This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/5L0ahpPNayrPxYi122Pi5vNAm_w.roa File: 5L0ahpPNayrPxYi122Pi5vNAm_w.roa (raw, json) Hash identifier: cz2iEH8qpiosJzyQ+ZNV5ATx1OTP4StLUP1VtKdnYPs= Subject key identifier: E4:BD:1A:86:93:CD:6B:2A:CF:C5:88:B5:DB:63:E2:E6:F3:40:9B:FC Certificate issuer: /CN=3f46c351ee89c9f5558167530704885b8be46eaa Certificate serial: 019B7A5B7E2CE27D810155A7151066EB6CA9 Authority key identifier: 3F:46:C3:51:EE:89:C9:F5:55:81:67:53:07:04:88:5B:8B:E4:6E:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/5L0ahpPNayrPxYi122Pi5vNAm_w.roa Signing time: Thu 01 Jan 2026 16:19:35 +0000 ROA not before: Thu 01 Jan 2026 16:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205930 IP address blocks: 185.169.68.0/22 maxlen: 22 2a0b:40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:7e:2c:e2:7d:81:01:55:a7:15:10:66:eb:6c:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f46c351ee89c9f5558167530704885b8be46eaa Validity Not Before: Jan 1 16:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4bd1a8693cd6b2acfc588b5db63e2e6f3409bfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:bb:9e:8c:74:5e:a7:46:95:70:e1:a3:3f:25: 3a:d5:f3:79:31:6a:2e:5a:43:07:85:27:0e:14:7a: 2b:17:b4:1c:d0:31:b7:fe:f4:d4:13:2e:8d:e0:51: 2f:c0:23:f3:38:05:89:bb:00:c2:64:f1:3c:0a:ad: 20:90:a8:ae:cf:89:a4:e6:33:e0:6b:1e:63:78:15: b9:67:53:2c:a3:40:49:9a:74:8d:7d:89:4d:e6:27: 2c:80:7b:26:07:59:cd:0f:f5:e2:a5:9a:3a:43:94: d5:77:26:61:3d:e4:2e:93:7c:d6:88:0a:bf:5c:26: e2:c1:b6:d8:8f:1f:1e:4f:5f:fb:64:44:6b:bb:95: 17:91:38:39:99:ff:ae:6b:dd:28:26:b2:63:0b:05: 3c:dd:58:bd:e6:f5:04:c7:6c:97:43:4d:03:59:73: 2d:60:e3:7e:08:b7:55:78:0e:e2:c8:11:76:e5:d8: a1:89:90:4b:a2:68:2d:5c:83:ff:3c:b5:31:38:fd: bd:a1:ce:dc:80:bf:54:bd:c1:e0:99:b4:86:8d:d2: 47:70:46:88:40:84:ed:89:0e:fa:93:a9:c4:17:cc: 3d:db:c4:dc:38:75:d8:0b:90:45:5e:03:03:da:a4: 28:0d:ce:b0:5a:b4:43:88:d4:0d:6f:5d:47:4f:91: 8f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:BD:1A:86:93:CD:6B:2A:CF:C5:88:B5:DB:63:E2:E6:F3:40:9B:FC X509v3 Authority Key Identifier: keyid:3F:46:C3:51:EE:89:C9:F5:55:81:67:53:07:04:88:5B:8B:E4:6E:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/5L0ahpPNayrPxYi122Pi5vNAm_w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.169.68.0/22 IPv6: 2a0b:40::/29 Signature Algorithm: sha256WithRSAEncryption 51:54:e9:d4:97:6c:6e:c8:67:ed:b5:19:9a:af:28:33:f2:c8: 6c:19:bb:8b:7a:2d:44:59:5c:62:d3:2f:14:2d:98:35:4a:e0: 16:6d:14:3e:7d:f6:7d:d8:9e:46:b2:49:50:22:9b:96:d0:6b: ca:1e:15:f6:f0:e9:4e:7e:f2:9b:14:6f:2e:fb:53:43:9d:21: 12:d4:28:1b:cb:6b:5b:77:ff:81:c9:9f:29:9d:40:f7:49:24: fd:d3:f3:c7:4d:03:06:25:a7:01:e6:ec:ef:76:dd:1a:24:f5: 54:a0:cf:0b:15:00:63:ea:79:bd:4f:c4:35:b1:33:63:2f:38: 86:e8:68:0f:3a:a9:d3:fd:80:20:83:a7:86:1b:f2:96:9c:33: 5f:71:3d:c1:d7:cc:f8:19:90:f1:cd:80:0c:03:df:3f:85:0d: 6d:c5:c7:72:68:84:4e:fe:6d:31:16:6e:10:92:76:aa:e1:6c: ca:92:66:e4:52:1f:84:15:c3:95:54:d3:d9:56:ae:7f:8c:00: 37:01:96:63:66:48:4d:ea:0d:53:43:f1:c1:97:cd:7c:a1:33: 47:cb:4c:f7:ef:ed:7f:c1:74:dd:b7:42:1f:34:4d:1a:8d:44: 5d:ac:6d:31:69:24:8f:19:70:bc:d2:c8:92:0a:9a:58:ab:86: d2:5a:bf:4b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6W34s4n2BAVWnFRBm62ypMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmNDZjMzUxZWU4OWM5ZjU1NTgxNjc1MzA3MDQ4ODViOGJl NDZlYWEwHhcNMjYwMTAxMTYxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNGJkMWE4NjkzY2Q2YjJhY2ZjNTg4YjVkYjYzZTJlNmYzNDA5YmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbuejHRep0aVcOGjPyU61fN5MWou WkMHhScOFHorF7Qc0DG3/vTUEy6N4FEvwCPzOAWJuwDCZPE8Cq0gkKiuz4mk5jPg ax5jeBW5Z1Mso0BJmnSNfYlN5icsgHsmB1nND/XipZo6Q5TVdyZhPeQuk3zWiAq/ XCbiwbbYjx8eT1/7ZERru5UXkTg5mf+ua90oJrJjCwU83Vi95vUEx2yXQ00DWXMt YON+CLdVeA7iyBF25dihiZBLomgtXIP/PLUxOP29oc7cgL9UvcHgmbSGjdJHcEaI QITtiQ76k6nEF8w928TcOHXYC5BFXgMD2qQoDc6wWrRDiNQNb11HT5GPZwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOS9GoaTzWsqz8WItdtj4ubzQJv8MB8GA1UdIwQY MBaAFD9Gw1Huicn1VYFnUwcEiFuL5G6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDBiRFVlNkp5ZlZWZ1dkVEJ3U0lXNHZrYnFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9mYzdhZWUtMjMzYy00ZDY0LTkyOTMt MDU5NzhhNWExZDY5LzEvNUwwYWhwUE5heXJQeFlpMTIyUGk1dk5BbV93LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9mYzdhZWUtMjMzYy00ZDY0LTkyOTMtMDU5NzhhNWExZDY5 LzEvUDBiRFVlNkp5ZlZWZ1dkVEJ3U0lXNHZrYnFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCualEMA0E AgACMAcDBQMqCwBAMA0GCSqGSIb3DQEBCwUAA4IBAQBRVOnUl2xuyGfttRmarygz 8shsGbuLei1EWVxi0y8ULZg1SuAWbRQ+ffZ92J5GsklQIpuW0GvKHhX28OlOfvKb FG8u+1NDnSES1Cgby2tbd/+ByZ8pnUD3SST90/PHTQMGJacB5uzvdt0aJPVUoM8L FQBj6nm9T8Q1sTNjLziG6GgPOqnT/YAgg6eGG/KWnDNfcT3B18z4GZDxzYAMA98/ hQ1txcdyaIRO/m0xFm4Qknaq4WzKkmbkUh+EFcOVVNPZVq5/jAA3AZZjZkhN6g1T Q/HBl818oTNHy0z37+1/wXTdt0IfNE0ajURdrG0xaSSPGXC80siSCppYq4bSWr9L -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:11 2026 by rpki-client