This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/5zKpxo06ZotmTkgOl7qLdtQlPF8.roa File: 5zKpxo06ZotmTkgOl7qLdtQlPF8.roa (raw, json) Hash identifier: AacG7xxNKndGGBdKjipHCKUNNm/+m4yG1PsJKPfONKw= Subject key identifier: E7:32:A9:C6:8D:3A:66:8B:66:4E:48:0E:97:BA:8B:76:D4:25:3C:5F Certificate issuer: /CN=1abc9fb3312a4abf1ddc28518e7608e0ec3275df Certificate serial: 019AD98B2E1DFB24255F8F8BAA688A44D1C7 Authority key identifier: 1A:BC:9F:B3:31:2A:4A:BF:1D:DC:28:51:8E:76:08:E0:EC:32:75:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/5zKpxo06ZotmTkgOl7qLdtQlPF8.roa Signing time: Mon 01 Dec 2025 10:52:48 +0000 ROA not before: Mon 01 Dec 2025 10:52:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 57844 IP address blocks: 185.93.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d9:8b:2e:1d:fb:24:25:5f:8f:8b:aa:68:8a:44:d1:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1abc9fb3312a4abf1ddc28518e7608e0ec3275df Validity Not Before: Dec 1 10:52:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e732a9c68d3a668b664e480e97ba8b76d4253c5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:3d:c3:1b:5a:99:ca:ae:0a:3b:89:f9:dc:7e: c6:7a:e1:6e:d5:52:b1:df:f4:f1:a1:72:d9:66:a9: ca:a8:1f:08:18:5f:0c:27:be:bc:d8:ab:c6:9b:7a: b5:09:5b:b4:41:59:67:32:87:fd:1a:70:df:16:9b: 29:d8:13:d5:62:af:ff:60:8d:c7:e6:6d:89:f0:1c: dc:fc:15:79:0c:d0:67:ad:23:70:ad:54:43:8a:a2: 72:27:f9:dd:e3:3c:c3:21:9c:01:d6:43:21:b4:f4: 9c:37:b5:90:c3:f7:8a:4b:ed:f7:50:5a:24:49:4e: 0d:22:ac:55:4e:94:61:9b:d1:2d:f2:c6:0b:b0:0d: 9a:58:dc:53:85:77:3f:20:a7:b6:c7:a4:55:71:41: c9:7f:18:8e:4c:3a:3b:0c:e1:d0:51:5d:c9:8a:fd: 49:4c:72:d9:ea:ec:1c:bc:be:42:75:cd:4c:3b:91: 60:70:c7:79:34:ac:8d:c8:26:b9:7b:cd:36:ec:fb: 85:53:f4:c0:fa:f3:14:2a:a2:aa:1f:6a:5e:74:fb: 3a:14:8e:d9:20:ba:eb:f2:fb:53:11:ae:f3:57:64: 83:e3:5e:a0:87:5f:11:f2:cb:b7:73:0c:21:76:6b: a1:1e:0a:46:ea:90:a1:6e:bb:d9:4f:eb:f0:81:11: e1:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:32:A9:C6:8D:3A:66:8B:66:4E:48:0E:97:BA:8B:76:D4:25:3C:5F X509v3 Authority Key Identifier: keyid:1A:BC:9F:B3:31:2A:4A:BF:1D:DC:28:51:8E:76:08:E0:EC:32:75:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/5zKpxo06ZotmTkgOl7qLdtQlPF8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.93.71.0/24 Signature Algorithm: sha256WithRSAEncryption 99:1d:5e:87:d9:0e:39:07:e1:0a:da:8e:cf:a7:6d:de:11:4e: fb:a4:44:8b:f4:12:44:08:e5:56:ef:e2:6c:e9:0c:f8:cd:90: d6:f8:12:14:27:6d:a1:54:5f:31:80:88:78:29:9a:71:26:a8: 59:40:e4:df:bc:29:f6:3c:4f:d4:06:fa:3e:bd:0a:26:12:b2: 05:5d:87:85:5b:ef:98:1b:08:58:94:0d:c0:99:a2:a8:41:7a: 58:9e:61:9a:84:51:2e:77:f3:dc:f8:70:a7:36:bd:ed:49:23: 5a:6e:89:c1:19:04:73:a5:2f:d3:84:07:79:04:23:58:60:2f: 83:60:46:ef:c0:ff:3c:27:cc:40:ba:ec:06:3c:85:04:78:2f: 8e:fe:fb:3f:6e:b2:9a:2c:ee:ed:47:3d:e9:a1:89:bd:d3:8a: 19:b3:25:27:a2:b4:f5:46:4d:5f:c8:b6:41:b1:1e:4f:c1:3a: 2d:da:a9:31:b3:3a:7e:f7:ff:3f:d2:8f:fc:6c:3d:f8:95:41: 26:45:8a:2c:83:36:74:7a:49:fb:c2:b4:10:60:a4:02:ce:f1: 06:67:a9:df:e9:d2:7f:8e:c9:53:e9:4d:6b:ce:5b:94:cb:9c: f5:bc:58:8d:0e:de:ea:b9:e7:19:b8:58:36:23:97:73:fc:02: c8:bc:5d:91 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrZiy4d+yQlX4+LqmiKRNHHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhYmM5ZmIzMzEyYTRhYmYxZGRjMjg1MThlNzYwOGUwZWMz Mjc1ZGYwHhcNMjUxMjAxMTA1MjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzMyYTljNjhkM2E2NjhiNjY0ZTQ4MGU5N2JhOGI3NmQ0MjUzYzVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlj3DG1qZyq4KO4n53H7GeuFu1VKx 3/TxoXLZZqnKqB8IGF8MJ7682KvGm3q1CVu0QVlnMof9GnDfFpsp2BPVYq//YI3H 5m2J8Bzc/BV5DNBnrSNwrVRDiqJyJ/nd4zzDIZwB1kMhtPScN7WQw/eKS+33UFok SU4NIqxVTpRhm9Et8sYLsA2aWNxThXc/IKe2x6RVcUHJfxiOTDo7DOHQUV3Jiv1J THLZ6uwcvL5Cdc1MO5FgcMd5NKyNyCa5e8027PuFU/TA+vMUKqKqH2pedPs6FI7Z ILrr8vtTEa7zV2SD416gh18R8su3cwwhdmuhHgpG6pChbrvZT+vwgRHhsQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOcyqcaNOmaLZk5IDpe6i3bUJTxfMB8GA1UdIwQY MBaAFBq8n7MxKkq/HdwoUY52CODsMnXfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3J5ZnN6RXFTcjhkM0NoUmpuWUk0T3d5ZGQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8yNmU3N2YtZmEzNy00OTAwLWEzM2Qt ZDFkNmRlYTk4NzkwLzEvNXpLcHhvMDZab3RtVGtnT2w3cUxkdFFsUEY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy8yNmU3N2YtZmEzNy00OTAwLWEzM2QtZDFkNmRlYTk4Nzkw LzEvR3J5ZnN6RXFTcjhkM0NoUmpuWUk0T3d5ZGQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuV1HMA0G CSqGSIb3DQEBCwUAA4IBAQCZHV6H2Q45B+EK2o7Pp23eEU77pESL9BJECOVW7+Js 6Qz4zZDW+BIUJ22hVF8xgIh4KZpxJqhZQOTfvCn2PE/UBvo+vQomErIFXYeFW++Y GwhYlA3AmaKoQXpYnmGahFEud/Pc+HCnNr3tSSNabonBGQRzpS/ThAd5BCNYYC+D YEbvwP88J8xAuuwGPIUEeC+O/vs/brKaLO7tRz3poYm904oZsyUnorT1Rk1fyLZB sR5PwTot2qkxszp+9/8/0o/8bD34lUEmRYosgzZ0ekn7wrQQYKQCzvEGZ6nf6dJ/ jslT6U1rzluUy5z1vFiNDt7quecZuFg2I5dz/ALIvF2R -----END CERTIFICATE-----Generated at Fri Dec 5 17:33:28 2025 by rpki-client