This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/i-5JU6m0HCD3U3xlIXpYe2CvZ6s.roa File: i-5JU6m0HCD3U3xlIXpYe2CvZ6s.roa (raw, json) Hash identifier: DdvpLWQk/bI8gzJCBKoMFQlNjo/QKF7hqu6rxtSiFmc= Subject key identifier: 8B:EE:49:53:A9:B4:1C:20:F7:53:7C:65:21:7A:58:7B:60:AF:67:AB Certificate issuer: /CN=403c7e85de49d7924ce50d3d6a9e52e9e9c2e312 Certificate serial: 019B7DC9D2CFF7BE299C55F146F40F6A50A0 Authority key identifier: 40:3C:7E:85:DE:49:D7:92:4C:E5:0D:3D:6A:9E:52:E9:E9:C2:E3:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QDx-hd5J15JM5Q09ap5S6enC4xI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/i-5JU6m0HCD3U3xlIXpYe2CvZ6s.roa Signing time: Fri 02 Jan 2026 08:18:57 +0000 ROA not before: Fri 02 Jan 2026 08:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58150 IP address blocks: 185.56.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.crl rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.mft rsync://rpki.ripe.net/repository/DEFAULT/QDx-hd5J15JM5Q09ap5S6enC4xI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:d2:cf:f7:be:29:9c:55:f1:46:f4:0f:6a:50:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=403c7e85de49d7924ce50d3d6a9e52e9e9c2e312 Validity Not Before: Jan 2 08:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8bee4953a9b41c20f7537c65217a587b60af67ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1f:0d:3b:80:01:89:3a:70:9e:36:ac:7f:79: 11:47:64:ed:57:af:3f:ea:c2:fe:71:0b:fe:37:c1: cf:c4:fe:e7:4c:59:9f:ba:d1:be:66:64:f9:7b:2b: 84:90:8a:54:ee:23:6c:e2:5c:34:af:6b:c0:3d:ff: 15:c0:0e:2b:b6:f3:a4:2a:49:ce:0c:17:5a:d5:c6: dc:e8:e8:ac:0d:63:af:4f:1e:af:45:b3:9d:f0:a3: 83:00:78:36:93:7a:df:aa:f7:d7:0d:40:2f:67:e9: ee:58:1f:9f:22:26:7d:fb:92:6d:89:e5:3d:61:a4: 2c:20:4b:5d:21:44:32:f9:e3:2d:10:0b:4b:29:4e: ca:fe:4a:72:27:0d:d6:d4:c4:b2:be:90:3b:3e:a8: a8:88:1f:a8:2e:48:63:7a:b5:d7:fd:97:22:f1:aa: d4:2a:2e:bc:ed:81:04:99:59:a7:c3:8f:58:eb:3c: a9:3d:2f:2c:29:be:c9:b9:a8:e6:ff:2d:b1:30:a0: 82:de:82:38:2e:cc:bd:95:71:a3:10:31:85:dc:97: 48:53:18:8f:c7:0c:c0:f3:13:67:2b:33:0f:84:59: 65:9e:90:68:04:d1:1c:b6:0a:62:07:bc:5d:3c:cb: fd:d6:49:79:9f:9b:76:b3:50:e1:67:ef:32:d2:a7: 15:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:EE:49:53:A9:B4:1C:20:F7:53:7C:65:21:7A:58:7B:60:AF:67:AB X509v3 Authority Key Identifier: keyid:40:3C:7E:85:DE:49:D7:92:4C:E5:0D:3D:6A:9E:52:E9:E9:C2:E3:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QDx-hd5J15JM5Q09ap5S6enC4xI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/i-5JU6m0HCD3U3xlIXpYe2CvZ6s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.56.0.0/22 Signature Algorithm: sha256WithRSAEncryption 39:25:0d:49:d8:12:de:1f:68:74:d5:92:e8:e0:5e:5f:fe:13: 60:9c:9b:32:a9:60:55:df:a7:47:87:2a:15:a9:c3:0d:8e:cc: 1a:dc:47:52:1d:bb:c0:26:b4:65:38:fb:20:2c:bb:5d:37:6d: 90:28:71:3a:f2:cf:3a:16:e5:98:b6:0f:31:85:ab:b7:7d:b3: 04:d6:5f:a4:3c:a7:0a:e6:f1:26:88:52:e5:d6:9c:2a:62:35: 0f:50:ae:f9:36:dd:4a:ed:f8:dc:df:d7:f9:29:67:f4:94:13: d3:d8:05:8f:fe:62:ef:7a:c5:7a:b9:c1:ea:7b:cc:74:4b:7d: 2c:05:21:fa:a4:4f:ad:73:8e:99:d4:9a:2c:e0:e4:74:1a:18: 62:33:e0:b4:88:68:35:4e:ba:3a:28:32:76:a9:66:80:75:fe: fb:1f:c0:46:75:97:30:2d:6f:49:e9:1d:66:5c:ba:63:69:dd: be:08:38:e7:84:fe:02:44:c5:72:7a:ac:d3:4c:85:07:8e:2d: 61:5f:e5:47:2b:cf:61:be:e2:ec:a4:59:c7:f3:59:87:62:85: 4e:04:2d:bc:82:44:83:79:f7:b1:a7:77:5f:20:78:a9:d9:9e: 15:4c:b7:26:01:62:06:7c:47:9f:16:71:ff:de:ce:c2:bc:23: fd:63:28:d6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ydLP974pnFXxRvQPalCgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwM2M3ZTg1ZGU0OWQ3OTI0Y2U1MGQzZDZhOWU1MmU5ZTlj MmUzMTIwHhcNMjYwMTAyMDgxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YmVlNDk1M2E5YjQxYzIwZjc1MzdjNjUyMTdhNTg3YjYwYWY2N2FiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAth8NO4ABiTpwnjasf3kRR2TtV68/ 6sL+cQv+N8HPxP7nTFmfutG+ZmT5eyuEkIpU7iNs4lw0r2vAPf8VwA4rtvOkKknO DBda1cbc6OisDWOvTx6vRbOd8KODAHg2k3rfqvfXDUAvZ+nuWB+fIiZ9+5JtieU9 YaQsIEtdIUQy+eMtEAtLKU7K/kpyJw3W1MSyvpA7PqioiB+oLkhjerXX/Zci8arU Ki687YEEmVmnw49Y6zypPS8sKb7Juajm/y2xMKCC3oI4Lsy9lXGjEDGF3JdIUxiP xwzA8xNnKzMPhFllnpBoBNEctgpiB7xdPMv91kl5n5t2s1DhZ+8y0qcVJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIvuSVOptBwg91N8ZSF6WHtgr2erMB8GA1UdIwQY MBaAFEA8foXeSdeSTOUNPWqeUunpwuMSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUR4LWhkNUoxNUpNNVEwOWFwNVM2ZW5DNHhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8wYTAwNzgtNjQ4Zi00MzYwLTk0Yzct MGQ2ZGNiMGVjZmNmLzEvaS01SlU2bTBIQ0QzVTN4bElYcFllMkN2WjZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS8wYTAwNzgtNjQ4Zi00MzYwLTk0YzctMGQ2ZGNiMGVjZmNm LzEvUUR4LWhkNUoxNUpNNVEwOWFwNVM2ZW5DNHhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuTgAMA0G CSqGSIb3DQEBCwUAA4IBAQA5JQ1J2BLeH2h01ZLo4F5f/hNgnJsyqWBV36dHhyoV qcMNjswa3EdSHbvAJrRlOPsgLLtdN22QKHE68s86FuWYtg8xhau3fbME1l+kPKcK 5vEmiFLl1pwqYjUPUK75Nt1K7fjc39f5KWf0lBPT2AWP/mLvesV6ucHqe8x0S30s BSH6pE+tc46Z1Jos4OR0GhhiM+C0iGg1Tro6KDJ2qWaAdf77H8BGdZcwLW9J6R1m XLpjad2+CDjnhP4CRMVyeqzTTIUHji1hX+VHK89hvuLspFnH81mHYoVOBC28gkSD efexp3dfIHip2Z4VTLcmAWIGfEefFnH/3s7CvCP9YyjW -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:43 2026 by rpki-client