This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/5MfrvFJHqhqYrR1Oc9h-OkMPeG4.roa File: 5MfrvFJHqhqYrR1Oc9h-OkMPeG4.roa (raw, json) Hash identifier: QQ5YRKyPOHLwW62MQSDhBmGI/lB6OrTfowyUhMbXM7A= Subject key identifier: E4:C7:EB:BC:52:47:AA:1A:98:AD:1D:4E:73:D8:7E:3A:43:0F:78:6E Certificate issuer: /CN=348fd977ccbe7bb96d3c0f3174c9951bf870feb0 Certificate serial: 019B7F14E44E9470889A754D985A613263BC Authority key identifier: 34:8F:D9:77:CC:BE:7B:B9:6D:3C:0F:31:74:C9:95:1B:F8:70:FE:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/5MfrvFJHqhqYrR1Oc9h-OkMPeG4.roa Signing time: Fri 02 Jan 2026 14:20:34 +0000 ROA not before: Fri 02 Jan 2026 14:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204609 IP address blocks: 185.231.88.0/22 maxlen: 24 185.231.88.0/23 maxlen: 23 185.231.90.0/24 maxlen: 24 185.231.91.0/24 maxlen: 24 2a0d:a680::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.crl rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft rsync://rpki.ripe.net/repository/DEFAULT/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:e4:4e:94:70:88:9a:75:4d:98:5a:61:32:63:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=348fd977ccbe7bb96d3c0f3174c9951bf870feb0 Validity Not Before: Jan 2 14:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4c7ebbc5247aa1a98ad1d4e73d87e3a430f786e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:43:25:f9:02:82:73:05:45:0c:0f:43:4e:c0: 81:af:90:02:51:87:20:39:7f:ff:97:bc:4a:a8:f7: 74:b0:80:57:f2:37:00:a3:36:17:97:c0:9b:e5:2e: f8:06:19:9f:f7:70:ce:65:72:ac:de:04:4b:23:5c: ea:87:fb:74:b1:c6:38:73:92:58:20:18:52:d3:9e: cb:61:1d:77:b0:5b:23:0f:06:56:e5:1e:99:a5:c7: 6d:d6:8c:fa:21:fe:3e:4c:ae:69:d4:47:d5:e8:05: 4d:14:b6:3b:f2:56:ce:6b:0d:f8:2f:f0:70:9e:ae: 55:ba:f2:78:63:3a:28:d4:54:04:b0:ea:19:24:94: a2:9f:6c:34:4f:49:0b:4a:72:98:1c:17:1f:7c:78: 6f:66:bc:4a:4c:70:74:d2:5d:10:f0:81:2c:8a:a7: 19:2e:1a:b5:59:54:e1:9f:f9:3e:4d:65:2a:45:94: a8:ab:1a:31:0b:7e:d4:11:67:b7:95:a7:f0:d5:69: 29:aa:52:84:48:bb:3d:cd:47:6c:1c:a9:5f:be:20: f3:04:63:65:0c:68:d1:7a:cc:5d:a8:3a:0a:c3:75: 04:f8:2b:0c:bf:31:dd:9a:44:ed:9f:8b:ab:af:3b: 57:8c:e7:5d:e2:33:19:3d:1a:86:73:71:37:f3:ea: 17:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:C7:EB:BC:52:47:AA:1A:98:AD:1D:4E:73:D8:7E:3A:43:0F:78:6E X509v3 Authority Key Identifier: keyid:34:8F:D9:77:CC:BE:7B:B9:6D:3C:0F:31:74:C9:95:1B:F8:70:FE:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/5MfrvFJHqhqYrR1Oc9h-OkMPeG4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.231.88.0/22 IPv6: 2a0d:a680::/32 Signature Algorithm: sha256WithRSAEncryption b4:18:1b:69:9c:03:71:1d:4d:05:f6:60:4b:c8:c4:df:c8:0d: 4b:ee:27:c9:3e:d8:ad:73:4a:aa:97:00:12:f2:ef:92:b4:6d: 2c:e6:92:e4:fa:68:ec:f1:9a:05:d4:fc:10:b0:b1:e3:63:e0: 45:88:41:13:24:f9:b8:c1:ed:5f:f1:06:5e:86:25:0d:1f:64: ec:55:6a:c4:93:94:8e:85:d2:f7:7b:40:03:59:28:a7:4f:43: 7b:b3:07:61:68:56:d1:1a:c1:2a:2d:0a:01:21:8f:ea:fe:bf: 35:0a:fb:2a:a1:b8:f9:46:02:d7:c1:92:1c:28:48:31:ae:d8: d3:85:8b:d6:39:f7:97:f4:20:e8:15:18:85:2a:50:6e:44:50: c7:06:09:84:5c:54:1c:09:ef:df:b1:db:dc:a0:d9:ca:cc:ff: c8:fa:4b:d1:da:7e:b0:2c:31:55:37:2e:27:91:cd:e1:03:27: 72:04:a7:ff:81:f5:89:91:85:c4:76:90:07:e3:24:70:9b:a8: 22:5a:48:53:f3:4c:87:90:10:8d:86:ce:6f:8e:3c:f6:4d:ba: 87:78:1b:4c:70:24:60:e2:fb:0a:4e:50:26:47:6a:c6:5d:05: 0f:86:d6:50:78:b3:84:93:d0:41:6d:b9:dc:df:d0:af:71:81: de:18:e6:39 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/FOROlHCImnVNmFphMmO8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0OGZkOTc3Y2NiZTdiYjk2ZDNjMGYzMTc0Yzk5NTFiZjg3 MGZlYjAwHhcNMjYwMTAyMTQyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNGM3ZWJiYzUyNDdhYTFhOThhZDFkNGU3M2Q4N2UzYTQzMGY3ODZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0Ml+QKCcwVFDA9DTsCBr5ACUYcg OX//l7xKqPd0sIBX8jcAozYXl8Cb5S74Bhmf93DOZXKs3gRLI1zqh/t0scY4c5JY IBhS057LYR13sFsjDwZW5R6Zpcdt1oz6If4+TK5p1EfV6AVNFLY78lbOaw34L/Bw nq5VuvJ4Yzoo1FQEsOoZJJSin2w0T0kLSnKYHBcffHhvZrxKTHB00l0Q8IEsiqcZ Lhq1WVThn/k+TWUqRZSoqxoxC37UEWe3lafw1WkpqlKESLs9zUdsHKlfviDzBGNl DGjResxdqDoKw3UE+CsMvzHdmkTtn4urrztXjOdd4jMZPRqGc3E38+oX6wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOTH67xSR6oamK0dTnPYfjpDD3huMB8GA1UdIwQY MBaAFDSP2XfMvnu5bTwPMXTJlRv4cP6wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTklfWmQ4eS1lN2x0UEE4eGRNbVZHX2h3X3JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8wZGY4MDgtNzQ3My00N2IxLTgxN2Yt YmU3NzBlMWU2YzEzLzEvNU1mcnZGSkhxaHFZclIxT2M5aC1Pa01QZUc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8wZGY4MDgtNzQ3My00N2IxLTgxN2YtYmU3NzBlMWU2YzEz LzEvTklfWmQ4eS1lN2x0UEE4eGRNbVZHX2h3X3JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuedYMA0E AgACMAcDBQAqDaaAMA0GCSqGSIb3DQEBCwUAA4IBAQC0GBtpnANxHU0F9mBLyMTf yA1L7ifJPtitc0qqlwAS8u+StG0s5pLk+mjs8ZoF1PwQsLHjY+BFiEETJPm4we1f 8QZehiUNH2TsVWrEk5SOhdL3e0ADWSinT0N7swdhaFbRGsEqLQoBIY/q/r81Cvsq obj5RgLXwZIcKEgxrtjThYvWOfeX9CDoFRiFKlBuRFDHBgmEXFQcCe/fsdvcoNnK zP/I+kvR2n6wLDFVNy4nkc3hAydyBKf/gfWJkYXEdpAH4yRwm6giWkhT80yHkBCN hs5vjjz2TbqHeBtMcCRg4vsKTlAmR2rGXQUPhtZQeLOEk9BBbbnc39CvcYHeGOY5 -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:45 2026 by rpki-client