This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/t5RRILBZ8M5Ns_UE9mCCmKPeRHY.roa File: t5RRILBZ8M5Ns_UE9mCCmKPeRHY.roa (raw, json) Hash identifier: Oza4KV+55OZvdoqSEx6MCDyRJaofDYOV98pOnUpZzKk= Subject key identifier: B7:94:51:20:B0:59:F0:CE:4D:B3:F5:04:F6:60:82:98:A3:DE:44:76 Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Certificate serial: 019B7AC7CEF500550FB068B600B9D1EC8DB6 Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/t5RRILBZ8M5Ns_UE9mCCmKPeRHY.roa Signing time: Thu 01 Jan 2026 18:17:53 +0000 ROA not before: Thu 01 Jan 2026 18:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43188 IP address blocks: 85.254.156.0/23 maxlen: 23 85.254.156.0/24 maxlen: 24 85.254.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:ce:f5:00:55:0f:b0:68:b6:00:b9:d1:ec:8d:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Validity Not Before: Jan 1 18:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7945120b059f0ce4db3f504f6608298a3de4476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c5:55:5f:82:cf:e5:b5:ec:3b:ec:e4:81:c6: 74:0c:b0:ee:69:c1:86:d2:f0:fd:85:af:a6:87:5e: 0e:75:9d:4c:e2:1b:0c:04:91:97:f4:8f:79:ed:69: e4:d6:b5:56:bc:bd:29:74:4d:65:db:ab:ef:fc:81: 78:34:b3:d1:68:e5:41:ee:0f:26:62:7c:35:67:47: 67:47:98:ea:a6:6e:49:5d:a1:d5:08:d1:0d:e1:7a: f2:f6:01:c0:5d:14:ef:36:22:c2:42:b9:30:a2:b3: 1b:bc:e0:f0:6c:a0:00:ce:f6:b9:95:9c:e7:d3:f3: 27:45:c5:d4:61:7f:e2:04:28:50:97:75:91:13:f0: e3:95:28:24:c4:c2:6d:ec:21:9d:27:7c:68:d4:17: 63:0c:fa:3a:57:9b:5d:d9:c4:ae:ca:20:99:cb:28: 84:17:0e:32:10:fb:17:9d:d1:60:96:91:cf:a6:5f: c4:8c:0b:d9:c0:9c:c6:00:e6:76:aa:4b:bf:93:46: bf:e6:7f:52:75:78:63:ce:a5:84:41:af:76:e0:13: be:53:a6:11:7e:39:25:39:7f:be:ef:0c:fa:5a:4a: d7:a0:45:e0:cf:eb:03:8b:59:ba:a4:07:99:a4:c7: c1:ba:5b:31:b0:15:e4:04:e6:63:91:4b:f1:4a:ad: 0e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:94:51:20:B0:59:F0:CE:4D:B3:F5:04:F6:60:82:98:A3:DE:44:76 X509v3 Authority Key Identifier: keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/t5RRILBZ8M5Ns_UE9mCCmKPeRHY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.254.156.0/23 Signature Algorithm: sha256WithRSAEncryption b8:a4:b2:a7:40:67:eb:af:6a:d3:68:00:63:86:ec:73:66:2c: ae:68:bf:23:c4:70:76:e2:74:0a:ab:b8:5e:a9:f8:33:6c:a2: 91:92:3b:0e:6d:39:88:8f:ee:7d:e0:9c:3d:bc:8f:b4:d3:3a: b8:20:3d:b3:ad:ee:e5:d9:56:24:2f:01:79:22:74:fd:b6:e8: b6:f3:c5:68:06:f6:f8:53:de:ce:aa:60:20:f8:b6:38:7c:14: 63:58:f9:7b:83:8e:58:79:f3:6b:2a:fc:46:17:a5:8a:04:58: bf:0b:1f:0a:78:04:4f:c8:c9:55:c1:3e:5e:5a:a4:31:8f:0d: bf:d5:22:1b:1a:c5:c4:5a:5a:07:a5:ce:cc:99:e5:a5:2e:ae: b4:9f:f2:85:e4:a9:db:a4:e9:86:80:ad:b2:6d:3b:2f:24:c1: 92:76:1b:49:68:26:4d:18:06:4f:27:6b:44:41:78:df:35:89: c2:85:4d:ec:51:09:84:77:c4:c5:14:44:ad:f2:8f:f5:d7:30: 09:fc:a1:8c:94:2c:1f:16:78:7e:29:c8:1d:c1:ae:be:50:d7: 6a:a4:64:fa:3a:02:ae:60:f8:e4:f1:89:78:a0:15:39:31:82: 86:69:c1:3d:3d:dd:c7:df:b3:d4:17:d3:1e:df:1c:2a:e5:df: e5:e7:24:2c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x871AFUPsGi2ALnR7I22MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm YzQxZWMwHhcNMjYwMTAxMTgxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzk0NTEyMGIwNTlmMGNlNGRiM2Y1MDRmNjYwODI5OGEzZGU0NDc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcVVX4LP5bXsO+zkgcZ0DLDuacGG 0vD9ha+mh14OdZ1M4hsMBJGX9I957Wnk1rVWvL0pdE1l26vv/IF4NLPRaOVB7g8m Ynw1Z0dnR5jqpm5JXaHVCNEN4Xry9gHAXRTvNiLCQrkworMbvODwbKAAzva5lZzn 0/MnRcXUYX/iBChQl3WRE/DjlSgkxMJt7CGdJ3xo1BdjDPo6V5td2cSuyiCZyyiE Fw4yEPsXndFglpHPpl/EjAvZwJzGAOZ2qku/k0a/5n9SdXhjzqWEQa924BO+U6YR fjklOX++7wz6WkrXoEXgz+sDi1m6pAeZpMfBulsxsBXkBOZjkUvxSq0OYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLeUUSCwWfDOTbP1BPZggpij3kR2MB8GA1UdIwQY MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt NTU1NGQ2ZTE2ODZmLzEvdDVSUklMQlo4TTVOc19VRTltQ0NtS1BlUkhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVf6cMA0G CSqGSIb3DQEBCwUAA4IBAQC4pLKnQGfrr2rTaABjhuxzZiyuaL8jxHB24nQKq7he qfgzbKKRkjsObTmIj+594Jw9vI+00zq4ID2zre7l2VYkLwF5InT9tui288VoBvb4 U97OqmAg+LY4fBRjWPl7g45YefNrKvxGF6WKBFi/Cx8KeARPyMlVwT5eWqQxjw2/ 1SIbGsXEWloHpc7MmeWlLq60n/KF5KnbpOmGgK2ybTsvJMGSdhtJaCZNGAZPJ2tE QXjfNYnChU3sUQmEd8TFFESt8o/11zAJ/KGMlCwfFnh+Kcgdwa6+UNdqpGT6OgKu YPjk8Yl4oBU5MYKGacE9Pd3H37PUF9Me3xwq5d/l5yQs -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:57 2026 by rpki-client