This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/5x6qWCzoJG3KY_TYsy8MdSiC918.roa File: 5x6qWCzoJG3KY_TYsy8MdSiC918.roa (raw, json) Hash identifier: LaC7uWVHBNvm8XGrxyiJJ+Lt0TLrpDAzF9aOvhKJOZE= Subject key identifier: E7:1E:AA:58:2C:E8:24:6D:CA:63:F4:D8:B3:2F:0C:75:28:82:F7:5F Certificate issuer: /CN=40479ea562dd3a7d0cf2a6e978b6bbf378f73ce4 Certificate serial: 019B7C134630B7FF73AE7F2475168B58ECA1 Authority key identifier: 40:47:9E:A5:62:DD:3A:7D:0C:F2:A6:E9:78:B6:BB:F3:78:F7:3C:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QEeepWLdOn0M8qbpeLa783j3POQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/5x6qWCzoJG3KY_TYsy8MdSiC918.roa Signing time: Fri 02 Jan 2026 00:19:56 +0000 ROA not before: Fri 02 Jan 2026 00:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60407 IP address blocks: 185.31.124.0/22 maxlen: 22 185.31.124.0/23 maxlen: 23 185.31.124.0/24 maxlen: 24 185.31.125.0/24 maxlen: 24 185.31.126.0/23 maxlen: 23 185.31.126.0/24 maxlen: 24 185.31.127.0/24 maxlen: 24 2a00:bc60::/30 maxlen: 30 2a00:bc60::/32 maxlen: 32 2a00:bc61::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.mft rsync://rpki.ripe.net/repository/DEFAULT/QEeepWLdOn0M8qbpeLa783j3POQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:46:30:b7:ff:73:ae:7f:24:75:16:8b:58:ec:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40479ea562dd3a7d0cf2a6e978b6bbf378f73ce4 Validity Not Before: Jan 2 00:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e71eaa582ce8246dca63f4d8b32f0c752882f75f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e5:22:bb:d0:8e:61:6e:3f:09:42:37:4e:51: 6c:8a:b7:a0:92:e4:60:6e:45:5a:d8:72:89:84:c7: bc:6f:29:09:6a:dc:b7:29:0e:22:72:14:32:b6:86: 3a:75:97:d8:25:9d:c6:03:10:74:cb:df:c4:f4:e5: 1a:9a:ce:b2:cd:33:25:95:dc:2c:45:da:3c:4d:2f: 10:49:49:21:a4:c6:3c:b4:8f:ec:94:f6:71:36:4e: 7d:ee:29:05:e4:9c:ca:f5:4b:33:00:5a:47:e9:04: c6:41:ad:bd:ca:a5:58:df:a5:cc:14:70:92:1a:61: 79:3e:bf:c3:2f:01:20:d8:98:a2:6f:e1:b4:84:22: 3f:7d:12:a6:3b:ef:b6:2b:5d:58:8b:3b:5e:8a:21: 33:a7:28:cb:ab:a5:bf:bf:ef:54:86:7b:14:9e:86: 52:6b:6a:08:ca:24:1b:97:c5:55:e4:5c:33:3e:37: 53:17:b8:62:6d:76:30:3c:90:78:7a:cb:55:09:da: 6a:70:1f:ff:c8:f0:d3:60:c6:cc:2d:6b:c9:68:a0: 1e:2a:45:94:5e:e6:df:7f:63:a8:0e:79:14:16:54: c0:48:7e:d4:ff:c0:97:7a:8c:d2:64:ad:02:a0:27: 6b:23:d6:56:d0:cd:f7:92:03:26:09:4b:8e:7e:27: 0a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:1E:AA:58:2C:E8:24:6D:CA:63:F4:D8:B3:2F:0C:75:28:82:F7:5F X509v3 Authority Key Identifier: keyid:40:47:9E:A5:62:DD:3A:7D:0C:F2:A6:E9:78:B6:BB:F3:78:F7:3C:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QEeepWLdOn0M8qbpeLa783j3POQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/5x6qWCzoJG3KY_TYsy8MdSiC918.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.31.124.0/22 IPv6: 2a00:bc60::/30 Signature Algorithm: sha256WithRSAEncryption d7:b7:2a:24:b8:e0:1a:aa:c9:3c:7c:35:ea:d9:13:48:78:a9: 95:63:2f:76:12:f8:b6:a1:af:ae:9b:31:dc:10:8b:63:19:8f: 7d:72:36:d6:0c:ac:5b:45:82:b4:2a:40:c7:ad:8c:f9:84:22: 18:ed:83:7d:24:bf:b1:92:64:a1:c6:c7:82:43:ff:f6:cb:16: ef:c3:c4:14:0e:aa:50:d3:66:0a:f1:8b:f1:30:07:ca:0a:ee: 8d:04:63:3d:af:85:bb:a4:50:4d:35:8b:c5:96:fc:4a:83:b0: 69:3d:4c:bf:63:c3:a5:49:ca:8f:d6:a1:5f:f0:b4:e4:2b:c5: 50:f4:fe:d7:58:01:0c:dc:75:06:23:66:fa:cf:64:a0:c1:f8: cf:07:7b:47:ac:b1:25:d2:ab:49:bc:47:85:02:bd:32:45:ac: f5:91:3c:76:be:76:0b:0d:3a:2e:1b:56:3c:8a:e7:aa:73:05: 9f:cb:2f:37:7d:cb:f0:01:9d:80:98:4b:52:60:f7:aa:4e:4e: e3:a8:fe:7c:6c:44:ae:af:43:3e:0d:6b:33:c7:58:c9:a0:b8: 84:79:fe:c0:4d:56:64:ab:aa:1f:fc:ff:72:60:76:19:d9:f4: c5:3a:d8:3b:19:46:dd:74:1f:52:68:49:d9:d6:4a:e0:43:16: c0:c1:46:79 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8E0Ywt/9zrn8kdRaLWOyhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwNDc5ZWE1NjJkZDNhN2QwY2YyYTZlOTc4YjZiYmYzNzhm NzNjZTQwHhcNMjYwMTAyMDAxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzFlYWE1ODJjZTgyNDZkY2E2M2Y0ZDhiMzJmMGM3NTI4ODJmNzVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOUiu9COYW4/CUI3TlFsiregkuRg bkVa2HKJhMe8bykJaty3KQ4ichQytoY6dZfYJZ3GAxB0y9/E9OUams6yzTMlldws Rdo8TS8QSUkhpMY8tI/slPZxNk597ikF5JzK9UszAFpH6QTGQa29yqVY36XMFHCS GmF5Pr/DLwEg2Jiib+G0hCI/fRKmO++2K11YizteiiEzpyjLq6W/v+9UhnsUnoZS a2oIyiQbl8VV5FwzPjdTF7hibXYwPJB4estVCdpqcB//yPDTYMbMLWvJaKAeKkWU Xubff2OoDnkUFlTASH7U/8CXeozSZK0CoCdrI9ZW0M33kgMmCUuOficK3wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOceqlgs6CRtymP02LMvDHUogvdfMB8GA1UdIwQY MBaAFEBHnqVi3Tp9DPKm6Xi2u/N49zzkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUVlZXBXTGRPbjBNOHFicGVMYTc4M2ozUE9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9lNzRhNTgtYmI5ZS00YWU5LWE3NDYt ODkzNmYwOTFmNGY0LzEvNXg2cVdDem9KRzNLWV9UWXN5OE1kU2lDOTE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy9lNzRhNTgtYmI5ZS00YWU5LWE3NDYtODkzNmYwOTFmNGY0 LzEvUUVlZXBXTGRPbjBNOHFicGVMYTc4M2ozUE9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuR98MA0E AgACMAcDBQIqALxgMA0GCSqGSIb3DQEBCwUAA4IBAQDXtyokuOAaqsk8fDXq2RNI eKmVYy92Evi2oa+umzHcEItjGY99cjbWDKxbRYK0KkDHrYz5hCIY7YN9JL+xkmSh xseCQ//2yxbvw8QUDqpQ02YK8YvxMAfKCu6NBGM9r4W7pFBNNYvFlvxKg7BpPUy/ Y8OlScqP1qFf8LTkK8VQ9P7XWAEM3HUGI2b6z2SgwfjPB3tHrLEl0qtJvEeFAr0y Raz1kTx2vnYLDTouG1Y8iueqcwWfyy83fcvwAZ2AmEtSYPeqTk7jqP58bESur0M+ DWszx1jJoLiEef7ATVZkq6of/P9yYHYZ2fTFOtg7GUbddB9SaEnZ1krgQxbAwUZ5 -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:34 2026 by rpki-client