This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/io5yyLDlHPGCEzGEMhnAmmdPx5s.roa File: io5yyLDlHPGCEzGEMhnAmmdPx5s.roa (raw, json) Hash identifier: jf2AJXsyEXE21uFIryQ83Vk8vd7pT2QW+lohF7eLHiQ= Subject key identifier: 8A:8E:72:C8:B0:E5:1C:F1:82:13:31:84:32:19:C0:9A:67:4F:C7:9B Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f Certificate serial: 019B78A22D12FC42035902421DF8DFBA6069 Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/io5yyLDlHPGCEzGEMhnAmmdPx5s.roa Signing time: Thu 01 Jan 2026 08:17:32 +0000 ROA not before: Thu 01 Jan 2026 08:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47516 IP address blocks: 5.10.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 11:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:2d:12:fc:42:03:59:02:42:1d:f8:df:ba:60:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f Validity Not Before: Jan 1 08:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a8e72c8b0e51cf1821331843219c09a674fc79b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:91:03:19:99:b0:e2:b9:f3:e1:21:1a:5f:45: ae:73:71:52:4a:e1:35:c4:31:f0:c2:ab:df:25:8e: 24:6f:85:ae:cf:2b:a4:1f:58:07:b6:1f:6e:d3:51: bc:27:3d:35:75:59:73:07:bd:0c:62:55:63:36:6b: 19:cf:a5:f7:19:c8:4e:37:bc:0d:9d:d5:f9:70:8d: ce:a1:79:04:f8:52:6c:2a:74:65:ff:34:98:4a:15: 3d:52:27:a5:16:7d:2a:c4:99:1b:02:a4:8b:11:b6: 86:bb:d1:5b:d5:d2:d4:c0:e9:99:d5:65:c5:ed:38: cb:8e:67:ef:cf:dd:8c:f4:2f:7b:c4:7b:69:fa:0b: 4f:e8:79:0c:ee:c4:e5:c4:ca:2d:7b:ac:b5:ea:48: 68:be:a8:cb:d4:60:f7:11:f9:0c:a4:fd:84:21:cc: 19:a2:7a:18:8e:87:78:49:99:17:51:56:7c:f6:f9: 4c:28:d0:06:72:d7:39:6e:d2:4b:d8:0a:07:94:53: 5c:00:e1:08:2d:c0:bd:e0:14:8d:a2:c2:40:a7:52: 57:ed:6d:9a:87:d8:e0:02:23:f7:f7:3b:66:7f:a9: c0:fa:80:ce:e0:f0:52:ec:00:ce:7a:7b:8e:0f:7f: d2:e7:d1:4b:a2:c1:3d:5e:01:55:1f:60:7d:5f:b7: 02:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:8E:72:C8:B0:E5:1C:F1:82:13:31:84:32:19:C0:9A:67:4F:C7:9B X509v3 Authority Key Identifier: keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/io5yyLDlHPGCEzGEMhnAmmdPx5s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.10.220.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:81:52:c1:a0:92:83:0e:6d:40:45:78:db:fd:79:5c:d6:9a: f3:3a:d5:1c:e4:a1:60:05:21:7c:1f:49:3d:67:3e:5b:b2:24: e7:a3:62:34:1b:42:9e:06:df:c7:75:da:ca:e3:c4:f8:c1:5e: 5b:d3:cb:bb:d1:1c:a5:b9:76:09:49:82:ad:7a:92:7c:5f:b6: da:47:9d:ef:62:e1:b1:8d:05:83:e2:25:79:34:c6:ff:0e:b4: 96:ee:ae:1e:5b:aa:68:48:ad:c4:35:d8:8e:df:89:a7:5c:01: 22:e1:a5:2e:20:77:5d:0f:5d:0d:60:bf:f4:aa:5e:af:e9:2c: ba:0a:fd:d0:4a:5f:8f:3c:d4:fe:d8:cc:c9:43:ea:fa:e8:46: 1a:c9:e0:90:0d:cc:b2:5f:45:cf:6a:3a:31:db:8f:0c:bf:b7: 44:ff:b0:5b:4d:93:6f:6e:7e:a6:b2:7a:b7:82:f9:ba:68:b7: c5:21:33:5a:59:c7:bd:2e:e9:9a:7b:c5:01:aa:59:5b:2d:73: ff:57:b5:40:a7:32:6f:7a:24:b9:38:96:5f:84:70:e7:ce:d4: 0a:c9:96:6d:aa:76:3c:d0:7d:ad:d1:8c:64:12:83:3b:79:29: 12:2b:00:72:5b:57:96:48:97:c5:a2:0f:30:01:f3:82:44:e5: f6:1d:6d:97 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oi0S/EIDWQJCHfjfumBpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2VmOWJlZmQxYTdlMjRjMGNjOTcyOTk4N2ZjMDY1ZDZi NzEzMmYwHhcNMjYwMTAxMDgxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YThlNzJjOGIwZTUxY2YxODIxMzMxODQzMjE5YzA5YTY3NGZjNzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5pEDGZmw4rnz4SEaX0Wuc3FSSuE1 xDHwwqvfJY4kb4WuzyukH1gHth9u01G8Jz01dVlzB70MYlVjNmsZz6X3GchON7wN ndX5cI3OoXkE+FJsKnRl/zSYShU9UielFn0qxJkbAqSLEbaGu9Fb1dLUwOmZ1WXF 7TjLjmfvz92M9C97xHtp+gtP6HkM7sTlxMote6y16khovqjL1GD3EfkMpP2EIcwZ onoYjod4SZkXUVZ89vlMKNAGctc5btJL2AoHlFNcAOEILcC94BSNosJAp1JX7W2a h9jgAiP39ztmf6nA+oDO4PBS7ADOenuOD3/S59FLosE9XgFVH2B9X7cC9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIqOcsiw5RzxghMxhDIZwJpnT8ebMB8GA1UdIwQY MBaAFCl++b79Gn4kwMyXKZh/wGXWtxMvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWIt ZGVlNzY4NjAwMTNkLzEvaW81eXlMRGxIUEdDRXpHRU1obkFtbWRQeDVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWItZGVlNzY4NjAwMTNk LzEvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABQrcMA0G CSqGSIb3DQEBCwUAA4IBAQCegVLBoJKDDm1ARXjb/Xlc1przOtUc5KFgBSF8H0k9 Zz5bsiTno2I0G0KeBt/HddrK48T4wV5b08u70RyluXYJSYKtepJ8X7baR53vYuGx jQWD4iV5NMb/DrSW7q4eW6poSK3ENdiO34mnXAEi4aUuIHddD10NYL/0ql6v6Sy6 Cv3QSl+PPNT+2MzJQ+r66EYayeCQDcyyX0XPajox248Mv7dE/7BbTZNvbn6msnq3 gvm6aLfFITNaWce9Lumae8UBqllbLXP/V7VApzJveiS5OJZfhHDnztQKyZZtqnY8 0H2t0YxkEoM7eSkSKwByW1eWSJfFog8wAfOCROX2HW2X -----END CERTIFICATE-----Generated at Wed Jan 21 18:21:47 2026 by rpki-client