This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/5PNb5yvYAEK9yMGvxK3-ImNa9n0.roa File: 5PNb5yvYAEK9yMGvxK3-ImNa9n0.roa (raw, json) Hash identifier: X7KZWI3UcNseNfF9xIQv49p4befT80Rarrz/9l3Vyno= Subject key identifier: E4:F3:5B:E7:2B:D8:00:42:BD:C8:C1:AF:C4:AD:FE:22:63:5A:F6:7D Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B7834995A280C72A465E5F7563A35079C Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/5PNb5yvYAEK9yMGvxK3-ImNa9n0.roa Signing time: Thu 01 Jan 2026 06:17:51 +0000 ROA not before: Thu 01 Jan 2026 06:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213688 IP address blocks: 193.180.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:99:5a:28:0c:72:a4:65:e5:f7:56:3a:35:07:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4f35be72bd80042bdc8c1afc4adfe22635af67d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:da:69:d4:92:db:2c:dd:78:8f:50:58:ca:ae: 56:4f:8d:4e:44:d9:86:2c:3d:c0:da:44:f3:e2:0a: 6e:78:c9:4f:4d:0f:3a:b3:25:08:3a:bf:95:0e:12: 0b:6d:a6:42:c1:47:ee:43:79:7c:f6:0a:14:da:9b: e2:70:cb:0b:68:d2:f5:17:5b:d9:4f:80:29:eb:64: 0b:d7:70:5b:19:33:3f:8c:3e:40:fb:81:0f:af:91: c6:15:c3:a0:cd:80:8b:e1:e4:30:88:b8:a5:0d:f3: cf:08:03:6c:66:63:94:60:85:2c:6f:d4:f5:d2:cf: 1c:12:ab:b5:7a:52:7d:cf:4a:f7:6e:6b:e4:13:f7: 92:76:40:d4:31:d5:19:7e:85:79:8e:53:c8:af:e2: 88:0d:8a:95:ea:7e:77:ca:58:f8:89:2e:67:00:22: ec:79:4f:48:6e:97:9e:32:32:a9:6d:f5:35:3f:25: 86:2b:2c:70:cc:98:ad:44:d9:1a:47:af:1e:7f:28: 0f:3d:94:0e:2f:fa:63:49:86:8a:c4:b7:b8:19:48: ad:03:c5:6a:22:0b:02:58:fd:75:f0:b2:f1:f7:f8: b1:b1:a8:a1:09:06:70:a4:3d:bb:b1:7f:26:ac:96: 58:d8:7f:03:e5:2f:3f:a8:df:8a:c9:40:fb:1f:af: 43:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:F3:5B:E7:2B:D8:00:42:BD:C8:C1:AF:C4:AD:FE:22:63:5A:F6:7D X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/5PNb5yvYAEK9yMGvxK3-ImNa9n0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.180.55.0/24 Signature Algorithm: sha256WithRSAEncryption 19:95:e8:57:9b:f1:11:80:c1:5f:4b:b3:49:4c:77:59:3f:a2: a3:6c:33:7a:f9:eb:81:29:06:fb:a0:fb:8c:6c:70:2a:94:55: a0:96:66:af:52:f4:6f:78:53:63:4c:e5:10:60:fb:55:d3:f1: 06:26:03:c0:82:b2:ce:c2:02:4f:98:c2:76:b0:c4:ba:72:2b: f3:7c:33:e3:97:9d:a6:2e:7e:ec:3e:71:63:c9:18:82:fb:69: e7:37:bb:ba:dd:5d:d5:d3:a6:b5:1d:3c:0d:dd:30:04:20:69: 7c:e3:72:d1:6d:e5:37:16:3e:36:45:e9:35:d6:14:ab:50:69: 03:f8:80:6c:67:74:27:93:59:71:18:29:02:0b:92:3d:57:ed: 31:c4:0b:76:79:49:e5:70:1a:42:e2:ea:f2:6d:89:d5:4e:0f: e9:67:bd:62:00:dd:52:78:fd:da:e7:19:20:ac:58:d6:be:04: 17:98:4d:2e:57:e4:5d:92:b3:5a:08:5d:c5:aa:6c:11:23:5e: fe:fc:db:21:34:ee:55:17:7e:92:2c:f5:f5:02:8f:0f:f5:d4: 7c:7b:d3:24:76:88:90:48:cf:46:94:ad:53:b4:bc:0a:42:d3: 85:60:7c:38:6d:a8:15:36:9c:ee:af:a3:38:d8:3b:e2:d3:c5: 54:5d:4b:c0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NJlaKAxypGXl91Y6NQecMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNGYzNWJlNzJiZDgwMDQyYmRjOGMxYWZjNGFkZmUyMjYzNWFmNjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9pp1JLbLN14j1BYyq5WT41ORNmG LD3A2kTz4gpueMlPTQ86syUIOr+VDhILbaZCwUfuQ3l89goU2pvicMsLaNL1F1vZ T4Ap62QL13BbGTM/jD5A+4EPr5HGFcOgzYCL4eQwiLilDfPPCANsZmOUYIUsb9T1 0s8cEqu1elJ9z0r3bmvkE/eSdkDUMdUZfoV5jlPIr+KIDYqV6n53ylj4iS5nACLs eU9IbpeeMjKpbfU1PyWGKyxwzJitRNkaR68efygPPZQOL/pjSYaKxLe4GUitA8Vq IgsCWP118LLx9/ixsaihCQZwpD27sX8mrJZY2H8D5S8/qN+KyUD7H69DmQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOTzW+cr2ABCvcjBr8St/iJjWvZ9MB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvNVBOYjV5dllBRUs5eU1HdnhLMy1JbU5hOW4wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwbQ3MA0G CSqGSIb3DQEBCwUAA4IBAQAZlehXm/ERgMFfS7NJTHdZP6KjbDN6+euBKQb7oPuM bHAqlFWglmavUvRveFNjTOUQYPtV0/EGJgPAgrLOwgJPmMJ2sMS6civzfDPjl52m Ln7sPnFjyRiC+2nnN7u63V3V06a1HTwN3TAEIGl843LRbeU3Fj42Rek11hSrUGkD +IBsZ3Qnk1lxGCkCC5I9V+0xxAt2eUnlcBpC4urybYnVTg/pZ71iAN1SeP3a5xkg rFjWvgQXmE0uV+RdkrNaCF3FqmwRI17+/NshNO5VF36SLPX1Ao8P9dR8e9MkdoiQ SM9GlK1TtLwKQtOFYHw4bagVNpzur6M42Dvi08VUXUvA -----END CERTIFICATE-----Generated at Sun Jan 25 09:03:31 2026 by rpki-client