This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/F53s4VdjXr7dOCw6IX6jU3qY5J4.roa File: F53s4VdjXr7dOCw6IX6jU3qY5J4.roa (raw, json) Hash identifier: yQvYJ+0p2+3wpKRMcM4jA1uaQpryijTgHN/BYB8sZlw= Subject key identifier: 17:9D:EC:E1:57:63:5E:BE:DD:38:2C:3A:21:7E:A3:53:7A:98:E4:9E Certificate issuer: /CN=5bd6cbdaa794a97a7d8266702cb054f1b249d4bf Certificate serial: 019B7758BEC247DFA032B0F1995C906C485D Authority key identifier: 5B:D6:CB:DA:A7:94:A9:7A:7D:82:66:70:2C:B0:54:F1:B2:49:D4:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/F53s4VdjXr7dOCw6IX6jU3qY5J4.roa Signing time: Thu 01 Jan 2026 02:17:43 +0000 ROA not before: Thu 01 Jan 2026 02:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2445 IP address blocks: 192.33.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.crl rsync://rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.mft rsync://rpki.ripe.net/repository/DEFAULT/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:be:c2:47:df:a0:32:b0:f1:99:5c:90:6c:48:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bd6cbdaa794a97a7d8266702cb054f1b249d4bf Validity Not Before: Jan 1 02:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=179dece157635ebedd382c3a217ea3537a98e49e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7f:f8:ab:dc:ee:fc:49:e9:1d:72:f6:3a:d0: 3e:e0:ce:50:e1:84:62:46:87:37:99:19:b5:0f:26: 1d:c2:88:7c:9a:28:00:cf:ae:5f:db:06:07:30:cb: 7e:4c:7a:5b:f0:4e:c0:26:96:31:68:a7:2d:90:0c: 39:7d:89:bf:2c:c7:32:2e:58:fa:94:07:f8:cd:11: e0:2a:43:76:82:7b:fe:f8:25:d0:b6:33:62:7e:9d: 04:50:59:32:98:73:e4:bf:e4:66:0c:76:03:d0:e4: 36:8e:0b:54:3c:3f:43:59:19:2f:03:ff:03:7d:ac: e5:44:5e:16:5c:fa:38:5e:d9:fd:99:c2:ca:24:27: 66:63:cb:d0:2e:a7:1a:a3:de:cc:95:f8:b9:fa:e6: d5:85:b4:f7:b7:ee:e6:d1:ab:16:02:18:c7:41:13: 39:d0:05:a2:1b:e8:a6:75:e6:e9:26:80:1d:87:13: f8:c4:92:35:3c:f9:25:96:b9:4c:54:1b:b4:9d:af: 65:eb:d1:c4:08:ff:7e:99:ff:c6:02:bc:c7:59:0d: 3e:b1:ca:89:c5:cd:8d:9f:62:83:15:24:73:2a:c7: 9c:ae:3a:be:4a:70:c3:96:58:d3:77:19:66:e0:df: 90:71:c3:a8:6f:79:38:a0:b6:1a:65:0f:5a:56:4a: ba:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:9D:EC:E1:57:63:5E:BE:DD:38:2C:3A:21:7E:A3:53:7A:98:E4:9E X509v3 Authority Key Identifier: keyid:5B:D6:CB:DA:A7:94:A9:7A:7D:82:66:70:2C:B0:54:F1:B2:49:D4:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/F53s4VdjXr7dOCw6IX6jU3qY5J4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.33.156.0/24 Signature Algorithm: sha256WithRSAEncryption e7:f2:6e:4c:93:de:ea:86:ca:75:fd:71:0e:f5:60:53:b7:a5: df:54:1a:66:e7:50:86:ab:45:8b:9e:fd:cc:8b:e7:1b:7c:79: 33:fe:e2:e7:da:98:ca:80:32:e7:d3:df:bf:a1:ff:9e:cf:04: c3:3a:d6:11:04:51:86:d8:43:57:52:62:b3:d2:3d:07:a5:56: 25:cb:95:6b:77:fa:95:ce:66:24:08:55:83:14:ec:58:8c:f6: 76:0f:df:39:70:9f:7b:f9:38:0b:38:d7:b4:6d:64:5b:1f:ea: 7e:2a:83:66:5c:56:d2:2a:7c:a2:3b:2e:0d:5e:d2:41:e5:b7: 1c:d0:77:59:3f:a9:96:d2:db:df:7a:8a:12:76:a4:29:f9:19: 17:8e:69:07:ba:ad:d9:82:df:7a:5d:2f:b1:18:69:00:64:b5: 87:e7:e9:8e:2c:87:ec:c1:2c:63:fb:09:bf:3e:6f:64:c8:78: 68:38:e4:2e:d1:f2:f4:5f:fd:00:bd:24:bf:aa:18:50:ca:5e: 7f:2c:2c:3c:7f:24:bb:d4:b1:74:5f:bc:53:07:9a:6f:24:3c: de:7c:3d:8f:03:c9:0d:07:26:db:4e:5a:b5:9d:84:24:d6:e7: af:dc:84:a3:5d:2e:6f:c8:6c:c5:a7:f8:fb:1c:a3:d4:21:4f: ae:80:62:6c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WL7CR9+gMrDxmVyQbEhdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViZDZjYmRhYTc5NGE5N2E3ZDgyNjY3MDJjYjA1NGYxYjI0 OWQ0YmYwHhcNMjYwMTAxMDIxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzlkZWNlMTU3NjM1ZWJlZGQzODJjM2EyMTdlYTM1MzdhOThlNDllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAon/4q9zu/EnpHXL2OtA+4M5Q4YRi Roc3mRm1DyYdwoh8migAz65f2wYHMMt+THpb8E7AJpYxaKctkAw5fYm/LMcyLlj6 lAf4zRHgKkN2gnv++CXQtjNifp0EUFkymHPkv+RmDHYD0OQ2jgtUPD9DWRkvA/8D fazlRF4WXPo4Xtn9mcLKJCdmY8vQLqcao97Mlfi5+ubVhbT3t+7m0asWAhjHQRM5 0AWiG+imdebpJoAdhxP4xJI1PPkllrlMVBu0na9l69HECP9+mf/GArzHWQ0+scqJ xc2Nn2KDFSRzKsecrjq+SnDDlljTdxlm4N+QccOob3k4oLYaZQ9aVkq67QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBed7OFXY16+3TgsOiF+o1N6mOSeMB8GA1UdIwQY MBaAFFvWy9qnlKl6fYJmcCywVPGySdS/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzliTDJxZVVxWHA5Z21ad0xMQlU4YkpKMUw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9jOTMxZmMtZGYxZS00YmIxLTlkZTkt ZDc0YTEyOTU5YWQ3LzEvRjUzczRWZGpYcjdkT0N3NklYNmpVM3FZNUo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9jOTMxZmMtZGYxZS00YmIxLTlkZTktZDc0YTEyOTU5YWQ3 LzEvVzliTDJxZVVxWHA5Z21ad0xMQlU4YkpKMUw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCGcMA0G CSqGSIb3DQEBCwUAA4IBAQDn8m5Mk97qhsp1/XEO9WBTt6XfVBpm51CGq0WLnv3M i+cbfHkz/uLn2pjKgDLn09+/of+ezwTDOtYRBFGG2ENXUmKz0j0HpVYly5Vrd/qV zmYkCFWDFOxYjPZ2D985cJ97+TgLONe0bWRbH+p+KoNmXFbSKnyiOy4NXtJB5bcc 0HdZP6mW0tvfeooSdqQp+RkXjmkHuq3Zgt96XS+xGGkAZLWH5+mOLIfswSxj+wm/ Pm9kyHhoOOQu0fL0X/0AvSS/qhhQyl5/LCw8fyS71LF0X7xTB5pvJDzefD2PA8kN BybbTlq1nYQk1uev3ISjXS5vyGzFp/j7HKPUIU+ugGJs -----END CERTIFICATE-----Generated at Mon Jan 26 07:51:30 2026 by rpki-client