This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/I5X54DPx7uauNQUcDefAh5kZut0.roa File: I5X54DPx7uauNQUcDefAh5kZut0.roa (raw, json) Hash identifier: 8TsQWHSq4ji09j4n0lKP6UovicqKlcYG3YyDhHypqMc= Subject key identifier: 23:95:F9:E0:33:F1:EE:E6:AE:35:05:1C:0D:E7:C0:87:99:19:BA:DD Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Certificate serial: 019B7E38D89DECC2EF549F9C2B9F269DDE19 Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/I5X54DPx7uauNQUcDefAh5kZut0.roa Signing time: Fri 02 Jan 2026 10:20:13 +0000 ROA not before: Fri 02 Jan 2026 10:20:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397222 IP address blocks: 37.209.192.0/24 maxlen: 24 37.209.194.0/24 maxlen: 24 37.209.196.0/24 maxlen: 24 37.209.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:d8:9d:ec:c2:ef:54:9f:9c:2b:9f:26:9d:de:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Validity Not Before: Jan 2 10:20:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2395f9e033f1eee6ae35051c0de7c0879919badd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6d:10:76:de:dd:2f:a3:3b:e3:3d:48:ec:c1: a0:f9:89:ca:2b:18:ad:6c:1d:81:03:7c:27:8d:2d: 54:8e:3a:79:43:27:80:d2:56:13:e8:8a:aa:2a:f4: 0c:bb:5b:66:a9:7e:29:83:94:0e:8c:d2:32:41:1f: 2b:51:fc:3d:83:4e:3c:5d:ff:7d:a5:67:6e:db:0b: 5f:e1:5b:c7:2c:7c:bf:e8:bb:12:a4:e7:68:46:3e: 6d:47:8b:8e:89:67:2f:a0:06:63:bc:7f:c6:34:fc: c8:34:0d:1a:87:ba:19:fe:83:28:89:cc:82:fd:8b: 4f:91:21:b3:b4:a8:12:8c:65:84:69:a1:d7:fa:29: ec:45:ed:a0:61:8f:48:5f:57:ce:c4:51:4c:57:49: b6:50:02:20:d6:24:6c:6d:23:1a:1c:0e:07:b7:ca: 2e:57:23:df:8d:a5:81:5a:5d:88:d0:6c:ee:84:47: 11:42:96:37:73:e2:19:59:3a:49:3d:a0:0d:21:61: e1:14:86:fb:05:ce:54:72:df:45:34:cc:71:ca:4b: a9:06:bf:ce:7a:ba:01:b7:6c:e8:42:e0:77:c1:08: 21:57:0f:ef:76:cb:1a:17:00:90:94:88:72:f7:e9: 9a:d3:57:89:17:a7:f7:44:55:2a:9c:7a:32:17:86: f1:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:95:F9:E0:33:F1:EE:E6:AE:35:05:1C:0D:E7:C0:87:99:19:BA:DD X509v3 Authority Key Identifier: keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/I5X54DPx7uauNQUcDefAh5kZut0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.209.192.0/24 37.209.194.0/24 37.209.196.0/24 37.209.198.0/24 Signature Algorithm: sha256WithRSAEncryption 25:43:26:14:1d:60:39:3a:9c:1b:26:21:e0:56:c9:49:3f:8f: 43:ad:08:30:e3:5a:a7:fa:f5:81:a2:dc:6d:3b:72:b4:ed:eb: 6d:c7:f5:dc:8f:60:d6:29:ae:cc:a9:d0:97:97:6c:90:bb:8a: b5:75:e4:c2:13:05:76:b1:96:b9:b8:91:f1:9e:9a:75:e1:a7: 77:fd:f0:4c:09:24:80:be:3e:f3:e4:36:f2:42:24:fd:20:37: 42:f4:07:b8:05:c4:f7:20:33:50:18:5f:03:fd:e1:cc:7d:10: 5e:d2:3d:83:b3:c4:9e:49:14:5f:e2:2e:bb:12:e4:04:22:93: 66:a4:b3:0b:92:f6:5c:81:89:4b:f8:b4:3a:9f:3e:8a:14:df: 66:ab:cd:b4:6a:ad:fd:0b:8f:1f:ca:ee:a0:3e:53:5a:0a:f8: b3:0f:ea:f0:5e:d2:a9:d2:53:dc:45:54:07:9c:08:25:0e:68: 3f:e7:76:7e:7e:b5:d5:e5:1f:7b:e8:86:89:ce:84:a8:3d:e7: d6:c3:cb:46:f0:67:08:01:a9:d4:b4:4d:f9:98:7f:09:97:d4: 81:2d:58:e4:11:23:e2:4d:31:dd:9f:0a:15:19:1d:40:24:07: e9:7d:ad:5d:6c:dd:6d:94:71:eb:75:7e:38:17:98:55:3a:2f: 2d:34:70:8d -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt+ONid7MLvVJ+cK58mnd4ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YWU4YTNkOGJkYWFiZjQ3NjVmZGE3OWQ1NWVjYThjNjlj OGJmMmMwHhcNMjYwMTAyMTAyMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzk1ZjllMDMzZjFlZWU2YWUzNTA1MWMwZGU3YzA4Nzk5MTliYWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy20Qdt7dL6M74z1I7MGg+YnKKxit bB2BA3wnjS1Ujjp5QyeA0lYT6IqqKvQMu1tmqX4pg5QOjNIyQR8rUfw9g048Xf99 pWdu2wtf4VvHLHy/6LsSpOdoRj5tR4uOiWcvoAZjvH/GNPzINA0ah7oZ/oMoicyC /YtPkSGztKgSjGWEaaHX+insRe2gYY9IX1fOxFFMV0m2UAIg1iRsbSMaHA4Ht8ou VyPfjaWBWl2I0GzuhEcRQpY3c+IZWTpJPaANIWHhFIb7Bc5Uct9FNMxxykupBr/O eroBt2zoQuB3wQghVw/vdssaFwCQlIhy9+ma01eJF6f3RFUqnHoyF4bxmwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFCOV+eAz8e7mrjUFHA3nwIeZGbrdMB8GA1UdIwQY MBaAFKWuij2L2qv0dl/aedVeyoxpyL8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEt NDE2Zjg1ZWUyMzdiLzEvSTVYNTREUHg3dWF1TlFVY0RlZkFoNWtadXQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEtNDE2Zjg1ZWUyMzdi LzEvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAJdHAAwQA JdHCAwQAJdHEAwQAJdHGMA0GCSqGSIb3DQEBCwUAA4IBAQAlQyYUHWA5OpwbJiHg VslJP49DrQgw41qn+vWBotxtO3K07ettx/Xcj2DWKa7MqdCXl2yQu4q1deTCEwV2 sZa5uJHxnpp14ad3/fBMCSSAvj7z5DbyQiT9IDdC9Ae4BcT3IDNQGF8D/eHMfRBe 0j2Ds8SeSRRf4i67EuQEIpNmpLMLkvZcgYlL+LQ6nz6KFN9mq820aq39C48fyu6g PlNaCvizD+rwXtKp0lPcRVQHnAglDmg/53Z+frXV5R976IaJzoSoPefWw8tG8GcI AanUtE35mH8Jl9SBLVjkESPiTTHdnwoVGR1AJAfpfa1dbN1tlHHrdX44F5hVOi8t NHCN -----END CERTIFICATE-----Generated at Sun Jan 25 10:37:41 2026 by rpki-client