This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/iw5F2GqviAuCI8Yj5bZostsjf4s.roa File: iw5F2GqviAuCI8Yj5bZostsjf4s.roa (raw, json) Hash identifier: nUPb8N6EAyjoLbqfkef2pSzNUsPnNcWng7BDtVUC41s= Subject key identifier: 8B:0E:45:D8:6A:AF:88:0B:82:23:C6:23:E5:B6:68:B2:DB:23:7F:8B Certificate issuer: /CN=52056867e4d2885e99b549ed6fb786330adf8f44 Certificate serial: 019B7D5CBD62CD307BC4EDB1635EAC27AEF4 Authority key identifier: 52:05:68:67:E4:D2:88:5E:99:B5:49:ED:6F:B7:86:33:0A:DF:8F:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/iw5F2GqviAuCI8Yj5bZostsjf4s.roa Signing time: Fri 02 Jan 2026 06:19:48 +0000 ROA not before: Fri 02 Jan 2026 06:19:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49143 IP address blocks: 195.88.186.0/24 maxlen: 24 195.88.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.crl rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.mft rsync://rpki.ripe.net/repository/DEFAULT/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:bd:62:cd:30:7b:c4:ed:b1:63:5e:ac:27:ae:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52056867e4d2885e99b549ed6fb786330adf8f44 Validity Not Before: Jan 2 06:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b0e45d86aaf880b8223c623e5b668b2db237f8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:03:06:c8:70:c8:c4:67:c0:d0:3b:3c:bb:f4: 36:c4:ff:b2:4b:13:66:03:78:74:bb:9f:02:f6:5c: 08:f0:1b:09:5e:3f:e8:1e:d4:14:b2:03:e3:10:70: 3f:3d:b0:a0:24:18:42:a4:5c:7d:ed:1e:31:b6:ec: e4:4c:e0:7a:cc:86:d6:b4:98:58:d4:1f:8c:71:f1: b6:b5:54:39:ae:a3:9a:d2:b3:f7:25:b3:6b:b8:49: 27:0b:71:37:d0:e2:85:c8:aa:85:2f:e2:5b:e8:be: 71:a4:a7:91:0b:5d:bf:4f:a2:69:b2:2d:84:bb:6e: b1:54:9d:9f:b7:f7:90:fc:5f:fe:5f:86:8f:a3:19: 21:ae:79:88:7f:d2:55:61:da:fd:77:b7:83:e8:e6: bf:49:05:e2:e2:5b:ef:82:a0:4d:da:dd:04:da:4d: 49:6a:bb:42:1a:ab:8e:15:a0:e7:f8:74:09:b9:41: 60:ce:66:5c:90:e4:15:e2:e2:6e:19:1c:a2:23:3a: 35:c0:ae:ab:0a:30:4a:4c:f2:22:7d:54:48:82:3f: 71:a2:92:d2:54:c6:80:fe:11:d7:9d:b2:fa:c2:d5: 92:44:9c:89:db:45:74:40:dc:0d:26:e2:32:c3:ad: 90:bd:28:5b:74:bc:ba:b6:57:a4:41:55:3a:d7:af: 77:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:0E:45:D8:6A:AF:88:0B:82:23:C6:23:E5:B6:68:B2:DB:23:7F:8B X509v3 Authority Key Identifier: keyid:52:05:68:67:E4:D2:88:5E:99:B5:49:ED:6F:B7:86:33:0A:DF:8F:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/iw5F2GqviAuCI8Yj5bZostsjf4s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.88.186.0/23 Signature Algorithm: sha256WithRSAEncryption a6:58:38:5e:97:f3:04:d9:6f:0b:c9:66:b6:34:b1:77:72:6f: 6b:aa:14:12:92:85:69:7b:1a:03:69:42:eb:b1:6c:bf:65:a1: 1f:66:cb:63:d8:37:24:e5:0a:d7:e4:11:06:ed:20:98:02:00: 5f:e7:aa:10:b6:a7:f5:ad:a0:8d:4a:98:1a:e0:23:59:2a:75: 0b:72:3a:83:5b:e7:ff:f9:18:da:7e:b7:b8:ae:d9:32:c4:ac: bc:4a:6e:2d:68:0c:58:7c:7e:05:fc:b9:98:e5:ac:5f:70:da: 4d:67:d6:d8:d7:67:2f:9b:35:72:ca:74:e3:69:af:a8:a5:82: ea:de:02:5d:bc:90:c7:43:3c:a3:c3:d4:e9:a8:d9:32:c7:33: a6:ee:11:ed:51:f2:57:f4:b0:2f:5c:85:bf:fd:f4:26:08:40: a8:e9:7e:33:45:a2:3d:1e:ba:9c:7b:a8:c2:e8:ee:5f:83:89: a5:6a:bc:d0:5b:c3:6f:d3:8a:bf:38:8f:d8:0a:cb:49:ab:2c: 93:0a:d7:80:71:5b:98:d2:b1:3f:0a:96:5a:7d:26:a9:db:da: a5:1c:d7:d4:a5:ba:24:db:6e:97:7e:81:af:3e:79:ec:fb:19: 00:ee:5a:b3:0b:65:4b:1f:89:af:f4:0c:ad:32:59:6f:54:64: 42:1e:70:7c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XL1izTB7xO2xY16sJ670MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMDU2ODY3ZTRkMjg4NWU5OWI1NDllZDZmYjc4NjMzMGFk ZjhmNDQwHhcNMjYwMTAyMDYxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjBlNDVkODZhYWY4ODBiODIyM2M2MjNlNWI2NjhiMmRiMjM3ZjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gMGyHDIxGfA0Ds8u/Q2xP+ySxNm A3h0u58C9lwI8BsJXj/oHtQUsgPjEHA/PbCgJBhCpFx97R4xtuzkTOB6zIbWtJhY 1B+McfG2tVQ5rqOa0rP3JbNruEknC3E30OKFyKqFL+Jb6L5xpKeRC12/T6Jpsi2E u26xVJ2ft/eQ/F/+X4aPoxkhrnmIf9JVYdr9d7eD6Oa/SQXi4lvvgqBN2t0E2k1J artCGquOFaDn+HQJuUFgzmZckOQV4uJuGRyiIzo1wK6rCjBKTPIifVRIgj9xopLS VMaA/hHXnbL6wtWSRJyJ20V0QNwNJuIyw62QvShbdLy6tlekQVU61693fQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIsORdhqr4gLgiPGI+W2aLLbI3+LMB8GA1UdIwQY MBaAFFIFaGfk0ohembVJ7W+3hjMK349EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWdWb1otVFNpRjZadFVudGI3ZUdNd3JmajBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9iMjdkNDUtMDhjYy00N2ExLWFjNWEt NWY0ODM2MDgzYTMwLzEvaXc1RjJHcXZpQXVDSThZajViWm9zdHNqZjRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9iMjdkNDUtMDhjYy00N2ExLWFjNWEtNWY0ODM2MDgzYTMw LzEvVWdWb1otVFNpRjZadFVudGI3ZUdNd3JmajBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw1i6MA0G CSqGSIb3DQEBCwUAA4IBAQCmWDhel/ME2W8LyWa2NLF3cm9rqhQSkoVpexoDaULr sWy/ZaEfZstj2Dck5QrX5BEG7SCYAgBf56oQtqf1raCNSpga4CNZKnULcjqDW+f/ +Rjafre4rtkyxKy8Sm4taAxYfH4F/LmY5axfcNpNZ9bY12cvmzVyynTjaa+opYLq 3gJdvJDHQzyjw9TpqNkyxzOm7hHtUfJX9LAvXIW//fQmCECo6X4zRaI9Hrqce6jC 6O5fg4mlarzQW8Nv04q/OI/YCstJqyyTCteAcVuY0rE/CpZafSap29qlHNfUpbok 226XfoGvPnns+xkA7lqzC2VLH4mv9AytMllvVGRCHnB8 -----END CERTIFICATE-----Generated at Sun Jan 25 16:54:52 2026 by rpki-client