This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/d5odnptrjJaW4wbv5e-w-InznHA.roa File: d5odnptrjJaW4wbv5e-w-InznHA.roa (raw, json) Hash identifier: HdS9hjcjd6FA7NCMLYoBnDJO3cACO6YPZ4nZtli4PVc= Subject key identifier: 77:9A:1D:9E:9B:6B:8C:96:96:E3:06:EF:E5:EF:B0:F8:89:F3:9C:70 Certificate issuer: /CN=f57331288d908dd762e4b56f003b448f01881d24 Certificate serial: 019B7E38B57C739C6D4C27E08BA385F6F5A2 Authority key identifier: F5:73:31:28:8D:90:8D:D7:62:E4:B5:6F:00:3B:44:8F:01:88:1D:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/d5odnptrjJaW4wbv5e-w-InznHA.roa Signing time: Fri 02 Jan 2026 10:20:04 +0000 ROA not before: Fri 02 Jan 2026 10:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42244 IP address blocks: 185.191.196.0/22 maxlen: 22 185.191.196.0/24 maxlen: 24 185.191.197.0/24 maxlen: 24 185.191.198.0/24 maxlen: 24 185.191.199.0/24 maxlen: 24 2a0a:2540::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:b5:7c:73:9c:6d:4c:27:e0:8b:a3:85:f6:f5:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f57331288d908dd762e4b56f003b448f01881d24 Validity Not Before: Jan 2 10:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=779a1d9e9b6b8c9696e306efe5efb0f889f39c70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0c:d9:ed:bc:21:62:80:64:c4:fa:09:ca:25: 02:1f:29:aa:a1:04:03:b5:d2:f5:d8:d3:aa:19:07: 7f:cc:0a:a8:9a:f9:20:a4:7b:99:83:1b:2f:62:61: b4:62:97:07:6c:b1:c5:a8:06:ef:8b:0f:1f:c3:83: c0:eb:a0:63:cb:3e:f6:52:33:83:bd:73:5d:b1:8a: 62:64:62:5c:ac:76:9c:53:17:4e:d2:8a:2c:84:c4: a1:84:18:80:ce:19:87:26:69:f4:31:00:5c:67:33: c7:04:e9:f3:30:82:e4:05:4d:07:3c:dd:1a:24:36: 6d:07:96:bd:69:41:53:b4:c3:13:29:e3:49:70:81: 32:46:88:86:9a:69:2b:d5:67:ba:9d:57:bf:fe:6f: 19:0c:84:4e:d8:51:6d:0c:6c:e3:d8:ba:f1:f2:88: b4:74:e9:91:40:09:05:8c:5d:be:e1:f4:3d:66:6c: c6:85:8a:e7:39:0c:22:16:63:a6:1d:4a:50:54:6a: a0:ab:2e:f3:39:dc:a8:79:9d:24:95:c2:6e:32:1e: 04:43:69:88:b4:d2:d4:27:a6:ed:2e:e1:8b:a3:ba: e4:89:01:61:54:2c:82:a5:a8:af:4e:00:5f:4f:92: ed:bb:d4:62:4f:90:1f:e7:8a:84:11:72:0f:fb:5c: a3:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:9A:1D:9E:9B:6B:8C:96:96:E3:06:EF:E5:EF:B0:F8:89:F3:9C:70 X509v3 Authority Key Identifier: keyid:F5:73:31:28:8D:90:8D:D7:62:E4:B5:6F:00:3B:44:8F:01:88:1D:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/d5odnptrjJaW4wbv5e-w-InznHA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.191.196.0/22 IPv6: 2a0a:2540::/29 Signature Algorithm: sha256WithRSAEncryption 7f:eb:d8:85:c3:89:0a:96:f4:40:c5:d1:03:ab:e6:c7:50:1c: d4:b8:88:26:86:c9:f3:eb:30:80:d7:38:0e:c4:cc:67:40:2f: bc:92:6a:3c:8c:04:f3:da:52:1a:9b:0c:72:54:db:7f:df:ba: fc:63:fa:bc:75:36:56:7e:b5:81:77:38:f7:41:61:f5:70:e8: 2d:4e:18:40:1c:99:65:cc:6b:b2:f6:50:57:fb:77:b0:6f:8d: 0f:97:05:c3:bf:fd:dc:d3:38:2d:b3:c9:9c:64:8f:67:7a:7d: 5a:32:c1:ee:7a:61:15:3f:65:63:ab:f3:22:65:f7:5c:42:cb: 26:e4:62:f4:73:72:15:b5:d6:9c:ad:5f:53:63:84:07:25:bc: cf:19:79:4d:6c:71:14:15:54:ba:7a:13:7c:a2:a9:c7:8a:a5: a2:ce:6f:93:bc:e1:6b:ec:13:9a:fb:0a:0e:fb:4c:ae:d0:91: 20:02:cb:61:2d:e1:b0:df:d7:26:d2:96:46:49:a4:b7:29:74: b3:c9:fc:40:30:44:16:a0:1c:86:81:e9:cf:33:e9:b4:f9:d3: 16:1a:0a:f2:6a:f8:b6:09:d8:b9:f5:ca:f5:52:a1:6d:33:f3: d3:3e:35:88:fd:6f:c7:4b:6e:9d:55:34:a8:38:c7:b1:10:69: e1:dc:0f:54 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+OLV8c5xtTCfgi6OF9vWiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1NzMzMTI4OGQ5MDhkZDc2MmU0YjU2ZjAwM2I0NDhmMDE4 ODFkMjQwHhcNMjYwMTAyMTAyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NzlhMWQ5ZTliNmI4Yzk2OTZlMzA2ZWZlNWVmYjBmODg5ZjM5YzcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQzZ7bwhYoBkxPoJyiUCHymqoQQD tdL12NOqGQd/zAqomvkgpHuZgxsvYmG0YpcHbLHFqAbviw8fw4PA66Bjyz72UjOD vXNdsYpiZGJcrHacUxdO0ooshMShhBiAzhmHJmn0MQBcZzPHBOnzMILkBU0HPN0a JDZtB5a9aUFTtMMTKeNJcIEyRoiGmmkr1We6nVe//m8ZDIRO2FFtDGzj2Lrx8oi0 dOmRQAkFjF2+4fQ9ZmzGhYrnOQwiFmOmHUpQVGqgqy7zOdyoeZ0klcJuMh4EQ2mI tNLUJ6btLuGLo7rkiQFhVCyCpaivTgBfT5Ltu9RiT5Af54qEEXIP+1yj/QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHeaHZ6ba4yWluMG7+XvsPiJ85xwMB8GA1UdIwQY MBaAFPVzMSiNkI3XYuS1bwA7RI8BiB0kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVhNeEtJMlFqZGRpNUxWdkFEdEVqd0dJSFNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy81YWJiM2EtYjFiNi00ZDcwLWIwOTgt OGFlYTFmNjhiNzliLzEvZDVvZG5wdHJqSmFXNHdidjVlLXctSW56bkhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy81YWJiM2EtYjFiNi00ZDcwLWIwOTgtOGFlYTFmNjhiNzli LzEvOVhNeEtJMlFqZGRpNUxWdkFEdEVqd0dJSFNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCub/EMA0E AgACMAcDBQMqCiVAMA0GCSqGSIb3DQEBCwUAA4IBAQB/69iFw4kKlvRAxdEDq+bH UBzUuIgmhsnz6zCA1zgOxMxnQC+8kmo8jATz2lIamwxyVNt/37r8Y/q8dTZWfrWB dzj3QWH1cOgtThhAHJllzGuy9lBX+3ewb40PlwXDv/3c0zgts8mcZI9nen1aMsHu emEVP2Vjq/MiZfdcQssm5GL0c3IVtdacrV9TY4QHJbzPGXlNbHEUFVS6ehN8oqnH iqWizm+TvOFr7BOa+woO+0yu0JEgAsthLeGw39cm0pZGSaS3KXSzyfxAMEQWoByG genPM+m0+dMWGgryavi2Cdi59cr1UqFtM/PTPjWI/W/HS26dVTSoOMexEGnh3A9U -----END CERTIFICATE-----Generated at Mon Jan 26 03:57:01 2026 by rpki-client