This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/5gzt4CwT9bvsp9z_Y1cddIfWsTM.roa File: 5gzt4CwT9bvsp9z_Y1cddIfWsTM.roa (raw, json) Hash identifier: m2Bvt7q0tdHrQ2fSHkOtVmTU4O14Tj93KaqVZHF85bA= Subject key identifier: E6:0C:ED:E0:2C:13:F5:BB:EC:A7:DC:FF:63:57:1D:74:87:D6:B1:33 Certificate issuer: /CN=0e91de17437a0025fd1ede10f710f17a3080b3ab Certificate serial: 019B7F8186D5CF08366C3615A256097F49CE Authority key identifier: 0E:91:DE:17:43:7A:00:25:FD:1E:DE:10:F7:10:F1:7A:30:80:B3:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/5gzt4CwT9bvsp9z_Y1cddIfWsTM.roa Signing time: Fri 02 Jan 2026 16:19:13 +0000 ROA not before: Fri 02 Jan 2026 16:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137409 IP address blocks: 185.207.126.0/24 maxlen: 24 185.207.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.crl rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:86:d5:cf:08:36:6c:36:15:a2:56:09:7f:49:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e91de17437a0025fd1ede10f710f17a3080b3ab Validity Not Before: Jan 2 16:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e60cede02c13f5bbeca7dcff63571d7487d6b133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:15:10:75:7f:75:98:84:7e:9d:12:71:3f:ad: de:41:02:4e:59:2c:43:7c:58:59:13:0a:08:22:b0: b7:1c:db:1c:02:29:77:a5:59:d9:80:b6:44:4f:aa: 2e:22:78:c6:b3:4a:40:67:d8:a7:dd:e4:9e:5f:4c: 47:03:e0:b3:21:28:07:7e:2f:ea:6e:fe:47:ac:2f: bd:f1:15:aa:e0:ad:9b:61:24:9e:9b:42:93:98:94: a4:e8:0c:18:60:c5:98:29:c2:c8:ed:c5:77:35:55: 57:29:94:9e:94:ee:01:26:d4:6d:18:89:73:ee:67: 77:59:cb:07:51:5c:76:a3:d6:60:ea:e4:eb:5c:45: 7c:a6:b1:98:7a:84:41:ca:08:5b:ba:d6:a2:f7:b0: 38:22:b4:ba:a7:6a:4a:96:a5:e8:c9:3d:b4:5d:7b: bf:4e:96:09:c0:93:8c:f4:61:a9:aa:da:31:f6:47: 12:10:48:ca:92:9f:ae:03:27:2b:2a:c8:fd:33:ea: 94:96:6e:13:fc:64:92:6f:df:f7:b6:6e:56:77:cd: c7:85:cc:f8:f2:9c:1b:b8:d4:3a:00:41:7e:c2:20: f1:11:73:0e:fd:03:61:a1:bc:9f:2d:44:38:17:1c: 20:cf:86:29:b3:5c:50:43:fa:09:be:9b:45:8c:a1: 52:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:0C:ED:E0:2C:13:F5:BB:EC:A7:DC:FF:63:57:1D:74:87:D6:B1:33 X509v3 Authority Key Identifier: keyid:0E:91:DE:17:43:7A:00:25:FD:1E:DE:10:F7:10:F1:7A:30:80:B3:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/5gzt4CwT9bvsp9z_Y1cddIfWsTM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.207.126.0/23 Signature Algorithm: sha256WithRSAEncryption 10:50:f6:cf:f5:e7:7c:a5:96:71:3b:5d:b1:48:c7:b8:35:28: fe:62:52:71:db:0b:f7:0f:10:3d:ac:4a:d4:2a:c6:fa:35:b4: c9:f8:6d:46:b7:be:1d:1d:1b:8b:16:45:5a:96:ba:cc:a0:cb: 84:b1:4a:5e:df:d1:95:2a:7a:b6:a2:f9:4f:61:d7:43:16:8d: db:d2:fc:c8:42:af:06:79:82:ac:bf:72:84:0d:22:dc:25:a7: 3d:6c:c9:92:38:3d:9c:d2:7f:24:20:77:15:4f:d5:b2:8b:c2: 14:f4:de:82:35:7b:7d:ec:4e:2f:c0:20:e4:51:7d:01:b9:ca: dd:fb:7a:51:78:9a:8f:9f:43:63:e7:32:bf:8f:e4:f4:20:e6: 41:97:31:f8:76:3b:38:65:85:6b:4e:5e:4a:61:a5:3b:8f:41: 36:25:05:81:b6:81:ba:9b:27:0e:59:2f:9c:69:85:e0:eb:a8: 5d:3a:68:e9:e5:4d:77:8d:48:c1:ef:b9:8e:40:00:84:a1:83: 44:78:81:a8:d5:29:b3:07:cb:9b:ca:ac:5b:96:10:58:8c:59: 11:50:cd:f7:bd:05:05:5a:d1:1b:47:46:44:7d:7d:c9:18:e6: 57:2a:3e:6e:80:79:6f:26:6e:5a:af:66:62:a4:f2:ff:ab:51: 70:ca:27:1a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gYbVzwg2bDYVolYJf0nOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlOTFkZTE3NDM3YTAwMjVmZDFlZGUxMGY3MTBmMTdhMzA4 MGIzYWIwHhcNMjYwMTAyMTYxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjBjZWRlMDJjMTNmNWJiZWNhN2RjZmY2MzU3MWQ3NDg3ZDZiMTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxUQdX91mIR+nRJxP63eQQJOWSxD fFhZEwoIIrC3HNscAil3pVnZgLZET6ouInjGs0pAZ9in3eSeX0xHA+CzISgHfi/q bv5HrC+98RWq4K2bYSSem0KTmJSk6AwYYMWYKcLI7cV3NVVXKZSelO4BJtRtGIlz 7md3WcsHUVx2o9Zg6uTrXEV8prGYeoRByghbutai97A4IrS6p2pKlqXoyT20XXu/ TpYJwJOM9GGpqtox9kcSEEjKkp+uAycrKsj9M+qUlm4T/GSSb9/3tm5Wd83Hhcz4 8pwbuNQ6AEF+wiDxEXMO/QNhobyfLUQ4Fxwgz4Yps1xQQ/oJvptFjKFSAQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOYM7eAsE/W77Kfc/2NXHXSH1rEzMB8GA1UdIwQY MBaAFA6R3hdDegAl/R7eEPcQ8XowgLOrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHBIZUYwTjZBQ1g5SHQ0UTl4RHhlakNBczZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9iYWVmNTctYzQ4NC00NTIzLWIxNGUt ODhlYmJmOTk3ODBiLzEvNWd6dDRDd1Q5YnZzcDl6X1kxY2RkSWZXc1RNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9iYWVmNTctYzQ4NC00NTIzLWIxNGUtODhlYmJmOTk3ODBi LzEvRHBIZUYwTjZBQ1g5SHQ0UTl4RHhlakNBczZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuc9+MA0G CSqGSIb3DQEBCwUAA4IBAQAQUPbP9ed8pZZxO12xSMe4NSj+YlJx2wv3DxA9rErU Ksb6NbTJ+G1Gt74dHRuLFkValrrMoMuEsUpe39GVKnq2ovlPYddDFo3b0vzIQq8G eYKsv3KEDSLcJac9bMmSOD2c0n8kIHcVT9Wyi8IU9N6CNXt97E4vwCDkUX0Bucrd +3pReJqPn0Nj5zK/j+T0IOZBlzH4djs4ZYVrTl5KYaU7j0E2JQWBtoG6mycOWS+c aYXg66hdOmjp5U13jUjB77mOQACEoYNEeIGo1SmzB8ubyqxblhBYjFkRUM33vQUF WtEbR0ZEfX3JGOZXKj5ugHlvJm5ar2ZipPL/q1Fwyica -----END CERTIFICATE-----Generated at Mon Jan 19 16:54:43 2026 by rpki-client