This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/5r35RdY0vy4lh3WOV010F9-QFXw.roa File: 5r35RdY0vy4lh3WOV010F9-QFXw.roa (raw, json) Hash identifier: G+I8XeYNJKZwLdV9Hm/0m91ziGrBNMHkmj6EJpZj11c= Subject key identifier: E6:BD:F9:45:D6:34:BF:2E:25:87:75:8E:57:4D:74:17:DF:90:15:7C Certificate issuer: /CN=320b24a740f2e61632050adc146c1ee6a3e686c5 Certificate serial: 019B7C12172141501998142F257C275D5A80 Authority key identifier: 32:0B:24:A7:40:F2:E6:16:32:05:0A:DC:14:6C:1E:E6:A3:E6:86:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/5r35RdY0vy4lh3WOV010F9-QFXw.roa Signing time: Fri 02 Jan 2026 00:18:38 +0000 ROA not before: Fri 02 Jan 2026 00:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5538 IP address blocks: 5.152.224.0/21 maxlen: 21 85.254.192.0/18 maxlen: 18 92.240.64.0/19 maxlen: 19 185.23.160.0/22 maxlen: 22 194.8.1.0/24 maxlen: 24 2a02:500::/29 maxlen: 29 2a02:500::/32 maxlen: 32 2a02:500:4000::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 00:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:17:21:41:50:19:98:14:2f:25:7c:27:5d:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=320b24a740f2e61632050adc146c1ee6a3e686c5 Validity Not Before: Jan 2 00:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e6bdf945d634bf2e2587758e574d7417df90157c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:35:db:84:87:b3:7d:01:d6:04:6b:91:5f:c8: 60:60:c8:ef:c5:ac:52:20:7f:46:83:54:bf:99:c0: a2:f7:5d:82:28:71:70:4b:4e:31:99:f4:c6:e3:92: c7:d2:e4:66:3c:16:cf:a9:71:9c:a6:f8:61:9b:6a: 28:25:18:03:8a:68:b7:a7:a4:61:ec:e6:94:29:a3: c8:52:5e:d2:2f:2b:28:61:02:66:54:7b:26:38:ed: 31:69:f8:10:0b:4d:3b:a4:f6:62:6a:f9:f9:d3:4e: 8d:8c:43:4a:3b:14:10:25:69:72:c8:3d:ba:70:79: 92:12:bf:5d:c1:f7:cd:4d:66:98:b5:7c:13:12:6d: 1f:8c:b1:27:82:52:ca:fc:81:d2:3c:6d:00:11:3b: a1:69:1c:fb:d0:ac:c3:f8:1a:fc:f0:8b:30:7c:33: 7e:2d:6b:e0:11:b6:24:82:93:04:05:c0:ef:6c:71: 66:1b:d5:ed:e3:91:d0:32:1e:ea:d6:ba:de:e2:4f: 75:1f:a0:4c:ef:67:23:6c:a0:21:1c:b9:c7:91:a4: d5:45:77:d9:e1:f9:3d:02:89:8e:36:03:ac:33:47: 3b:6a:77:f0:56:02:11:bb:ba:4d:d3:f0:63:ed:9b: ee:68:87:b2:96:e5:89:56:29:e9:7c:7f:20:75:da: fc:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:BD:F9:45:D6:34:BF:2E:25:87:75:8E:57:4D:74:17:DF:90:15:7C X509v3 Authority Key Identifier: keyid:32:0B:24:A7:40:F2:E6:16:32:05:0A:DC:14:6C:1E:E6:A3:E6:86:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/5r35RdY0vy4lh3WOV010F9-QFXw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.152.224.0/21 85.254.192.0/18 92.240.64.0/19 185.23.160.0/22 194.8.1.0/24 IPv6: 2a02:500::/29 Signature Algorithm: sha256WithRSAEncryption 85:ad:05:24:9c:30:60:68:9c:28:08:f4:be:4a:54:0d:44:33: ef:54:f9:69:71:a9:42:50:1f:c8:5f:f9:84:58:37:e8:04:2f: db:4e:d2:f8:8f:95:6d:0f:4b:69:5e:b4:2b:38:23:62:15:db: ba:ac:76:57:5f:4e:dd:a6:da:ac:f2:01:ab:d7:c5:ff:4b:92: 22:28:d5:c6:27:6b:82:e8:e2:af:2e:77:25:3f:7e:d4:d1:fc: 51:ce:1a:87:68:c9:4c:1f:f9:a8:35:64:30:95:66:e1:23:3b: 6c:0d:3c:01:22:48:02:3f:56:f3:46:f8:06:d3:75:97:14:6a: ba:25:eb:c6:48:a7:c5:fd:44:ef:2b:e5:9f:b3:ce:93:b5:59: 88:41:50:a0:05:1e:10:6d:59:bf:12:50:cf:38:d5:ad:30:16: 74:4f:fc:0e:29:fb:fb:85:fd:b6:da:d6:f6:6b:ab:41:4e:b5: 3a:1c:53:2b:ed:b1:44:9e:ab:19:1c:2c:b7:37:cd:1c:7e:fb: 4c:18:59:a3:96:7f:49:a3:ef:63:07:a0:6a:12:f7:95:ef:c7: 22:89:5f:a8:12:d7:c9:24:c0:1a:33:b0:87:b7:27:71:bb:61: 67:71:a8:6b:bb:c0:40:b5:b7:2a:76:67:96:00:4f:3f:2d:f1: 01:b4:77:71 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt8EhchQVAZmBQvJXwnXVqAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyMGIyNGE3NDBmMmU2MTYzMjA1MGFkYzE0NmMxZWU2YTNl Njg2YzUwHhcNMjYwMTAyMDAxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNmJkZjk0NWQ2MzRiZjJlMjU4Nzc1OGU1NzRkNzQxN2RmOTAxNTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTXbhIezfQHWBGuRX8hgYMjvxaxS IH9Gg1S/mcCi912CKHFwS04xmfTG45LH0uRmPBbPqXGcpvhhm2ooJRgDimi3p6Rh 7OaUKaPIUl7SLysoYQJmVHsmOO0xafgQC007pPZiavn5006NjENKOxQQJWlyyD26 cHmSEr9dwffNTWaYtXwTEm0fjLEnglLK/IHSPG0AETuhaRz70KzD+Br88IswfDN+ LWvgEbYkgpMEBcDvbHFmG9Xt45HQMh7q1rre4k91H6BM72cjbKAhHLnHkaTVRXfZ 4fk9AomONgOsM0c7anfwVgIRu7pN0/Bj7ZvuaIeyluWJVinpfH8gddr8AQIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFOa9+UXWNL8uJYd1jldNdBffkBV8MB8GA1UdIwQY MBaAFDILJKdA8uYWMgUK3BRsHuaj5obFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWdza3AwRHk1aFl5QlFyY0ZHd2U1cVBtaHNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy85YzI3ZTQtZDdiMS00M2MxLWEzOGYt OTQ5MTRmNWRkYjNjLzEvNXIzNVJkWTB2eTRsaDNXT1YwMTBGOS1RRlh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy85YzI3ZTQtZDdiMS00M2MxLWEzOGYtOTQ5MTRmNWRkYjNj LzEvTWdza3AwRHk1aFl5QlFyY0ZHd2U1cVBtaHNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQDBZjgAwQG Vf7AAwQFXPBAAwQCuRegAwQAwggBMA0EAgACMAcDBQMqAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFrQUknDBgaJwoCPS+SlQNRDPvVPlpcalCUB/IX/mEWDfoBC/bTtL4 j5VtD0tpXrQrOCNiFdu6rHZXX07dptqs8gGr18X/S5IiKNXGJ2uC6OKvLnclP37U 0fxRzhqHaMlMH/moNWQwlWbhIztsDTwBIkgCP1bzRvgG03WXFGq6JevGSKfF/UTv K+Wfs86TtVmIQVCgBR4QbVm/ElDPONWtMBZ0T/wOKfv7hf222tb2a6tBTrU6HFMr 7bFEnqsZHCy3N80cfvtMGFmjln9Jo+9jB6BqEveV78ciiV+oEtfJJMAaM7CHtydx u2Fncahru8BAtbcqdmeWAE8/LfEBtHdx -----END CERTIFICATE-----Generated at Tue Jan 20 09:41:05 2026 by rpki-client