This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/IJyWPZnNDgJGIYhxLR2ej2t89_4.roa File: IJyWPZnNDgJGIYhxLR2ej2t89_4.roa (raw, json) Hash identifier: Qk+CHppMk+2IdIytCSpQwUqW+0YGuxpw+lnNEU7EhcA= Subject key identifier: 20:9C:96:3D:99:CD:0E:02:46:21:88:71:2D:1D:9E:8F:6B:7C:F7:FE Certificate issuer: /CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9 Certificate serial: 019B78A37B5F5F2E6C8D17CA2796C1E8B40B Authority key identifier: 19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/IJyWPZnNDgJGIYhxLR2ej2t89_4.roa Signing time: Thu 01 Jan 2026 08:18:58 +0000 ROA not before: Thu 01 Jan 2026 08:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201678 IP address blocks: 5.195.16.0/22 maxlen: 22 5.195.16.0/24 maxlen: 24 5.195.17.0/24 maxlen: 24 5.195.18.0/24 maxlen: 24 5.195.19.0/24 maxlen: 24 5.195.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:7b:5f:5f:2e:6c:8d:17:ca:27:96:c1:e8:b4:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9 Validity Not Before: Jan 1 08:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=209c963d99cd0e02462188712d1d9e8f6b7cf7fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e5:3b:03:3f:93:a7:41:64:4c:58:a5:f8:a8: d6:c8:b2:84:41:c0:50:27:a3:7d:81:05:2a:16:8d: de:18:79:06:70:8d:9d:30:3e:7d:0a:a3:ec:5e:4a: fa:5d:6d:fe:85:b6:15:c4:35:54:24:9d:b2:b6:70: c7:17:91:07:7e:8b:f9:43:26:b7:e7:1d:b0:7e:f5: 25:9a:10:d4:de:88:e5:ec:42:d7:e2:67:f8:62:af: c6:48:70:d0:44:21:91:cf:54:68:4f:ab:9c:d8:c6: d5:2f:dc:5c:26:cd:a3:d1:28:13:3d:b8:db:19:26: 88:df:54:ed:d8:bb:8d:7d:a5:8c:2d:d7:f9:98:ff: 56:56:61:bd:cf:a7:eb:34:4d:0c:7d:8b:0f:97:ff: 6c:62:9a:3b:12:80:a2:5b:ae:b9:15:3c:dc:c7:55: 51:f3:c5:c0:e5:ef:1a:bb:de:20:0c:b0:0f:9e:10: 13:b5:bb:10:7a:44:2c:27:90:29:eb:d2:52:e9:43: 3a:7d:84:d8:a8:08:4b:33:b7:6d:ee:8c:ce:d5:11: fc:a2:ae:12:da:85:4e:8e:42:1a:30:d9:d4:4b:6f: 06:aa:16:ed:bd:d2:e3:33:20:d4:9c:c5:31:63:58: d3:87:8a:af:91:d4:6c:7f:00:56:75:a0:fd:fa:cc: f1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:9C:96:3D:99:CD:0E:02:46:21:88:71:2D:1D:9E:8F:6B:7C:F7:FE X509v3 Authority Key Identifier: keyid:19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/IJyWPZnNDgJGIYhxLR2ej2t89_4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.195.16.0/22 5.195.21.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:57:bf:30:37:88:83:08:0a:ba:9f:82:95:67:8d:f9:c8:7f: 7e:ba:44:5e:2b:d8:1b:d8:bc:05:56:69:ad:de:3d:97:66:24: c4:ca:81:0d:29:21:56:03:3c:a0:a4:f5:82:5a:be:fa:3a:31: a1:df:f3:68:7d:99:af:30:0a:60:86:26:50:46:a7:8c:28:57: b2:e8:2f:6e:86:6f:0b:0f:0f:c1:26:85:a9:36:8c:3e:2a:2b: c9:b0:2a:f8:ac:4b:41:88:44:35:cb:21:80:4c:87:63:2e:eb: 79:51:1d:1f:f5:fe:ed:7d:cc:e8:02:b6:e5:23:73:ac:fc:fb: 65:92:d4:b6:9c:40:a7:ea:d9:80:b6:3f:b6:c0:cf:a9:5d:3d: a0:61:31:1b:cf:d8:98:d2:bf:02:a9:42:10:0c:69:ee:aa:a0: b8:60:e9:89:7d:a2:36:2b:48:c4:5a:5a:b3:19:22:d1:a2:b7: d5:52:c0:f3:93:b6:77:75:fb:3d:40:f4:9a:bb:78:98:45:e2: 85:3d:4f:37:9b:ce:ca:a1:ca:67:47:53:b0:00:fc:79:ea:b4: 5a:58:02:e6:b4:e2:c5:9e:48:c0:fd:df:f3:fa:ea:51:a9:c6: 5f:18:f7:7d:cc:84:9e:7f:47:25:5c:e1:10:71:4d:56:84:6d: 95:4e:24:67 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4o3tfXy5sjRfKJ5bB6LQLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ZWU1ZjE2ZmMxNDRhY2I5ODk3NzQ0OWZhYTBhYjc3ZGUx YmRjYzkwHhcNMjYwMTAxMDgxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDljOTYzZDk5Y2QwZTAyNDYyMTg4NzEyZDFkOWU4ZjZiN2NmN2ZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneU7Az+Tp0FkTFil+KjWyLKEQcBQ J6N9gQUqFo3eGHkGcI2dMD59CqPsXkr6XW3+hbYVxDVUJJ2ytnDHF5EHfov5Qya3 5x2wfvUlmhDU3ojl7ELX4mf4Yq/GSHDQRCGRz1RoT6uc2MbVL9xcJs2j0SgTPbjb GSaI31Tt2LuNfaWMLdf5mP9WVmG9z6frNE0MfYsPl/9sYpo7EoCiW665FTzcx1VR 88XA5e8au94gDLAPnhATtbsQekQsJ5Ap69JS6UM6fYTYqAhLM7dt7ozO1RH8oq4S 2oVOjkIaMNnUS28GqhbtvdLjMyDUnMUxY1jTh4qvkdRsfwBWdaD9+szxvwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCCclj2ZzQ4CRiGIcS0dno9rfPf+MB8GA1UdIwQY MBaAFBnuXxb8FErLmJd0Sfqgq3feG9zJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83NDIzNzAtZTEwZi00NTQxLWFhNmMt NjFhZmI2NmQxZThjLzEvSUp5V1Babk5EZ0pHSVloeExSMmVqMnQ4OV80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83NDIzNzAtZTEwZi00NTQxLWFhNmMtNjFhZmI2NmQxZThj LzEvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCBcMQAwQA BcMVMA0GCSqGSIb3DQEBCwUAA4IBAQB8V78wN4iDCAq6n4KVZ435yH9+ukReK9gb 2LwFVmmt3j2XZiTEyoENKSFWAzygpPWCWr76OjGh3/NofZmvMApghiZQRqeMKFey 6C9uhm8LDw/BJoWpNow+KivJsCr4rEtBiEQ1yyGATIdjLut5UR0f9f7tfczoArbl I3Os/PtlktS2nECn6tmAtj+2wM+pXT2gYTEbz9iY0r8CqUIQDGnuqqC4YOmJfaI2 K0jEWlqzGSLRorfVUsDzk7Z3dfs9QPSau3iYReKFPU83m87KocpnR1OwAPx56rRa WALmtOLFnkjA/d/z+upRqcZfGPd9zISef0clXOEQcU1WhG2VTiRn -----END CERTIFICATE-----Generated at Mon Feb 9 22:17:10 2026 by rpki-client