This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/5d874HtQy3_g6Lh42ATS1BQL16o.roa File: 5d874HtQy3_g6Lh42ATS1BQL16o.roa (raw, json) Hash identifier: FFJNypVbDwx5p1OtRayAO1/xI3zEji2XKy7Oj/jRza0= Subject key identifier: E5:DF:3B:E0:7B:50:CB:7F:E0:E8:B8:78:D8:04:D2:D4:14:0B:D7:AA Certificate issuer: /CN=ab8c6c58b607ff23ae7175a61682c75480f1e214 Certificate serial: 019B7C805ED56379515BDD4A09BDCBAC184E Authority key identifier: AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/5d874HtQy3_g6Lh42ATS1BQL16o.roa Signing time: Fri 02 Jan 2026 02:19:06 +0000 ROA not before: Fri 02 Jan 2026 02:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47540 IP address blocks: 188.247.128.0/24 maxlen: 24 188.247.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:5e:d5:63:79:51:5b:dd:4a:09:bd:cb:ac:18:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8c6c58b607ff23ae7175a61682c75480f1e214 Validity Not Before: Jan 2 02:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e5df3be07b50cb7fe0e8b878d804d2d4140bd7aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:27:54:12:18:63:16:a6:1c:4d:16:91:aa:0d: b2:6b:ea:a3:ac:63:1b:a0:be:c9:75:13:52:81:8f: a1:65:22:e7:23:66:fc:2e:3f:aa:3f:69:01:a6:09: 21:6f:d3:7f:83:85:1d:8b:b0:a1:68:76:6d:18:e9: 3e:a5:37:20:5a:b7:fe:6e:f9:4a:9f:c2:91:8c:2a: 1f:f0:2f:f8:02:c3:01:f5:27:8c:53:63:73:47:be: 6f:07:d1:fb:42:2b:6c:57:81:7c:7f:18:90:51:90: dc:7e:14:92:8b:24:ad:c8:cc:f9:bd:4b:2c:17:1c: 9e:73:5b:21:3a:e4:9b:a8:bd:3a:a6:b3:32:ee:32: 90:8c:05:b0:f5:4d:11:61:ac:96:f4:2f:9c:27:90: 7c:d2:6b:28:59:cd:a1:0b:c6:7e:99:fa:ff:40:1c: 6f:51:b9:00:9a:fa:24:2a:b5:18:db:9e:02:a2:53: 44:ae:87:3a:16:66:21:9c:da:1b:99:02:65:29:5e: 8e:9e:c6:8f:f0:e9:b3:b4:1b:48:59:e9:15:22:24: 31:d8:e8:4e:6a:9d:ba:f4:e4:fb:4e:03:61:d1:36: 23:7d:e2:b9:75:9c:b6:f2:aa:f9:e4:cc:93:73:66: 26:22:e4:a7:78:d6:4a:a9:c0:2b:33:a5:ea:a4:db: cf:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:DF:3B:E0:7B:50:CB:7F:E0:E8:B8:78:D8:04:D2:D4:14:0B:D7:AA X509v3 Authority Key Identifier: keyid:AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/5d874HtQy3_g6Lh42ATS1BQL16o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.247.128.0/24 188.247.135.0/24 Signature Algorithm: sha256WithRSAEncryption 82:86:61:1f:57:05:de:1c:00:1a:fb:5c:11:2e:2a:5e:81:7f: 48:b2:51:89:1c:3e:47:bd:e3:66:90:cd:85:c2:fd:f4:97:77: 74:22:ca:ac:71:be:ce:7b:ad:22:52:69:88:00:39:1b:d7:4f: ad:ca:fc:c7:b0:80:f9:af:f1:d9:31:0e:f5:f2:2e:3b:23:6a: a0:ff:3e:31:7a:23:6a:1f:78:ea:fa:03:e5:ff:fe:b3:28:f4: c3:c9:cf:4f:19:af:9c:df:c1:82:dd:e2:21:a3:f2:46:f5:fa: 94:81:50:b9:93:2e:79:c1:53:4d:f5:af:f1:f1:72:98:ea:10: c9:07:3c:65:d4:ea:45:c3:65:2b:bf:a1:76:e6:db:e7:8f:bd: f0:ec:02:86:f1:00:11:1b:c3:fb:54:ef:df:68:9c:8d:e1:5e: 65:08:37:e4:88:72:e1:e4:6d:cf:cf:ff:9a:69:17:f9:52:a5: c9:5e:7b:48:4c:cb:46:18:db:b4:da:60:47:66:b8:7e:e4:61: f9:d1:a8:2a:2b:10:b3:f1:fb:a5:46:8b:99:fe:fe:6a:ff:7d: 71:a1:98:49:79:b2:47:7e:cc:6d:29:b9:6b:1a:04:83:b0:4c: 29:d4:a2:9b:d4:3c:6e:b6:ac:26:6a:ca:1a:83:4c:31:eb:4c: 6b:78:2b:d3 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gF7VY3lRW91KCb3LrBhOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiOGM2YzU4YjYwN2ZmMjNhZTcxNzVhNjE2ODJjNzU0ODBm MWUyMTQwHhcNMjYwMTAyMDIxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNWRmM2JlMDdiNTBjYjdmZTBlOGI4NzhkODA0ZDJkNDE0MGJkN2FhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6idUEhhjFqYcTRaRqg2ya+qjrGMb oL7JdRNSgY+hZSLnI2b8Lj+qP2kBpgkhb9N/g4Udi7ChaHZtGOk+pTcgWrf+bvlK n8KRjCof8C/4AsMB9SeMU2NzR75vB9H7QitsV4F8fxiQUZDcfhSSiyStyMz5vUss Fxyec1shOuSbqL06prMy7jKQjAWw9U0RYayW9C+cJ5B80msoWc2hC8Z+mfr/QBxv UbkAmvokKrUY254ColNEroc6FmYhnNobmQJlKV6OnsaP8OmztBtIWekVIiQx2OhO ap269OT7TgNh0TYjfeK5dZy28qr55MyTc2YmIuSneNZKqcArM6XqpNvPYwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOXfO+B7UMt/4Oi4eNgE0tQUC9eqMB8GA1UdIwQY MBaAFKuMbFi2B/8jrnF1phaCx1SA8eIUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9lZmI4ZWUtYzVjNC00NDY3LWEwY2Mt ODhhM2M0MWZhZWUyLzEvNWQ4NzRIdFF5M19nNkxoNDJBVFMxQlFMMTZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9lZmI4ZWUtYzVjNC00NDY3LWEwY2MtODhhM2M0MWZhZWUy LzEvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAvPeAAwQA vPeHMA0GCSqGSIb3DQEBCwUAA4IBAQCChmEfVwXeHAAa+1wRLipegX9IslGJHD5H veNmkM2Fwv30l3d0Isqscb7Oe60iUmmIADkb10+tyvzHsID5r/HZMQ718i47I2qg /z4xeiNqH3jq+gPl//6zKPTDyc9PGa+c38GC3eIho/JG9fqUgVC5ky55wVNN9a/x 8XKY6hDJBzxl1OpFw2Urv6F25tvnj73w7AKG8QARG8P7VO/faJyN4V5lCDfkiHLh 5G3Pz/+aaRf5UqXJXntITMtGGNu02mBHZrh+5GH50agqKxCz8fulRouZ/v5q/31x oZhJebJHfsxtKblrGgSDsEwp1KKb1Dxutqwmasoag0wx60xreCvT -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:11 2026 by rpki-client