This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/S5QLFtpcaHsUY4VxZgrrmjHd97o.roa File: S5QLFtpcaHsUY4VxZgrrmjHd97o.roa (raw, json) Hash identifier: dlzE3mzN4PsGe+Icya5R8bcGkQdXXvrIYJM84TeUjhY= Subject key identifier: 4B:94:0B:16:DA:5C:68:7B:14:63:85:71:66:0A:EB:9A:31:DD:F7:BA Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F851C8E2DF23B025E71281829F1B3DB Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/S5QLFtpcaHsUY4VxZgrrmjHd97o.roa Signing time: Fri 02 Jan 2026 16:23:08 +0000 ROA not before: Fri 02 Jan 2026 16:23:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215237 IP address blocks: 92.38.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:1c:8e:2d:f2:3b:02:5e:71:28:18:29:f1:b3:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:23:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b940b16da5c687b14638571660aeb9a31ddf7ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d6:94:d7:72:54:b0:6c:51:8b:e1:c2:fe:06: b7:89:bd:0b:3d:f0:cc:4b:a6:c1:b0:69:6e:83:f2: a9:a9:4c:08:21:b5:f9:43:0e:08:47:5a:a8:f8:98: a3:12:46:e5:4d:2f:d0:d5:94:88:00:fb:15:f1:02: c1:a1:6f:cd:9c:9b:dd:5e:d8:b1:d5:a1:48:71:9c: 1c:56:73:56:4b:51:ac:c7:24:a3:a2:86:7b:24:2c: 21:1a:50:49:04:2b:57:6e:7b:23:69:c8:e5:fe:7c: e5:dd:e1:b6:fc:18:82:39:01:85:6b:58:73:b7:05: 00:e7:8b:da:78:f5:6e:d7:9f:b3:23:87:80:aa:cc: 05:e9:48:65:95:50:2e:6d:fd:cf:8b:70:65:13:b1: aa:24:5e:59:97:13:92:c3:9f:71:cb:d7:72:a2:c6: f8:72:72:25:7d:61:a2:63:99:20:fc:56:4d:8e:d1: 0e:f6:e7:34:1b:69:68:04:b6:48:08:a8:71:a3:4a: 0f:0d:c1:93:dc:74:e3:e4:d3:63:68:10:53:c2:7a: 59:d4:bf:83:85:ef:d9:09:62:93:ef:93:6b:07:e8: 70:d6:b2:15:32:7b:35:9e:ee:c1:20:6e:54:56:48: 11:59:e1:7a:db:87:f6:e6:96:82:f4:59:0b:6a:91: 46:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:94:0B:16:DA:5C:68:7B:14:63:85:71:66:0A:EB:9A:31:DD:F7:BA X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/S5QLFtpcaHsUY4VxZgrrmjHd97o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.38.5.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:aa:c1:2d:03:03:4f:ed:ac:d1:73:0b:67:f2:70:d9:97:8b: 32:f4:99:0d:96:97:51:78:1a:e1:d8:6a:4c:a3:be:65:e8:d4: dc:43:20:4f:20:10:cf:8e:9a:fd:94:09:79:c3:c7:77:38:d5: 5f:a8:1f:a9:1f:19:6e:09:35:04:94:09:72:08:9c:31:51:d8: 12:ef:e0:67:f3:09:ba:5c:64:55:54:00:ce:80:f2:9f:7d:ca: 4f:3c:60:54:68:3b:33:25:a3:c5:dc:a5:91:20:3f:24:2e:51: 9f:2c:0d:25:e6:ad:4c:f5:eb:8b:8a:75:08:5e:84:0a:b0:9c: 91:a3:90:c5:31:87:db:ac:d8:6d:85:be:da:ba:f0:92:86:32: bb:30:25:10:17:80:4c:a8:a9:03:2b:93:47:c9:09:0c:cb:a2: b3:af:7c:0f:ec:0c:84:f9:47:a8:e2:17:82:b1:e3:22:89:5b: b1:6e:38:f7:77:a5:bc:73:09:39:71:d5:42:52:9e:30:e6:a2: 30:f3:6c:47:86:a7:34:ce:0a:e9:2e:c6:56:08:72:51:7c:22: 69:28:7a:4d:34:aa:e5:13:c0:b0:56:b1:8e:f9:08:bd:e8:91: bf:d5:85:a5:0e:1a:dc:ef:7c:6f:39:22:e7:53:5d:2a:b1:c0: 08:cc:5d:73 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hRyOLfI7Al5xKBgp8bPbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMzA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Yjk0MGIxNmRhNWM2ODdiMTQ2Mzg1NzE2NjBhZWI5YTMxZGRmN2JhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3taU13JUsGxRi+HC/ga3ib0LPfDM S6bBsGlug/KpqUwIIbX5Qw4IR1qo+JijEkblTS/Q1ZSIAPsV8QLBoW/NnJvdXtix 1aFIcZwcVnNWS1GsxySjooZ7JCwhGlBJBCtXbnsjacjl/nzl3eG2/BiCOQGFa1hz twUA54vaePVu15+zI4eAqswF6UhllVAubf3Pi3BlE7GqJF5ZlxOSw59xy9dyosb4 cnIlfWGiY5kg/FZNjtEO9uc0G2loBLZICKhxo0oPDcGT3HTj5NNjaBBTwnpZ1L+D he/ZCWKT75NrB+hw1rIVMns1nu7BIG5UVkgRWeF624f25paC9FkLapFGpwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEuUCxbaXGh7FGOFcWYK65ox3fe6MB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvUzVRTEZ0cGNhSHNVWTRWeFpncnJtakhkOTdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXCYFMA0G CSqGSIb3DQEBCwUAA4IBAQBPqsEtAwNP7azRcwtn8nDZl4sy9JkNlpdReBrh2GpM o75l6NTcQyBPIBDPjpr9lAl5w8d3ONVfqB+pHxluCTUElAlyCJwxUdgS7+Bn8wm6 XGRVVADOgPKffcpPPGBUaDszJaPF3KWRID8kLlGfLA0l5q1M9euLinUIXoQKsJyR o5DFMYfbrNhthb7auvCShjK7MCUQF4BMqKkDK5NHyQkMy6Kzr3wP7AyE+Ueo4heC seMiiVuxbjj3d6W8cwk5cdVCUp4w5qIw82xHhqc0zgrpLsZWCHJRfCJpKHpNNKrl E8CwVrGO+Qi96JG/1YWlDhrc73xvOSLnU10qscAIzF1z -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:25 2026 by rpki-client