This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/5ID5z559_ezDnZySPYG9BxB-s7o.roa File: 5ID5z559_ezDnZySPYG9BxB-s7o.roa (raw, json) Hash identifier: ni+8ewLYFW0Txvc6bnLeborivZa41Cp0rcVNXQIugfI= Subject key identifier: E4:80:F9:CF:9E:7D:FD:EC:C3:9D:9C:92:3D:81:BD:07:10:7E:B3:BA Certificate issuer: /CN=6e37a10a4a0273f41facf7440d59f39ad5eaf64b Certificate serial: 019B7B365DBFFC22EA58C022E8A378724FA6 Authority key identifier: 6E:37:A1:0A:4A:02:73:F4:1F:AC:F7:44:0D:59:F3:9A:D5:EA:F6:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/5ID5z559_ezDnZySPYG9BxB-s7o.roa Signing time: Thu 01 Jan 2026 20:18:39 +0000 ROA not before: Thu 01 Jan 2026 20:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204702 IP address blocks: 185.157.148.0/22 maxlen: 24 185.157.148.0/24 maxlen: 24 185.157.149.0/24 maxlen: 24 185.157.151.0/24 maxlen: 24 2a0c:f380::/29 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:5d:bf:fc:22:ea:58:c0:22:e8:a3:78:72:4f:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e37a10a4a0273f41facf7440d59f39ad5eaf64b Validity Not Before: Jan 1 20:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e480f9cf9e7dfdecc39d9c923d81bd07107eb3ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:20:cc:8d:9a:16:2b:42:64:56:aa:0e:f1:41: ac:cc:7d:18:ae:63:34:1d:0b:9a:a1:64:3f:f8:79: 10:4f:42:6b:87:ee:ff:2e:84:de:85:c2:3a:b7:e0: be:f9:10:9d:8b:cc:36:fd:67:3f:61:9d:0d:24:e0: af:62:80:34:ac:63:6e:ab:4e:94:cd:6e:6e:5d:d1: 1a:75:09:fa:62:c5:ee:c1:dd:38:16:ff:cb:7b:18: 18:2e:c2:1b:6e:e3:34:9c:1f:72:00:c9:29:8b:2a: e2:06:2d:f9:2b:e6:5d:28:3e:5d:cb:13:6f:d7:2f: f8:46:cb:08:31:06:87:7c:d1:f2:29:a5:27:1d:ee: c4:a7:ef:73:fc:81:99:b9:c8:44:7d:ff:81:ab:f2: 10:51:5a:5e:4a:8d:02:01:4e:99:d6:cf:c0:ad:1f: da:9c:96:21:a6:ff:7c:d7:1a:d0:6e:34:1e:74:69: 78:95:47:ec:fc:9e:d6:dd:93:60:17:c0:a0:76:27: 87:b8:f5:60:33:ee:5b:c1:3d:7c:f4:8d:d9:36:7a: 90:5a:95:a8:af:1a:17:fe:82:d0:75:41:17:99:49: 15:1a:5a:f1:99:87:90:4f:a7:20:3b:84:8f:20:13: 92:b8:23:b0:82:48:94:22:43:35:e9:d6:af:90:35: 29:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:80:F9:CF:9E:7D:FD:EC:C3:9D:9C:92:3D:81:BD:07:10:7E:B3:BA X509v3 Authority Key Identifier: keyid:6E:37:A1:0A:4A:02:73:F4:1F:AC:F7:44:0D:59:F3:9A:D5:EA:F6:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/5ID5z559_ezDnZySPYG9BxB-s7o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.157.148.0/22 IPv6: 2a0c:f380::/29 Signature Algorithm: sha256WithRSAEncryption 11:96:a2:df:1d:5a:11:9c:1f:be:54:9f:4a:9a:9e:40:aa:4c: c8:a9:46:95:2b:16:0b:85:cd:b2:da:74:91:c3:bd:50:e4:b4: 4c:7c:55:f2:e9:2b:9b:55:14:28:7e:f6:63:e4:13:45:c2:3f: 9f:f5:fb:5d:9d:72:fd:9e:94:64:92:dd:e4:a5:bd:c4:b5:ef: e0:ef:87:df:25:7f:64:d2:93:7e:6d:e0:de:c2:8c:33:60:d0: 86:82:00:23:e8:fe:ba:78:82:af:81:2c:df:18:14:6c:63:78: e6:a6:5b:46:86:6a:c7:af:71:a3:71:5c:9b:14:fe:40:f0:f0: 8a:25:b2:ca:da:88:f9:d0:db:ef:c0:91:79:73:1d:7f:de:6b: 2e:a8:59:f4:0f:4b:03:d1:93:6f:b4:81:fb:3a:b3:bf:fe:46: 80:1d:ba:5f:01:bd:5a:af:af:21:e4:35:ed:66:f3:64:7e:7c: 15:40:85:a1:a2:a4:42:4a:bb:f8:70:df:22:da:03:0b:f4:e5: 34:32:f5:8e:16:36:87:1c:f4:54:73:d2:7d:4f:2f:12:d2:c8: c7:f5:28:52:4a:b3:a5:22:af:88:f7:c5:90:e3:f2:af:00:02: 79:d6:41:c1:7e:56:68:f7:f4:27:70:b2:b5:e2:41:b1:d6:fb: e6:e6:c9:1f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7Nl2//CLqWMAi6KN4ck+mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlMzdhMTBhNGEwMjczZjQxZmFjZjc0NDBkNTlmMzlhZDVl YWY2NGIwHhcNMjYwMTAxMjAxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDgwZjljZjllN2RmZGVjYzM5ZDljOTIzZDgxYmQwNzEwN2ViM2JhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziDMjZoWK0JkVqoO8UGszH0YrmM0 HQuaoWQ/+HkQT0Jrh+7/LoTehcI6t+C++RCdi8w2/Wc/YZ0NJOCvYoA0rGNuq06U zW5uXdEadQn6YsXuwd04Fv/LexgYLsIbbuM0nB9yAMkpiyriBi35K+ZdKD5dyxNv 1y/4RssIMQaHfNHyKaUnHe7Ep+9z/IGZuchEff+Bq/IQUVpeSo0CAU6Z1s/ArR/a nJYhpv981xrQbjQedGl4lUfs/J7W3ZNgF8CgdieHuPVgM+5bwT189I3ZNnqQWpWo rxoX/oLQdUEXmUkVGlrxmYeQT6cgO4SPIBOSuCOwgkiUIkM16davkDUpkQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOSA+c+eff3sw52ckj2BvQcQfrO6MB8GA1UdIwQY MBaAFG43oQpKAnP0H6z3RA1Z85rV6vZLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmplaENrb0NjX1FmclBkRURWbnptdFhxOWtzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9mMGFlZjMtMjYzZC00ZjQxLTg4NTMt MThiN2ViOTIzYTk5LzEvNUlENXo1NTlfZXpEblp5U1BZRzlCeEItczdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9mMGFlZjMtMjYzZC00ZjQxLTg4NTMtMThiN2ViOTIzYTk5 LzEvYmplaENrb0NjX1FmclBkRURWbnptdFhxOWtzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuZ2UMA0E AgACMAcDBQMqDPOAMA0GCSqGSIb3DQEBCwUAA4IBAQARlqLfHVoRnB++VJ9Kmp5A qkzIqUaVKxYLhc2y2nSRw71Q5LRMfFXy6SubVRQofvZj5BNFwj+f9ftdnXL9npRk kt3kpb3Ete/g74ffJX9k0pN+beDewowzYNCGggAj6P66eIKvgSzfGBRsY3jmpltG hmrHr3GjcVybFP5A8PCKJbLK2oj50NvvwJF5cx1/3msuqFn0D0sD0ZNvtIH7OrO/ /kaAHbpfAb1ar68h5DXtZvNkfnwVQIWhoqRCSrv4cN8i2gML9OU0MvWOFjaHHPRU c9J9Ty8S0sjH9ShSSrOlIq+I98WQ4/KvAAJ51kHBflZo9/QncLK14kGx1vvm5skf -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:54 2026 by rpki-client