This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/5qmQBJY9nS-ThW2VIsiq82K4ROo.roa File: 5qmQBJY9nS-ThW2VIsiq82K4ROo.roa (raw, json) Hash identifier: qtSbqLGpdB+fMuYOL42oGDLEwXGZ4BQ94eKiUC1Bh4k= Subject key identifier: E6:A9:90:04:96:3D:9D:2F:93:85:6D:95:22:C8:AA:F3:62:B8:44:EA Certificate issuer: /CN=8ad37a9933b052c2f12ef1b8f14d74f05fddb611 Certificate serial: 019B7BA327B8A8B3460C6B6BBB0E37AF7B12 Authority key identifier: 8A:D3:7A:99:33:B0:52:C2:F1:2E:F1:B8:F1:4D:74:F0:5F:DD:B6:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/5qmQBJY9nS-ThW2VIsiq82K4ROo.roa Signing time: Thu 01 Jan 2026 22:17:28 +0000 ROA not before: Thu 01 Jan 2026 22:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50902 IP address blocks: 185.253.5.0/24 maxlen: 24 193.110.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:27:b8:a8:b3:46:0c:6b:6b:bb:0e:37:af:7b:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad37a9933b052c2f12ef1b8f14d74f05fddb611 Validity Not Before: Jan 1 22:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e6a99004963d9d2f93856d9522c8aaf362b844ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b1:97:2e:24:78:14:61:7b:f6:fe:3d:d5:fd: 4f:6e:4f:ae:3c:a0:ee:94:4d:9a:15:c0:72:59:c9: c1:88:68:a4:21:f7:cf:9a:e8:7b:19:77:2d:d5:34: 91:80:a6:71:7a:e9:02:bc:84:d7:ee:79:87:87:0d: 80:27:8e:16:2b:69:ba:2e:8d:35:e0:2c:80:5e:45: 48:f9:f4:b1:d3:9b:13:7a:a1:9a:ee:ff:13:99:0d: d9:60:4b:01:09:bc:35:13:63:12:8f:99:e8:c0:d3: 58:5a:08:e4:43:6c:9a:1c:6b:4b:14:42:ed:1b:54: ba:1f:cf:2e:90:51:c3:ee:46:3f:56:40:4b:01:48: 87:53:1e:69:a2:ac:e8:69:fd:33:ac:66:6e:49:50: db:e5:68:f6:ca:6d:ea:e4:a8:4e:d7:da:3d:01:cc: ca:87:c9:ba:fa:6c:99:b7:7d:8e:99:08:f8:a9:a1: fd:c6:ad:43:0a:5a:86:f6:74:60:10:8d:08:cf:99: 11:1e:28:33:24:a6:88:69:20:ff:00:79:45:21:be: 29:cf:d0:06:ac:43:07:a0:23:42:51:3f:17:85:c4: b9:ce:0c:bc:c0:9b:bb:bc:49:47:4a:39:d6:74:2b: a6:95:ee:df:46:88:80:b1:7a:f0:cb:57:98:c8:85: c2:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:A9:90:04:96:3D:9D:2F:93:85:6D:95:22:C8:AA:F3:62:B8:44:EA X509v3 Authority Key Identifier: keyid:8A:D3:7A:99:33:B0:52:C2:F1:2E:F1:B8:F1:4D:74:F0:5F:DD:B6:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/5qmQBJY9nS-ThW2VIsiq82K4ROo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.253.5.0/24 193.110.81.0/24 Signature Algorithm: sha256WithRSAEncryption 49:90:a7:b4:0c:db:09:1e:55:ac:37:4e:4d:b4:e1:cb:72:f1: 86:08:56:d8:58:8f:d8:b9:69:80:fa:71:36:1e:9a:e8:60:f4: 47:8d:eb:e5:dc:d1:e2:65:60:1f:8f:cf:80:33:4a:3e:13:2d: ba:4a:f1:31:5a:31:b8:00:b0:23:63:06:63:16:35:b0:02:c1: 23:08:dd:15:b8:b6:1b:98:f8:fd:c9:b7:f8:51:52:a8:7e:cf: 9e:80:1a:bc:77:c1:6c:27:ab:3e:91:28:1f:2c:d2:5c:fe:63: cf:02:23:10:d7:96:be:3f:9e:f6:92:2d:c8:55:1c:a4:92:2c: a1:ff:28:e1:15:57:cd:cd:db:b4:5a:b8:08:c8:d9:b7:a8:05: 31:af:58:1f:fe:8e:7c:ef:cc:7f:a1:9a:71:12:e9:c0:fb:64: 52:a2:61:06:a0:96:12:f4:8d:a4:0d:04:9d:56:ca:0d:c1:0e: 6c:ea:96:23:3a:89:73:33:52:9a:90:fd:be:ff:b9:d1:04:a4: 96:d3:cb:04:5b:c0:83:41:dc:16:55:ab:76:4e:da:93:0e:07: b3:20:79:c6:00:78:79:78:c0:51:93:9b:93:de:79:2b:21:fc: 5b:94:7e:b8:95:9a:f7:af:eb:63:0b:6b:f6:be:a4:75:c8:e8: e1:f5:3a:c2 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7oye4qLNGDGtruw43r3sSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhZDM3YTk5MzNiMDUyYzJmMTJlZjFiOGYxNGQ3NGYwNWZk ZGI2MTEwHhcNMjYwMTAxMjIxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNmE5OTAwNDk2M2Q5ZDJmOTM4NTZkOTUyMmM4YWFmMzYyYjg0NGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47GXLiR4FGF79v491f1Pbk+uPKDu lE2aFcByWcnBiGikIffPmuh7GXct1TSRgKZxeukCvITX7nmHhw2AJ44WK2m6Lo01 4CyAXkVI+fSx05sTeqGa7v8TmQ3ZYEsBCbw1E2MSj5nowNNYWgjkQ2yaHGtLFELt G1S6H88ukFHD7kY/VkBLAUiHUx5poqzoaf0zrGZuSVDb5Wj2ym3q5KhO19o9AczK h8m6+myZt32OmQj4qaH9xq1DClqG9nRgEI0Iz5kRHigzJKaIaSD/AHlFIb4pz9AG rEMHoCNCUT8XhcS5zgy8wJu7vElHSjnWdCumle7fRoiAsXrwy1eYyIXCpQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOapkASWPZ0vk4VtlSLIqvNiuETqMB8GA1UdIwQY MBaAFIrTepkzsFLC8S7xuPFNdPBf3bYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXRONm1UT3dVc0x4THZHNDhVMTA4Rl9kdGhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8zZTMxMjYtM2Y0Zi00OGU5LWFiZWYt NWNiMTFhMzY4ZDEwLzEvNXFtUUJKWTluUy1UaFcyVklzaXE4Mks0Uk9vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi8zZTMxMjYtM2Y0Zi00OGU5LWFiZWYtNWNiMTFhMzY4ZDEw LzEvaXRONm1UT3dVc0x4THZHNDhVMTA4Rl9kdGhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuf0FAwQA wW5RMA0GCSqGSIb3DQEBCwUAA4IBAQBJkKe0DNsJHlWsN05NtOHLcvGGCFbYWI/Y uWmA+nE2HproYPRHjevl3NHiZWAfj8+AM0o+Ey26SvExWjG4ALAjYwZjFjWwAsEj CN0VuLYbmPj9ybf4UVKofs+egBq8d8FsJ6s+kSgfLNJc/mPPAiMQ15a+P572ki3I VRykkiyh/yjhFVfNzdu0WrgIyNm3qAUxr1gf/o5878x/oZpxEunA+2RSomEGoJYS 9I2kDQSdVsoNwQ5s6pYjOolzM1KakP2+/7nRBKSW08sEW8CDQdwWVat2TtqTDgez IHnGAHh5eMBRk5uT3nkrIfxblH64lZr3r+tjC2v2vqR1yOjh9TrC -----END CERTIFICATE-----Generated at Mon Feb 9 23:44:49 2026 by rpki-client