This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/5rXwssl527FV2FHeDhR2oKlUXW0.roa File: 5rXwssl527FV2FHeDhR2oKlUXW0.roa (raw, json) Hash identifier: WQ/svE53owqqplnZu2XskLFlrf81EITn3WaJ4Owl8c0= Subject key identifier: E6:B5:F0:B2:C9:79:DB:B1:55:D8:51:DE:0E:14:76:A0:A9:54:5D:6D Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84 Certificate serial: 019B7E37273941B3B38D3FBE5A4575344989 Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/5rXwssl527FV2FHeDhR2oKlUXW0.roa Signing time: Fri 02 Jan 2026 10:18:22 +0000 ROA not before: Fri 02 Jan 2026 10:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212715 IP address blocks: 185.19.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:27:39:41:b3:b3:8d:3f:be:5a:45:75:34:49:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84 Validity Not Before: Jan 2 10:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e6b5f0b2c979dbb155d851de0e1476a0a9545d6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:94:16:2a:49:40:58:c1:4b:cb:fa:d2:c9:2a: b9:96:38:27:9a:38:8d:14:dc:f4:cb:fe:9d:69:e9: d8:bc:f3:e2:68:f8:ab:e5:26:cc:74:e3:be:43:e1: 1a:52:36:a6:bd:2a:04:b4:cb:0b:75:9d:d2:b4:85: 8b:cb:81:73:a3:b5:fd:34:4f:2b:6f:bb:ae:c2:5a: 8a:36:15:c4:8e:77:a2:a9:dd:7f:73:fb:b6:71:f0: 68:08:32:f7:e3:46:7e:46:ec:7e:2a:54:19:0e:25: 62:ad:69:cb:d9:75:09:f7:90:38:33:37:01:98:da: 4d:d8:31:61:9a:68:4e:5c:40:43:46:f2:33:44:89: ac:de:ef:d5:51:1f:3b:6a:34:93:4e:ed:92:11:c1: 37:ce:14:e0:ec:b8:e1:8c:db:28:87:bf:2e:fe:5f: 60:76:3b:d0:9d:80:48:8a:d1:f5:eb:db:15:44:be: 87:97:ea:75:4a:3d:27:cc:67:0a:eb:24:12:af:c9: 7f:b5:38:0e:e8:87:38:89:2f:d5:3a:2f:30:8a:a1: 95:0c:3e:fe:1f:2d:cd:ee:84:42:7a:fc:00:7a:74: d2:41:99:ea:90:2b:b2:6f:9c:9b:3c:86:c2:bd:90: 89:b6:0d:6e:11:4e:38:c5:17:e2:8e:2f:9a:f6:8c: 01:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:B5:F0:B2:C9:79:DB:B1:55:D8:51:DE:0E:14:76:A0:A9:54:5D:6D X509v3 Authority Key Identifier: keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/5rXwssl527FV2FHeDhR2oKlUXW0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.19.176.0/22 Signature Algorithm: sha256WithRSAEncryption 5b:da:95:43:86:d7:eb:72:84:f1:1a:d5:8e:7f:2c:cc:c2:1d: d2:dd:3c:6b:0d:9e:68:c9:c3:5a:f6:81:11:5d:2c:a0:3b:e0: f6:3c:9d:b2:a4:a5:a6:25:37:cb:4f:16:ec:3b:ab:ef:21:3e: f1:46:36:ca:da:31:e5:f9:01:e1:2a:37:4f:c9:55:4c:09:ac: e6:c5:90:e5:09:51:58:2a:31:67:ad:ed:c4:19:78:19:d1:d8: d2:0a:92:22:d9:0c:82:b8:f6:dc:5d:62:1f:bb:86:41:a8:9a: 83:cd:33:68:bf:ec:d9:cf:9a:fd:99:90:e8:a7:67:2e:4e:7a: 40:cd:39:e4:0c:d4:23:21:b9:26:4e:f6:c4:63:20:d5:06:6d: 18:5f:17:ef:46:5c:9d:fd:7d:0c:63:90:17:ff:c6:20:32:14: ee:8f:9d:3f:48:f3:cd:28:53:97:2b:ed:44:2d:67:62:a1:a5: da:f9:d9:c3:38:8e:4a:b3:86:ff:1e:de:dd:e6:ba:05:ac:d8: 9b:88:39:80:51:95:6b:3a:0a:a7:db:a8:a0:88:05:fa:aa:ac: 7a:17:a6:52:ad:98:9b:fd:5a:9b:a7:da:55:bb:8a:aa:fb:04: b4:f0:44:fd:76:d2:c1:5c:fb:e6:b8:5c:1b:ad:96:e6:b9:45: 0f:b0:7e:78 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+Nyc5QbOzjT++WkV1NEmJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMzhlZjQxYjJjMDEwNWE5MWNjYmI5Yzg5MzM3ZmFlYjEy OWZmODQwHhcNMjYwMTAyMTAxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNmI1ZjBiMmM5NzlkYmIxNTVkODUxZGUwZTE0NzZhMGE5NTQ1ZDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJQWKklAWMFLy/rSySq5ljgnmjiN FNz0y/6daenYvPPiaPir5SbMdOO+Q+EaUjamvSoEtMsLdZ3StIWLy4Fzo7X9NE8r b7uuwlqKNhXEjneiqd1/c/u2cfBoCDL340Z+Rux+KlQZDiVirWnL2XUJ95A4MzcB mNpN2DFhmmhOXEBDRvIzRIms3u/VUR87ajSTTu2SEcE3zhTg7LjhjNsoh78u/l9g djvQnYBIitH169sVRL6Hl+p1Sj0nzGcK6yQSr8l/tTgO6Ic4iS/VOi8wiqGVDD7+ Hy3N7oRCevwAenTSQZnqkCuyb5ybPIbCvZCJtg1uEU44xRfiji+a9owBhwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOa18LLJeduxVdhR3g4UdqCpVF1tMB8GA1UdIwQY MBaAFIM470GywBBakcy7nIkzf66xKf+EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80MGQ5OTYtYTJjZC00MWYxLWE3Mzgt MjhmYzc3OTY3NzYzLzEvNXJYd3NzbDUyN0ZWMkZIZURoUjJvS2xVWFcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS80MGQ5OTYtYTJjZC00MWYxLWE3MzgtMjhmYzc3OTY3NzYz LzEvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuROwMA0G CSqGSIb3DQEBCwUAA4IBAQBb2pVDhtfrcoTxGtWOfyzMwh3S3TxrDZ5oycNa9oER XSygO+D2PJ2ypKWmJTfLTxbsO6vvIT7xRjbK2jHl+QHhKjdPyVVMCazmxZDlCVFY KjFnre3EGXgZ0djSCpIi2QyCuPbcXWIfu4ZBqJqDzTNov+zZz5r9mZDop2cuTnpA zTnkDNQjIbkmTvbEYyDVBm0YXxfvRlyd/X0MY5AX/8YgMhTuj50/SPPNKFOXK+1E LWdioaXa+dnDOI5Ks4b/Ht7d5roFrNibiDmAUZVrOgqn26igiAX6qqx6F6ZSrZib /Vqbp9pVu4qq+wS08ET9dtLBXPvmuFwbrZbmuUUPsH54 -----END CERTIFICATE-----Generated at Mon Jan 26 01:00:18 2026 by rpki-client