This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/g5qpXHQ9YaIQcSP18I2z298mHVU.roa File: g5qpXHQ9YaIQcSP18I2z298mHVU.roa (raw, json) Hash identifier: OPcErLNEwIQeoOOXzCBshI4BboTsjuLPiVED3RVYlVs= Subject key identifier: 83:9A:A9:5C:74:3D:61:A2:10:71:23:F5:F0:8D:B3:DB:DF:26:1D:55 Certificate issuer: /CN=d97a77930122879a766470df8d660c98442a9932 Certificate serial: 019B78A377DC3493FD19AAEEAF3C9D049E75 Authority key identifier: D9:7A:77:93:01:22:87:9A:76:64:70:DF:8D:66:0C:98:44:2A:99:32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/g5qpXHQ9YaIQcSP18I2z298mHVU.roa Signing time: Thu 01 Jan 2026 08:18:57 +0000 ROA not before: Thu 01 Jan 2026 08:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60631 IP address blocks: 193.5.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft rsync://rpki.ripe.net/repository/DEFAULT/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:77:dc:34:93:fd:19:aa:ee:af:3c:9d:04:9e:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d97a77930122879a766470df8d660c98442a9932 Validity Not Before: Jan 1 08:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=839aa95c743d61a2107123f5f08db3dbdf261d55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5c:4b:b8:a3:87:21:75:be:d8:de:23:a6:71: 6e:cf:fb:1f:91:f5:8a:9f:c8:c0:e5:bf:1b:a0:a8: 7c:46:0b:59:98:cc:b4:d3:69:68:db:cd:ce:ed:8e: 05:e5:13:86:cd:84:d3:69:13:63:61:a1:86:52:b0: 45:d6:b3:da:d5:07:95:b6:6a:87:d8:d5:59:88:d5: fe:9d:4d:45:b8:73:0f:ba:52:ab:39:ed:14:01:08: 0e:4d:e8:3c:25:f9:72:08:12:cf:e0:32:00:3c:8e: 0a:41:05:08:68:f0:7e:2f:fc:93:7d:0a:b5:34:2f: de:9e:aa:aa:9c:c3:94:2c:e1:b3:2d:7d:32:53:73: ff:5f:a7:70:e6:6c:04:94:48:a1:12:59:81:99:55: fd:d8:7f:06:c1:e0:97:b4:32:f9:54:03:eb:a2:cc: 19:ff:e4:68:5c:88:36:ef:a1:c4:60:2d:87:fb:20: ae:a3:2d:5e:9d:89:9f:ce:dd:94:37:39:69:e7:01: 45:ff:8b:c9:f5:0a:8f:54:26:33:47:b5:79:93:e8: 76:a7:4b:45:a2:41:4a:13:16:d5:94:b8:51:87:0a: 28:2c:00:87:2a:a7:00:ce:3c:6d:bc:e1:8c:a9:95: f7:08:fb:98:a5:fc:42:08:59:24:20:ad:9f:97:b7: f1:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:9A:A9:5C:74:3D:61:A2:10:71:23:F5:F0:8D:B3:DB:DF:26:1D:55 X509v3 Authority Key Identifier: keyid:D9:7A:77:93:01:22:87:9A:76:64:70:DF:8D:66:0C:98:44:2A:99:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/g5qpXHQ9YaIQcSP18I2z298mHVU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.5.44.0/24 Signature Algorithm: sha256WithRSAEncryption e0:b6:e6:54:b3:a1:d0:59:09:dc:3e:d7:57:27:2d:99:ea:cb: b3:97:db:00:a0:51:78:1f:76:d8:c1:6e:1f:55:51:80:35:31: ae:19:c7:70:8f:ad:d8:58:f9:1b:8a:a6:c3:a9:53:7c:73:a1: df:3e:db:3e:c8:b2:36:f9:1a:0d:92:a0:2a:cc:d9:23:e7:e6: 88:9a:91:a4:ef:73:40:ce:7c:ed:d1:81:84:1a:3b:84:8c:20: 8f:77:4e:bf:89:4e:5a:67:17:5c:79:23:e6:c0:49:fc:cc:9d: f9:2d:6e:73:d1:99:0e:8a:17:7e:70:a9:33:9b:56:72:28:29: 6a:4b:da:ee:13:63:2c:d6:ff:7b:9f:76:6d:4f:9a:de:df:04: 41:5a:9e:1d:58:8c:eb:01:1c:f9:bc:c7:9d:94:c9:63:89:28: 36:66:fd:e5:4c:98:68:e4:e6:19:ea:19:f3:62:3e:59:29:aa: a6:22:e1:24:ce:55:3d:d8:ed:cb:c2:19:b6:05:b3:80:41:49: 21:46:ca:a0:4d:69:6c:0e:b7:7f:f7:94:ed:c7:a8:e7:2b:cb: fb:b6:ef:5f:d0:3c:af:6a:35:bd:09:d5:cd:1d:2c:af:59:6b: 12:0f:25:77:05:fc:d4:20:10:64:45:ad:94:11:02:52:1a:ab: 85:58:b9:58 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o3fcNJP9GarurzydBJ51MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5N2E3NzkzMDEyMjg3OWE3NjY0NzBkZjhkNjYwYzk4NDQy YTk5MzIwHhcNMjYwMTAxMDgxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzlhYTk1Yzc0M2Q2MWEyMTA3MTIzZjVmMDhkYjNkYmRmMjYxZDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFxLuKOHIXW+2N4jpnFuz/sfkfWK n8jA5b8boKh8RgtZmMy002lo283O7Y4F5ROGzYTTaRNjYaGGUrBF1rPa1QeVtmqH 2NVZiNX+nU1FuHMPulKrOe0UAQgOTeg8JflyCBLP4DIAPI4KQQUIaPB+L/yTfQq1 NC/enqqqnMOULOGzLX0yU3P/X6dw5mwElEihElmBmVX92H8GweCXtDL5VAProswZ /+RoXIg276HEYC2H+yCuoy1enYmfzt2UNzlp5wFF/4vJ9QqPVCYzR7V5k+h2p0tF okFKExbVlLhRhwooLACHKqcAzjxtvOGMqZX3CPuYpfxCCFkkIK2fl7fxHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIOaqVx0PWGiEHEj9fCNs9vfJh1VMB8GA1UdIwQY MBaAFNl6d5MBIoeadmRw341mDJhEKpkyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlhwM2t3RWloNXAyWkhEZmpXWU1tRVFxbVRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8yYTQ5MjItNDM0Yi00N2IxLWIzMDQt Y2Q0NTlhNjU3MjFiLzEvZzVxcFhIUTlZYUlRY1NQMThJMnoyOThtSFZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS8yYTQ5MjItNDM0Yi00N2IxLWIzMDQtY2Q0NTlhNjU3MjFi LzEvMlhwM2t3RWloNXAyWkhEZmpXWU1tRVFxbVRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQUsMA0G CSqGSIb3DQEBCwUAA4IBAQDgtuZUs6HQWQncPtdXJy2Z6suzl9sAoFF4H3bYwW4f VVGANTGuGcdwj63YWPkbiqbDqVN8c6HfPts+yLI2+RoNkqAqzNkj5+aImpGk73NA znzt0YGEGjuEjCCPd06/iU5aZxdceSPmwEn8zJ35LW5z0ZkOihd+cKkzm1ZyKClq S9ruE2Ms1v97n3ZtT5re3wRBWp4dWIzrARz5vMedlMljiSg2Zv3lTJho5OYZ6hnz Yj5ZKaqmIuEkzlU92O3Lwhm2BbOAQUkhRsqgTWlsDrd/95Ttx6jnK8v7tu9f0Dyv ajW9CdXNHSyvWWsSDyV3BfzUIBBkRa2UEQJSGquFWLlY -----END CERTIFICATE-----Generated at Mon Jan 26 22:58:27 2026 by rpki-client