This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/ICSYGrMnvnf78IG-U4_z8_jIgxk.roa File: ICSYGrMnvnf78IG-U4_z8_jIgxk.roa (raw, json) Hash identifier: PcqXGcbd3Xoq/GKGzWlEbDkeYUaghyHnlFBBkfXfCeU= Subject key identifier: 20:24:98:1A:B3:27:BE:77:FB:F0:81:BE:53:8F:F3:F3:F8:C8:83:19 Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98 Certificate serial: 019B7E38C2BA6F227B4BB04AB67269AE68E9 Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/ICSYGrMnvnf78IG-U4_z8_jIgxk.roa Signing time: Fri 02 Jan 2026 10:20:07 +0000 ROA not before: Fri 02 Jan 2026 10:20:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62553 IP address blocks: 5.56.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:c2:ba:6f:22:7b:4b:b0:4a:b6:72:69:ae:68:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98 Validity Not Before: Jan 2 10:20:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2024981ab327be77fbf081be538ff3f3f8c88319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:cd:79:19:40:ea:4f:f3:bb:e6:b3:35:a2:53: 8c:03:54:83:0d:50:0b:e2:45:89:6f:d9:4a:ed:70: aa:56:8f:fd:14:8c:b2:da:b6:89:33:79:02:c6:5e: bf:71:9d:38:62:d7:ac:3f:9c:90:c4:59:42:2b:dc: 81:8d:b6:97:13:48:fc:9d:9b:9e:a1:58:ea:50:dd: 7c:e7:bd:6e:09:0e:f1:2a:dd:7f:1b:0e:f1:2f:82: 51:31:3e:ab:41:f6:36:05:68:99:6f:e0:d8:a2:79: 2f:78:d8:33:a7:f0:59:d2:03:d1:f9:46:70:68:99: ed:90:45:be:ed:2c:dc:8f:32:12:10:89:82:78:02: c6:9b:0f:60:6a:61:f4:7e:90:e8:99:5b:ee:40:80: f6:d6:e5:24:40:0b:74:71:21:81:f0:58:12:ce:c8: 3b:56:21:6a:eb:95:5e:5a:1f:4c:a1:a5:29:4a:4b: eb:ce:49:89:d1:13:3f:d3:03:98:90:38:b6:56:36: 04:41:09:19:5f:2d:bc:ff:24:a5:dc:96:04:5a:21: 72:c1:c7:93:28:59:52:25:03:da:fd:96:0f:c6:ce: 13:82:bd:d5:cf:23:15:c7:2c:fa:5f:db:e3:0a:2a: 4b:af:06:b1:7a:5e:f1:bd:30:ad:5c:f3:7d:9f:d1: 5a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:24:98:1A:B3:27:BE:77:FB:F0:81:BE:53:8F:F3:F3:F8:C8:83:19 X509v3 Authority Key Identifier: keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/ICSYGrMnvnf78IG-U4_z8_jIgxk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.56.24.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:68:f7:c2:58:e7:bb:d5:ef:de:b6:9e:eb:27:d9:ce:e6:84: bc:ef:bb:93:cd:6b:d9:1c:b0:89:8f:96:91:c1:1f:b7:cd:1e: 46:08:13:cc:4f:9a:6a:a6:22:81:c0:6b:26:9e:fc:cd:0e:83: 84:6f:9a:93:4f:c4:a8:93:4a:35:9c:4d:16:58:db:43:2d:88: 2d:6e:9d:43:99:46:08:5e:4b:5d:cd:e6:28:9d:92:5d:a3:10: 27:07:eb:4d:1d:6a:73:76:e2:2d:8a:a5:a0:85:0d:9a:6a:ce: c2:36:1f:68:91:45:dc:45:9c:86:a1:fa:ef:20:fa:d2:d8:aa: 55:f2:97:a0:4c:3c:c5:57:8f:ec:6c:88:ac:d7:e7:5c:81:da: 95:af:16:95:2e:99:e3:a0:e5:a4:fa:bb:2c:c7:80:63:3b:ab: 38:bb:3a:bd:02:f5:92:09:6f:0b:82:3f:fb:28:67:e4:06:b7: 06:ab:d0:bb:5d:6e:04:31:b2:88:d8:75:bd:58:9f:17:44:a2: 81:eb:de:2d:8c:d9:cc:a6:9e:ba:1b:50:00:05:86:f1:ee:2b: e8:01:7a:10:20:bd:87:ba:2f:11:d1:a9:1e:62:60:fc:66:78: 53:c2:5c:0a:4b:02:93:39:6c:37:8b:1b:4c:1d:ee:95:6d:13: 91:03:fe:fa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OMK6byJ7S7BKtnJprmjpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViMzQ5YWYyYWYxMTEzNjFiMjlmY2ZlZjJlMDQzZDViZTc1 ZTNmOTgwHhcNMjYwMTAyMTAyMDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDI0OTgxYWIzMjdiZTc3ZmJmMDgxYmU1MzhmZjNmM2Y4Yzg4MzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnM15GUDqT/O75rM1olOMA1SDDVAL 4kWJb9lK7XCqVo/9FIyy2raJM3kCxl6/cZ04YtesP5yQxFlCK9yBjbaXE0j8nZue oVjqUN18571uCQ7xKt1/Gw7xL4JRMT6rQfY2BWiZb+DYonkveNgzp/BZ0gPR+UZw aJntkEW+7SzcjzISEImCeALGmw9gamH0fpDomVvuQID21uUkQAt0cSGB8FgSzsg7 ViFq65VeWh9MoaUpSkvrzkmJ0RM/0wOYkDi2VjYEQQkZXy28/ySl3JYEWiFywceT KFlSJQPa/ZYPxs4Tgr3VzyMVxyz6X9vjCipLrwaxel7xvTCtXPN9n9FaRwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCAkmBqzJ753+/CBvlOP8/P4yIMZMB8GA1UdIwQY MBaAFOs0mvKvERNhsp/P7y4EPVvnXj+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgt OWNkNjYyYmM4MzIwLzEvSUNTWUdyTW52bmY3OElHLVU0X3o4X2pJZ3hrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgtOWNkNjYyYmM4MzIw LzEvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABTgYMA0G CSqGSIb3DQEBCwUAA4IBAQBPaPfCWOe71e/etp7rJ9nO5oS877uTzWvZHLCJj5aR wR+3zR5GCBPMT5pqpiKBwGsmnvzNDoOEb5qTT8Sok0o1nE0WWNtDLYgtbp1DmUYI XktdzeYonZJdoxAnB+tNHWpzduItiqWghQ2aas7CNh9okUXcRZyGofrvIPrS2KpV 8pegTDzFV4/sbIis1+dcgdqVrxaVLpnjoOWk+rssx4BjO6s4uzq9AvWSCW8Lgj/7 KGfkBrcGq9C7XW4EMbKI2HW9WJ8XRKKB694tjNnMpp66G1AABYbx7ivoAXoQIL2H ui8R0akeYmD8ZnhTwlwKSwKTOWw3ixtMHe6VbRORA/76 -----END CERTIFICATE-----Generated at Sun Jan 25 13:01:19 2026 by rpki-client