This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/qORWtxjZi9lt_BScasY49cJmDXc.roa File: qORWtxjZi9lt_BScasY49cJmDXc.roa (raw, json) Hash identifier: Mi06Ddfs1bfJJ0aXxmmQMn2zwSuj1l36dIcHPxE6r0U= Subject key identifier: A8:E4:56:B7:18:D9:8B:D9:6D:FC:14:9C:6A:C6:38:F5:C2:66:0D:77 Certificate issuer: /CN=12fd558a64e97586a43dc7ee50a8d6b292365b60 Certificate serial: 019B7B35E9582F3E4A41D5A43235FE95F90C Authority key identifier: 12:FD:55:8A:64:E9:75:86:A4:3D:C7:EE:50:A8:D6:B2:92:36:5B:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/qORWtxjZi9lt_BScasY49cJmDXc.roa Signing time: Thu 01 Jan 2026 20:18:09 +0000 ROA not before: Thu 01 Jan 2026 20:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211440 IP address blocks: 5.183.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.mft rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 23:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:e9:58:2f:3e:4a:41:d5:a4:32:35:fe:95:f9:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12fd558a64e97586a43dc7ee50a8d6b292365b60 Validity Not Before: Jan 1 20:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8e456b718d98bd96dfc149c6ac638f5c2660d77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d8:94:eb:e0:4b:5d:55:86:34:78:be:7a:2b: 7b:8d:7b:0d:df:b6:e7:f0:1b:49:3a:8c:c0:d8:21: 02:e2:4c:c7:1e:89:f7:6f:63:e8:d6:19:b2:b0:f6: 4f:80:0a:d0:7e:20:07:83:21:45:b2:08:c4:56:75: 3f:e3:d1:9c:5f:eb:6a:ab:9f:b0:d6:cc:55:49:99: c9:cf:1f:1a:c5:fe:fd:d4:88:0c:a4:c7:49:6e:fd: 05:6c:5d:6e:7e:fa:0a:51:77:60:8e:85:5f:ea:14: ab:20:0a:22:5e:19:f8:19:b0:c1:58:53:31:36:cf: 83:32:a3:35:48:05:08:19:99:f6:a5:04:b1:c7:ca: bf:c9:63:11:9c:b2:7d:2b:ac:91:0d:0b:c4:0d:97: f0:27:8e:10:db:99:67:9a:c7:15:07:e6:88:ae:07: 1d:29:68:0b:54:ae:40:6a:ce:3f:09:37:2e:12:0c: e3:fe:8b:38:b3:64:43:7c:f4:83:32:6e:09:67:45: 58:47:2d:60:2d:fa:dd:71:67:0e:52:ea:b4:a7:aa: 15:0c:c5:6e:8d:49:b3:f9:43:32:91:7d:b4:6d:f3: 8f:6b:33:cf:bf:7e:0c:6f:0d:95:b8:a6:8a:42:e3: c8:a4:61:7f:18:86:e1:44:11:a2:c1:52:88:7e:1f: 00:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:E4:56:B7:18:D9:8B:D9:6D:FC:14:9C:6A:C6:38:F5:C2:66:0D:77 X509v3 Authority Key Identifier: keyid:12:FD:55:8A:64:E9:75:86:A4:3D:C7:EE:50:A8:D6:B2:92:36:5B:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/qORWtxjZi9lt_BScasY49cJmDXc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.183.196.0/22 Signature Algorithm: sha256WithRSAEncryption 05:ac:f5:a9:63:6e:8b:c7:23:52:f9:d1:73:76:32:28:a5:1b: cc:e0:52:53:98:70:ae:da:3c:1f:65:93:eb:89:34:3d:36:49: c7:57:23:7c:86:13:7c:d1:7b:66:70:77:2c:e6:cf:e6:1e:88: b0:f7:16:aa:12:66:a9:73:71:7c:4e:84:01:05:68:d7:dd:b5: 96:2e:96:6e:f2:a0:20:68:a7:b0:11:9b:de:66:06:55:cf:69: fe:ea:65:74:a4:13:88:ad:31:ee:cb:52:99:a6:f5:61:c2:51: 60:c2:c7:ce:95:39:1a:d0:a5:d7:87:c3:cf:fa:36:46:c6:0d: fc:00:d2:6c:fb:0b:a9:0a:a2:2a:6c:4c:f2:26:94:64:b0:83: b6:20:f0:f9:3c:92:c2:99:a1:39:33:8e:4a:90:7d:60:2e:8f: 0e:53:0d:df:89:c4:df:42:17:a0:e2:c3:81:15:78:9c:bd:b4: 95:40:bf:c4:2a:42:c2:ed:84:ad:d1:32:2e:26:1c:01:43:11: 88:e7:0b:b2:10:fa:7e:46:19:4c:32:25:06:11:39:63:56:d9: 5a:94:b7:91:3b:0b:d9:81:88:55:92:b7:d2:e5:04:0f:39:7f: 91:a8:4f:50:eb:21:f9:e0:a6:36:85:8e:08:af:57:67:97:f6: 1f:06:ce:a5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NelYLz5KQdWkMjX+lfkMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyZmQ1NThhNjRlOTc1ODZhNDNkYzdlZTUwYThkNmIyOTIz NjViNjAwHhcNMjYwMTAxMjAxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOGU0NTZiNzE4ZDk4YmQ5NmRmYzE0OWM2YWM2MzhmNWMyNjYwZDc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5NiU6+BLXVWGNHi+eit7jXsN37bn 8BtJOozA2CEC4kzHHon3b2Po1hmysPZPgArQfiAHgyFFsgjEVnU/49GcX+tqq5+w 1sxVSZnJzx8axf791IgMpMdJbv0FbF1ufvoKUXdgjoVf6hSrIAoiXhn4GbDBWFMx Ns+DMqM1SAUIGZn2pQSxx8q/yWMRnLJ9K6yRDQvEDZfwJ44Q25lnmscVB+aIrgcd KWgLVK5Aas4/CTcuEgzj/os4s2RDfPSDMm4JZ0VYRy1gLfrdcWcOUuq0p6oVDMVu jUmz+UMykX20bfOPazPPv34Mbw2VuKaKQuPIpGF/GIbhRBGiwVKIfh8AqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKjkVrcY2YvZbfwUnGrGOPXCZg13MB8GA1UdIwQY MBaAFBL9VYpk6XWGpD3H7lCo1rKSNltgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXYxVmltVHBkWWFrUGNmdVVLaldzcEkyVzJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9hZjk2ZGYtYTRkNS00OGY5LWFjMGMt MjRkOGU3NDdjMzhmLzEvcU9SV3R4alppOWx0X0JTY2FzWTQ5Y0ptRFhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9hZjk2ZGYtYTRkNS00OGY5LWFjMGMtMjRkOGU3NDdjMzhm LzEvRXYxVmltVHBkWWFrUGNmdVVLaldzcEkyVzJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBbfEMA0G CSqGSIb3DQEBCwUAA4IBAQAFrPWpY26LxyNS+dFzdjIopRvM4FJTmHCu2jwfZZPr iTQ9NknHVyN8hhN80XtmcHcs5s/mHoiw9xaqEmapc3F8ToQBBWjX3bWWLpZu8qAg aKewEZveZgZVz2n+6mV0pBOIrTHuy1KZpvVhwlFgwsfOlTka0KXXh8PP+jZGxg38 ANJs+wupCqIqbEzyJpRksIO2IPD5PJLCmaE5M45KkH1gLo8OUw3ficTfQheg4sOB FXicvbSVQL/EKkLC7YSt0TIuJhwBQxGI5wuyEPp+RhlMMiUGETljVtlalLeROwvZ gYhVkrfS5QQPOX+RqE9Q6yH54KY2hY4Ir1dnl/YfBs6l -----END CERTIFICATE-----Generated at Fri Jan 9 08:22:21 2026 by rpki-client