This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/5WLqK_p25-aIC_3UYFhuSpbpCEY.roa File: 5WLqK_p25-aIC_3UYFhuSpbpCEY.roa (raw, json) Hash identifier: DLrQgCUNAwllQmXWt/iDwZ3qK4SwyxTDgWye9XXeywA= Subject key identifier: E5:62:EA:2B:FA:76:E7:E6:88:0B:FD:D4:60:58:6E:4A:96:E9:08:46 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019AD9DCD5EDD88902FE5BAA0C757076A882 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/5WLqK_p25-aIC_3UYFhuSpbpCEY.roa Signing time: Mon 01 Dec 2025 12:21:59 +0000 ROA not before: Mon 01 Dec 2025 12:21:59 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 198837 IP address blocks: 193.180.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d9:dc:d5:ed:d8:89:02:fe:5b:aa:0c:75:70:76:a8:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Dec 1 12:21:59 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e562ea2bfa76e7e6880bfdd460586e4a96e90846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a8:18:d5:67:1f:1e:a1:1c:58:8a:d3:f8:e1: 39:9f:fd:16:1b:9f:ad:cb:35:43:d4:27:e6:0d:28: 5b:fc:95:05:6b:59:cb:72:50:b9:cb:d6:0e:4e:7c: e1:af:f0:9c:8d:b5:aa:2b:29:a9:5f:71:dd:52:10: df:40:b7:d8:fc:96:56:c3:ca:2b:bf:b6:f5:18:3e: af:1e:93:6e:77:0b:87:be:2f:75:0d:ac:45:53:67: 7f:2b:b3:46:46:79:b0:e6:0f:6e:b0:6e:b5:0d:54: 80:ba:2e:2f:f6:11:44:d2:ee:8e:30:21:45:89:6e: 06:e7:50:36:cf:18:f5:d9:0b:73:af:01:07:b8:8d: 7c:ff:f2:83:4a:a8:6d:8c:7a:1b:e5:4a:7e:4a:23: 28:76:84:e8:f9:75:6b:fe:0b:92:be:e2:2e:f0:f4: b3:8b:5d:6c:b5:ae:71:58:6e:5d:ad:58:cd:aa:76: 7e:83:89:0b:9f:8c:53:63:bc:4f:eb:02:c6:fc:ca: 42:1d:4c:c6:23:36:c7:be:97:1e:41:63:e7:99:4d: 6e:56:22:13:28:c2:ac:d9:8d:a7:3d:06:41:0f:03: 1d:55:24:91:e1:2b:62:d1:aa:77:6d:90:fa:c2:f8: 5a:81:ab:95:7e:84:a0:36:b3:6f:2e:c8:78:f8:ce: 4a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:62:EA:2B:FA:76:E7:E6:88:0B:FD:D4:60:58:6E:4A:96:E9:08:46 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/5WLqK_p25-aIC_3UYFhuSpbpCEY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.180.8.0/22 Signature Algorithm: sha256WithRSAEncryption 31:c2:62:53:b2:6d:1c:be:4a:38:88:5e:72:57:b2:3d:c4:c2: 71:04:de:c6:dd:30:b1:4f:0a:23:fc:e2:b4:58:b0:a3:17:73: 30:ca:e1:06:6a:44:97:75:c1:95:7c:d6:f5:63:d3:25:b3:62: 11:a8:8c:c9:4d:42:dc:2b:5a:62:a4:62:b1:14:6d:1d:2a:f1: 37:4a:ea:e8:b0:f9:6d:33:91:b9:5b:3d:15:54:f4:92:f5:ef: db:e5:5d:b1:8a:0b:9d:ff:bf:99:57:2c:cf:3e:8c:f3:09:89: 33:9f:04:ae:89:a2:0f:a3:ee:e1:9b:95:dc:aa:8d:74:d1:6f: bb:aa:ec:be:5a:85:bf:cc:13:2b:bd:6b:55:94:eb:e0:06:56: 7a:2a:22:c2:96:c0:af:ff:1a:0f:6a:a4:9f:8b:84:5d:f2:44: 23:ae:5c:6c:0d:7d:48:2a:5f:50:c7:bb:62:f1:d5:9a:e4:d3: 6e:f1:f7:87:5d:05:88:9e:e2:7f:87:32:0a:01:4a:58:77:8e: b9:af:94:20:b7:21:b4:e6:be:38:d6:d6:5f:f2:27:db:f6:b2: d8:e0:44:22:6a:a2:da:3c:df:17:f7:6d:06:79:6b:82:ff:66: 17:aa:d8:c1:b6:34:12:6b:56:44:bc:34:0a:94:ec:83:f0:b4: 68:d3:99:75 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrZ3NXt2IkC/luqDHVwdqiCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjUxMjAxMTIyMTU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTYyZWEyYmZhNzZlN2U2ODgwYmZkZDQ2MDU4NmU0YTk2ZTkwODQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqgY1WcfHqEcWIrT+OE5n/0WG5+t yzVD1CfmDShb/JUFa1nLclC5y9YOTnzhr/CcjbWqKympX3HdUhDfQLfY/JZWw8or v7b1GD6vHpNudwuHvi91DaxFU2d/K7NGRnmw5g9usG61DVSAui4v9hFE0u6OMCFF iW4G51A2zxj12QtzrwEHuI18//KDSqhtjHob5Up+SiModoTo+XVr/guSvuIu8PSz i11sta5xWG5drVjNqnZ+g4kLn4xTY7xP6wLG/MpCHUzGIzbHvpceQWPnmU1uViIT KMKs2Y2nPQZBDwMdVSSR4Sti0ap3bZD6wvhagauVfoSgNrNvLsh4+M5KmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOVi6iv6dufmiAv91GBYbkqW6QhGMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvNVdMcUtfcDI1LWFJQ18zVVlGaHVTcGJwQ0VZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwbQIMA0G CSqGSIb3DQEBCwUAA4IBAQAxwmJTsm0cvko4iF5yV7I9xMJxBN7G3TCxTwoj/OK0 WLCjF3MwyuEGakSXdcGVfNb1Y9Mls2IRqIzJTULcK1pipGKxFG0dKvE3SurosPlt M5G5Wz0VVPSS9e/b5V2xigud/7+ZVyzPPozzCYkznwSuiaIPo+7hm5Xcqo100W+7 quy+WoW/zBMrvWtVlOvgBlZ6KiLClsCv/xoPaqSfi4Rd8kQjrlxsDX1IKl9Qx7ti 8dWa5NNu8feHXQWInuJ/hzIKAUpYd465r5QgtyG05r441tZf8ifb9rLY4EQiaqLa PN8X920GeWuC/2YXqtjBtjQSa1ZEvDQKlOyD8LRo05l1 -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:46 2025 by rpki-client