This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/5_M5mOxDjDkgwkAca1tXv2jpthQ.roa File: 5_M5mOxDjDkgwkAca1tXv2jpthQ.roa (raw, json) Hash identifier: xBboSwWLCofMIytfTnyu9mKMvX+dSAJG4UOMJtzKnkA= Subject key identifier: E7:F3:39:98:EC:43:8C:39:20:C2:40:1C:6B:5B:57:BF:68:E9:B6:14 Certificate issuer: /CN=db282fd897317c2cadd7b13969f6f015c397e05d Certificate serial: 019B7C7F62CA320E22D4B724EEBF4D6135B8 Authority key identifier: DB:28:2F:D8:97:31:7C:2C:AD:D7:B1:39:69:F6:F0:15:C3:97:E0:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ygv2JcxfCyt17E5afbwFcOX4F0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/5_M5mOxDjDkgwkAca1tXv2jpthQ.roa Signing time: Fri 02 Jan 2026 02:18:01 +0000 ROA not before: Fri 02 Jan 2026 02:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9121 IP address blocks: 185.9.36.0/24 maxlen: 24 185.9.37.0/24 maxlen: 24 185.9.38.0/24 maxlen: 24 185.9.39.0/24 maxlen: 24 185.244.144.0/24 maxlen: 24 185.244.145.0/24 maxlen: 24 185.244.146.0/24 maxlen: 24 185.244.147.0/24 maxlen: 24 217.70.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.mft rsync://rpki.ripe.net/repository/DEFAULT/2ygv2JcxfCyt17E5afbwFcOX4F0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:62:ca:32:0e:22:d4:b7:24:ee:bf:4d:61:35:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db282fd897317c2cadd7b13969f6f015c397e05d Validity Not Before: Jan 2 02:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e7f33998ec438c3920c2401c6b5b57bf68e9b614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:07:c0:99:e1:69:1c:9f:f9:1e:c2:8d:65:f0: a5:3d:0e:db:49:e4:48:21:f1:53:8a:4a:f0:52:1b: 82:1c:dd:c7:f7:b1:2f:08:36:4c:52:89:b5:a3:5a: 37:8c:c2:50:f8:72:91:a2:ca:b3:27:bb:a2:ed:b4: e7:e0:a0:ae:ce:c1:fd:a7:41:5c:22:01:4c:d4:44: ec:99:87:f7:bc:b6:ea:c7:9e:ce:5f:19:db:de:66: bb:4a:76:ba:70:40:b6:9f:f8:31:07:cf:35:b3:f7: e6:24:cb:db:35:37:e2:c6:02:6d:99:9e:42:70:5c: a1:94:8b:c5:24:15:c1:8e:0c:07:48:63:0e:e9:a6: 47:e5:0e:6e:0d:70:d0:29:39:ed:bf:f5:7e:6e:1f: 4d:56:01:36:e5:6b:2f:00:23:4d:49:60:af:ee:27: ee:c7:04:34:ab:ae:b5:72:8a:ca:ed:b7:3f:0d:05: c3:98:70:c3:93:ec:b7:70:4c:55:f3:92:7d:2e:22: a9:60:53:99:8f:3f:5e:0a:0a:e0:14:a3:29:02:17: 05:cd:34:f7:99:17:1e:9a:03:ee:06:ce:55:20:87: f8:6a:62:cf:3c:d2:76:82:e1:71:64:41:07:38:5a: e2:d6:72:e3:af:eb:fc:28:28:1d:6e:3e:89:00:65: 4f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:F3:39:98:EC:43:8C:39:20:C2:40:1C:6B:5B:57:BF:68:E9:B6:14 X509v3 Authority Key Identifier: keyid:DB:28:2F:D8:97:31:7C:2C:AD:D7:B1:39:69:F6:F0:15:C3:97:E0:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ygv2JcxfCyt17E5afbwFcOX4F0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/5_M5mOxDjDkgwkAca1tXv2jpthQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.9.36.0/22 185.244.144.0/22 217.70.10.0/24 Signature Algorithm: sha256WithRSAEncryption 96:1c:14:14:51:02:78:49:34:88:ef:c8:5a:28:38:19:fc:43: fe:18:ad:15:a0:f5:11:8e:75:4b:86:5c:87:04:e2:ff:10:3d: f7:66:2b:d9:dc:96:80:7c:15:96:66:83:70:5d:fa:78:d0:d6: 4d:ea:a1:01:75:35:2f:00:0c:2b:90:95:f0:f4:f1:a5:b2:3d: bb:7b:1c:91:8c:5a:33:f8:8f:7a:75:35:45:c6:9d:78:8b:ca: a7:d6:0e:4c:7c:09:b8:61:30:67:28:8b:cb:3d:8d:78:69:c5: fd:26:41:ad:c8:58:03:ed:4e:ad:62:8c:41:9b:3a:a2:4d:09: 5f:9a:5d:15:1e:34:ac:cf:11:4c:f1:73:fa:ac:4b:c5:07:c3: 3d:48:95:c1:76:e4:a5:6d:52:04:98:58:29:50:d8:02:f0:5c: 1d:f1:8c:d9:e5:8d:d3:21:f0:2c:71:92:c6:89:d0:89:be:78: 51:a0:f8:5b:7e:08:33:68:ca:7e:1a:a3:78:be:86:99:ef:9f: f0:93:4a:dc:c9:3d:28:70:a9:b1:52:c3:b5:48:87:9e:53:06: 30:88:23:71:02:f4:7c:dd:2e:8a:ef:e1:5b:4c:13:83:ee:fd: 18:f9:29:c8:3a:62:6d:30:9c:ed:e4:5e:f0:ce:4d:91:8d:c2: cd:45:84:b1 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8f2LKMg4i1Lck7r9NYTW4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiMjgyZmQ4OTczMTdjMmNhZGQ3YjEzOTY5ZjZmMDE1YzM5 N2UwNWQwHhcNMjYwMTAyMDIxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlN2YzMzk5OGVjNDM4YzM5MjBjMjQwMWM2YjViNTdiZjY4ZTliNjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngfAmeFpHJ/5HsKNZfClPQ7bSeRI IfFTikrwUhuCHN3H97EvCDZMUom1o1o3jMJQ+HKRosqzJ7ui7bTn4KCuzsH9p0Fc IgFM1ETsmYf3vLbqx57OXxnb3ma7Sna6cEC2n/gxB881s/fmJMvbNTfixgJtmZ5C cFyhlIvFJBXBjgwHSGMO6aZH5Q5uDXDQKTntv/V+bh9NVgE25WsvACNNSWCv7ifu xwQ0q661corK7bc/DQXDmHDDk+y3cExV85J9LiKpYFOZjz9eCgrgFKMpAhcFzTT3 mRcemgPuBs5VIIf4amLPPNJ2guFxZEEHOFri1nLjr+v8KCgdbj6JAGVP4QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFOfzOZjsQ4w5IMJAHGtbV79o6bYUMB8GA1UdIwQY MBaAFNsoL9iXMXwsrdexOWn28BXDl+BdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnlndjJKY3hmQ3l0MTdFNWFmYndGY09YNEYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9iN2NlYjgtNDg1Ni00NDYzLWI3Yjgt MzUzYmM2MjY2ZWU2LzEvNV9NNW1PeERqRGtnd2tBY2ExdFh2MmpwdGhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9iN2NlYjgtNDg1Ni00NDYzLWI3YjgtMzUzYmM2MjY2ZWU2 LzEvMnlndjJKY3hmQ3l0MTdFNWFmYndGY09YNEYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCuQkkAwQC ufSQAwQA2UYKMA0GCSqGSIb3DQEBCwUAA4IBAQCWHBQUUQJ4STSI78haKDgZ/EP+ GK0VoPURjnVLhlyHBOL/ED33ZivZ3JaAfBWWZoNwXfp40NZN6qEBdTUvAAwrkJXw 9PGlsj27exyRjFoz+I96dTVFxp14i8qn1g5MfAm4YTBnKIvLPY14acX9JkGtyFgD 7U6tYoxBmzqiTQlfml0VHjSszxFM8XP6rEvFB8M9SJXBduSlbVIEmFgpUNgC8Fwd 8YzZ5Y3TIfAscZLGidCJvnhRoPhbfggzaMp+GqN4voaZ75/wk0rcyT0ocKmxUsO1 SIeeUwYwiCNxAvR83S6K7+FbTBOD7v0Y+SnIOmJtMJzt5F7wzk2RjcLNRYSx -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:04 2026 by rpki-client