This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/r5srZe-xUm0Yd0akgceKp5wi398.roa File: r5srZe-xUm0Yd0akgceKp5wi398.roa (raw, json) Hash identifier: fg/QInXk+zpCLixKR8FC3dEYblIzWioFCagp25roJXU= Subject key identifier: AF:9B:2B:65:EF:B1:52:6D:18:77:46:A4:81:C7:8A:A7:9C:22:DF:DF Certificate issuer: /CN=7539b7a123417aa719325946aa89e0f30ab0ca09 Certificate serial: 019B78A258A4F892CC41C3E20A59A001448E Authority key identifier: 75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/r5srZe-xUm0Yd0akgceKp5wi398.roa Signing time: Thu 01 Jan 2026 08:17:43 +0000 ROA not before: Thu 01 Jan 2026 08:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28742 IP address blocks: 194.21.56.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.mft rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:58:a4:f8:92:cc:41:c3:e2:0a:59:a0:01:44:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7539b7a123417aa719325946aa89e0f30ab0ca09 Validity Not Before: Jan 1 08:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af9b2b65efb1526d187746a481c78aa79c22dfdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6c:cb:d8:ae:08:22:79:60:1b:3e:35:3f:95: dd:e0:27:ea:fb:64:e3:c3:bb:16:fe:8b:40:aa:cd: b2:cc:e4:b9:ee:70:29:73:ba:2b:1d:08:ef:e5:9d: 3d:74:67:70:4f:ca:01:11:07:24:9d:23:40:57:20: d6:b8:56:bb:7a:b9:66:9e:e3:a6:47:8f:87:df:95: ae:4c:99:b6:0b:10:fd:93:11:a0:2b:90:6a:9e:43: cc:31:ca:e5:d3:5e:9a:e0:2f:7f:81:63:f4:55:48: f0:d6:05:ec:09:ac:27:32:88:21:d7:b1:ce:ed:a2: 3e:c2:3d:96:c6:bf:23:1d:51:4b:8f:08:b2:76:6e: 9d:1e:2a:05:42:60:24:fc:ae:9d:b4:aa:00:b5:aa: 51:5c:e9:31:ff:1b:b8:69:7e:c1:23:c1:6e:8b:ad: 04:74:68:60:8a:0a:f4:8f:e3:28:87:63:8d:cd:4f: 36:c1:af:be:15:6b:71:3d:3b:62:47:34:1d:33:c3: d2:f5:75:d2:cb:95:76:ff:90:e6:4c:05:2a:19:92: 5a:87:7b:ce:e8:f1:26:63:76:9e:f5:9b:9b:86:27: d5:39:06:50:58:68:3c:8a:95:36:0a:3e:63:3a:c9: b2:8e:40:54:56:22:bd:36:75:a5:1a:9f:2d:e2:de: 51:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:9B:2B:65:EF:B1:52:6D:18:77:46:A4:81:C7:8A:A7:9C:22:DF:DF X509v3 Authority Key Identifier: keyid:75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/r5srZe-xUm0Yd0akgceKp5wi398.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.21.56.0/23 Signature Algorithm: sha256WithRSAEncryption 28:e6:2e:7a:60:4f:c3:e7:2c:b5:45:46:d6:d3:cb:ee:bd:ac: 96:1a:1b:d4:cf:f8:87:7e:f6:3d:a9:0f:b4:fa:16:61:74:12: b7:01:f3:6e:27:de:78:bb:96:44:d3:f6:70:55:88:67:80:fa: df:1b:de:7f:77:c7:7c:fc:da:1f:2c:d5:7b:5d:a5:dc:55:5d: 1e:fb:a0:0a:f8:9f:2f:3f:70:5c:6f:94:05:ce:67:e2:98:af: 6c:0f:d4:9a:56:e5:ef:2c:ee:62:08:e7:5e:74:7b:5e:ad:a5: 02:35:63:c0:a4:23:d5:34:0e:9f:f9:e6:b1:83:a5:8c:e1:16: b7:99:ce:69:e9:cf:f6:8a:49:db:4e:55:7b:8a:9b:0c:08:80: 30:4a:4e:95:57:a2:7d:d3:81:6f:83:b7:d6:ac:30:e8:31:75: 48:a9:70:7f:ab:84:0e:f1:12:07:3c:a7:74:33:3e:dd:60:22: 1f:89:4a:5f:0d:92:9d:8a:21:37:d7:a4:d5:7f:14:be:ec:1c: da:f3:d4:44:26:5a:9c:91:82:46:ca:34:a7:93:3d:42:b9:9c: e6:44:be:5c:8a:f8:fa:37:f9:39:4b:c7:d3:0d:3b:98:6c:8e: b2:5d:d0:f8:a4:4d:67:3d:24:e6:00:ca:49:ff:45:6e:f7:f8: 93:3d:75:95 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4olik+JLMQcPiClmgAUSOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MzliN2ExMjM0MTdhYTcxOTMyNTk0NmFhODllMGYzMGFi MGNhMDkwHhcNMjYwMTAxMDgxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjliMmI2NWVmYjE1MjZkMTg3NzQ2YTQ4MWM3OGFhNzljMjJkZmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGzL2K4IInlgGz41P5Xd4Cfq+2Tj w7sW/otAqs2yzOS57nApc7orHQjv5Z09dGdwT8oBEQcknSNAVyDWuFa7erlmnuOm R4+H35WuTJm2CxD9kxGgK5BqnkPMMcrl016a4C9/gWP0VUjw1gXsCawnMogh17HO 7aI+wj2Wxr8jHVFLjwiydm6dHioFQmAk/K6dtKoAtapRXOkx/xu4aX7BI8Fui60E dGhgigr0j+Moh2ONzU82wa++FWtxPTtiRzQdM8PS9XXSy5V2/5DmTAUqGZJah3vO 6PEmY3ae9ZubhifVOQZQWGg8ipU2Cj5jOsmyjkBUViK9NnWlGp8t4t5RewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK+bK2XvsVJtGHdGpIHHiqecIt/fMB8GA1UdIwQY MBaAFHU5t6EjQXqnGTJZRqqJ4PMKsMoJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFRtM29TTkJlcWNaTWxsR3Fvbmc4d3F3eWdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi84MDdlZDUtNTBiMy00ZTVmLTkzNjct NWI1ZTMzY2U3MGFkLzEvcjVzclplLXhVbTBZZDBha2djZUtwNXdpMzk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi84MDdlZDUtNTBiMy00ZTVmLTkzNjctNWI1ZTMzY2U3MGFk LzEvZFRtM29TTkJlcWNaTWxsR3Fvbmc4d3F3eWdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwhU4MA0G CSqGSIb3DQEBCwUAA4IBAQAo5i56YE/D5yy1RUbW08vuvayWGhvUz/iHfvY9qQ+0 +hZhdBK3AfNuJ954u5ZE0/ZwVYhngPrfG95/d8d8/NofLNV7XaXcVV0e+6AK+J8v P3Bcb5QFzmfimK9sD9SaVuXvLO5iCOdedHteraUCNWPApCPVNA6f+eaxg6WM4Ra3 mc5p6c/2iknbTlV7ipsMCIAwSk6VV6J904Fvg7fWrDDoMXVIqXB/q4QO8RIHPKd0 Mz7dYCIfiUpfDZKdiiE316TVfxS+7Bza89REJlqckYJGyjSnkz1CuZzmRL5civj6 N/k5S8fTDTuYbI6yXdD4pE1nPSTmAMpJ/0Vu9/iTPXWV -----END CERTIFICATE-----Generated at Tue Jan 27 05:42:00 2026 by rpki-client