This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/iOS5vBgglGKoAyIuTlk00yBupTw.roa File: iOS5vBgglGKoAyIuTlk00yBupTw.roa (raw, json) Hash identifier: fNX0sG9X1/c+S73jxlwNV//c2xpiWXgbC9SCAgMtlMM= Subject key identifier: 88:E4:B9:BC:18:20:94:62:A8:03:22:2E:4E:59:34:D3:20:6E:A5:3C Certificate issuer: /CN=ef9d763b49e024a7b6a19eaf7dfb98911a9c94c8 Certificate serial: 019B7E38ACD756638A54A1CE9B06044571C9 Authority key identifier: EF:9D:76:3B:49:E0:24:A7:B6:A1:9E:AF:7D:FB:98:91:1A:9C:94:C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7512O0ngJKe2oZ6vffuYkRqclMg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/iOS5vBgglGKoAyIuTlk00yBupTw.roa Signing time: Fri 02 Jan 2026 10:20:01 +0000 ROA not before: Fri 02 Jan 2026 10:20:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8860 IP address blocks: 5.182.21.0/24 maxlen: 24 5.182.23.0/24 maxlen: 24 2a0e:b800::/32 maxlen: 48 2a0e:b800:dddd::/48 maxlen: 48 2a0e:b801::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.crl rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft rsync://rpki.ripe.net/repository/DEFAULT/7512O0ngJKe2oZ6vffuYkRqclMg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:ac:d7:56:63:8a:54:a1:ce:9b:06:04:45:71:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef9d763b49e024a7b6a19eaf7dfb98911a9c94c8 Validity Not Before: Jan 2 10:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88e4b9bc18209462a803222e4e5934d3206ea53c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ea:de:21:27:a2:00:b5:e8:96:aa:a3:e5:16: 8a:a3:91:82:3e:d0:0a:6d:28:e1:67:b8:51:9f:3b: 2a:c5:bb:49:e6:01:f6:b5:97:ac:d6:8d:06:b3:5c: 59:de:e5:6a:dc:0d:7a:5b:36:6a:86:30:86:e1:1e: 01:59:a9:9e:93:e2:cf:31:a2:56:6b:6e:13:1e:76: 65:17:55:5a:13:52:8f:09:63:5f:66:3e:ef:b5:ae: 66:61:56:16:7e:41:78:f0:1f:e7:3d:2e:e5:fa:96: a0:68:5f:7b:54:54:12:e3:ce:c5:68:b7:66:f8:7f: af:84:be:9c:9b:84:4c:62:3c:3d:d8:8f:81:bb:68: 74:fc:42:15:26:ef:b2:48:28:19:ec:8a:e0:b2:71: 56:b6:8e:c0:14:cf:0f:25:43:bb:9d:0f:30:66:2e: 09:1d:72:7c:eb:18:eb:5c:be:94:ac:ef:fa:de:e7: c5:60:90:85:cb:30:9d:c0:f7:94:ce:1c:e0:56:41: 24:ef:2f:f8:54:7b:10:c4:e3:27:5f:7a:48:f3:dc: 07:a7:04:67:e3:3d:1c:20:aa:b4:95:7f:cb:ee:e2: 7b:3c:f4:95:f7:74:f5:f0:d1:63:02:58:54:f3:1c: f3:13:79:4a:83:ce:e1:b5:c1:4f:ad:58:12:13:e5: db:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:E4:B9:BC:18:20:94:62:A8:03:22:2E:4E:59:34:D3:20:6E:A5:3C X509v3 Authority Key Identifier: keyid:EF:9D:76:3B:49:E0:24:A7:B6:A1:9E:AF:7D:FB:98:91:1A:9C:94:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7512O0ngJKe2oZ6vffuYkRqclMg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/iOS5vBgglGKoAyIuTlk00yBupTw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.21.0/24 5.182.23.0/24 IPv6: 2a0e:b800::/31 Signature Algorithm: sha256WithRSAEncryption ad:28:20:a3:75:1b:4e:30:4a:e1:2b:42:55:14:1f:42:d5:47: 5b:4e:61:c7:2e:24:0a:fb:2d:40:41:33:0d:37:52:78:f4:d7: 2f:f5:31:86:be:46:14:04:93:44:d5:93:41:50:ca:b9:f2:1b: 50:a4:07:e0:f5:5d:33:3c:4e:9e:ca:b9:d1:07:01:3f:74:99: f5:9d:f5:6a:d6:98:b4:a4:51:11:1b:96:94:57:01:b8:3c:e9: 7c:ba:4d:7e:af:94:f8:cf:19:2a:f9:58:04:a3:39:d7:03:38: b7:24:bb:37:6f:9a:0b:ad:f7:7f:a0:03:ad:b3:5c:e7:7e:cb: e4:ef:58:69:91:d0:53:bd:8b:65:95:1b:65:87:e8:64:05:41: 2c:ba:f0:b8:a6:55:27:c8:bb:0a:f3:09:cc:b1:4c:60:c7:78: 61:20:84:08:04:a7:7b:93:89:03:30:ba:bf:86:2f:7c:70:70: 7f:f8:93:66:04:35:fb:80:2f:c2:08:e3:56:63:8c:50:47:28: d1:68:32:a2:6b:18:5f:e7:77:26:63:d1:95:30:bb:93:e2:b2: ab:ab:3b:d0:c5:86:13:0b:2c:01:2e:c6:d9:49:1d:21:1a:e9: 14:c1:c7:06:2a:da:ba:88:d5:06:db:22:98:55:3a:7c:e9:72: ca:56:20:c9 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt+OKzXVmOKVKHOmwYERXHJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmOWQ3NjNiNDllMDI0YTdiNmExOWVhZjdkZmI5ODkxMWE5 Yzk0YzgwHhcNMjYwMTAyMTAyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OGU0YjliYzE4MjA5NDYyYTgwMzIyMmU0ZTU5MzRkMzIwNmVhNTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArureISeiALXolqqj5RaKo5GCPtAK bSjhZ7hRnzsqxbtJ5gH2tZes1o0Gs1xZ3uVq3A16WzZqhjCG4R4BWamek+LPMaJW a24THnZlF1VaE1KPCWNfZj7vta5mYVYWfkF48B/nPS7l+pagaF97VFQS487FaLdm +H+vhL6cm4RMYjw92I+Bu2h0/EIVJu+ySCgZ7IrgsnFWto7AFM8PJUO7nQ8wZi4J HXJ86xjrXL6UrO/63ufFYJCFyzCdwPeUzhzgVkEk7y/4VHsQxOMnX3pI89wHpwRn 4z0cIKq0lX/L7uJ7PPSV93T18NFjAlhU8xzzE3lKg87htcFPrVgSE+XbaQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFIjkubwYIJRiqAMiLk5ZNNMgbqU8MB8GA1UdIwQY MBaAFO+ddjtJ4CSntqGer337mJEanJTIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzUxMk8wbmdKS2Uyb1o2dmZmdVlrUnFjbE1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS81OWNmOGUtZGM2Ny00M2ZiLWJkMzct MDg3MGU2NTk2NDViLzEvaU9TNXZCZ2dsR0tvQXlJdVRsazAweUJ1cFR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS81OWNmOGUtZGM2Ny00M2ZiLWJkMzctMDg3MGU2NTk2NDVi LzEvNzUxMk8wbmdKS2Uyb1o2dmZmdVlrUnFjbE1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQABbYVAwQA BbYXMA0EAgACMAcDBQEqDrgAMA0GCSqGSIb3DQEBCwUAA4IBAQCtKCCjdRtOMErh K0JVFB9C1UdbTmHHLiQK+y1AQTMNN1J49Ncv9TGGvkYUBJNE1ZNBUMq58htQpAfg 9V0zPE6eyrnRBwE/dJn1nfVq1pi0pFERG5aUVwG4POl8uk1+r5T4zxkq+VgEoznX Azi3JLs3b5oLrfd/oAOts1znfsvk71hpkdBTvYtllRtlh+hkBUEsuvC4plUnyLsK 8wnMsUxgx3hhIIQIBKd7k4kDMLq/hi98cHB/+JNmBDX7gC/CCONWY4xQRyjRaDKi axhf53cmY9GVMLuT4rKrqzvQxYYTCywBLsbZSR0hGukUwccGKtq6iNUG2yKYVTp8 6XLKViDJ -----END CERTIFICATE-----Generated at Mon Jan 26 20:24:45 2026 by rpki-client