This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/5iwb34X7et8A-ZwDnoqtR_xqPsw.roa File: 5iwb34X7et8A-ZwDnoqtR_xqPsw.roa (raw, json) Hash identifier: WeDprzbgEpDRHXWUflU5QUsB4X7FqUJMR6LQN8vcE2M= Subject key identifier: E6:2C:1B:DF:85:FB:7A:DF:00:F9:9C:03:9E:8A:AD:47:FC:6A:3E:CC Certificate issuer: /CN=d9968029f124096eab955df9b7a81c88cb333a05 Certificate serial: 019B7A5B4CA13D38F8937E369733582E6E2B Authority key identifier: D9:96:80:29:F1:24:09:6E:AB:95:5D:F9:B7:A8:1C:88:CB:33:3A:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ZaAKfEkCW6rlV35t6gciMszOgU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/5iwb34X7et8A-ZwDnoqtR_xqPsw.roa Signing time: Thu 01 Jan 2026 16:19:22 +0000 ROA not before: Thu 01 Jan 2026 16:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15404 IP address blocks: 193.177.180.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft rsync://rpki.ripe.net/repository/DEFAULT/2ZaAKfEkCW6rlV35t6gciMszOgU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 04:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:4c:a1:3d:38:f8:93:7e:36:97:33:58:2e:6e:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9968029f124096eab955df9b7a81c88cb333a05 Validity Not Before: Jan 1 16:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e62c1bdf85fb7adf00f99c039e8aad47fc6a3ecc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:cc:5a:55:d1:82:aa:72:2a:b0:ac:3c:34:81: fd:92:74:46:bf:8d:c4:9a:32:4c:bd:4b:12:62:90: 4e:6d:2d:d2:ac:a3:fb:26:66:44:7a:82:f3:ce:8d: 55:bb:8f:a1:d1:4b:63:ab:ef:0f:8e:8e:05:41:cb: 0b:a1:9f:df:41:a7:03:e4:54:53:ce:89:14:f6:7a: af:24:d4:55:68:60:15:14:a2:60:1e:55:50:24:72: 9c:22:c1:4c:1e:a7:70:34:39:51:3f:27:47:dd:38: e5:0e:a0:cf:90:7c:b0:f3:99:da:10:d0:86:b4:a0: 59:2a:3e:5b:d5:d2:3a:82:10:31:5d:47:6d:c9:a8: 44:c7:c1:c5:cb:f8:44:35:e2:25:e8:cc:c9:0c:fa: 9c:a0:b0:6b:41:7c:eb:88:e9:9a:d7:83:c5:81:a0: 30:9a:f5:f4:36:7e:c6:f3:28:f3:21:a0:d8:6f:40: ba:17:f4:6f:c6:b9:02:e2:61:26:d1:7a:d5:9e:e4: c2:3f:b6:60:cc:4f:2f:dc:dc:5c:03:63:2d:d7:d8: 1d:6c:e0:6c:a4:af:4b:0a:c5:e0:ec:0e:23:20:48: 23:cf:a6:b6:c9:82:44:b1:83:7a:72:6a:91:79:25: 1e:a7:d7:ac:d8:a1:62:00:eb:1b:fa:5c:37:0e:27: 04:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:2C:1B:DF:85:FB:7A:DF:00:F9:9C:03:9E:8A:AD:47:FC:6A:3E:CC X509v3 Authority Key Identifier: keyid:D9:96:80:29:F1:24:09:6E:AB:95:5D:F9:B7:A8:1C:88:CB:33:3A:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZaAKfEkCW6rlV35t6gciMszOgU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/5iwb34X7et8A-ZwDnoqtR_xqPsw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.177.180.0/23 Signature Algorithm: sha256WithRSAEncryption 7f:6b:91:3a:df:29:74:12:a4:db:f5:d8:2e:5b:7e:b6:06:a3: c5:b7:73:60:05:76:88:0e:86:99:3a:13:7a:f9:d3:07:f7:a7: 60:54:db:7e:dc:c4:3d:42:a1:4e:1f:b7:59:45:9d:dc:6e:fe: 7c:2a:fc:37:c3:b9:5c:b0:a3:ac:63:15:3a:ff:64:70:ed:ff: 87:9b:85:1c:a6:ce:b2:88:c6:85:ea:4b:0b:4d:dc:a8:9f:cc: 7e:d7:df:06:cb:f2:a2:a9:55:eb:d2:c7:f1:58:fa:1e:d4:5b: c1:76:3e:aa:88:91:6c:e8:9d:8a:8c:4b:4f:a0:be:2b:53:64: 8c:a3:ae:a6:f6:f6:9e:90:13:af:b8:e1:ff:8b:ca:b5:00:53: 4e:73:86:14:9f:f7:38:02:b1:40:cc:b8:c9:ce:ca:41:a7:38: fc:bb:97:9f:3b:2a:55:fe:90:80:d5:3b:7a:57:f0:fc:e1:a3: 08:f1:b6:6b:87:94:39:80:9d:f3:85:81:0d:ea:03:f5:b2:31: 8d:7b:36:a3:4c:73:54:cc:73:df:b1:d5:3a:a7:54:d6:d0:b7: 28:14:9e:c2:b5:34:9e:7f:e0:7a:83:6b:27:23:fb:17:cb:02: 35:67:2f:37:c3:53:4b:2f:f2:c8:6d:0e:2a:fa:93:e1:30:52: 3d:d3:a6:ae -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W0yhPTj4k342lzNYLm4rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5OTY4MDI5ZjEyNDA5NmVhYjk1NWRmOWI3YTgxYzg4Y2Iz MzNhMDUwHhcNMjYwMTAxMTYxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjJjMWJkZjg1ZmI3YWRmMDBmOTljMDM5ZThhYWQ0N2ZjNmEzZWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsxaVdGCqnIqsKw8NIH9knRGv43E mjJMvUsSYpBObS3SrKP7JmZEeoLzzo1Vu4+h0Utjq+8Pjo4FQcsLoZ/fQacD5FRT zokU9nqvJNRVaGAVFKJgHlVQJHKcIsFMHqdwNDlRPydH3TjlDqDPkHyw85naENCG tKBZKj5b1dI6ghAxXUdtyahEx8HFy/hENeIl6MzJDPqcoLBrQXzriOma14PFgaAw mvX0Nn7G8yjzIaDYb0C6F/RvxrkC4mEm0XrVnuTCP7ZgzE8v3NxcA2Mt19gdbOBs pK9LCsXg7A4jIEgjz6a2yYJEsYN6cmqReSUep9es2KFiAOsb+lw3DicESwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOYsG9+F+3rfAPmcA56KrUf8aj7MMB8GA1UdIwQY MBaAFNmWgCnxJAluq5Vd+beoHIjLMzoFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlphQUtmRWtDVzZybFYzNXQ2Z2NpTXN6T2dVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8yN2ExYmMtYjI1OC00MDVmLTlmOTMt NmVlYTEyMjA1NzIwLzEvNWl3YjM0WDdldDhBLVp3RG5vcXRSX3hxUHN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8yN2ExYmMtYjI1OC00MDVmLTlmOTMtNmVlYTEyMjA1NzIw LzEvMlphQUtmRWtDVzZybFYzNXQ2Z2NpTXN6T2dVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwbG0MA0G CSqGSIb3DQEBCwUAA4IBAQB/a5E63yl0EqTb9dguW362BqPFt3NgBXaIDoaZOhN6 +dMH96dgVNt+3MQ9QqFOH7dZRZ3cbv58Kvw3w7lcsKOsYxU6/2Rw7f+Hm4Ucps6y iMaF6ksLTdyon8x+198Gy/KiqVXr0sfxWPoe1FvBdj6qiJFs6J2KjEtPoL4rU2SM o66m9vaekBOvuOH/i8q1AFNOc4YUn/c4ArFAzLjJzspBpzj8u5efOypV/pCA1Tt6 V/D84aMI8bZrh5Q5gJ3zhYEN6gP1sjGNezajTHNUzHPfsdU6p1TW0LcoFJ7CtTSe f+B6g2snI/sXywI1Zy83w1NLL/LIbQ4q+pPhMFI906au -----END CERTIFICATE-----Generated at Wed Jan 21 13:19:10 2026 by rpki-client