This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/Iw5mcpwalTXPnZnnTmYTdsqiUzs.roa File: Iw5mcpwalTXPnZnnTmYTdsqiUzs.roa (raw, json) Hash identifier: sk1P8Pv/vu7n71J9ytQoTHDjd9XCgIlEXHvpDdpVHFw= Subject key identifier: 23:0E:66:72:9C:1A:95:35:CF:9D:99:E7:4E:66:13:76:CA:A2:53:3B Certificate issuer: /CN=015b6d1596ac0501a71a393447051a62ff1dda16 Certificate serial: 019B7BA36EE2229FE488A249397407546634 Authority key identifier: 01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/Iw5mcpwalTXPnZnnTmYTdsqiUzs.roa Signing time: Thu 01 Jan 2026 22:17:46 +0000 ROA not before: Thu 01 Jan 2026 22:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213544 IP address blocks: 5.153.182.0/23 maxlen: 24 176.96.190.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:6e:e2:22:9f:e4:88:a2:49:39:74:07:54:66:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=015b6d1596ac0501a71a393447051a62ff1dda16 Validity Not Before: Jan 1 22:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=230e66729c1a9535cf9d99e74e661376caa2533b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:74:00:ff:97:91:fd:2b:20:2b:86:07:5d:45: cc:d8:c4:d2:2c:6a:0d:e0:c5:f7:9e:d7:05:62:d3: 5c:12:29:bb:a4:56:5f:0d:be:7f:dd:0a:b3:a2:87: 9f:4b:8c:11:65:a2:2d:b5:a9:57:12:34:72:54:68: 23:0a:2b:67:46:3f:07:9d:be:84:71:9f:58:be:54: 12:97:f7:05:50:30:d5:46:28:1c:9e:e7:e6:5b:76: 59:04:29:0b:03:bd:f1:2a:e3:41:ff:28:47:fa:07: 8f:e8:f8:ca:58:d7:70:75:21:67:3c:c1:b9:2d:7d: 9e:cb:b2:5c:f7:03:4a:05:8b:48:5d:f5:25:28:5d: 0d:8d:df:84:64:04:fb:91:59:55:9f:96:00:56:48: 93:c0:96:64:5c:3a:df:ae:99:41:17:6b:b3:a3:de: 0a:93:2b:ae:24:7a:ce:0c:02:b9:9d:65:9c:c5:53: cb:63:1c:d9:d7:0c:f6:dc:c0:a0:62:b4:c5:04:c4: bf:fc:7f:5d:5b:44:94:cd:11:5c:15:3d:92:4e:ab: 71:48:91:16:90:37:27:2a:9b:42:3c:85:7c:7a:e2: 1e:10:5a:67:c3:f9:1b:38:34:cf:6d:02:4b:4d:05: d6:ba:5d:8c:fa:e7:e3:da:30:64:46:ec:17:3a:60: 07:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:0E:66:72:9C:1A:95:35:CF:9D:99:E7:4E:66:13:76:CA:A2:53:3B X509v3 Authority Key Identifier: keyid:01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/Iw5mcpwalTXPnZnnTmYTdsqiUzs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.153.182.0/23 176.96.190.0/23 Signature Algorithm: sha256WithRSAEncryption 52:92:fc:74:16:6d:67:22:07:31:2b:8e:1d:b4:35:4f:9e:4d: 54:fe:5f:c6:ae:77:76:6c:42:99:ad:a9:26:35:fb:bd:27:cd: 53:64:69:eb:7f:c5:16:47:28:ba:e0:24:f9:3d:99:79:bd:14: 22:5a:a5:d1:7d:fb:01:c2:9e:ff:54:5c:bd:69:f2:a7:f8:08: 69:68:ea:5f:a6:81:ba:15:e8:a3:7c:98:c6:42:1e:9e:44:f0: 42:9e:db:8e:b4:3c:86:83:c3:8f:b7:d3:ef:06:70:8e:ac:57: fe:aa:e1:2d:7f:5d:00:35:cb:1c:d3:44:90:86:d7:64:a4:52: 0f:44:29:82:c8:e5:0e:32:1f:93:9e:51:4f:19:80:b3:0b:f9: 8a:8d:16:7a:91:78:de:76:6a:05:75:7f:cc:0e:d7:20:0e:6e: ca:4a:9e:73:30:9e:21:82:6b:5c:de:34:4c:49:7e:1c:21:6e: 50:e9:4f:a6:0b:bf:e3:62:70:c6:8c:d8:3e:68:77:44:3b:9d: 0c:e5:4a:aa:05:a4:34:34:bc:79:67:2d:b4:32:61:2d:0b:38: 78:c9:35:b4:36:c6:dc:c7:fe:48:d8:50:83:e4:c5:75:b6:2c: 82:e3:46:bf:62:4d:b6:70:dc:0f:ea:21:43:a5:96:32:f4:1d: 3e:b0:85:d6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7o27iIp/kiKJJOXQHVGY0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNWI2ZDE1OTZhYzA1MDFhNzFhMzkzNDQ3MDUxYTYyZmYx ZGRhMTYwHhcNMjYwMTAxMjIxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzBlNjY3MjljMWE5NTM1Y2Y5ZDk5ZTc0ZTY2MTM3NmNhYTI1MzNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHQA/5eR/SsgK4YHXUXM2MTSLGoN 4MX3ntcFYtNcEim7pFZfDb5/3QqzooefS4wRZaIttalXEjRyVGgjCitnRj8Hnb6E cZ9YvlQSl/cFUDDVRigcnufmW3ZZBCkLA73xKuNB/yhH+geP6PjKWNdwdSFnPMG5 LX2ey7Jc9wNKBYtIXfUlKF0Njd+EZAT7kVlVn5YAVkiTwJZkXDrfrplBF2uzo94K kyuuJHrODAK5nWWcxVPLYxzZ1wz23MCgYrTFBMS//H9dW0SUzRFcFT2STqtxSJEW kDcnKptCPIV8euIeEFpnw/kbODTPbQJLTQXWul2M+ufj2jBkRuwXOmAHBwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCMOZnKcGpU1z52Z505mE3bKolM7MB8GA1UdIwQY MBaAFAFbbRWWrAUBpxo5NEcFGmL/HdoWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgt ZmVlOGYzNzkwNTY3LzEvSXc1bWNwd2FsVFhQblpublRtWVRkc3FpVXpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgtZmVlOGYzNzkwNTY3 LzEvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBBZm2AwQB sGC+MA0GCSqGSIb3DQEBCwUAA4IBAQBSkvx0Fm1nIgcxK44dtDVPnk1U/l/Grnd2 bEKZrakmNfu9J81TZGnrf8UWRyi64CT5PZl5vRQiWqXRffsBwp7/VFy9afKn+Ahp aOpfpoG6FeijfJjGQh6eRPBCntuOtDyGg8OPt9PvBnCOrFf+quEtf10ANcsc00SQ htdkpFIPRCmCyOUOMh+TnlFPGYCzC/mKjRZ6kXjedmoFdX/MDtcgDm7KSp5zMJ4h gmtc3jRMSX4cIW5Q6U+mC7/jYnDGjNg+aHdEO50M5UqqBaQ0NLx5Zy20MmEtCzh4 yTW0Nsbcx/5I2FCD5MV1tiyC40a/Yk22cNwP6iFDpZYy9B0+sIXW -----END CERTIFICATE-----Generated at Mon Jan 26 10:23:27 2026 by rpki-client