This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/_5mSAKagSlrWqcFH7TXH0W26og4.roa File: _5mSAKagSlrWqcFH7TXH0W26og4.roa (raw, json) Hash identifier: 32J2xduAEK4/SsGh6SuDbhyqyhh7XlyF7binO4R80Wc= Subject key identifier: FF:99:92:00:A6:A0:4A:5A:D6:A9:C1:47:ED:35:C7:D1:6D:BA:A2:0E Certificate issuer: /CN=297c508d23b38315bbf45b726d22050a46127b8c Certificate serial: 019B797EEF9BD059BA06263E3F2EA8075C5E Authority key identifier: 29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/_5mSAKagSlrWqcFH7TXH0W26og4.roa Signing time: Thu 01 Jan 2026 12:18:40 +0000 ROA not before: Thu 01 Jan 2026 12:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49449 IP address blocks: 185.18.96.0/22 maxlen: 22 188.123.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:ef:9b:d0:59:ba:06:26:3e:3f:2e:a8:07:5c:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297c508d23b38315bbf45b726d22050a46127b8c Validity Not Before: Jan 1 12:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff999200a6a04a5ad6a9c147ed35c7d16dbaa20e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:d7:d7:bd:4e:d7:4d:b1:f0:d2:3c:8f:27:df: 34:3f:3d:18:01:14:dc:f4:03:90:15:58:cf:e0:71: f8:19:36:2c:10:4c:50:cd:a7:ea:b9:79:e4:a5:13: 2b:d1:58:6e:58:51:70:66:c6:ba:63:a8:e7:60:ab: eb:87:df:93:c2:d9:1b:b6:72:66:0c:89:2a:f3:9e: 1b:3b:c4:bf:e4:6a:c0:49:61:e1:4e:5b:a6:01:9b: b9:4e:cb:02:59:a1:49:6d:b4:ca:e0:14:15:c3:fc: 4b:33:10:e6:7f:99:55:e8:e4:ca:4a:df:97:ca:39: ad:8e:f3:86:43:d5:2a:96:e8:1f:29:5e:a1:dc:df: a0:59:61:d2:d8:14:b1:01:77:56:42:e2:e3:27:d6: af:71:43:e3:db:2c:49:b0:69:35:a2:be:57:a1:ab: 6a:ab:d0:8d:a7:23:e9:ad:35:48:75:78:95:47:82: 45:b8:9b:1f:0b:05:4e:d1:b5:a5:58:05:0c:25:21: 9c:54:e2:ab:74:67:7f:52:bf:bc:e1:a0:9b:c9:db: 31:0b:2d:8f:36:e7:8e:d1:3a:d8:20:de:38:d9:66: 94:ef:4f:34:c4:ca:2e:2c:87:3d:52:28:b4:e2:5d: fd:1c:2d:04:79:54:b9:d4:14:28:da:d2:22:e2:19: aa:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:99:92:00:A6:A0:4A:5A:D6:A9:C1:47:ED:35:C7:D1:6D:BA:A2:0E X509v3 Authority Key Identifier: keyid:29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/_5mSAKagSlrWqcFH7TXH0W26og4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.18.96.0/22 188.123.64.0/19 Signature Algorithm: sha256WithRSAEncryption 02:c2:80:06:00:77:4f:99:1c:eb:9d:a8:cd:6a:1f:e6:e0:fd: 27:07:ce:82:45:c9:b0:9e:8d:4a:ea:85:81:b2:73:17:f6:b1: 31:bc:1d:e4:70:f8:65:01:2b:5f:20:a3:43:4c:78:40:68:4c: e4:ed:2a:24:0e:34:af:0d:3b:86:a4:4a:6a:1f:1f:83:1e:9a: a4:85:59:e8:10:41:e9:0c:2d:42:74:96:89:c8:5b:b4:88:1c: c0:bf:30:79:25:69:3b:85:44:b6:5c:f1:ef:3f:3a:8e:53:ba: b5:3e:f2:f3:61:75:69:23:7a:77:8a:0c:95:eb:49:ca:e1:70: ed:ca:63:87:1c:1e:a8:8a:1f:f9:e1:e4:54:76:33:08:36:99: ec:7c:46:f6:2e:3b:a1:d9:45:40:85:8e:09:03:ca:6b:53:23: 1e:62:02:24:1f:f6:2c:95:3e:df:ef:4d:a2:7b:08:86:33:64: fb:d3:1c:44:a1:b3:69:0d:4b:25:8b:30:77:3e:3b:96:4e:f9: 13:98:ee:cf:a2:08:2e:e9:2f:96:c2:1f:36:1b:7f:f8:46:01: 41:0a:19:f2:ae:fb:3c:af:97:ab:92:69:00:eb:be:f6:59:d7: e4:a8:92:04:f7:58:bc:bd:e2:3c:d8:1c:56:19:0a:03:ae:cd: 30:50:89:74 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5fu+b0Fm6BiY+Py6oB1xeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2M1MDhkMjNiMzgzMTViYmY0NWI3MjZkMjIwNTBhNDYx MjdiOGMwHhcNMjYwMTAxMTIxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjk5OTIwMGE2YTA0YTVhZDZhOWMxNDdlZDM1YzdkMTZkYmFhMjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7dfXvU7XTbHw0jyPJ980Pz0YARTc 9AOQFVjP4HH4GTYsEExQzafquXnkpRMr0VhuWFFwZsa6Y6jnYKvrh9+TwtkbtnJm DIkq854bO8S/5GrASWHhTlumAZu5TssCWaFJbbTK4BQVw/xLMxDmf5lV6OTKSt+X yjmtjvOGQ9UqlugfKV6h3N+gWWHS2BSxAXdWQuLjJ9avcUPj2yxJsGk1or5Xoatq q9CNpyPprTVIdXiVR4JFuJsfCwVO0bWlWAUMJSGcVOKrdGd/Ur+84aCbydsxCy2P NueO0TrYIN442WaU7080xMouLIc9Uii04l39HC0EeVS51BQo2tIi4hmqzQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFP+ZkgCmoEpa1qnBR+01x9FtuqIOMB8GA1UdIwQY MBaAFCl8UI0js4MVu/Rbcm0iBQpGEnuMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTIt MzZlOWE3OWJkOTUwLzEvXzVtU0FLYWdTbHJXcWNGSDdUWEgwVzI2b2c0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTItMzZlOWE3OWJkOTUw LzEvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuRJgAwQF vHtAMA0GCSqGSIb3DQEBCwUAA4IBAQACwoAGAHdPmRzrnajNah/m4P0nB86CRcmw no1K6oWBsnMX9rExvB3kcPhlAStfIKNDTHhAaEzk7SokDjSvDTuGpEpqHx+DHpqk hVnoEEHpDC1CdJaJyFu0iBzAvzB5JWk7hUS2XPHvPzqOU7q1PvLzYXVpI3p3igyV 60nK4XDtymOHHB6oih/54eRUdjMINpnsfEb2Ljuh2UVAhY4JA8prUyMeYgIkH/Ys lT7f702iewiGM2T70xxEobNpDUslizB3PjuWTvkTmO7Poggu6S+Wwh82G3/4RgFB Chnyrvs8r5erkmkA6772WdfkqJIE91i8veI82BxWGQoDrs0wUIl0 -----END CERTIFICATE-----Generated at Mon Jan 26 13:45:51 2026 by rpki-client