This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/5FGHLdK72qHzzMVR761PYkr0_B8.roa File: 5FGHLdK72qHzzMVR761PYkr0_B8.roa (raw, json) Hash identifier: UFVl1rQ+AMtmM2jj8l8YxQbgnT/lIb1Y+3O5KmViWAw= Subject key identifier: E4:51:87:2D:D2:BB:DA:A1:F3:CC:C5:51:EF:AD:4F:62:4A:F4:FC:1F Certificate issuer: /CN=34fe6b9d0cc1e7f6e16b2a46b42ca5e01c700346 Certificate serial: 019B7F152E2C77A9ABBB1C31BB990A2F61CE Authority key identifier: 34:FE:6B:9D:0C:C1:E7:F6:E1:6B:2A:46:B4:2C:A5:E0:1C:70:03:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/5FGHLdK72qHzzMVR761PYkr0_B8.roa Signing time: Fri 02 Jan 2026 14:20:52 +0000 ROA not before: Fri 02 Jan 2026 14:20:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13335 IP address blocks: 185.156.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:2e:2c:77:a9:ab:bb:1c:31:bb:99:0a:2f:61:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34fe6b9d0cc1e7f6e16b2a46b42ca5e01c700346 Validity Not Before: Jan 2 14:20:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e451872dd2bbdaa1f3ccc551efad4f624af4fc1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:53:40:a6:51:21:ce:32:10:45:43:4e:99:00: d3:87:78:b2:4a:5d:8a:bb:4b:66:d2:15:e8:99:2c: 9b:68:a7:13:14:3d:26:01:d9:45:c3:76:31:f5:95: d7:80:80:90:97:37:51:2c:49:13:5b:35:0e:db:63: b2:d9:df:6a:7e:c7:27:6e:e0:f7:dd:f5:b6:9b:da: fa:a5:70:c5:05:f3:e7:8b:df:b9:bb:98:cf:7b:ae: 91:11:9a:b7:9e:54:e5:6a:6c:e2:46:45:f5:4d:b8: 76:f0:f8:0d:66:3b:5e:52:3f:f5:38:ea:f4:76:97: ba:c8:8a:11:fc:76:b2:26:22:8b:df:c2:5b:d6:91: eb:af:3a:4b:b1:08:73:94:62:18:60:1e:2f:8a:86: 30:f1:4d:f3:9b:00:6e:92:81:d6:51:99:b0:3c:42: 8d:f8:7e:63:c3:64:5d:ca:13:bd:2c:d2:2d:01:88: fc:86:c3:79:19:e3:75:c2:ba:f5:ce:df:19:48:f0: f9:f6:0c:9e:11:0b:f0:39:dc:f4:d2:f7:1d:4e:01: 39:ea:bc:bf:30:f4:6c:bb:5d:4d:3d:1a:57:07:9e: 63:08:65:99:eb:48:65:54:aa:f3:99:97:3a:cd:cd: 2f:ae:b2:9a:84:7e:5d:64:a4:f8:ee:df:03:fc:cc: 39:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:51:87:2D:D2:BB:DA:A1:F3:CC:C5:51:EF:AD:4F:62:4A:F4:FC:1F X509v3 Authority Key Identifier: keyid:34:FE:6B:9D:0C:C1:E7:F6:E1:6B:2A:46:B4:2C:A5:E0:1C:70:03:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/5FGHLdK72qHzzMVR761PYkr0_B8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.156.19.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:db:50:97:6b:df:c2:56:24:e5:db:e3:14:e7:4b:1c:e1:e5: 56:a1:01:78:a8:0c:31:e5:d3:c1:67:aa:fc:5d:3d:53:5e:47: 83:af:5b:6b:97:f8:6b:c6:05:f4:7c:e3:ae:41:43:d3:3b:79: a8:d3:6c:a5:99:4f:2c:09:19:25:e7:b6:98:ba:90:ad:2e:05: a1:f4:28:6c:b6:57:ff:ad:2e:d6:2b:be:04:3f:31:be:f9:c9: fa:4d:4f:02:8b:76:e6:07:7e:d7:6f:bb:a5:89:93:15:e5:7d: 51:ce:46:74:17:52:d5:14:e0:4a:34:3f:14:25:3c:2a:d8:ab: 26:d9:9b:72:24:03:b6:52:99:e9:f3:b5:93:99:e2:b9:42:1d: 98:2d:0e:92:12:d4:86:74:b4:be:d4:28:17:d0:65:39:b2:cb: 64:79:a5:f7:f3:55:91:e4:fd:32:2b:48:88:32:2e:d0:cb:bb: 97:75:9c:f9:62:3e:c7:70:6b:38:02:72:e9:59:db:b4:94:49: 6e:ef:c7:01:fb:27:7f:92:53:c8:e5:29:26:e6:78:82:d7:57: b5:b0:ff:57:e7:7c:54:66:fe:da:49:4a:e4:60:68:ab:73:c5: 7f:3a:58:23:d9:36:bf:4d:1e:cf:de:c0:e6:d3:52:f2:7b:ea: 32:96:83:67 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FS4sd6mruxwxu5kKL2HOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZmU2YjlkMGNjMWU3ZjZlMTZiMmE0NmI0MmNhNWUwMWM3 MDAzNDYwHhcNMjYwMTAyMTQyMDUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDUxODcyZGQyYmJkYWExZjNjY2M1NTFlZmFkNGY2MjRhZjRmYzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1NAplEhzjIQRUNOmQDTh3iySl2K u0tm0hXomSybaKcTFD0mAdlFw3Yx9ZXXgICQlzdRLEkTWzUO22Oy2d9qfscnbuD3 3fW2m9r6pXDFBfPni9+5u5jPe66REZq3nlTlamziRkX1Tbh28PgNZjteUj/1OOr0 dpe6yIoR/HayJiKL38Jb1pHrrzpLsQhzlGIYYB4vioYw8U3zmwBukoHWUZmwPEKN +H5jw2RdyhO9LNItAYj8hsN5GeN1wrr1zt8ZSPD59gyeEQvwOdz00vcdTgE56ry/ MPRsu11NPRpXB55jCGWZ60hlVKrzmZc6zc0vrrKahH5dZKT47t8D/Mw5gQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFORRhy3Su9qh88zFUe+tT2JK9PwfMB8GA1UdIwQY MBaAFDT+a50Mwef24WsqRrQspeAccANGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlA1cm5RekI1X2JoYXlwR3RDeWw0Qnh3QTBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC82MmRmMzYtZmQzNi00YmFmLTlkMmUt MTE4YWZlZDdhNWFlLzEvNUZHSExkSzcycUh6ek1WUjc2MVBZa3IwX0I4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC82MmRmMzYtZmQzNi00YmFmLTlkMmUtMTE4YWZlZDdhNWFl LzEvTlA1cm5RekI1X2JoYXlwR3RDeWw0Qnh3QTBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZwTMA0G CSqGSIb3DQEBCwUAA4IBAQB621CXa9/CViTl2+MU50sc4eVWoQF4qAwx5dPBZ6r8 XT1TXkeDr1trl/hrxgX0fOOuQUPTO3mo02ylmU8sCRkl57aYupCtLgWh9Chstlf/ rS7WK74EPzG++cn6TU8Ci3bmB37Xb7uliZMV5X1RzkZ0F1LVFOBKND8UJTwq2Ksm 2ZtyJAO2Upnp87WTmeK5Qh2YLQ6SEtSGdLS+1CgX0GU5sstkeaX381WR5P0yK0iI Mi7Qy7uXdZz5Yj7HcGs4AnLpWdu0lElu78cB+yd/klPI5Skm5niC11e1sP9X53xU Zv7aSUrkYGirc8V/Olgj2Ta/TR7P3sDm01Lye+oyloNn -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:14 2026 by rpki-client