This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/_5XI55CGPr_29rfxJRh8PWW9xI0.roa File: _5XI55CGPr_29rfxJRh8PWW9xI0.roa (raw, json) Hash identifier: +AqJmUu9717kFBpcrIYfXtKgNzPHUS4Q+/khsyHEsCw= Subject key identifier: FF:95:C8:E7:90:86:3E:BF:F6:F6:B7:F1:25:18:7C:3D:65:BD:C4:8D Certificate issuer: /CN=08018478914871aab0e1c0036d3626ebad6e20cc Certificate serial: 019B7DCB2CCED23BC97CAB136BC4D517E97E Authority key identifier: 08:01:84:78:91:48:71:AA:B0:E1:C0:03:6D:36:26:EB:AD:6E:20:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/_5XI55CGPr_29rfxJRh8PWW9xI0.roa Signing time: Fri 02 Jan 2026 08:20:25 +0000 ROA not before: Fri 02 Jan 2026 08:20:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216273 IP address blocks: 92.61.168.0/21 maxlen: 24 2a10:6540::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.mft rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:2c:ce:d2:3b:c9:7c:ab:13:6b:c4:d5:17:e9:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08018478914871aab0e1c0036d3626ebad6e20cc Validity Not Before: Jan 2 08:20:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff95c8e790863ebff6f6b7f125187c3d65bdc48d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4b:10:b3:f2:72:7b:92:af:b9:13:10:a4:08: f2:1a:72:d3:c6:e7:ae:6f:7a:1d:eb:0b:27:f6:1a: 61:e1:cd:6c:50:51:48:be:77:ce:5d:52:cc:9d:41: ca:2c:64:bd:19:61:aa:9d:8e:e5:85:6e:52:b5:2d: 5e:a1:c8:81:54:64:d6:95:be:46:05:12:b7:28:7c: 14:d3:a9:75:ef:0b:8d:9f:8c:b9:e4:80:89:f0:1c: 3a:79:75:06:d5:eb:2b:3f:e5:8f:a4:99:cd:9f:7f: e7:2b:4c:44:7d:3b:73:54:64:65:4b:e0:d4:5e:da: 27:36:05:72:b3:20:2f:1b:f4:92:aa:64:19:6d:51: ef:ef:df:5a:bc:d6:db:9c:c0:d0:db:0c:78:72:7b: 63:c5:6d:3f:bd:4c:73:26:9c:f6:cc:a1:88:80:1d: a0:b0:a6:96:28:7b:47:29:6b:30:60:a6:78:48:46: ed:cb:93:ad:f5:81:d5:3a:b2:82:b3:24:10:b7:07: 15:ac:69:50:33:56:f7:a3:a5:e6:00:a4:5b:57:f1: a3:c0:8e:c3:2e:3b:88:7a:c5:d9:2d:6f:53:06:74: 0a:17:67:c1:79:ec:3b:5b:ca:07:e0:85:68:c1:52: 38:91:08:7a:c2:cd:5b:2c:9e:fa:24:e2:25:68:4f: 4f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:95:C8:E7:90:86:3E:BF:F6:F6:B7:F1:25:18:7C:3D:65:BD:C4:8D X509v3 Authority Key Identifier: keyid:08:01:84:78:91:48:71:AA:B0:E1:C0:03:6D:36:26:EB:AD:6E:20:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/_5XI55CGPr_29rfxJRh8PWW9xI0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.61.168.0/21 IPv6: 2a10:6540::/29 Signature Algorithm: sha256WithRSAEncryption 0e:ae:a0:8b:a9:eb:f9:71:4b:72:b3:2c:78:8f:0f:50:72:3a: 36:c1:82:b1:12:71:cb:ad:f2:cc:00:d2:59:f7:5e:b4:18:50: 6b:9b:9c:e6:16:02:4c:e3:25:82:0a:ce:03:ec:a6:e8:ac:a4: fc:f8:9c:59:fe:5e:cd:7c:a4:45:d8:1d:74:e4:b7:20:c4:fe: 8e:70:7a:43:98:06:bd:19:23:d5:7a:8a:8c:a3:5a:0e:8b:00: 84:86:96:f4:dd:57:86:01:2d:7b:c9:b6:9a:3b:42:a6:21:5f: 01:b1:bb:93:09:be:4c:e8:24:1a:f3:d2:35:0c:72:bb:5f:54: 4f:1e:b7:40:fb:c5:02:fd:c0:dc:39:3d:da:0c:d1:50:64:53: 61:0d:01:9b:c4:1d:cc:7d:f6:b6:86:c6:65:d9:52:2f:24:32: 24:b6:d9:a0:4a:ff:c2:73:4a:ca:e8:64:44:6f:90:f3:3b:7d: 0a:3f:45:81:f3:f4:27:43:04:8b:f4:ec:70:14:ac:44:6c:01: 99:62:89:fa:82:cd:35:69:59:a6:90:14:b9:83:af:ad:21:0a: 8c:5b:80:b5:fe:43:04:3d:7c:14:91:6d:5d:d5:79:2a:ec:80: 46:95:23:f9:3c:33:86:f6:26:5a:ca:6e:17:69:c2:ba:fc:c5: af:cd:68:ca -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9yyzO0jvJfKsTa8TVF+l+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MDE4NDc4OTE0ODcxYWFiMGUxYzAwMzZkMzYyNmViYWQ2 ZTIwY2MwHhcNMjYwMTAyMDgyMDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjk1YzhlNzkwODYzZWJmZjZmNmI3ZjEyNTE4N2MzZDY1YmRjNDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0sQs/Jye5KvuRMQpAjyGnLTxueu b3od6wsn9hph4c1sUFFIvnfOXVLMnUHKLGS9GWGqnY7lhW5StS1eociBVGTWlb5G BRK3KHwU06l17wuNn4y55ICJ8Bw6eXUG1esrP+WPpJnNn3/nK0xEfTtzVGRlS+DU XtonNgVysyAvG/SSqmQZbVHv799avNbbnMDQ2wx4cntjxW0/vUxzJpz2zKGIgB2g sKaWKHtHKWswYKZ4SEbty5Ot9YHVOrKCsyQQtwcVrGlQM1b3o6XmAKRbV/GjwI7D LjuIesXZLW9TBnQKF2fBeew7W8oH4IVowVI4kQh6ws1bLJ76JOIlaE9P5wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFP+VyOeQhj6/9va38SUYfD1lvcSNMB8GA1UdIwQY MBaAFAgBhHiRSHGqsOHAA202JuutbiDMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0FHRWVKRkljYXF3NGNBRGJUWW02NjF1SU13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC81ZjgzYzQtNjQwZC00ZmYzLTljZjQt NjA2MjdlMTE1MjY5LzEvXzVYSTU1Q0dQcl8yOXJmeEpSaDhQV1c5eEkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC81ZjgzYzQtNjQwZC00ZmYzLTljZjQtNjA2MjdlMTE1MjY5 LzEvQ0FHRWVKRkljYXF3NGNBRGJUWW02NjF1SU13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDXD2oMA0E AgACMAcDBQMqEGVAMA0GCSqGSIb3DQEBCwUAA4IBAQAOrqCLqev5cUtysyx4jw9Q cjo2wYKxEnHLrfLMANJZ9160GFBrm5zmFgJM4yWCCs4D7KborKT8+JxZ/l7NfKRF 2B105LcgxP6OcHpDmAa9GSPVeoqMo1oOiwCEhpb03VeGAS17ybaaO0KmIV8BsbuT Cb5M6CQa89I1DHK7X1RPHrdA+8UC/cDcOT3aDNFQZFNhDQGbxB3Mffa2hsZl2VIv JDIkttmgSv/Cc0rK6GREb5DzO30KP0WB8/QnQwSL9OxwFKxEbAGZYon6gs01aVmm kBS5g6+tIQqMW4C1/kMEPXwUkW1d1Xkq7IBGlSP5PDOG9iZaym4XacK6/MWvzWjK -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:31 2026 by rpki-client