This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/5Q5SmVwCYdWVR4jJ4yPXGm6nx4E.roa File: 5Q5SmVwCYdWVR4jJ4yPXGm6nx4E.roa (raw, json) Hash identifier: E+HPw/BSZoy+FRt+tdA/pl0xYJ8cBINy/SV66sa2K/Q= Subject key identifier: E5:0E:52:99:5C:02:61:D5:95:47:88:C9:E3:23:D7:1A:6E:A7:C7:81 Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2 Certificate serial: 019B7F13A03A18EDAB20B345D16CD5B298EA Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/5Q5SmVwCYdWVR4jJ4yPXGm6nx4E.roa Signing time: Fri 02 Jan 2026 14:19:11 +0000 ROA not before: Fri 02 Jan 2026 14:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137409 IP address blocks: 176.113.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:a0:3a:18:ed:ab:20:b3:45:d1:6c:d5:b2:98:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2 Validity Not Before: Jan 2 14:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e50e52995c0261d5954788c9e323d71a6ea7c781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f8:b6:33:fe:73:f6:99:6a:1b:8f:1f:b9:2d: 9b:83:43:0a:47:91:5a:11:8b:55:18:4a:03:45:d7: 50:bc:4d:da:f2:f8:37:3b:f1:55:c3:8b:d5:75:c8: 72:91:4f:73:a5:c4:a4:3d:10:7e:43:7a:a5:f7:17: 18:a6:b4:25:e2:25:97:d3:b3:59:05:18:64:03:ba: af:ad:41:b1:b8:9a:a5:5c:0b:89:68:72:29:14:b4: dd:5c:91:13:83:79:94:55:cc:cd:09:97:c9:6f:0c: be:c6:ed:06:29:41:82:cb:94:0f:9b:a4:6d:34:1c: f0:f5:0b:0f:9e:ce:c6:a6:c8:af:2f:7b:3c:b4:2e: 73:4a:99:ed:24:63:33:ef:7a:40:ce:e1:1a:36:a8: 29:6d:13:7c:ba:3c:d3:55:09:72:29:e9:3b:ee:ae: 99:cd:9d:b1:90:5f:e3:45:a0:87:81:67:c2:62:58: c2:d8:4b:9d:05:e4:ea:01:6c:99:a1:88:14:8c:22: 6c:f7:db:27:3a:bb:60:49:a6:17:f8:33:b4:fb:d5: 9c:f4:30:13:26:4f:45:4f:5e:90:aa:73:2e:25:6a: 5e:26:cc:fa:d0:42:21:34:8d:a8:e4:e1:8f:80:89: 3c:1c:ff:13:10:ef:e6:0d:b0:8c:6f:38:94:fa:7d: 96:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:0E:52:99:5C:02:61:D5:95:47:88:C9:E3:23:D7:1A:6E:A7:C7:81 X509v3 Authority Key Identifier: keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/5Q5SmVwCYdWVR4jJ4yPXGm6nx4E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.113.98.0/24 Signature Algorithm: sha256WithRSAEncryption 37:ad:6d:ab:f7:68:1b:a7:28:1a:5e:f1:15:74:75:34:b5:02: 97:0a:1a:b4:25:99:67:1a:be:75:64:b7:6a:0a:01:d0:7c:d2: fa:e5:3a:b0:c7:39:8a:1f:48:76:f5:74:1d:45:d5:6f:81:ce: cc:57:d6:a8:e5:84:c8:bb:da:10:be:af:12:63:6d:c6:1e:94: 92:b4:67:35:9b:8b:b6:18:6c:6a:6f:84:0e:13:5e:8c:9c:4f: e4:f5:92:51:84:43:48:f1:98:65:b1:ca:9c:6f:ca:59:82:1c: a4:e9:31:e2:4c:30:c2:e6:3a:f8:57:a9:44:c1:d4:4e:9b:23: 15:da:bd:8d:9b:09:71:20:05:4c:26:34:27:45:8d:ec:e3:09: 00:82:6c:62:4e:e8:c9:6f:e5:61:f2:a6:d3:a1:37:90:8e:ce: f7:a8:bb:fb:0f:1b:08:db:58:b3:1e:ad:b3:a3:61:95:87:2a: 1c:2a:9e:d7:be:a6:d5:4d:cb:ea:1e:5c:f7:34:24:dc:55:16: ef:6d:1a:b9:42:b1:a3:90:1d:65:ab:cf:11:c3:87:2b:bf:78: 42:35:5f:2f:96:ff:7d:ac:9e:6f:c4:df:c5:6a:4a:22:60:27: b3:17:c4:6b:7d:8c:99:e2:34:f3:95:bd:fe:81:6a:10:56:2a: f6:78:27:ae -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/E6A6GO2rILNF0WzVspjqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZjJjMmU3YmMxZGE1NGQ5MTljYTViNTk0MWQzNzg4OTJi MmNjYjIwHhcNMjYwMTAyMTQxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTBlNTI5OTVjMDI2MWQ1OTU0Nzg4YzllMzIzZDcxYTZlYTdjNzgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfi2M/5z9plqG48fuS2bg0MKR5Fa EYtVGEoDRddQvE3a8vg3O/FVw4vVdchykU9zpcSkPRB+Q3ql9xcYprQl4iWX07NZ BRhkA7qvrUGxuJqlXAuJaHIpFLTdXJETg3mUVczNCZfJbwy+xu0GKUGCy5QPm6Rt NBzw9QsPns7GpsivL3s8tC5zSpntJGMz73pAzuEaNqgpbRN8ujzTVQlyKek77q6Z zZ2xkF/jRaCHgWfCYljC2EudBeTqAWyZoYgUjCJs99snOrtgSaYX+DO0+9Wc9DAT Jk9FT16QqnMuJWpeJsz60EIhNI2o5OGPgIk8HP8TEO/mDbCMbziU+n2WDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOUOUplcAmHVlUeIyeMj1xpup8eBMB8GA1UdIwQY MBaAFCLywue8HaVNkZyltZQdN4iSssyyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi82MDI1MzAtNmQyMi00NmYxLThlMDUt MDJkZWY2ZTg0YzkxLzEvNVE1U21Wd0NZZFdWUjRqSjR5UFhHbTZueDRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi82MDI1MzAtNmQyMi00NmYxLThlMDUtMDJkZWY2ZTg0Yzkx LzEvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHFiMA0G CSqGSIb3DQEBCwUAA4IBAQA3rW2r92gbpygaXvEVdHU0tQKXChq0JZlnGr51ZLdq CgHQfNL65TqwxzmKH0h29XQdRdVvgc7MV9ao5YTIu9oQvq8SY23GHpSStGc1m4u2 GGxqb4QOE16MnE/k9ZJRhENI8Zhlscqcb8pZghyk6THiTDDC5jr4V6lEwdROmyMV 2r2NmwlxIAVMJjQnRY3s4wkAgmxiTujJb+Vh8qbToTeQjs73qLv7DxsI21izHq2z o2GVhyocKp7XvqbVTcvqHlz3NCTcVRbvbRq5QrGjkB1lq88Rw4crv3hCNV8vlv99 rJ5vxN/FakoiYCezF8RrfYyZ4jTzlb3+gWoQVir2eCeu -----END CERTIFICATE-----Generated at Mon Jan 19 16:54:46 2026 by rpki-client