This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/g5msJEmtAZPPrNxROEFPbba5x4Y.roa File: g5msJEmtAZPPrNxROEFPbba5x4Y.roa (raw, json) Hash identifier: v9nQWaRHu8tQFbTyot3EjdNkPUX42kWmDF8q/n+QqQQ= Subject key identifier: 83:99:AC:24:49:AD:01:93:CF:AC:DC:51:38:41:4F:6D:B6:B9:C7:86 Certificate issuer: /CN=42f8ab2ba24879e45c445486fceb21af46656d5a Certificate serial: 019B791071E1FA408FC8F0884F4BB3811E3F Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/g5msJEmtAZPPrNxROEFPbba5x4Y.roa Signing time: Thu 01 Jan 2026 10:17:59 +0000 ROA not before: Thu 01 Jan 2026 10:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5065 IP address blocks: 217.147.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:71:e1:fa:40:8f:c8:f0:88:4f:4b:b3:81:1e:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a Validity Not Before: Jan 1 10:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8399ac2449ad0193cfacdc5138414f6db6b9c786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3e:ea:4f:0f:73:fa:4f:08:a6:ae:0c:41:b6: 91:68:01:db:d2:e8:7d:e0:1d:d4:b9:1f:c6:14:2e: 19:12:c5:2f:71:4a:45:52:d2:b8:e5:6c:50:4f:44: 36:7e:04:0f:f2:bb:81:c6:c7:55:c7:a9:43:57:c6: 5d:01:22:35:13:cf:fd:2a:19:f7:6f:e8:ba:ea:97: c7:50:d8:8b:43:60:0f:ab:e7:51:15:28:c8:8d:a8: b0:b6:2a:65:fe:23:e7:1e:1c:6b:3e:97:ee:cb:31: e2:f9:37:35:3a:52:ed:d0:4b:e5:08:68:28:ed:cc: 3e:0d:03:31:71:d2:4f:91:95:a1:fa:74:db:0b:33: 10:9c:ad:59:33:9c:9e:e9:3e:37:e5:da:bc:a0:ba: e6:a8:25:37:d8:0d:4e:a2:f7:96:3d:a7:6f:56:7a: 46:70:96:c8:df:0f:e7:3b:f2:00:d4:c5:60:68:0e: b1:2d:0c:42:81:27:05:ae:76:53:2c:a9:fa:5e:dc: 40:5a:59:8d:cb:92:47:b6:5d:41:c8:d6:51:d2:43: 9e:d1:de:40:33:a1:f6:66:53:c0:ef:21:dd:ff:a0: 4d:c5:dc:18:f0:f5:d8:e6:2e:d7:d0:03:27:f7:a0: b9:21:85:42:51:49:47:e2:88:06:dc:a1:85:e4:6b: f7:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:99:AC:24:49:AD:01:93:CF:AC:DC:51:38:41:4F:6D:B6:B9:C7:86 X509v3 Authority Key Identifier: keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/g5msJEmtAZPPrNxROEFPbba5x4Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.147.165.0/24 Signature Algorithm: sha256WithRSAEncryption 14:db:66:f6:0f:63:78:1f:44:07:76:e0:ba:4f:c7:b4:72:78: 3b:07:16:fe:9e:3f:fb:80:96:95:6a:8c:a6:37:52:02:91:04: 7a:06:3c:1b:a2:bc:ff:91:f1:ac:6d:a5:36:92:dc:33:28:16: c4:df:d0:4c:f8:d8:9c:e3:c3:74:ab:03:50:3e:81:2c:d1:2f: 9f:1e:8f:ea:be:4e:cc:99:f7:c3:06:f4:95:f2:b7:e1:6d:44: 1e:67:59:96:7e:32:3a:8f:ee:b1:50:07:27:2a:74:0d:de:98: bd:72:36:b2:d0:04:e5:02:09:43:a8:a9:aa:28:c2:b8:60:45: 15:9a:b0:79:34:f4:8e:ff:8b:7b:9d:10:81:85:16:d9:f1:b0: 34:9d:69:ac:de:39:d7:42:8e:cc:99:ea:11:e6:36:8e:b6:e7: c7:55:50:40:be:c1:46:63:7d:87:35:e9:24:f3:7e:c7:28:e6: df:45:61:d8:90:94:c0:10:10:44:02:d8:44:7c:8c:8a:56:1a: 7b:39:df:b8:f9:f0:b3:ce:33:7e:6b:0c:6b:87:fa:1e:ba:69: 26:1c:2e:30:97:ba:e9:54:f5:d6:ac:65:d7:ac:1f:b6:f5:0a: c9:a2:8b:a6:05:f7:e9:08:f4:b6:2e:40:37:1b:ea:30:b8:f4: 07:b7:c7:2f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EHHh+kCPyPCIT0uzgR4/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZjhhYjJiYTI0ODc5ZTQ1YzQ0NTQ4NmZjZWIyMWFmNDY2 NTZkNWEwHhcNMjYwMTAxMTAxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Mzk5YWMyNDQ5YWQwMTkzY2ZhY2RjNTEzODQxNGY2ZGI2YjljNzg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqz7qTw9z+k8Ipq4MQbaRaAHb0uh9 4B3UuR/GFC4ZEsUvcUpFUtK45WxQT0Q2fgQP8ruBxsdVx6lDV8ZdASI1E8/9Khn3 b+i66pfHUNiLQ2APq+dRFSjIjaiwtipl/iPnHhxrPpfuyzHi+Tc1OlLt0EvlCGgo 7cw+DQMxcdJPkZWh+nTbCzMQnK1ZM5ye6T435dq8oLrmqCU32A1OoveWPadvVnpG cJbI3w/nO/IA1MVgaA6xLQxCgScFrnZTLKn6XtxAWlmNy5JHtl1ByNZR0kOe0d5A M6H2ZlPA7yHd/6BNxdwY8PXY5i7X0AMn96C5IYVCUUlH4ogG3KGF5Gv3XwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIOZrCRJrQGTz6zcUThBT222uceGMB8GA1UdIwQY MBaAFEL4qyuiSHnkXERUhvzrIa9GZW1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYt MTc2OWZlZjZiZTk2LzEvZzVtc0pFbXRBWlBQck54Uk9FRlBiYmE1eDRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYtMTc2OWZlZjZiZTk2 LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2ZOlMA0G CSqGSIb3DQEBCwUAA4IBAQAU22b2D2N4H0QHduC6T8e0cng7Bxb+nj/7gJaVaoym N1ICkQR6Bjwborz/kfGsbaU2ktwzKBbE39BM+Nic48N0qwNQPoEs0S+fHo/qvk7M mffDBvSV8rfhbUQeZ1mWfjI6j+6xUAcnKnQN3pi9cjay0ATlAglDqKmqKMK4YEUV mrB5NPSO/4t7nRCBhRbZ8bA0nWms3jnXQo7MmeoR5jaOtufHVVBAvsFGY32HNekk 837HKObfRWHYkJTAEBBEAthEfIyKVhp7Od+4+fCzzjN+awxrh/oeumkmHC4wl7rp VPXWrGXXrB+29QrJooumBffpCPS2LkA3G+owuPQHt8cv -----END CERTIFICATE-----Generated at Mon Jan 19 11:23:46 2026 by rpki-client