This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/5DE_W6pAcWsoXSwOt7MJk1c52UM.roa File: 5DE_W6pAcWsoXSwOt7MJk1c52UM.roa (raw, json) Hash identifier: xF+d5aYH+/051lwctUkQ5P94uH29GuKQimWqiTvacVc= Subject key identifier: E4:31:3F:5B:AA:40:71:6B:28:5D:2C:0E:B7:B3:09:93:57:39:D9:43 Certificate issuer: /CN=a86e257c32d9dbb819d517d55054f767d7161d2c Certificate serial: 019B78A2B02DD361A526E4797C0FF4607F10 Authority key identifier: A8:6E:25:7C:32:D9:DB:B8:19:D5:17:D5:50:54:F7:67:D7:16:1D:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/5DE_W6pAcWsoXSwOt7MJk1c52UM.roa Signing time: Thu 01 Jan 2026 08:18:06 +0000 ROA not before: Thu 01 Jan 2026 08:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57381 IP address blocks: 193.150.22.0/23 maxlen: 23 193.150.22.0/24 maxlen: 24 193.150.23.0/24 maxlen: 24 2001:67c:24e4::/48 maxlen: 48 2001:67c:2a00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft rsync://rpki.ripe.net/repository/DEFAULT/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:b0:2d:d3:61:a5:26:e4:79:7c:0f:f4:60:7f:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a86e257c32d9dbb819d517d55054f767d7161d2c Validity Not Before: Jan 1 08:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4313f5baa40716b285d2c0eb7b309935739d943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bf:38:09:56:85:60:dd:b9:af:a0:1f:82:c3: dc:f8:e1:c6:83:38:15:2f:4e:97:c0:6b:c3:19:d0: e7:8b:83:54:94:07:4c:7a:9e:7a:b5:46:8a:5b:06: ca:fe:25:fe:e5:c8:50:16:f4:77:71:f1:8d:f0:85: 25:60:4b:16:5f:11:9d:ee:d3:fe:37:03:4d:2e:4d: 2b:6f:55:a7:b6:6b:a7:d7:6d:17:14:0d:1a:dc:a8: da:fe:a6:64:39:6e:ca:22:2c:ff:b2:74:fb:07:7d: 3d:db:39:8b:11:44:49:31:78:22:52:41:9e:ca:cf: 80:33:e9:8f:30:39:a0:3f:b9:d1:e3:44:96:ce:f2: 7b:33:2b:ed:89:c9:60:a4:97:5f:86:69:61:40:9d: a9:29:4e:d7:e7:4e:06:1d:58:df:fe:2b:9e:9e:41: a6:d7:04:48:0d:95:16:9b:1e:58:b9:c3:4d:a2:8d: 4e:97:58:c6:5a:d6:84:eb:7a:b4:89:93:af:e6:fe: b3:4e:5b:df:d3:99:3a:37:13:10:71:fd:35:85:ef: 99:67:1c:46:77:d0:dd:6d:27:63:c9:ec:0b:af:e4: 15:50:45:49:61:75:c7:46:bb:59:29:65:86:5a:20: 47:f7:3b:c8:40:e4:3a:2f:66:c7:45:4a:5b:9f:55: 88:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:31:3F:5B:AA:40:71:6B:28:5D:2C:0E:B7:B3:09:93:57:39:D9:43 X509v3 Authority Key Identifier: keyid:A8:6E:25:7C:32:D9:DB:B8:19:D5:17:D5:50:54:F7:67:D7:16:1D:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/5DE_W6pAcWsoXSwOt7MJk1c52UM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.150.22.0/23 IPv6: 2001:67c:24e4::/48 2001:67c:2a00::/48 Signature Algorithm: sha256WithRSAEncryption a4:7b:08:c8:61:b4:0e:f2:9a:60:b8:b7:e5:13:d1:4a:9c:3d: 3e:11:43:a2:af:1f:a1:46:64:0b:f7:d5:00:8b:26:6e:ec:6d: 5b:ad:ab:67:ed:d9:f2:e3:70:0c:6d:a7:ac:f8:77:33:46:a7: 3b:4e:81:c8:f8:22:a1:54:38:58:c9:7c:ba:2a:f4:9b:8a:37: a5:c7:c5:d9:4e:73:c0:a6:70:a0:0d:8c:5f:e1:f7:03:f7:e8: ff:d1:79:da:be:75:ec:be:9f:07:4d:26:d2:e6:2f:77:34:9e: 59:35:12:ff:25:46:0d:18:72:27:cb:9e:70:34:e5:fc:47:15: f4:9e:80:48:5b:81:5d:07:b1:ae:a8:f2:a5:9c:28:00:f1:d0: 03:b4:f3:dc:61:6a:25:2a:43:8f:bd:5b:90:bb:5c:4a:35:3c: 04:47:83:e8:0d:34:49:b7:02:77:d0:21:f6:25:48:31:c1:d2: a7:f3:ca:2d:9f:c8:4b:9d:62:98:fc:89:3c:28:75:09:8c:2a: 83:45:b9:4b:f5:9d:ad:be:54:28:bc:f8:39:61:d2:57:03:ad: 69:06:d9:0f:ca:0b:95:93:80:de:96:8f:eb:51:fd:3f:6f:b4: d1:9a:e5:ff:fe:ed:ba:c2:80:c2:f7:13:73:3a:de:41:54:ca: 63:b1:2e:61 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt4orAt02GlJuR5fA/0YH8QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NmUyNTdjMzJkOWRiYjgxOWQ1MTdkNTUwNTRmNzY3ZDcx NjFkMmMwHhcNMjYwMTAxMDgxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDMxM2Y1YmFhNDA3MTZiMjg1ZDJjMGViN2IzMDk5MzU3MzlkOTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq784CVaFYN25r6AfgsPc+OHGgzgV L06XwGvDGdDni4NUlAdMep56tUaKWwbK/iX+5chQFvR3cfGN8IUlYEsWXxGd7tP+ NwNNLk0rb1Wntmun120XFA0a3Kja/qZkOW7KIiz/snT7B3092zmLEURJMXgiUkGe ys+AM+mPMDmgP7nR40SWzvJ7MyvticlgpJdfhmlhQJ2pKU7X504GHVjf/iuenkGm 1wRIDZUWmx5YucNNoo1Ol1jGWtaE63q0iZOv5v6zTlvf05k6NxMQcf01he+ZZxxG d9DdbSdjyewLr+QVUEVJYXXHRrtZKWWGWiBH9zvIQOQ6L2bHRUpbn1WITQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFOQxP1uqQHFrKF0sDrezCZNXOdlDMB8GA1UdIwQY MBaAFKhuJXwy2du4GdUX1VBU92fXFh0sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUc0bGZETFoyN2daMVJmVlVGVDNaOWNXSFN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC81OTZmZDUtNmU0NC00ODZlLTgyYzIt NDg3ZjAzNGM0NzI3LzEvNURFX1c2cEFjV3NvWFN3T3Q3TUprMWM1MlVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC81OTZmZDUtNmU0NC00ODZlLTgyYzItNDg3ZjAzNGM0NzI3 LzEvcUc0bGZETFoyN2daMVJmVlVGVDNaOWNXSFN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQBwZYWMBgE AgACMBIDBwAgAQZ8JOQDBwAgAQZ8KgAwDQYJKoZIhvcNAQELBQADggEBAKR7CMhh tA7ymmC4t+UT0UqcPT4RQ6KvH6FGZAv31QCLJm7sbVutq2ft2fLjcAxtp6z4dzNG pztOgcj4IqFUOFjJfLoq9JuKN6XHxdlOc8CmcKANjF/h9wP36P/Redq+dey+nwdN JtLmL3c0nlk1Ev8lRg0YcifLnnA05fxHFfSegEhbgV0Hsa6o8qWcKADx0AO089xh aiUqQ4+9W5C7XEo1PARHg+gNNEm3AnfQIfYlSDHB0qfzyi2fyEudYpj8iTwodQmM KoNFuUv1na2+VCi8+Dlh0lcDrWkG2Q/KC5WTgN6Wj+tR/T9vtNGa5f/+7brCgML3 E3M63kFUymOxLmE= -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:14 2026 by rpki-client