This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/5WocRxOSmDdCp3t8dO5S36MRZuU.roa File: 5WocRxOSmDdCp3t8dO5S36MRZuU.roa (raw, json) Hash identifier: 2FyKXR8tCa5ZwTM66G1T6QFKNZ0CxQwW+d8mP57rB0M= Subject key identifier: E5:6A:1C:47:13:92:98:37:42:A7:7B:7C:74:EE:52:DF:A3:11:66:E5 Certificate issuer: /CN=24051080400940ff47c807dd6742becbb4edf22d Certificate serial: 019B7F136129FE5ABCEA4D34BB5E93906A35 Authority key identifier: 24:05:10:80:40:09:40:FF:47:C8:07:DD:67:42:BE:CB:B4:ED:F2:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/5WocRxOSmDdCp3t8dO5S36MRZuU.roa Signing time: Fri 02 Jan 2026 14:18:54 +0000 ROA not before: Fri 02 Jan 2026 14:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21388 IP address blocks: 85.119.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.crl rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft rsync://rpki.ripe.net/repository/DEFAULT/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:61:29:fe:5a:bc:ea:4d:34:bb:5e:93:90:6a:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24051080400940ff47c807dd6742becbb4edf22d Validity Not Before: Jan 2 14:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e56a1c471392983742a77b7c74ee52dfa31166e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:fd:c4:6d:53:f4:01:7b:2d:6e:b9:6a:82:cb: db:31:2d:4d:5f:dd:a2:ff:a2:1a:45:71:ef:dc:e0: d0:4d:c2:1b:a9:82:24:6b:dc:b6:a6:d7:6b:56:a2: 2a:ec:e9:45:df:b0:0e:a4:b9:d4:88:27:03:ea:ce: 86:99:23:31:06:f4:82:f0:14:33:18:1a:d2:f8:39: fc:c5:58:3b:f6:e3:61:24:b2:a3:06:2a:88:d5:19: 38:a7:2c:23:75:82:77:ec:2e:81:b7:53:2c:a5:7c: b5:33:ac:16:03:7f:96:17:8e:ff:15:54:d2:de:51: 1c:04:d3:92:c9:e3:73:f0:da:63:a9:95:66:68:4a: 71:a2:e5:20:ef:36:8c:d7:fb:09:ed:5f:60:d8:c0: 31:d2:e1:74:98:d0:71:fe:87:87:58:69:3e:4e:1e: 82:50:c3:57:ae:70:66:9f:6c:7e:1e:a6:69:62:fe: 57:b0:96:12:96:99:65:85:96:a3:27:dd:c8:8c:7a: 6e:0d:d1:a4:45:be:b2:ae:0e:39:f2:9d:c8:c9:46: a7:00:0d:ab:09:04:ec:ce:52:da:d7:6f:1e:44:49: ce:13:1a:d7:fc:7d:70:a0:fb:5c:03:e8:df:a9:13: a0:44:70:48:4a:77:a7:77:85:c0:81:1b:e9:02:65: 99:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:6A:1C:47:13:92:98:37:42:A7:7B:7C:74:EE:52:DF:A3:11:66:E5 X509v3 Authority Key Identifier: keyid:24:05:10:80:40:09:40:FF:47:C8:07:DD:67:42:BE:CB:B4:ED:F2:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/5WocRxOSmDdCp3t8dO5S36MRZuU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.119.53.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:6f:48:a0:db:aa:71:4b:36:0f:ac:0a:c3:50:0c:19:c8:06: 70:b8:21:0a:40:b5:58:cd:67:8b:2c:b7:8a:38:97:86:63:84: 31:01:ca:65:ec:1b:87:43:d6:5d:c6:fc:28:9e:3f:6b:b8:76: 4d:74:a4:36:e7:eb:77:bf:f0:18:d5:8e:6a:7b:bd:8d:6c:07: 05:9d:e0:ee:ba:28:b5:86:bd:4f:cd:97:46:2f:2c:fb:57:72: b7:19:51:dc:f2:39:f2:02:cc:1c:d7:e4:4c:e9:07:a4:1d:92: 82:2d:17:51:d7:99:5e:57:68:23:0a:85:c5:08:fc:66:31:11: 95:65:58:fc:92:87:02:83:67:3d:ee:0c:e6:bc:f4:1d:3f:ba: 23:3c:bb:06:0d:15:3c:1d:83:54:23:a1:71:38:b4:13:83:41: 0e:70:1b:b7:18:da:cb:0c:48:5a:1e:08:78:de:b5:8d:f0:8c: c6:3e:4d:8c:a4:8b:cc:dd:0c:0c:4b:50:d8:5d:0a:16:84:48: aa:2d:87:94:8d:ce:26:b1:13:c4:13:c2:84:34:34:a3:2e:93: e3:63:05:ff:f0:71:be:6e:fd:50:f0:5f:36:47:9e:99:f4:48: 87:f8:33:7c:c5:c9:bc:52:28:0d:69:26:89:3c:d9:64:b9:ce: 5a:1c:ce:cf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/E2Ep/lq86k00u16TkGo1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0MDUxMDgwNDAwOTQwZmY0N2M4MDdkZDY3NDJiZWNiYjRl ZGYyMmQwHhcNMjYwMTAyMTQxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTZhMWM0NzEzOTI5ODM3NDJhNzdiN2M3NGVlNTJkZmEzMTE2NmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3P3EbVP0AXstbrlqgsvbMS1NX92i /6IaRXHv3ODQTcIbqYIka9y2ptdrVqIq7OlF37AOpLnUiCcD6s6GmSMxBvSC8BQz GBrS+Dn8xVg79uNhJLKjBiqI1Rk4pywjdYJ37C6Bt1MspXy1M6wWA3+WF47/FVTS 3lEcBNOSyeNz8NpjqZVmaEpxouUg7zaM1/sJ7V9g2MAx0uF0mNBx/oeHWGk+Th6C UMNXrnBmn2x+HqZpYv5XsJYSlpllhZajJ93IjHpuDdGkRb6yrg458p3IyUanAA2r CQTszlLa128eREnOExrX/H1woPtcA+jfqROgRHBISnend4XAgRvpAmWZJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOVqHEcTkpg3Qqd7fHTuUt+jEWblMB8GA1UdIwQY MBaAFCQFEIBACUD/R8gH3WdCvsu07fItMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkFVUWdFQUpRUDlIeUFmZFowSy15N1R0OGkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8wYmY1ZTktZDkxMC00MDM3LThkMzct NWQzOWQ1MDE4Zjc4LzEvNVdvY1J4T1NtRGRDcDN0OGRPNVMzNk1SWnVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC8wYmY1ZTktZDkxMC00MDM3LThkMzctNWQzOWQ1MDE4Zjc4 LzEvSkFVUWdFQUpRUDlIeUFmZFowSy15N1R0OGkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVXc1MA0G CSqGSIb3DQEBCwUAA4IBAQBdb0ig26pxSzYPrArDUAwZyAZwuCEKQLVYzWeLLLeK OJeGY4QxAcpl7BuHQ9Zdxvwonj9ruHZNdKQ25+t3v/AY1Y5qe72NbAcFneDuuii1 hr1PzZdGLyz7V3K3GVHc8jnyAswc1+RM6QekHZKCLRdR15leV2gjCoXFCPxmMRGV ZVj8kocCg2c97gzmvPQdP7ojPLsGDRU8HYNUI6FxOLQTg0EOcBu3GNrLDEhaHgh4 3rWN8IzGPk2MpIvM3QwMS1DYXQoWhEiqLYeUjc4msRPEE8KENDSjLpPjYwX/8HG+ bv1Q8F82R56Z9EiH+DN8xcm8UigNaSaJPNlkuc5aHM7P -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:44 2026 by rpki-client