This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/C5eFkZZNIvPnNq8jOjc4JlumXWc.roa File: C5eFkZZNIvPnNq8jOjc4JlumXWc.roa (raw, json) Hash identifier: ylN31SyqfelXOhp/N7enNrmT/Cwz6fHxdaPzhYv+hbI= Subject key identifier: 0B:97:85:91:96:4D:22:F3:E7:36:AF:23:3A:37:38:26:5B:A6:5D:67 Certificate issuer: /CN=93503061e1ae503ec63d970b30875dd93ffabbdf Certificate serial: 019A78509236588B01C2F47AD571D4E5B9E6 Authority key identifier: 93:50:30:61:E1:AE:50:3E:C6:3D:97:0B:30:87:5D:D9:3F:FA:BB:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1AwYeGuUD7GPZcLMIdd2T_6u98.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/C5eFkZZNIvPnNq8jOjc4JlumXWc.roa Signing time: Wed 12 Nov 2025 13:45:37 +0000 ROA not before: Wed 12 Nov 2025 13:45:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 61969 IP address blocks: 185.53.176.0/22 maxlen: 22 185.53.179.0/24 maxlen: 24 2a01:bb20::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.crl rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft rsync://rpki.ripe.net/repository/DEFAULT/k1AwYeGuUD7GPZcLMIdd2T_6u98.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:78:50:92:36:58:8b:01:c2:f4:7a:d5:71:d4:e5:b9:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93503061e1ae503ec63d970b30875dd93ffabbdf Validity Not Before: Nov 12 13:45:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0b978591964d22f3e736af233a3738265ba65d67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5d:81:9e:d0:2f:17:68:1d:cb:8c:08:57:87: 48:59:b2:f1:83:aa:6d:a0:e3:e5:50:b9:39:07:92: 4d:82:57:9b:ac:7d:ba:6c:24:9c:95:95:b4:e9:6d: 18:e5:37:44:4d:89:78:f9:94:e6:20:53:01:bb:ba: e1:53:99:e3:ea:c9:5b:46:df:de:a1:5d:32:95:d0: 89:bc:58:8e:b8:dd:1e:85:a6:7b:93:62:3f:dd:a0: df:82:cc:ff:76:4f:19:ad:bb:4f:59:8c:fa:d8:95: 20:7c:48:87:05:4f:06:ff:57:85:90:23:2d:99:4e: b9:b1:b1:89:67:1f:a1:4d:63:03:81:69:46:7f:85: be:80:ea:81:e4:3b:f1:6c:76:dd:e2:da:86:33:6b: cd:75:5d:b4:b4:f3:ef:13:4a:22:79:27:9e:4c:dd: 96:cd:d7:4f:c7:47:ac:af:a4:f3:55:0f:10:37:d8: d9:6a:1f:37:3c:6a:59:67:82:c8:79:89:24:6f:36: 9c:a8:4a:d0:9e:6f:3c:78:8e:1b:9d:b7:8c:dd:6a: b7:b0:59:6f:a7:17:30:4c:1a:56:6b:57:24:4a:ec: 2c:06:3a:23:d4:37:f0:c5:9b:d4:88:c3:21:17:a4: 53:ef:23:0b:b6:d8:65:16:9b:ad:73:73:d3:5a:5b: ff:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:97:85:91:96:4D:22:F3:E7:36:AF:23:3A:37:38:26:5B:A6:5D:67 X509v3 Authority Key Identifier: keyid:93:50:30:61:E1:AE:50:3E:C6:3D:97:0B:30:87:5D:D9:3F:FA:BB:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1AwYeGuUD7GPZcLMIdd2T_6u98.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/C5eFkZZNIvPnNq8jOjc4JlumXWc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.53.176.0/22 IPv6: 2a01:bb20::/32 Signature Algorithm: sha256WithRSAEncryption 34:f0:b7:1b:68:81:99:68:90:60:5c:b0:3a:7d:d7:66:70:02: a6:8a:dc:4a:0d:91:dd:e0:dc:c8:8d:30:85:42:b7:49:a7:73: bf:b8:85:d5:9d:c7:83:33:7d:2a:31:98:ed:8b:e1:05:44:d5: f5:9e:57:d5:cf:14:13:eb:d0:af:b6:00:65:34:94:0b:e7:38: a7:cd:59:66:1d:f5:af:4f:05:95:e8:f7:b6:e6:09:ea:6b:8a: ac:73:4d:2a:5e:9c:07:dd:ac:d5:e0:b0:53:6f:fb:2d:dd:02: 72:e8:d0:85:70:00:df:36:8e:33:84:ee:b4:7a:c1:9d:04:f1: b0:98:d0:73:21:ce:20:e3:c8:02:54:11:b7:1d:41:33:82:12: 20:da:c2:a4:98:72:a2:af:e6:79:f2:56:7b:0d:f2:f7:94:ee: e2:5c:3a:a9:15:c4:ed:fe:31:61:71:ea:15:bd:f1:a9:13:44: 2b:3a:02:af:3c:dd:de:35:b2:70:4c:f6:2b:4c:ae:2b:77:77: 90:54:97:43:2b:35:8f:df:49:a2:bf:7c:58:51:19:d0:fb:64: 98:a2:14:90:eb:22:93:85:fb:18:2d:07:b9:90:b2:a8:7d:cf: 5e:35:54:2f:51:36:8b:88:bc:c0:dd:57:82:df:73:1e:3e:70: 93:2b:29:92 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZp4UJI2WIsBwvR61XHU5bnmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNTAzMDYxZTFhZTUwM2VjNjNkOTcwYjMwODc1ZGQ5M2Zm YWJiZGYwHhcNMjUxMTEyMTM0NTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjk3ODU5MTk2NGQyMmYzZTczNmFmMjMzYTM3MzgyNjViYTY1ZDY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuF2BntAvF2gdy4wIV4dIWbLxg6pt oOPlULk5B5JNglebrH26bCSclZW06W0Y5TdETYl4+ZTmIFMBu7rhU5nj6slbRt/e oV0yldCJvFiOuN0ehaZ7k2I/3aDfgsz/dk8ZrbtPWYz62JUgfEiHBU8G/1eFkCMt mU65sbGJZx+hTWMDgWlGf4W+gOqB5DvxbHbd4tqGM2vNdV20tPPvE0oieSeeTN2W zddPx0esr6TzVQ8QN9jZah83PGpZZ4LIeYkkbzacqErQnm88eI4bnbeM3Wq3sFlv pxcwTBpWa1ckSuwsBjoj1DfwxZvUiMMhF6RT7yMLtthlFputc3PTWlv/swIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFAuXhZGWTSLz5zavIzo3OCZbpl1nMB8GA1UdIwQY MBaAFJNQMGHhrlA+xj2XCzCHXdk/+rvfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazFBd1llR3VVRDdHUFpjTE1JZGQyVF82dTk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9hNzZhYzEtNWYyMi00N2QxLWI4YzEt YzYyM2VkOGYyZjI4LzEvQzVlRmtaWk5JdlBuTnE4ak9qYzRKbHVtWFdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9hNzZhYzEtNWYyMi00N2QxLWI4YzEtYzYyM2VkOGYyZjI4 LzEvazFBd1llR3VVRDdHUFpjTE1JZGQyVF82dTk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuTWwMA0E AgACMAcDBQAqAbsgMA0GCSqGSIb3DQEBCwUAA4IBAQA08LcbaIGZaJBgXLA6fddm cAKmitxKDZHd4NzIjTCFQrdJp3O/uIXVnceDM30qMZjti+EFRNX1nlfVzxQT69Cv tgBlNJQL5zinzVlmHfWvTwWV6Pe25gnqa4qsc00qXpwH3azV4LBTb/st3QJy6NCF cADfNo4zhO60esGdBPGwmNBzIc4g48gCVBG3HUEzghIg2sKkmHKir+Z58lZ7DfL3 lO7iXDqpFcTt/jFhceoVvfGpE0QrOgKvPN3eNbJwTPYrTK4rd3eQVJdDKzWP30mi v3xYURnQ+2SYohSQ6yKThfsYLQe5kLKofc9eNVQvUTaLiLzA3VeC33MePnCTKymS -----END CERTIFICATE-----Generated at Sat Nov 22 21:53:47 2025 by rpki-client