This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/5wb6PSz0-6U19KcQdWJaey74UZo.roa File: 5wb6PSz0-6U19KcQdWJaey74UZo.roa (raw, json) Hash identifier: d8rOJa/EiLaXwgFjy7m7Uz7PHxwZZF5+BNqQfxDVAq0= Subject key identifier: E7:06:FA:3D:2C:F4:FB:A5:35:F4:A7:10:75:62:5A:7B:2E:F8:51:9A Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Certificate serial: 019B7AC7C4FA5847F5497AF5888EFD1A935E Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/5wb6PSz0-6U19KcQdWJaey74UZo.roa Signing time: Thu 01 Jan 2026 18:17:51 +0000 ROA not before: Thu 01 Jan 2026 18:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21016 IP address blocks: 185.176.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:c4:fa:58:47:f5:49:7a:f5:88:8e:fd:1a:93:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Validity Not Before: Jan 1 18:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e706fa3d2cf4fba535f4a71075625a7b2ef8519a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9f:45:de:32:7c:d9:73:54:92:52:ee:c8:67: 51:40:1b:f0:32:8f:13:ba:ea:fc:e1:3d:d5:e4:f1: f0:55:ae:46:4a:e9:6c:42:bb:49:58:4c:86:a6:0d: 21:0d:35:5e:ee:7d:5c:34:46:88:c8:c8:82:13:8e: 4c:23:3f:a0:0d:44:f2:cb:7e:7d:a1:46:e4:5b:e3: 5c:96:db:15:d0:c6:57:cc:ae:73:5b:56:46:6b:b8: 4b:f2:a9:ca:f1:f0:e2:48:aa:2a:c9:6f:a5:a1:2c: a2:c9:39:d4:45:1d:27:ef:96:74:e5:be:d5:1f:4f: 47:6c:0f:4f:e7:71:f5:9e:e5:db:2e:5c:f7:8b:f3: ed:80:7a:d5:9f:0e:ca:a7:aa:01:5c:eb:63:a6:d2: de:0b:02:35:90:2d:cb:a4:1d:d9:08:ef:78:7c:09: 7f:09:bf:94:85:4e:bb:e9:11:8f:72:f3:fa:21:85: a4:59:b1:2c:6b:67:71:05:90:63:b1:53:2d:1f:4f: c5:7c:ea:27:f5:5b:4c:f9:5d:4c:9c:d4:bf:29:57: a7:29:94:07:91:b1:0b:53:02:d2:14:a1:5d:8e:8a: 6e:d2:46:8b:e8:cb:a4:5f:bb:44:38:30:58:ee:bf: 70:b4:08:65:f4:6a:bc:09:6b:84:64:af:f6:72:24: 6c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:06:FA:3D:2C:F4:FB:A5:35:F4:A7:10:75:62:5A:7B:2E:F8:51:9A X509v3 Authority Key Identifier: keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/5wb6PSz0-6U19KcQdWJaey74UZo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.176.118.0/24 Signature Algorithm: sha256WithRSAEncryption 85:b9:f9:f7:bb:fa:a7:a6:94:02:74:6b:35:67:26:0b:7b:96: 71:03:c4:4d:57:e3:23:67:d4:d9:7c:84:a2:20:2d:2d:c4:b7: c4:0b:da:76:20:58:7a:03:e6:b8:fa:41:bb:7f:a2:f7:93:f2: 6e:c9:1a:40:81:f5:06:63:c1:d6:3f:e1:dc:b6:2f:54:d7:17: 6a:8e:fd:e2:c8:2c:58:94:8c:7d:52:ad:e9:e3:f8:db:76:e0: 5b:05:7f:6b:6a:7a:f7:cb:e5:da:65:51:d5:a5:a4:25:9e:7b: 56:d3:7d:9e:cf:70:da:ec:66:e5:b0:50:cb:46:49:60:16:6b: f2:4b:95:4f:77:31:64:98:1b:87:68:20:08:e5:df:19:3c:48: ec:fc:79:49:af:83:82:f8:97:7a:47:0f:ec:38:07:e3:b6:32: b1:e9:00:e8:db:7b:5f:a7:71:25:80:c1:ae:8b:20:0e:87:8f: 3c:0d:40:1e:3d:a0:f5:a6:01:29:fe:60:4c:ec:7e:9f:88:1e: c0:60:ec:b5:ad:50:ad:14:78:da:d6:25:c2:61:b3:8e:c8:69: 25:a1:2c:eb:94:e2:cb:b8:3e:de:59:81:f1:8b:5f:dc:99:45: 16:86:0b:f3:c6:0d:02:78:c0:84:e1:ab:e8:03:e6:10:4b:8c: b6:84:d8:f4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x8T6WEf1SXr1iI79GpNeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm YzQxZWMwHhcNMjYwMTAxMTgxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzA2ZmEzZDJjZjRmYmE1MzVmNGE3MTA3NTYyNWE3YjJlZjg1MTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJ9F3jJ82XNUklLuyGdRQBvwMo8T uur84T3V5PHwVa5GSulsQrtJWEyGpg0hDTVe7n1cNEaIyMiCE45MIz+gDUTyy359 oUbkW+NcltsV0MZXzK5zW1ZGa7hL8qnK8fDiSKoqyW+loSyiyTnURR0n75Z05b7V H09HbA9P53H1nuXbLlz3i/PtgHrVnw7Kp6oBXOtjptLeCwI1kC3LpB3ZCO94fAl/ Cb+UhU676RGPcvP6IYWkWbEsa2dxBZBjsVMtH0/FfOon9VtM+V1MnNS/KVenKZQH kbELUwLSFKFdjopu0kaL6MukX7tEODBY7r9wtAhl9Gq8CWuEZK/2ciRs9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOcG+j0s9PulNfSnEHViWnsu+FGaMB8GA1UdIwQY MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt NTU1NGQ2ZTE2ODZmLzEvNXdiNlBTejAtNlUxOUtjUWRXSmFleTc0VVpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubB2MA0G CSqGSIb3DQEBCwUAA4IBAQCFufn3u/qnppQCdGs1ZyYLe5ZxA8RNV+MjZ9TZfISi IC0txLfEC9p2IFh6A+a4+kG7f6L3k/JuyRpAgfUGY8HWP+Hcti9U1xdqjv3iyCxY lIx9Uq3p4/jbduBbBX9ranr3y+XaZVHVpaQlnntW032ez3Da7GblsFDLRklgFmvy S5VPdzFkmBuHaCAI5d8ZPEjs/HlJr4OC+Jd6Rw/sOAfjtjKx6QDo23tfp3ElgMGu iyAOh488DUAePaD1pgEp/mBM7H6fiB7AYOy1rVCtFHja1iXCYbOOyGkloSzrlOLL uD7eWYHxi1/cmUUWhgvzxg0CeMCE4avoA+YQS4y2hNj0 -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:41 2026 by rpki-client