This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/5pmE9mYBjRhZe38QmWwWm942O9U.roa File: 5pmE9mYBjRhZe38QmWwWm942O9U.roa (raw, json) Hash identifier: I/XtJQhuUGNWJY5SlUg6TDyMur1mKeDTnd/4LdzUf1c= Subject key identifier: E6:99:84:F6:66:01:8D:18:59:7B:7F:10:99:6C:16:9B:DE:36:3B:D5 Certificate issuer: /CN=b8d3ecb8f711e0b92b505b8a0f7a5ee042291395 Certificate serial: 019B7EA56664C8897DA90BBBBD1F406D3C2E Authority key identifier: B8:D3:EC:B8:F7:11:E0:B9:2B:50:5B:8A:0F:7A:5E:E0:42:29:13:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNPsuPcR4LkrUFuKD3pe4EIpE5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/5pmE9mYBjRhZe38QmWwWm942O9U.roa Signing time: Fri 02 Jan 2026 12:18:47 +0000 ROA not before: Fri 02 Jan 2026 12:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58909 IP address blocks: 188.42.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft rsync://rpki.ripe.net/repository/DEFAULT/uNPsuPcR4LkrUFuKD3pe4EIpE5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:66:64:c8:89:7d:a9:0b:bb:bd:1f:40:6d:3c:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8d3ecb8f711e0b92b505b8a0f7a5ee042291395 Validity Not Before: Jan 2 12:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e69984f666018d18597b7f10996c169bde363bd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ee:01:75:f9:f7:5d:4e:77:d3:52:fb:3c:12: b2:23:c0:8c:5e:10:57:61:fe:7f:48:d3:2b:05:1a: 37:53:ae:ae:5a:9c:ea:8d:6b:30:89:88:2d:e4:b2: c2:af:84:b1:f5:18:1d:15:54:93:f5:e3:82:73:9c: 40:80:76:ad:f3:4e:45:9e:50:63:20:02:93:c3:34: 31:e9:a9:29:18:88:ba:67:4e:9f:41:cf:27:1e:a1: 5a:0f:5f:38:d7:c9:50:68:1b:68:0f:e1:7e:ee:5d: dc:0a:0b:61:75:3d:0e:d9:13:df:4e:66:4c:d0:bd: ce:a7:bc:62:4c:b3:f8:7f:ca:d8:a3:5f:0e:4c:87: 52:f3:3f:4f:f5:8b:dd:66:f6:ea:b3:a4:d0:77:29: 00:10:5b:27:f0:38:05:e6:10:f1:e8:cb:da:1a:b9: 23:37:2b:cc:d9:2b:5e:72:83:a2:12:9d:d0:15:c4: 40:91:be:e2:26:de:e2:e9:7d:68:53:d9:77:5b:2f: 72:95:55:b7:b8:db:67:fe:fe:83:00:4d:9c:a5:46: 71:cb:13:2b:9a:b1:0e:b1:de:70:af:3b:25:05:63: 71:6d:7f:02:da:9e:ac:13:79:a5:18:40:b4:a0:76: 9d:9d:4e:d5:72:58:cd:5a:61:bc:80:c7:df:74:c7: 28:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:99:84:F6:66:01:8D:18:59:7B:7F:10:99:6C:16:9B:DE:36:3B:D5 X509v3 Authority Key Identifier: keyid:B8:D3:EC:B8:F7:11:E0:B9:2B:50:5B:8A:0F:7A:5E:E0:42:29:13:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNPsuPcR4LkrUFuKD3pe4EIpE5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/5pmE9mYBjRhZe38QmWwWm942O9U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.42.96.0/23 Signature Algorithm: sha256WithRSAEncryption 37:50:1f:26:46:25:58:d6:80:9c:ea:1d:af:5e:3c:eb:22:ea: 68:31:f7:85:7c:3c:4d:9d:5a:2f:f6:9a:6c:a6:4c:f3:f3:99: 56:39:9c:8a:b6:27:c4:84:04:60:17:c1:07:fa:ec:74:ce:b4: 4c:b4:bd:37:a1:2b:87:e8:97:48:a5:09:9d:5b:8a:56:5c:4e: e8:ea:1e:f4:3a:05:0a:92:ea:09:07:92:1b:3a:2a:63:e4:26: 80:cb:1a:12:cb:78:ca:e4:a9:8b:10:52:b9:db:0e:72:29:6b: ee:8c:01:9e:1e:df:cf:c6:99:07:dd:17:ea:91:8f:ff:bd:2d: b8:2f:d7:bd:0c:79:ec:24:e1:d4:51:a3:1f:8a:fb:4e:96:e1: af:da:53:8c:51:50:84:a4:57:8f:19:99:d7:65:95:09:af:bd: c5:2a:f5:c4:a1:11:a6:89:8a:70:cc:c6:a6:a4:81:f5:32:3b: ae:24:37:32:0e:cc:39:4e:81:11:28:ad:c8:90:8f:c2:07:cb: b6:e8:af:92:f2:c3:15:58:74:52:46:f8:a5:eb:1c:27:b8:49: cd:24:84:5f:9a:bf:ca:10:9f:b7:ac:e7:d2:af:28:e7:ea:13: 41:61:0b:37:d2:db:6e:0c:05:ef:06:c8:aa:39:f2:c7:90:51: 2b:db:d5:1a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pWZkyIl9qQu7vR9AbTwuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4ZDNlY2I4ZjcxMWUwYjkyYjUwNWI4YTBmN2E1ZWUwNDIy OTEzOTUwHhcNMjYwMTAyMTIxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjk5ODRmNjY2MDE4ZDE4NTk3YjdmMTA5OTZjMTY5YmRlMzYzYmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtu4Bdfn3XU5301L7PBKyI8CMXhBX Yf5/SNMrBRo3U66uWpzqjWswiYgt5LLCr4Sx9RgdFVST9eOCc5xAgHat805FnlBj IAKTwzQx6akpGIi6Z06fQc8nHqFaD18418lQaBtoD+F+7l3cCgthdT0O2RPfTmZM 0L3Op7xiTLP4f8rYo18OTIdS8z9P9YvdZvbqs6TQdykAEFsn8DgF5hDx6MvaGrkj NyvM2StecoOiEp3QFcRAkb7iJt7i6X1oU9l3Wy9ylVW3uNtn/v6DAE2cpUZxyxMr mrEOsd5wrzslBWNxbX8C2p6sE3mlGEC0oHadnU7VcljNWmG8gMffdMcoDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOaZhPZmAY0YWXt/EJlsFpveNjvVMB8GA1UdIwQY MBaAFLjT7Lj3EeC5K1Bbig96XuBCKROVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdU5Qc3VQY1I0TGtyVUZ1S0QzcGU0RUlwRTVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zNjhhOGQtZWZmMi00OWMyLWE5NjMt YTE4NjFlNTM1NDRkLzEvNXBtRTltWUJqUmhaZTM4UW1Xd1dtOTQyTzlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8zNjhhOGQtZWZmMi00OWMyLWE5NjMtYTE4NjFlNTM1NDRk LzEvdU5Qc3VQY1I0TGtyVUZ1S0QzcGU0RUlwRTVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBvCpgMA0G CSqGSIb3DQEBCwUAA4IBAQA3UB8mRiVY1oCc6h2vXjzrIupoMfeFfDxNnVov9pps pkzz85lWOZyKtifEhARgF8EH+ux0zrRMtL03oSuH6JdIpQmdW4pWXE7o6h70OgUK kuoJB5IbOipj5CaAyxoSy3jK5KmLEFK52w5yKWvujAGeHt/PxpkH3RfqkY//vS24 L9e9DHnsJOHUUaMfivtOluGv2lOMUVCEpFePGZnXZZUJr73FKvXEoRGmiYpwzMam pIH1MjuuJDcyDsw5ToERKK3IkI/CB8u26K+S8sMVWHRSRvil6xwnuEnNJIRfmr/K EJ+3rOfSryjn6hNBYQs30ttuDAXvBsiqOfLHkFEr29Ua -----END CERTIFICATE-----Generated at Sun Jan 25 09:18:35 2026 by rpki-client