGv4FMpzONvtif0OyaL UOz0WwmlO3YjSPoOKCM1rEMBZ2vCFv8scipsJirBJgimQNQDCESSM1HBXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOajl2bGdARzQG6d5E90ljmZIWFuMB8GA1UdIwQY MBaAFIuIAVQ4EgQEd9R0QilGbIU31FFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTRnQlZEZ1NCQVIzMUhSQ0tVWnNoVGZVVVhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS84OWJiNzEtM2ZlOS00MmQyLWE3M2It MTNhZTk4YWE3ZDMzLzEvNXFPWFpzWjBCSE5BYnAza1QzU1dPWmtoWVc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS84OWJiNzEtM2ZlOS00MmQyLWE3M2ItMTNhZTk4YWE3ZDMz LzEvaTRnQlZEZ1NCQVIzMUhSQ0tVWnNoVGZVVVhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwaN6MA0G CSqGSIb3DQEBCwUAA4IBAQBFTbrgdXpeXYic3Q2BWGLUTJB/IcE+mssypxz1XSiv Y/Z4tgORkc5D9jYiKjHG1Y8hz4AE98gFn3fOOGxmAmnQJyu7K+RWttLRoSX0BwCT 5iPwX7qZr5WAbh5MISmqg9+FoV8gcrvrJUuy4o5ivhCAWzhTvwh6RfsrlfTKTyvq cjX8hgfkJZVJJL3kzveCrOxwrJv2kX2y1rVM41vXLMJkJDsp5BZT0sGcMUGeNfcC QQLvrE7pTsRV91ArbOi+YXsBucP7fuq48fgLYFgZVQ3uTE8T8HuwjjVqeSsHeXUx Td7UswFZ2+u+ShGolbTwrRQ5vFvU4btdx1htGgEwahTC -----END CERTIFICATE-----Generated at Tue Feb 10 05:54:08 2026 by rpki-client