This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/sdq4AdKdkJmfHD4HtzVtXtqNZ3Y.roa File: sdq4AdKdkJmfHD4HtzVtXtqNZ3Y.roa (raw, json) Hash identifier: 8+R1Y8MlhUsE7oDGi1CtSy7SyzfeAd5bXtWsTvzi71I= Subject key identifier: B1:DA:B8:01:D2:9D:90:99:9F:1C:3E:07:B7:35:6D:5E:DA:8D:67:76 Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba Certificate serial: 019B7EA6688E8919A35029D395E5758A32AB Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/sdq4AdKdkJmfHD4HtzVtXtqNZ3Y.roa Signing time: Fri 02 Jan 2026 12:19:53 +0000 ROA not before: Fri 02 Jan 2026 12:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58328 IP address blocks: 188.123.96.0/21 maxlen: 21 188.123.104.0/23 maxlen: 23 188.123.106.0/23 maxlen: 23 188.123.108.0/22 maxlen: 22 188.123.116.0/23 maxlen: 23 188.123.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.mft rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:68:8e:89:19:a3:50:29:d3:95:e5:75:8a:32:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba Validity Not Before: Jan 2 12:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b1dab801d29d90999f1c3e07b7356d5eda8d6776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:77:90:ab:59:04:a1:33:90:ad:15:2c:47:bc: 30:13:e8:ce:fb:4d:45:c5:f8:c5:12:e5:c7:84:44: fe:1c:a4:07:ef:25:91:b5:ed:59:5a:e9:8a:a8:65: 42:f4:35:cf:e3:49:12:2d:27:da:79:44:9d:a3:6d: 7b:85:67:aa:c9:12:65:c3:94:af:81:98:bc:69:87: 3d:18:a0:c7:f4:f5:67:b8:96:49:ce:73:9b:64:36: e0:d3:1e:89:b7:25:f6:98:ba:a2:38:e0:90:cc:3c: 1d:42:53:56:00:a1:58:27:f2:a9:74:5d:e4:65:39: 35:1b:d8:5a:14:71:f5:85:96:6e:6b:dd:2e:0a:d0: 11:a4:29:52:32:4f:b8:e1:69:ad:db:da:19:ab:aa: 0f:dd:a8:de:e4:02:c3:c7:92:09:bc:e4:21:fe:84: 18:3b:a1:f0:88:c5:33:34:fb:7f:af:65:dc:fc:96: b2:76:ce:85:b6:81:c8:33:4d:8a:4e:c5:35:23:d3: e4:4d:e4:0f:62:fe:58:43:22:5a:6f:a1:56:58:6a: 9a:4e:35:48:1e:a1:58:28:07:0f:f5:8e:60:c7:bd: 6b:61:ef:0d:38:0d:ff:ab:0f:34:3b:c5:80:f4:be: 66:5d:bb:13:c2:61:92:32:ec:90:4d:07:db:0f:6c: 50:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:DA:B8:01:D2:9D:90:99:9F:1C:3E:07:B7:35:6D:5E:DA:8D:67:76 X509v3 Authority Key Identifier: keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/sdq4AdKdkJmfHD4HtzVtXtqNZ3Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.123.96.0/20 188.123.116.0/22 Signature Algorithm: sha256WithRSAEncryption a2:5f:2b:53:7e:ec:74:83:5f:e5:86:aa:13:91:a4:38:7d:79: 10:e3:7b:d6:90:83:ea:45:46:72:6c:0e:25:1f:73:f3:d2:7e: 33:09:cd:53:ee:ee:33:9b:74:71:4b:d3:63:2e:bb:b3:b7:a4: 4d:93:1c:60:d7:1e:4d:8d:cc:6c:81:3c:88:fc:71:28:13:5f: be:58:1e:d1:40:cf:80:6d:0b:2d:53:a6:62:1d:e7:49:c3:7b: 25:9a:b0:d4:53:d1:5b:6c:c7:82:fd:b2:6c:48:3a:ec:c2:67: 50:67:04:d5:ab:dd:22:c0:3a:16:fb:c7:98:01:e9:ea:46:11: ec:58:b5:3a:0d:4f:6c:1e:a9:43:96:09:5a:bc:b5:ad:94:c8: 20:eb:21:4a:6b:66:e1:3d:3e:92:d0:b1:db:30:66:c3:9b:eb: 08:89:da:8a:a5:e4:40:a7:1a:01:fe:d7:53:f0:5c:10:93:9c: df:02:25:c5:48:51:67:90:55:91:10:fb:2d:f9:88:af:76:20: b5:16:a0:a8:e2:04:b6:7a:92:26:a6:48:f5:26:9a:65:a2:ce: 9b:be:5b:a4:fd:fb:c9:08:d9:4a:b3:a0:f6:54:d5:2c:98:8c: b9:c5:43:0f:7a:45:ef:dc:3f:9e:b3:1f:6e:d7:02:d0:3f:50: 61:e7:0a:c3 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+pmiOiRmjUCnTleV1ijKrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3Zjg4MTQwMWFiYWNjODhjOTQxZmRmNzQwZjFhYjE1MzZm MDVkYmEwHhcNMjYwMTAyMTIxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMWRhYjgwMWQyOWQ5MDk5OWYxYzNlMDdiNzM1NmQ1ZWRhOGQ2Nzc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XeQq1kEoTOQrRUsR7wwE+jO+01F xfjFEuXHhET+HKQH7yWRte1ZWumKqGVC9DXP40kSLSfaeUSdo217hWeqyRJlw5Sv gZi8aYc9GKDH9PVnuJZJznObZDbg0x6JtyX2mLqiOOCQzDwdQlNWAKFYJ/KpdF3k ZTk1G9haFHH1hZZua90uCtARpClSMk+44Wmt29oZq6oP3aje5ALDx5IJvOQh/oQY O6HwiMUzNPt/r2Xc/Jayds6FtoHIM02KTsU1I9PkTeQPYv5YQyJab6FWWGqaTjVI HqFYKAcP9Y5gx71rYe8NOA3/qw80O8WA9L5mXbsTwmGSMuyQTQfbD2xQOwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLHauAHSnZCZnxw+B7c1bV7ajWd2MB8GA1UdIwQY MBaAFOf4gUAausyIyUH990DxqxU28F26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNV9pQlFCcTZ6SWpKUWYzM1FQR3JGVGJ3WGJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9mNTUzNGEtYTYxMy00N2JlLWI0MmIt ZTJmYmMzYTY4ODAwLzEvc2RxNEFkS2RrSm1mSEQ0SHR6VnRYdHFOWjNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9mNTUzNGEtYTYxMy00N2JlLWI0MmItZTJmYmMzYTY4ODAw LzEvNV9pQlFCcTZ6SWpKUWYzM1FQR3JGVGJ3WGJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEvHtgAwQC vHt0MA0GCSqGSIb3DQEBCwUAA4IBAQCiXytTfux0g1/lhqoTkaQ4fXkQ43vWkIPq RUZybA4lH3Pz0n4zCc1T7u4zm3RxS9NjLruzt6RNkxxg1x5NjcxsgTyI/HEoE1++ WB7RQM+AbQstU6ZiHedJw3slmrDUU9FbbMeC/bJsSDrswmdQZwTVq90iwDoW+8eY AenqRhHsWLU6DU9sHqlDlglavLWtlMgg6yFKa2bhPT6S0LHbMGbDm+sIidqKpeRA pxoB/tdT8FwQk5zfAiXFSFFnkFWREPst+YivdiC1FqCo4gS2epImpkj1Jpplos6b vluk/fvJCNlKs6D2VNUsmIy5xUMPekXv3D+esx9u1wLQP1Bh5wrD -----END CERTIFICATE-----Generated at Mon Jan 26 12:19:19 2026 by rpki-client