This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/5CBz7J_rxqKIErWJdNCTyxWORk4.roa File: 5CBz7J_rxqKIErWJdNCTyxWORk4.roa (raw, json) Hash identifier: NgQqsHixRjLE1PxJ9k04+GOCbvcPmM6kd6jLKzVPJ4A= Subject key identifier: E4:20:73:EC:9F:EB:C6:A2:88:12:B5:89:74:D0:93:CB:15:8E:46:4E Certificate issuer: /CN=4ca66f3c0f25774e696d2a46723277eb961128c3 Certificate serial: 019B7E39088885C0864B5DC40D29CBFF65C5 Authority key identifier: 4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/5CBz7J_rxqKIErWJdNCTyxWORk4.roa Signing time: Fri 02 Jan 2026 10:20:25 +0000 ROA not before: Fri 02 Jan 2026 10:20:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 36680 IP address blocks: 176.65.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:08:88:85:c0:86:4b:5d:c4:0d:29:cb:ff:65:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ca66f3c0f25774e696d2a46723277eb961128c3 Validity Not Before: Jan 2 10:20:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e42073ec9febc6a28812b58974d093cb158e464e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:cf:99:87:18:a9:b4:82:ac:aa:0f:37:33:b3: 86:88:63:c6:92:f9:c5:bd:69:6e:26:bb:73:80:c4: c7:27:a2:43:71:b5:b0:76:9d:f7:54:1f:1f:c9:ac: b8:42:75:86:48:01:f7:12:47:ce:54:cb:25:c6:d0: 0d:c7:e1:3a:c8:81:e0:cb:9b:fc:44:8c:73:81:f1: 0b:b6:fe:dc:22:4c:04:bf:59:ce:56:e3:23:31:4d: de:f8:93:ba:57:95:b6:b9:a2:10:0f:15:38:43:06: 84:42:ba:5a:72:ed:f5:e3:09:8f:a7:8d:e1:6e:ac: aa:5c:5f:ee:ed:c6:44:05:05:e1:59:61:5d:1a:71: 8c:a6:23:d8:58:86:16:96:b8:4f:38:16:71:60:11: c2:a1:c9:d5:25:f0:d6:49:88:da:6f:49:e5:3b:6b: 4a:ec:b2:7e:7d:f0:f3:81:2c:7f:52:4a:dc:29:97: d8:0f:34:d3:c7:0c:0f:1b:25:db:b4:45:2a:ea:5a: e8:95:11:a4:53:02:24:5d:00:c8:35:bb:d7:28:e8: 75:0c:e8:c4:3c:55:ad:c6:77:ea:54:9e:20:e2:77: c8:bf:54:3b:4c:ce:38:3a:de:d1:9a:35:c1:42:5c: ce:b3:25:19:f4:9b:cb:c1:df:c6:45:d3:7e:75:55: 24:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:20:73:EC:9F:EB:C6:A2:88:12:B5:89:74:D0:93:CB:15:8E:46:4E X509v3 Authority Key Identifier: keyid:4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/5CBz7J_rxqKIErWJdNCTyxWORk4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.65.134.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:be:a9:59:35:ad:54:7b:38:e8:a9:7e:ef:ba:96:9a:02:a5: f7:dc:db:26:d9:8d:16:e8:ab:92:66:5e:5c:7c:76:92:c5:93: c0:cc:0e:5b:46:2a:b0:0f:a6:b0:77:a4:c4:ff:d0:9d:ce:57: e9:df:a6:2f:d7:6c:5a:a8:d3:c5:e1:8c:1a:f2:d2:47:0a:d8: a3:8f:28:c8:78:72:3b:ae:ee:4a:93:69:9e:e9:26:5e:b9:5b: 16:28:db:73:79:71:1e:d3:22:f0:80:89:3b:af:a0:a7:bd:76: af:29:9a:0d:f0:de:4f:2a:ee:68:5c:be:c7:80:17:95:20:5d: dd:85:9b:31:6e:af:bb:ea:c0:30:7d:b1:72:88:40:21:0c:2d: dd:be:08:4c:41:00:f8:71:9c:a6:0e:43:42:4d:66:b1:17:27: ed:54:14:82:0f:78:44:1a:14:36:2b:f9:84:00:d3:f4:54:a6: 16:e0:a1:bd:44:2d:99:6d:fa:ad:e6:8d:29:6a:07:f7:6e:7a: 07:40:c2:82:ca:6a:38:8c:96:bd:4f:77:28:7a:f6:01:f6:b7: e6:bf:af:f7:99:36:e3:62:e9:aa:97:c5:b8:a8:41:1e:e7:46: 50:c5:03:ea:69:2d:8c:c2:f6:99:3f:36:50:40:62:67:1e:65: 46:f5:46:39 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OQiIhcCGS13EDSnL/2XFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjYTY2ZjNjMGYyNTc3NGU2OTZkMmE0NjcyMzI3N2ViOTYx MTI4YzMwHhcNMjYwMTAyMTAyMDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDIwNzNlYzlmZWJjNmEyODgxMmI1ODk3NGQwOTNjYjE1OGU0NjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApM+ZhxiptIKsqg83M7OGiGPGkvnF vWluJrtzgMTHJ6JDcbWwdp33VB8fyay4QnWGSAH3EkfOVMslxtANx+E6yIHgy5v8 RIxzgfELtv7cIkwEv1nOVuMjMU3e+JO6V5W2uaIQDxU4QwaEQrpacu314wmPp43h bqyqXF/u7cZEBQXhWWFdGnGMpiPYWIYWlrhPOBZxYBHCocnVJfDWSYjab0nlO2tK 7LJ+ffDzgSx/UkrcKZfYDzTTxwwPGyXbtEUq6lrolRGkUwIkXQDINbvXKOh1DOjE PFWtxnfqVJ4g4nfIv1Q7TM44Ot7RmjXBQlzOsyUZ9JvLwd/GRdN+dVUkQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOQgc+yf68aiiBK1iXTQk8sVjkZOMB8GA1UdIwQY MBaAFEymbzwPJXdOaW0qRnIyd+uWESjDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEtadlBBOGxkMDVwYlNwR2NqSjM2NVlSS01NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8yMDQwMTctZjA0Ni00YjY5LWIzZTUt MzE5YjBjODc0NDQwLzEvNUNCejdKX3J4cUtJRXJXSmROQ1R5eFdPUms0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8yMDQwMTctZjA0Ni00YjY5LWIzZTUtMzE5YjBjODc0NDQw LzEvVEtadlBBOGxkMDVwYlNwR2NqSjM2NVlSS01NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsEGGMA0G CSqGSIb3DQEBCwUAA4IBAQCKvqlZNa1UezjoqX7vupaaAqX33Nsm2Y0W6KuSZl5c fHaSxZPAzA5bRiqwD6awd6TE/9Cdzlfp36Yv12xaqNPF4Ywa8tJHCtijjyjIeHI7 ru5Kk2me6SZeuVsWKNtzeXEe0yLwgIk7r6CnvXavKZoN8N5PKu5oXL7HgBeVIF3d hZsxbq+76sAwfbFyiEAhDC3dvghMQQD4cZymDkNCTWaxFyftVBSCD3hEGhQ2K/mE ANP0VKYW4KG9RC2Zbfqt5o0pagf3bnoHQMKCymo4jJa9T3coevYB9rfmv6/3mTbj Yumql8W4qEEe50ZQxQPqaS2MwvaZPzZQQGJnHmVG9UY5 -----END CERTIFICATE-----Generated at Sun Jan 25 14:40:42 2026 by rpki-client