This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/5Q7N-3fXWN3xn29Fyqm_IsIQro0.roa File: 5Q7N-3fXWN3xn29Fyqm_IsIQro0.roa (raw, json) Hash identifier: 5S1tBvFwi+gvAdb/PmkhPOQ/g472ZvTYAltGyhI7l3o= Subject key identifier: E5:0E:CD:FB:77:D7:58:DD:F1:9F:6F:45:CA:A9:BF:22:C2:10:AE:8D Certificate issuer: /CN=53147f9bcf91d2acf8f435ba50b8050545cd1f8f Certificate serial: 019B7AC7ACC8A93D06FD573FF68A18F1D1BA Authority key identifier: 53:14:7F:9B:CF:91:D2:AC:F8:F4:35:BA:50:B8:05:05:45:CD:1F:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxR_m8-R0qz49DW6ULgFBUXNH48.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/5Q7N-3fXWN3xn29Fyqm_IsIQro0.roa Signing time: Thu 01 Jan 2026 18:17:44 +0000 ROA not before: Thu 01 Jan 2026 18:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16276 IP address blocks: 185.19.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft rsync://rpki.ripe.net/repository/DEFAULT/UxR_m8-R0qz49DW6ULgFBUXNH48.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:ac:c8:a9:3d:06:fd:57:3f:f6:8a:18:f1:d1:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53147f9bcf91d2acf8f435ba50b8050545cd1f8f Validity Not Before: Jan 1 18:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e50ecdfb77d758ddf19f6f45caa9bf22c210ae8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:51:60:82:b8:57:64:93:9b:19:f7:04:40:96: 43:f2:af:44:6e:bb:df:f8:bd:99:61:1b:f9:e1:b7: 84:4a:cc:f1:0f:a0:b5:85:bb:42:e6:27:21:7f:ce: cf:46:d0:da:7d:aa:c0:1d:31:c9:34:ce:4c:b8:11: 9b:47:71:92:07:43:1d:51:59:a1:ab:85:e9:08:63: eb:f5:92:74:0c:14:3d:4f:b8:2a:2e:d4:06:52:94: 3d:07:cb:2f:31:da:ab:68:71:52:16:29:c8:73:31: 36:a1:07:2f:9f:b9:37:5a:f7:ea:e4:2c:2c:c0:58: dc:8c:7b:79:9a:ff:d5:bd:86:54:1b:3e:27:df:ef: f0:c8:7f:62:8a:f7:73:80:78:a0:dc:02:22:9a:07: 2e:bc:0b:e3:b0:37:e1:7d:23:1f:ea:78:2c:b4:55: 16:d7:75:4b:07:ae:bf:53:dd:54:86:9c:35:32:68: 06:73:64:4b:c4:2e:c0:84:16:74:04:bd:24:a5:5c: 9d:62:22:57:49:a8:05:80:a3:6b:fe:68:d0:1d:49: dc:47:ae:92:43:11:66:8b:de:87:7f:7a:00:77:c0: 74:be:2d:23:fd:a3:e1:d3:2b:28:32:6f:46:2f:0c: 0d:8e:c1:4b:09:fd:ba:27:5e:6a:ab:22:c2:1b:9a: 0c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:0E:CD:FB:77:D7:58:DD:F1:9F:6F:45:CA:A9:BF:22:C2:10:AE:8D X509v3 Authority Key Identifier: keyid:53:14:7F:9B:CF:91:D2:AC:F8:F4:35:BA:50:B8:05:05:45:CD:1F:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxR_m8-R0qz49DW6ULgFBUXNH48.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/5Q7N-3fXWN3xn29Fyqm_IsIQro0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.19.33.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:e5:fa:23:e8:53:29:a9:a0:7a:54:9b:7c:5d:a3:72:cb:b1: b2:0b:75:08:38:d3:2c:a9:15:9e:cb:3e:f6:41:1b:1e:17:1c: 3d:b9:50:f0:5e:7c:3a:7c:4d:c6:ea:30:34:76:c0:4a:de:c6: 86:26:ef:5b:f0:c3:e8:39:65:98:9c:c5:3e:48:e9:76:ef:62: 1b:e4:87:bd:9a:ed:47:e5:d2:c5:7d:62:4b:7f:ff:61:05:f6: a1:b1:eb:78:67:d8:ae:94:b8:04:20:e0:a8:96:d1:30:bf:a6: a6:a2:f8:ba:65:0f:4d:29:5e:1c:48:48:0f:bc:40:55:d3:83: c7:c6:21:34:d9:32:46:33:16:64:03:89:be:26:4a:fd:dc:1e: 2a:12:22:be:17:7c:08:d6:a4:3e:84:67:d8:ff:26:bf:28:12: 37:1c:ec:6e:8e:98:8c:8e:c2:e8:88:f8:6d:b9:f5:51:4f:c5: bf:fd:08:65:65:76:b9:b5:9f:36:cb:8e:37:d6:4c:e8:74:60: ac:48:4d:ae:6d:5f:26:1a:9c:ad:e6:16:14:0d:10:de:8d:82: 75:ba:12:7b:04:83:82:02:2f:aa:fb:6c:44:9b:0a:e9:cc:ad: 54:a3:f1:e8:52:42:be:fe:81:85:2f:f7:b3:1d:3e:ae:49:20: 0a:c4:a3:f2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x6zIqT0G/Vc/9ooY8dG6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMTQ3ZjliY2Y5MWQyYWNmOGY0MzViYTUwYjgwNTA1NDVj ZDFmOGYwHhcNMjYwMTAxMTgxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTBlY2RmYjc3ZDc1OGRkZjE5ZjZmNDVjYWE5YmYyMmMyMTBhZThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1FggrhXZJObGfcEQJZD8q9Ebrvf +L2ZYRv54beESszxD6C1hbtC5ichf87PRtDafarAHTHJNM5MuBGbR3GSB0MdUVmh q4XpCGPr9ZJ0DBQ9T7gqLtQGUpQ9B8svMdqraHFSFinIczE2oQcvn7k3Wvfq5Cws wFjcjHt5mv/VvYZUGz4n3+/wyH9iivdzgHig3AIimgcuvAvjsDfhfSMf6ngstFUW 13VLB66/U91Uhpw1MmgGc2RLxC7AhBZ0BL0kpVydYiJXSagFgKNr/mjQHUncR66S QxFmi96Hf3oAd8B0vi0j/aPh0ysoMm9GLwwNjsFLCf26J15qqyLCG5oMAQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOUOzft311jd8Z9vRcqpvyLCEK6NMB8GA1UdIwQY MBaAFFMUf5vPkdKs+PQ1ulC4BQVFzR+PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXhSX204LVIwcXo0OURXNlVMZ0ZCVVhOSDQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9iNDU3YmItYjVjNy00YjU0LTg5NmYt ZWIwMDkyYTk0ZmNhLzEvNVE3Ti0zZlhXTjN4bjI5RnlxbV9Jc0lRcm8wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9iNDU3YmItYjVjNy00YjU0LTg5NmYtZWIwMDkyYTk0ZmNh LzEvVXhSX204LVIwcXo0OURXNlVMZ0ZCVVhOSDQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRMhMA0G CSqGSIb3DQEBCwUAA4IBAQB65foj6FMpqaB6VJt8XaNyy7GyC3UIONMsqRWeyz72 QRseFxw9uVDwXnw6fE3G6jA0dsBK3saGJu9b8MPoOWWYnMU+SOl272Ib5Ie9mu1H 5dLFfWJLf/9hBfahset4Z9iulLgEIOColtEwv6amovi6ZQ9NKV4cSEgPvEBV04PH xiE02TJGMxZkA4m+Jkr93B4qEiK+F3wI1qQ+hGfY/ya/KBI3HOxujpiMjsLoiPht ufVRT8W//QhlZXa5tZ82y4431kzodGCsSE2ubV8mGpyt5hYUDRDejYJ1uhJ7BIOC Ai+q+2xEmwrpzK1Uo/HoUkK+/oGFL/ezHT6uSSAKxKPy -----END CERTIFICATE-----Generated at Sun Jan 25 09:19:00 2026 by rpki-client