This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/Is5lVfkqCedDcO_OO0H8DuN4gvU.roa File: Is5lVfkqCedDcO_OO0H8DuN4gvU.roa (raw, json) Hash identifier: +NNpX2NGf5j+CvKpz8oUmEw0sfVnXlTMpDFrjNlIe5s= Subject key identifier: 22:CE:65:55:F9:2A:09:E7:43:70:EF:CE:3B:41:FC:0E:E3:78:82:F5 Certificate issuer: /CN=b28599292a6324297e02fff3c5119bee0b317548 Certificate serial: 019B7A5A59F2CDC7BDB44438254885E83BDD Authority key identifier: B2:85:99:29:2A:63:24:29:7E:02:FF:F3:C5:11:9B:EE:0B:31:75:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/soWZKSpjJCl-Av_zxRGb7gsxdUg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/Is5lVfkqCedDcO_OO0H8DuN4gvU.roa Signing time: Thu 01 Jan 2026 16:18:20 +0000 ROA not before: Thu 01 Jan 2026 16:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203455 IP address blocks: 185.133.132.0/22 maxlen: 32 2a05:70c0::/29 maxlen: 128 2a05:70c0::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.crl rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.mft rsync://rpki.ripe.net/repository/DEFAULT/soWZKSpjJCl-Av_zxRGb7gsxdUg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:59:f2:cd:c7:bd:b4:44:38:25:48:85:e8:3b:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b28599292a6324297e02fff3c5119bee0b317548 Validity Not Before: Jan 1 16:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=22ce6555f92a09e74370efce3b41fc0ee37882f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e9:e1:1f:be:57:ba:91:a2:78:c5:dc:c3:49: ed:e6:32:2f:2b:d4:e1:3e:78:e3:e1:f3:63:3c:81: d1:43:2d:17:b4:29:41:1b:68:95:9d:de:b7:74:49: 3e:92:f9:a2:29:27:7c:ba:03:bf:81:71:ab:45:d4: 7d:ad:89:82:41:10:93:b9:10:00:5d:f5:e9:e3:22: 22:42:68:6b:7d:f5:df:31:0d:bf:d9:c1:cb:47:be: a0:86:85:06:2f:22:20:a1:c3:ca:52:9e:8d:2e:c3: 2c:12:68:25:68:db:74:ec:37:ff:ac:51:e3:d2:df: a2:28:42:32:dd:17:7d:5f:5f:45:4b:e8:2b:27:ef: b3:0a:b1:9b:fa:87:b2:d3:bb:9d:61:c2:b2:34:c5: 1a:4a:ea:2d:70:6b:fb:58:94:7d:15:91:46:25:26: 43:79:d9:31:98:0f:64:16:2c:3b:80:89:50:88:da: fc:13:4c:56:e7:74:f4:41:8b:8a:6c:15:ac:d0:60: 31:dd:95:d4:2b:cb:c7:79:40:ab:4e:85:34:39:78: af:58:4b:55:ca:a8:3c:5e:fe:e2:47:a6:75:0d:08: ad:5a:20:76:af:48:88:62:72:5d:15:94:fd:56:dd: e6:cb:7e:39:1e:b1:e5:cd:8e:ad:7e:69:c8:be:9a: 3f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:CE:65:55:F9:2A:09:E7:43:70:EF:CE:3B:41:FC:0E:E3:78:82:F5 X509v3 Authority Key Identifier: keyid:B2:85:99:29:2A:63:24:29:7E:02:FF:F3:C5:11:9B:EE:0B:31:75:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soWZKSpjJCl-Av_zxRGb7gsxdUg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/Is5lVfkqCedDcO_OO0H8DuN4gvU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.133.132.0/22 IPv6: 2a05:70c0::/29 Signature Algorithm: sha256WithRSAEncryption 17:fc:b1:12:3b:07:e0:2a:b4:d5:7f:59:21:2a:02:3a:e2:71: ae:13:6b:8b:bf:00:da:d3:73:50:6e:11:e1:9f:8c:86:ad:10: 69:ea:f0:1b:fe:53:e2:1d:3b:0e:59:a2:4e:6f:6a:59:76:5b: 4a:b1:42:ae:7e:d0:84:69:ff:96:e9:4a:6d:49:ac:c2:df:58: 47:8f:61:65:e9:bf:d8:a6:6b:a3:d4:38:a8:3c:73:1d:56:fe: 7b:3b:92:fc:f2:0a:c0:da:0a:ec:ae:9b:71:39:93:a4:4b:3d: f2:87:5b:d9:c2:d3:79:f1:21:a2:61:74:bd:e5:a1:01:fe:76: 1d:b6:3b:5e:de:88:37:ff:2f:2c:eb:79:84:da:1f:46:75:aa: 42:b3:96:18:75:53:c6:e0:f4:d2:07:e5:79:71:06:a4:14:3d: e2:e3:43:cd:b3:ae:47:7b:1b:12:0b:ae:9c:e9:2f:c7:97:f8: 2b:16:6f:c3:31:2e:bf:fc:f4:58:32:9e:c9:6c:fc:03:9c:ae: 4a:9c:dc:2c:2f:c8:73:dd:47:cb:93:d1:2c:c8:e8:70:89:13: ef:66:fa:bf:2c:fb:a0:5f:0f:85:ca:04:c9:46:12:a5:fb:e4: f4:9e:9b:ed:4e:8b:fa:ac:c2:aa:3d:a5:e8:2d:8c:fc:68:d8: c8:a3:5a:36 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6Wlnyzce9tEQ4JUiF6DvdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyODU5OTI5MmE2MzI0Mjk3ZTAyZmZmM2M1MTE5YmVlMGIz MTc1NDgwHhcNMjYwMTAxMTYxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMmNlNjU1NWY5MmEwOWU3NDM3MGVmY2UzYjQxZmMwZWUzNzg4MmY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+nhH75XupGieMXcw0nt5jIvK9Th Pnjj4fNjPIHRQy0XtClBG2iVnd63dEk+kvmiKSd8ugO/gXGrRdR9rYmCQRCTuRAA XfXp4yIiQmhrffXfMQ2/2cHLR76ghoUGLyIgocPKUp6NLsMsEmglaNt07Df/rFHj 0t+iKEIy3Rd9X19FS+grJ++zCrGb+oey07udYcKyNMUaSuotcGv7WJR9FZFGJSZD edkxmA9kFiw7gIlQiNr8E0xW53T0QYuKbBWs0GAx3ZXUK8vHeUCrToU0OXivWEtV yqg8Xv7iR6Z1DQitWiB2r0iIYnJdFZT9Vt3my345HrHlzY6tfmnIvpo/HQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFCLOZVX5KgnnQ3DvzjtB/A7jeIL1MB8GA1UdIwQY MBaAFLKFmSkqYyQpfgL/88URm+4LMXVIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc29XWktTcGpKQ2wtQXZfenhSR2I3Z3N4ZFVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9lNTUyZjQtOTZjYS00MjU5LWE4MmEt ZTM1YTY3ZTVkOWUyLzEvSXM1bFZma3FDZWREY09fT08wSDhEdU40Z3ZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9lNTUyZjQtOTZjYS00MjU5LWE4MmEtZTM1YTY3ZTVkOWUy LzEvc29XWktTcGpKQ2wtQXZfenhSR2I3Z3N4ZFVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuYWEMA0E AgACMAcDBQMqBXDAMA0GCSqGSIb3DQEBCwUAA4IBAQAX/LESOwfgKrTVf1khKgI6 4nGuE2uLvwDa03NQbhHhn4yGrRBp6vAb/lPiHTsOWaJOb2pZdltKsUKuftCEaf+W 6UptSazC31hHj2Fl6b/Ypmuj1DioPHMdVv57O5L88grA2grsrptxOZOkSz3yh1vZ wtN58SGiYXS95aEB/nYdtjte3og3/y8s63mE2h9GdapCs5YYdVPG4PTSB+V5cQak FD3i40PNs65HexsSC66c6S/Hl/grFm/DMS6//PRYMp7JbPwDnK5KnNwsL8hz3UfL k9EsyOhwiRPvZvq/LPugXw+FygTJRhKl++T0npvtTov6rMKqPaXoLYz8aNjIo1o2 -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:39 2026 by rpki-client