This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/5ILS55HX3ReMEJoaJvPiFDH9fYg.roa File: 5ILS55HX3ReMEJoaJvPiFDH9fYg.roa (raw, json) Hash identifier: ITuUhFUEIAGYkscfI+hyhPLbGpan1cG71MkoXreG6tQ= Subject key identifier: E4:82:D2:E7:91:D7:DD:17:8C:10:9A:1A:26:F3:E2:14:31:FD:7D:88 Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Certificate serial: 019AB10DFDA15401A3929925066AF455074D Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/5ILS55HX3ReMEJoaJvPiFDH9fYg.roa Signing time: Sun 23 Nov 2025 14:11:15 +0000 ROA not before: Sun 23 Nov 2025 14:11:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 39089 IP address blocks: 31.133.56.0/21 maxlen: 24 176.124.26.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b1:0d:fd:a1:54:01:a3:92:99:25:06:6a:f4:55:07:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Validity Not Before: Nov 23 14:11:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e482d2e791d7dd178c109a1a26f3e21431fd7d88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:56:6f:9a:a3:d0:0f:de:e7:ef:89:75:25:9f: 57:d7:e8:b3:05:44:9b:c1:59:47:0d:0f:90:39:81: 8d:1a:96:15:b5:19:4c:45:57:18:d5:28:e1:2b:8a: c6:b4:ab:a3:9b:35:92:78:95:43:81:56:0d:7c:42: c8:a3:82:ae:94:dc:83:ee:91:ed:d0:a3:5e:58:1a: 13:ca:b0:93:d5:1e:ba:99:07:41:dd:f5:53:bd:95: 03:da:93:92:e4:1e:01:26:2b:52:17:0a:96:05:92: 07:88:86:ee:57:11:b2:af:9b:40:44:3c:34:70:07: 91:5f:b5:10:c4:5d:ea:70:90:85:24:8b:9c:5c:5d: b8:98:52:f1:1f:f6:7d:1c:4d:08:3d:f0:cb:e6:f6: e0:35:34:12:02:6e:e2:04:ec:5e:cb:a8:d5:b7:3a: cc:ba:22:0d:2c:73:a5:ea:29:8c:e3:fd:2e:58:fd: 8a:c7:c8:01:4c:72:65:7e:64:6d:cf:66:b8:ac:bf: 31:f5:25:fe:aa:ea:78:6f:36:18:08:c3:74:16:c1: 08:b4:e4:34:cc:06:1b:98:6c:8c:13:eb:e0:81:40: 05:d3:92:ad:35:b4:c0:8d:f0:9b:19:fb:89:97:3d: 1e:06:2c:57:bd:47:b2:84:82:3e:bf:b3:2f:00:ef: 13:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:82:D2:E7:91:D7:DD:17:8C:10:9A:1A:26:F3:E2:14:31:FD:7D:88 X509v3 Authority Key Identifier: keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/5ILS55HX3ReMEJoaJvPiFDH9fYg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.133.56.0/21 176.124.26.0/23 Signature Algorithm: sha256WithRSAEncryption bd:8d:5f:f4:94:bc:0a:4c:b3:47:33:59:be:a2:4b:35:d7:00: 44:f5:d7:b4:ff:2b:40:8c:7e:03:a5:8c:df:55:e3:c7:75:1e: 32:0d:ff:f9:61:3b:d0:b3:8b:f6:02:da:a2:b9:1a:54:38:16: 9e:7d:34:1a:ba:cf:e7:33:90:25:c8:92:93:e8:80:f7:1e:73: 5d:c7:d1:a5:35:8d:53:96:c5:05:d3:f5:31:6a:7a:74:3a:29: 17:ab:63:d7:f3:dd:ab:a9:e5:1d:b4:4d:94:fe:0e:3e:35:c9: 29:c7:ba:4a:86:71:56:e5:d8:8e:8b:92:b9:c9:52:c1:8a:6c: 04:de:a3:a5:8a:f1:84:c0:4b:c9:bd:1c:1c:24:54:a4:f8:89: f0:87:d1:f5:6b:33:de:81:f6:74:f4:ef:46:d0:cd:b9:8f:28: 24:84:bb:28:43:a6:3c:1e:9f:c7:55:f1:2c:b0:7b:af:79:89: 78:ca:0b:2e:60:f4:d6:2f:e7:72:8d:d2:f5:93:82:54:90:78: e0:e8:85:ae:c9:57:cb:71:19:3c:4a:48:66:37:0d:19:6f:c2: 7b:27:b8:a6:ad:b8:94:9d:bb:a4:d6:83:ae:67:ef:e2:4c:6a: 62:ce:03:2d:14:0a:e0:fb:bc:1f:08:b8:72:16:12:03:8e:63: 6b:c3:03:99 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqxDf2hVAGjkpklBmr0VQdNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNjRmOWQwNGVmZDVhOWZjMmUyM2I0MmQ1YjUxYWVmZDlh NTAyNTAwHhcNMjUxMTIzMTQxMTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDgyZDJlNzkxZDdkZDE3OGMxMDlhMWEyNmYzZTIxNDMxZmQ3ZDg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlZvmqPQD97n74l1JZ9X1+izBUSb wVlHDQ+QOYGNGpYVtRlMRVcY1SjhK4rGtKujmzWSeJVDgVYNfELIo4KulNyD7pHt 0KNeWBoTyrCT1R66mQdB3fVTvZUD2pOS5B4BJitSFwqWBZIHiIbuVxGyr5tARDw0 cAeRX7UQxF3qcJCFJIucXF24mFLxH/Z9HE0IPfDL5vbgNTQSAm7iBOxey6jVtzrM uiINLHOl6imM4/0uWP2Kx8gBTHJlfmRtz2a4rL8x9SX+qup4bzYYCMN0FsEItOQ0 zAYbmGyME+vggUAF05KtNbTAjfCbGfuJlz0eBixXvUeyhII+v7MvAO8TEQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOSC0ueR190XjBCaGibz4hQx/X2IMB8GA1UdIwQY MBaAFFxk+dBO/VqfwuI7QtW1Gu/ZpQJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUt YjY2ZmE0ZjQ3NjNhLzEvNUlMUzU1SFgzUmVNRUpvYUp2UGlGREg5ZllnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUtYjY2ZmE0ZjQ3NjNh LzEvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDH4U4AwQB sHwaMA0GCSqGSIb3DQEBCwUAA4IBAQC9jV/0lLwKTLNHM1m+oks11wBE9de0/ytA jH4DpYzfVePHdR4yDf/5YTvQs4v2AtqiuRpUOBaefTQaus/nM5AlyJKT6ID3HnNd x9GlNY1TlsUF0/Uxanp0OikXq2PX892rqeUdtE2U/g4+Nckpx7pKhnFW5diOi5K5 yVLBimwE3qOlivGEwEvJvRwcJFSk+Inwh9H1azPegfZ09O9G0M25jygkhLsoQ6Y8 Hp/HVfEssHuveYl4ygsuYPTWL+dyjdL1k4JUkHjg6IWuyVfLcRk8SkhmNw0Zb8J7 J7imrbiUnbuk1oOuZ+/iTGpizgMtFArg+7wfCLhyFhIDjmNrwwOZ -----END CERTIFICATE-----Generated at Sat Dec 6 08:17:53 2025 by rpki-client