This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/g5sbtCYUVEveW20gJfxhlo68WkU.roa File: g5sbtCYUVEveW20gJfxhlo68WkU.roa (raw, json) Hash identifier: C7ClFZjJyMJX59WUtE5kanIA61nH2xCRycagHrjCTIU= Subject key identifier: 83:9B:1B:B4:26:14:54:4B:DE:5B:6D:20:25:FC:61:96:8E:BC:5A:45 Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Certificate serial: 019B7F83B6C879E6C0E98B89E41B56BDF019 Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/g5sbtCYUVEveW20gJfxhlo68WkU.roa Signing time: Fri 02 Jan 2026 16:21:36 +0000 ROA not before: Fri 02 Jan 2026 16:21:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206812 IP address blocks: 178.170.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:b6:c8:79:e6:c0:e9:8b:89:e4:1b:56:bd:f0:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Validity Not Before: Jan 2 16:21:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=839b1bb42614544bde5b6d2025fc61968ebc5a45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c3:03:58:98:26:b0:1a:bb:9b:04:14:72:a5: 9d:35:b5:2f:f7:22:32:03:72:de:fc:26:ab:af:57: 60:c2:d7:a2:2a:5d:f5:68:ae:19:33:92:e1:8a:19: ae:36:f8:4b:14:29:64:46:82:3f:f7:32:d3:9a:90: c8:11:3d:16:8d:d7:c0:ac:8b:43:51:f5:b1:40:9e: e4:a4:dd:fe:ee:ed:5d:52:19:e5:2f:5d:01:56:20: 29:91:49:f5:7b:9e:be:5a:01:35:c3:74:06:c2:f6: 18:47:2b:33:1c:ef:70:76:43:a6:d5:34:01:d8:87: c0:21:0f:c6:cb:c1:79:89:89:d2:51:05:75:74:80: 50:2b:55:b2:bf:52:9c:89:8f:4d:31:ae:70:b7:a1: 2a:c2:0e:99:80:e0:c1:99:83:85:dc:08:11:50:fc: 82:77:26:9d:43:39:62:e1:87:d6:b8:82:1c:f8:5b: 0c:18:a6:39:cc:b8:d7:e7:c1:9e:05:2f:81:c5:8e: 65:a0:96:0d:f7:2e:0c:ee:b5:2f:93:06:51:13:df: 4c:35:d5:b8:38:ad:d9:5c:76:f1:19:52:be:f3:7f: aa:f6:e1:4e:09:bb:8a:14:02:42:1f:28:a6:d2:6a: 9d:61:79:b7:65:b3:4a:e8:63:8e:c1:f3:c8:b2:44: 4c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:9B:1B:B4:26:14:54:4B:DE:5B:6D:20:25:FC:61:96:8E:BC:5A:45 X509v3 Authority Key Identifier: keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/g5sbtCYUVEveW20gJfxhlo68WkU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.170.189.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:fb:39:27:d1:c1:97:9a:3b:3a:e1:fa:71:15:4b:34:8d:ae: a7:ab:c4:7a:9a:8c:ac:06:4b:6a:e3:40:5e:e9:fa:c5:ec:b2: a0:df:94:ae:fa:fc:31:7a:9a:8e:5a:77:76:c3:37:85:e0:50: 0f:87:fa:6d:b1:f6:df:8d:cb:ee:7b:cc:47:ec:ae:3b:56:d3: 73:74:b2:40:e1:87:32:4d:0c:14:65:52:90:d8:54:f8:ee:63: 6e:23:71:72:ba:7a:06:66:76:73:02:8a:cf:69:c5:fc:cc:aa: 75:66:c2:2c:8e:83:20:3f:78:fc:04:0f:cc:f5:8e:b3:af:a2: eb:35:a0:e6:0e:3f:fc:60:2b:62:7b:ea:67:6e:5f:10:ce:d1: 43:b6:67:77:fb:7c:7f:95:76:56:c1:c1:12:2c:47:ce:58:44: e6:d9:ac:bd:05:c6:c1:34:3e:3f:30:d5:f7:52:f3:9f:bc:88: 3d:35:dd:9f:03:9f:bb:84:d5:3b:a5:5c:5a:a0:1d:78:97:83: 09:f6:1f:f2:3b:c2:5a:5a:4c:92:2c:b2:ec:8e:4b:80:e5:d4: d8:bf:73:06:c8:9b:bf:f9:e8:a5:5b:c8:48:d0:c1:e4:ba:a3: 4d:15:08:1a:80:5f:14:b0:ba:49:95:dc:3a:5d:f4:6f:65:8e: bf:eb:e9:5d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g7bIeebA6YuJ5BtWvfAZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0 NzA2N2UwHhcNMjYwMTAyMTYyMTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzliMWJiNDI2MTQ1NDRiZGU1YjZkMjAyNWZjNjE5NjhlYmM1YTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8MDWJgmsBq7mwQUcqWdNbUv9yIy A3Le/Carr1dgwteiKl31aK4ZM5LhihmuNvhLFClkRoI/9zLTmpDIET0WjdfArItD UfWxQJ7kpN3+7u1dUhnlL10BViApkUn1e56+WgE1w3QGwvYYRyszHO9wdkOm1TQB 2IfAIQ/Gy8F5iYnSUQV1dIBQK1Wyv1KciY9NMa5wt6Eqwg6ZgODBmYOF3AgRUPyC dyadQzli4YfWuIIc+FsMGKY5zLjX58GeBS+BxY5loJYN9y4M7rUvkwZRE99MNdW4 OK3ZXHbxGVK+83+q9uFOCbuKFAJCHyim0mqdYXm3ZbNK6GOOwfPIskRM6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIObG7QmFFRL3lttICX8YZaOvFpFMB8GA1UdIwQY MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt OGM5NTgxZDk2ZDhmLzEvZzVzYnRDWVVWRXZlVzIwZ0pmeGhsbzY4V2tVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsqq9MA0G CSqGSIb3DQEBCwUAA4IBAQCf+zkn0cGXmjs64fpxFUs0ja6nq8R6moysBktq40Be 6frF7LKg35Su+vwxepqOWnd2wzeF4FAPh/ptsfbfjcvue8xH7K47VtNzdLJA4Ycy TQwUZVKQ2FT47mNuI3FyunoGZnZzAorPacX8zKp1ZsIsjoMgP3j8BA/M9Y6zr6Lr NaDmDj/8YCtie+pnbl8QztFDtmd3+3x/lXZWwcESLEfOWETm2ay9BcbBND4/MNX3 UvOfvIg9Nd2fA5+7hNU7pVxaoB14l4MJ9h/yO8JaWkySLLLsjkuA5dTYv3MGyJu/ +eilW8hI0MHkuqNNFQgagF8UsLpJldw6XfRvZY6/6+ld -----END CERTIFICATE-----Generated at Mon Jan 26 04:50:35 2026 by rpki-client