This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/5Zndcb8EJc7nslqP_7KqvtkxJPw.roa File: 5Zndcb8EJc7nslqP_7KqvtkxJPw.roa (raw, json) Hash identifier: ogNnDwO6cHFOhG9TbGz5GUJ2wMKx53CTMIlKdOAYy7U= Subject key identifier: E5:99:DD:71:BF:04:25:CE:E7:B2:5A:8F:FF:B2:AA:BE:D9:31:24:FC Certificate issuer: /CN=cd394757e1416202a4022956dbf48d707458520c Certificate serial: 019B7910E06E79CBE4628A5DA846259DBB3C Authority key identifier: CD:39:47:57:E1:41:62:02:A4:02:29:56:DB:F4:8D:70:74:58:52:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/5Zndcb8EJc7nslqP_7KqvtkxJPw.roa Signing time: Thu 01 Jan 2026 10:18:27 +0000 ROA not before: Thu 01 Jan 2026 10:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 185.39.10.0/24 maxlen: 24 2a12:1b80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.crl rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:e0:6e:79:cb:e4:62:8a:5d:a8:46:25:9d:bb:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd394757e1416202a4022956dbf48d707458520c Validity Not Before: Jan 1 10:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e599dd71bf0425cee7b25a8fffb2aabed93124fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d9:0e:3e:5c:4a:2e:3f:07:a0:b6:79:d5:dd: 1c:4f:9b:96:00:4a:48:93:68:ce:4b:24:24:89:0f: 38:36:a8:c2:6a:84:a1:30:c0:e2:00:7d:6f:a9:3e: 45:ce:9b:1d:fe:5e:8b:e1:e5:53:9e:fa:43:2b:fb: 6b:64:ad:09:62:fd:08:9c:c4:77:9a:6a:b4:13:63: 84:86:0c:e4:cf:98:07:c9:0b:37:e0:84:2b:1c:85: a6:21:75:76:65:88:00:c2:03:0f:9d:0a:8c:46:a6: 58:43:97:70:1a:48:9e:b7:1c:ed:47:60:ff:92:69: 41:5d:34:1d:ee:13:51:e4:61:db:23:7b:b8:45:09: 4c:7a:4b:61:97:5f:5a:14:e2:24:04:83:3c:da:57: f0:78:fe:33:64:67:d1:8e:48:a5:1e:99:c1:c1:6f: 30:c5:53:ab:cc:5d:be:b0:ea:96:e8:93:72:dc:65: 26:1d:69:9f:6b:b1:95:15:c5:19:b4:2d:78:ef:47: 60:80:86:75:e7:7b:a8:05:3a:0f:45:94:c2:e7:35: 09:1e:cc:80:d3:e4:cb:c1:c2:19:d4:9b:df:31:4b: 8a:ff:ae:5a:11:24:66:be:a2:b0:f3:73:1b:70:ea: b1:64:74:c5:39:8a:21:70:44:e8:25:b9:32:e5:9b: 92:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:99:DD:71:BF:04:25:CE:E7:B2:5A:8F:FF:B2:AA:BE:D9:31:24:FC X509v3 Authority Key Identifier: keyid:CD:39:47:57:E1:41:62:02:A4:02:29:56:DB:F4:8D:70:74:58:52:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/5Zndcb8EJc7nslqP_7KqvtkxJPw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.39.10.0/24 IPv6: 2a12:1b80::/32 Signature Algorithm: sha256WithRSAEncryption 2b:55:5a:be:55:ee:09:34:72:b6:a1:cd:af:9d:dc:18:ad:ed: e6:e6:92:1e:95:76:68:34:32:00:05:0c:29:69:19:66:75:be: 46:2a:95:f4:18:0a:14:32:67:d4:95:33:69:8b:95:54:4b:38: b2:c7:87:38:6d:01:d6:e2:67:ca:01:6f:55:b9:e8:0a:67:26: 87:51:a5:2f:1b:5f:8c:da:f2:34:52:7f:7c:f6:53:21:07:53: 99:ae:b1:82:17:02:83:94:8f:83:2d:f7:b8:40:2f:0c:5b:95: 73:2d:78:96:3e:35:88:18:42:ab:5a:cd:6b:e3:8a:09:db:83: 3b:8d:ae:fa:b6:be:6b:6f:76:c8:fe:94:22:a3:f0:3d:24:7e: 51:cc:b2:0a:f7:39:a4:c6:57:44:5a:21:69:f9:dc:95:df:2e: a1:e1:a7:43:35:51:6f:db:63:9a:35:b8:2f:22:e3:ab:31:e1: 86:69:7f:7f:bf:b0:48:3d:44:35:f0:87:45:24:00:d2:aa:68: 0c:a9:80:bd:f8:f8:43:fa:ad:83:23:e9:fd:29:aa:e5:5b:d3: 78:9b:a5:8e:e5:b4:97:6c:a2:81:d7:3e:71:84:17:67:d6:c1: 91:d8:01:2f:74:69:a6:01:ad:28:14:4e:77:75:7a:c0:43:9e: e6:69:5e:19 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5EOBuecvkYopdqEYlnbs8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMzk0NzU3ZTE0MTYyMDJhNDAyMjk1NmRiZjQ4ZDcwNzQ1 ODUyMGMwHhcNMjYwMTAxMTAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTk5ZGQ3MWJmMDQyNWNlZTdiMjVhOGZmZmIyYWFiZWQ5MzEyNGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9kOPlxKLj8HoLZ51d0cT5uWAEpI k2jOSyQkiQ84NqjCaoShMMDiAH1vqT5Fzpsd/l6L4eVTnvpDK/trZK0JYv0InMR3 mmq0E2OEhgzkz5gHyQs34IQrHIWmIXV2ZYgAwgMPnQqMRqZYQ5dwGkietxztR2D/ kmlBXTQd7hNR5GHbI3u4RQlMekthl19aFOIkBIM82lfweP4zZGfRjkilHpnBwW8w xVOrzF2+sOqW6JNy3GUmHWmfa7GVFcUZtC1470dggIZ153uoBToPRZTC5zUJHsyA 0+TLwcIZ1JvfMUuK/65aESRmvqKw83MbcOqxZHTFOYohcEToJbky5ZuSUwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOWZ3XG/BCXO57Jaj/+yqr7ZMST8MB8GA1UdIwQY MBaAFM05R1fhQWICpAIpVtv0jXB0WFIMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelRsSFYtRkJZZ0trQWlsVzJfU05jSFJZVWd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi85NzVlNGYtNmMyNi00NGJiLTlhZGEt MmZjNmQxN2Y4YjU4LzEvNVpuZGNiOEVKYzduc2xxUF83S3F2dGt4SlB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi85NzVlNGYtNmMyNi00NGJiLTlhZGEtMmZjNmQxN2Y4YjU4 LzEvelRsSFYtRkJZZ0trQWlsVzJfU05jSFJZVWd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuScKMA0E AgACMAcDBQAqEhuAMA0GCSqGSIb3DQEBCwUAA4IBAQArVVq+Ve4JNHK2oc2vndwY re3m5pIelXZoNDIABQwpaRlmdb5GKpX0GAoUMmfUlTNpi5VUSziyx4c4bQHW4mfK AW9VuegKZyaHUaUvG1+M2vI0Un989lMhB1OZrrGCFwKDlI+DLfe4QC8MW5VzLXiW PjWIGEKrWs1r44oJ24M7ja76tr5rb3bI/pQio/A9JH5RzLIK9zmkxldEWiFp+dyV 3y6h4adDNVFv22OaNbgvIuOrMeGGaX9/v7BIPUQ18IdFJADSqmgMqYC9+PhD+q2D I+n9KarlW9N4m6WO5bSXbKKB1z5xhBdn1sGR2AEvdGmmAa0oFE53dXrAQ57maV4Z -----END CERTIFICATE-----Generated at Fri Jan 2 11:03:58 2026 by rpki-client