This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/720394-cf71-40a3-a538-ed01ed7c129b/1/5mgPA2Ev8hBJxlZaAjG4HuF7fM4.roa File: 5mgPA2Ev8hBJxlZaAjG4HuF7fM4.roa (raw, json) Hash identifier: +oF19GYZ1Pl8AbPubf1Px/nSWpM1bcnjXuhjNYNuPKk= Subject key identifier: E6:68:0F:03:61:2F:F2:10:49:C6:56:5A:02:31:B8:1E:E1:7B:7C:CE Certificate issuer: /CN=c255989d579c4b5eade852f97f62e9bf2cfbde3c Certificate serial: 019B78A3542E66EAFDFC1F7F7239804221B9 Authority key identifier: C2:55:98:9D:57:9C:4B:5E:AD:E8:52:F9:7F:62:E9:BF:2C:FB:DE:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wlWYnVecS16t6FL5f2Lpvyz73jw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/720394-cf71-40a3-a538-ed01ed7c129b/1/5mgPA2Ev8hBJxlZaAjG4HuF7fM4.roa Signing time: Thu 01 Jan 2026 08:18:48 +0000 ROA not before: Thu 01 Jan 2026 08:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51088 IP address blocks: 188.95.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/720394-cf71-40a3-a538-ed01ed7c129b/1/wlWYnVecS16t6FL5f2Lpvyz73jw.crl rsync://rpki.ripe.net/repository/DEFAULT/55/720394-cf71-40a3-a538-ed01ed7c129b/1/wlWYnVecS16t6FL5f2Lpvyz73jw.mft rsync://rpki.ripe.net/repository/DEFAULT/wlWYnVecS16t6FL5f2Lpvyz73jw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:54:2e:66:ea:fd:fc:1f:7f:72:39:80:42:21:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c255989d579c4b5eade852f97f62e9bf2cfbde3c Validity Not Before: Jan 1 08:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e6680f03612ff21049c6565a0231b81ee17b7cce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:1e:7e:f6:e5:4b:1d:59:84:2d:26:37:0a:e2: 6f:5e:e6:0f:a4:5c:8b:cc:f5:fc:50:12:4b:34:73: fa:60:9c:be:0c:fc:a2:16:fe:b3:a6:3a:ad:d9:b4: 21:2e:da:1b:c2:5f:3a:12:9c:87:40:64:03:d5:d0: 60:07:dc:e0:e1:75:01:cc:73:e5:d2:81:4d:d8:35: 4c:46:51:2d:cd:58:63:32:9b:9e:b4:27:a4:36:bd: 31:10:c2:cb:bd:24:ac:4a:78:09:4a:40:a6:b8:f7: a0:56:cd:11:1c:96:d3:15:58:3b:b5:bd:66:34:92: bd:3d:33:70:87:57:c4:17:e0:5c:37:cf:b2:96:7d: 6a:c3:7b:eb:c7:b2:f6:0b:96:d2:7f:67:c4:85:15: 13:66:02:76:68:f9:73:bc:21:51:23:e5:9b:3a:10: 6d:63:e2:2b:0a:9d:a2:e5:4d:8a:d8:07:f4:d6:84: f0:63:f9:d1:ee:2f:f8:c3:ab:1c:e4:43:42:f9:16: d6:e4:e1:7c:2e:b5:92:a0:7a:59:cc:46:7c:e2:50: 7b:d2:3c:7a:10:1e:28:4b:e7:7e:ce:83:f0:0f:0a: a9:20:de:3f:16:77:01:17:f2:df:6c:2d:db:0f:4e: e9:f1:7d:c6:39:2b:a4:92:84:81:99:4f:be:59:25: 37:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:68:0F:03:61:2F:F2:10:49:C6:56:5A:02:31:B8:1E:E1:7B:7C:CE X509v3 Authority Key Identifier: keyid:C2:55:98:9D:57:9C:4B:5E:AD:E8:52:F9:7F:62:E9:BF:2C:FB:DE:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wlWYnVecS16t6FL5f2Lpvyz73jw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/720394-cf71-40a3-a538-ed01ed7c129b/1/5mgPA2Ev8hBJxlZaAjG4HuF7fM4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/720394-cf71-40a3-a538-ed01ed7c129b/1/wlWYnVecS16t6FL5f2Lpvyz73jw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.95.143.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:fe:91:ec:2f:93:22:1e:b7:84:43:2c:bc:62:95:d7:e0:ba: 00:77:7d:a0:e4:c7:e9:3f:53:96:19:7b:95:f1:09:c8:e4:24: 43:53:49:e9:53:c4:e1:c8:64:15:0b:90:3b:89:98:a6:af:be: 15:50:7b:8c:74:b1:67:a7:06:65:be:19:38:3f:1c:fa:1b:e6: 17:cf:91:dd:b3:39:c0:db:98:aa:e4:ba:5b:83:6d:4f:d0:be: 28:8f:d1:4d:06:0a:50:7c:34:f3:33:57:68:3f:01:59:58:fb: ed:46:4e:f2:67:b6:8c:0f:ca:9c:d7:b5:63:55:dc:79:7c:88: fd:9c:5c:86:db:69:a5:1d:48:0c:c5:c7:7f:1a:0a:02:3f:6d: d5:84:0a:43:f3:bd:7f:24:f4:98:c1:ce:30:d0:5a:5b:61:38: 43:0d:78:db:9f:ff:a4:3f:b7:63:dc:86:7f:29:c5:90:ce:46: 53:51:29:28:00:fe:7a:1e:58:31:c0:4a:99:f0:5f:a8:b3:f4: fe:f4:a8:74:0b:c9:a1:43:21:a4:6e:43:8f:51:16:3f:64:b7: 8b:07:31:3d:8d:61:09:60:52:e2:9b:e6:54:ec:7c:3b:68:e8: 37:9e:07:b1:3f:06:00:90:77:00:db:78:70:33:be:45:51:da: c0:3f:f8:55 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o1QuZur9/B9/cjmAQiG5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyNTU5ODlkNTc5YzRiNWVhZGU4NTJmOTdmNjJlOWJmMmNm YmRlM2MwHhcNMjYwMTAxMDgxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjY4MGYwMzYxMmZmMjEwNDljNjU2NWEwMjMxYjgxZWUxN2I3Y2NlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhx5+9uVLHVmELSY3CuJvXuYPpFyL zPX8UBJLNHP6YJy+DPyiFv6zpjqt2bQhLtobwl86EpyHQGQD1dBgB9zg4XUBzHPl 0oFN2DVMRlEtzVhjMpuetCekNr0xEMLLvSSsSngJSkCmuPegVs0RHJbTFVg7tb1m NJK9PTNwh1fEF+BcN8+yln1qw3vrx7L2C5bSf2fEhRUTZgJ2aPlzvCFRI+WbOhBt Y+IrCp2i5U2K2Af01oTwY/nR7i/4w6sc5ENC+RbW5OF8LrWSoHpZzEZ84lB70jx6 EB4oS+d+zoPwDwqpIN4/FncBF/LfbC3bD07p8X3GOSukkoSBmU++WSU3/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOZoDwNhL/IQScZWWgIxuB7he3zOMB8GA1UdIwQY MBaAFMJVmJ1XnEterehS+X9i6b8s+948MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2xXWW5WZWNTMTZ0NkZMNWYyTHB2eXo3M2p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS83MjAzOTQtY2Y3MS00MGEzLWE1Mzgt ZWQwMWVkN2MxMjliLzEvNW1nUEEyRXY4aEJKeGxaYUFqRzRIdUY3Zk00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS83MjAzOTQtY2Y3MS00MGEzLWE1MzgtZWQwMWVkN2MxMjli LzEvd2xXWW5WZWNTMTZ0NkZMNWYyTHB2eXo3M2p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvF+PMA0G CSqGSIb3DQEBCwUAA4IBAQBs/pHsL5MiHreEQyy8YpXX4LoAd32g5MfpP1OWGXuV 8QnI5CRDU0npU8ThyGQVC5A7iZimr74VUHuMdLFnpwZlvhk4Pxz6G+YXz5HdsznA 25iq5Lpbg21P0L4oj9FNBgpQfDTzM1doPwFZWPvtRk7yZ7aMD8qc17VjVdx5fIj9 nFyG22mlHUgMxcd/GgoCP23VhApD871/JPSYwc4w0FpbYThDDXjbn/+kP7dj3IZ/ KcWQzkZTUSkoAP56HlgxwEqZ8F+os/T+9Kh0C8mhQyGkbkOPURY/ZLeLBzE9jWEJ YFLim+ZU7Hw7aOg3ngexPwYAkHcA23hwM75FUdrAP/hV -----END CERTIFICATE-----Generated at Sun Jan 25 10:32:38 2026 by rpki-client