This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/S5i5ArBirheWkzfGpNXAWv02cGg.roa File: S5i5ArBirheWkzfGpNXAWv02cGg.roa (raw, json) Hash identifier: VZdHIoUfg3F4/LBtg4lHV8vxIVmG0uE+OLuH+2qEoRA= Subject key identifier: 4B:98:B9:02:B0:62:AE:17:96:93:37:C6:A4:D5:C0:5A:FD:36:70:68 Certificate issuer: /CN=e9e4dc968ed52935a04dee3b229c21ca9bfdbd7e Certificate serial: 019B7C80C53E62DB0ABE80891ABDC2D3EABB Authority key identifier: E9:E4:DC:96:8E:D5:29:35:A0:4D:EE:3B:22:9C:21:CA:9B:FD:BD:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6eTclo7VKTWgTe47Ipwhypv9vX4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/S5i5ArBirheWkzfGpNXAWv02cGg.roa Signing time: Fri 02 Jan 2026 02:19:32 +0000 ROA not before: Fri 02 Jan 2026 02:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62240 IP address blocks: 93.183.100.0/22 maxlen: 24 93.183.120.0/22 maxlen: 24 176.106.136.0/21 maxlen: 24 176.123.184.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/6eTclo7VKTWgTe47Ipwhypv9vX4.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/6eTclo7VKTWgTe47Ipwhypv9vX4.mft rsync://rpki.ripe.net/repository/DEFAULT/6eTclo7VKTWgTe47Ipwhypv9vX4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:c5:3e:62:db:0a:be:80:89:1a:bd:c2:d3:ea:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9e4dc968ed52935a04dee3b229c21ca9bfdbd7e Validity Not Before: Jan 2 02:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b98b902b062ae17969337c6a4d5c05afd367068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c5:78:d0:46:cd:be:5b:4a:43:bc:0d:1d:1d: bd:92:86:98:c4:c4:7a:5c:9c:47:1a:4a:8c:00:92: c3:ab:82:e3:00:8f:58:f6:1e:e1:b3:3a:fb:ab:e0: ec:5e:6d:54:66:77:c1:75:36:41:8c:3d:45:f6:ff: d4:01:85:c0:30:95:9f:b8:f2:ff:25:9c:34:34:44: 43:80:92:0c:c0:d6:4f:46:d0:f2:a9:fa:12:d9:89: 5b:2d:0d:20:48:62:b9:02:88:06:4e:49:a4:80:13: 35:22:db:bc:3c:a6:86:e7:c8:80:7c:23:eb:a1:9f: 23:5c:3c:27:77:96:25:77:22:a6:d5:83:1a:d2:2b: 2b:5a:e8:92:a3:c6:f0:55:7d:0a:3d:c0:08:69:ab: a1:a1:11:6f:21:f2:2b:5e:e6:ec:ac:a6:5b:6f:67: d6:bb:d8:73:75:82:94:e6:61:61:e6:df:82:1c:65: e9:74:89:2c:f1:31:b7:18:d7:b5:27:ad:33:25:6f: 8a:ca:2e:d6:11:57:4c:8a:ff:20:26:13:46:b6:db: 89:eb:29:a5:76:ac:fa:46:d5:99:30:3f:ed:38:09: d8:73:fe:65:a8:b5:e4:cd:db:71:3a:f7:1b:a4:a4: bf:13:e5:b3:a3:0a:c5:ba:22:1c:07:52:e9:35:65: 8b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:98:B9:02:B0:62:AE:17:96:93:37:C6:A4:D5:C0:5A:FD:36:70:68 X509v3 Authority Key Identifier: keyid:E9:E4:DC:96:8E:D5:29:35:A0:4D:EE:3B:22:9C:21:CA:9B:FD:BD:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6eTclo7VKTWgTe47Ipwhypv9vX4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/S5i5ArBirheWkzfGpNXAWv02cGg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/6eTclo7VKTWgTe47Ipwhypv9vX4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.183.100.0/22 93.183.120.0/22 176.106.136.0/21 176.123.184.0/22 Signature Algorithm: sha256WithRSAEncryption 6d:31:d9:18:5f:94:61:2d:c7:5e:0b:e4:aa:c4:d2:58:3c:cf: 77:a7:9e:94:da:94:7a:72:f2:df:8b:cf:43:1d:4d:57:02:e9: fc:63:81:98:d9:13:fe:66:35:9a:66:24:94:ea:13:84:3d:35: a8:74:c8:0b:32:d9:bd:6a:e5:7a:75:ec:52:aa:21:af:17:a9: d6:23:a4:25:89:b8:2b:0a:ae:3b:5e:0b:52:e4:14:7a:d5:6b: d1:14:d2:7d:67:a5:f7:18:7f:35:59:a8:f1:dd:3b:7f:45:e0: fd:27:19:1f:c8:cc:09:ee:07:03:e6:18:4d:94:db:dd:92:8d: bb:f9:33:93:c1:9a:5f:14:70:76:29:f7:a6:76:97:81:32:35: 15:41:08:38:1d:c0:d5:6e:45:73:c6:88:56:ec:f5:f5:58:d0: 1c:3a:60:42:a4:e4:9c:6a:d6:e3:5d:4b:cf:d9:43:c5:0e:06: b5:df:63:91:be:0f:ad:a8:0d:6b:33:73:9f:90:d2:d9:dc:0b: 6d:02:0a:42:32:23:0c:a4:47:2c:44:af:6e:62:30:22:9d:9e: a9:e7:23:0f:22:83:c3:99:7e:9d:bb:b2:53:15:38:5e:b8:cb: 4d:b2:fb:07:2b:8e:d0:11:06:37:3e:0c:5d:64:7d:6d:97:b7: 34:cf:e6:e6 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt8gMU+YtsKvoCJGr3C0+q7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5ZTRkYzk2OGVkNTI5MzVhMDRkZWUzYjIyOWMyMWNhOWJm ZGJkN2UwHhcNMjYwMTAyMDIxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Yjk4YjkwMmIwNjJhZTE3OTY5MzM3YzZhNGQ1YzA1YWZkMzY3MDY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycV40EbNvltKQ7wNHR29koaYxMR6 XJxHGkqMAJLDq4LjAI9Y9h7hszr7q+DsXm1UZnfBdTZBjD1F9v/UAYXAMJWfuPL/ JZw0NERDgJIMwNZPRtDyqfoS2YlbLQ0gSGK5AogGTkmkgBM1Itu8PKaG58iAfCPr oZ8jXDwnd5YldyKm1YMa0isrWuiSo8bwVX0KPcAIaauhoRFvIfIrXubsrKZbb2fW u9hzdYKU5mFh5t+CHGXpdIks8TG3GNe1J60zJW+Kyi7WEVdMiv8gJhNGttuJ6yml dqz6RtWZMD/tOAnYc/5lqLXkzdtxOvcbpKS/E+WzowrFuiIcB1LpNWWL4QIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFEuYuQKwYq4XlpM3xqTVwFr9NnBoMB8GA1UdIwQY MBaAFOnk3JaO1Sk1oE3uOyKcIcqb/b1+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmVUY2xvN1ZLVFdnVGU0N0lwd2h5cHY5dlg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8xYTEzNGYtMDMwYS00M2U3LWIwNDEt NmM3ODU2ZWY3YjMxLzEvUzVpNUFyQmlyaGVXa3pmR3BOWEFXdjAyY0dnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8xYTEzNGYtMDMwYS00M2U3LWIwNDEtNmM3ODU2ZWY3YjMx LzEvNmVUY2xvN1ZLVFdnVGU0N0lwd2h5cHY5dlg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCXbdkAwQC Xbd4AwQDsGqIAwQCsHu4MA0GCSqGSIb3DQEBCwUAA4IBAQBtMdkYX5RhLcdeC+Sq xNJYPM93p56U2pR6cvLfi89DHU1XAun8Y4GY2RP+ZjWaZiSU6hOEPTWodMgLMtm9 auV6dexSqiGvF6nWI6QlibgrCq47XgtS5BR61WvRFNJ9Z6X3GH81Wajx3Tt/ReD9 JxkfyMwJ7gcD5hhNlNvdko27+TOTwZpfFHB2KfemdpeBMjUVQQg4HcDVbkVzxohW 7PX1WNAcOmBCpOScatbjXUvP2UPFDga132ORvg+tqA1rM3OfkNLZ3AttAgpCMiMM pEcsRK9uYjAinZ6p5yMPIoPDmX6du7JTFTheuMtNsvsHK47QEQY3PgxdZH1tl7c0 z+bm -----END CERTIFICATE-----Generated at Sun Jan 25 17:35:41 2026 by rpki-client