This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/v5AikuLbt2o2wZFx81AkxLKlbbE.roa File: v5AikuLbt2o2wZFx81AkxLKlbbE.roa (raw, json) Hash identifier: 7KPccZgy5MWb3ejH0HLnxvwj1pO1ZpFKozpP20aOke4= Subject key identifier: BF:90:22:92:E2:DB:B7:6A:36:C1:91:71:F3:50:24:C4:B2:A5:6D:B1 Certificate issuer: /CN=5e399fba9aae9d2d6ffe52ae8c74ae38fc6c1af1 Certificate serial: 019B7910FB5559046A30AD631BE7930E0D27 Authority key identifier: 5E:39:9F:BA:9A:AE:9D:2D:6F:FE:52:AE:8C:74:AE:38:FC:6C:1A:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/v5AikuLbt2o2wZFx81AkxLKlbbE.roa Signing time: Thu 01 Jan 2026 10:18:34 +0000 ROA not before: Thu 01 Jan 2026 10:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211083 IP address blocks: 185.198.70.0/24 maxlen: 24 2a11:6c0::/29 maxlen: 32 2a11:6c0::/32 maxlen: 48 2a11:6c0:1::/48 maxlen: 64 2a11:6c0:2::/48 maxlen: 64 2a11:6c0:3::/48 maxlen: 64 2a11:6c0:4::/48 maxlen: 64 2a11:6c0:5::/48 maxlen: 64 2a11:6c0:6::/48 maxlen: 64 2a11:6c0:7::/48 maxlen: 64 2a11:6c0:8::/48 maxlen: 64 2a11:6c0:9::/48 maxlen: 64 2a11:6c0:cafe::/48 maxlen: 64 2a11:6c1::/32 maxlen: 48 2a11:6c2::/32 maxlen: 48 2a11:6c3::/32 maxlen: 48 2a11:6c4::/32 maxlen: 48 2a11:6c5::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.crl rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:fb:55:59:04:6a:30:ad:63:1b:e7:93:0e:0d:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e399fba9aae9d2d6ffe52ae8c74ae38fc6c1af1 Validity Not Before: Jan 1 10:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf902292e2dbb76a36c19171f35024c4b2a56db1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:46:4a:17:8f:a4:bd:0f:ed:d0:17:c3:cb:30: 69:b5:a3:7b:55:d4:d8:93:42:69:3c:66:f3:c1:b3: f2:b7:a0:ff:53:7a:bd:f5:84:a6:0c:15:32:bd:97: 14:de:f6:57:cc:2c:08:82:32:09:88:bf:b3:f2:15: 3a:a7:27:f8:47:0c:51:92:d8:e9:f9:30:f8:bc:c5: c8:8a:65:5b:fd:b0:f5:4a:9f:e9:14:bf:67:7b:90: eb:21:8b:0f:33:6c:7d:fa:0f:28:39:bd:43:aa:77: fe:37:7b:42:6d:34:02:c0:d8:10:87:f4:61:31:1c: 7e:51:e4:18:60:55:9e:e6:a5:65:a2:dd:a8:b0:08: 19:68:8e:ba:50:fd:70:1c:15:c5:3b:9d:96:08:0b: 82:10:ac:04:db:fa:2f:82:37:71:8a:08:b6:0a:15: e3:00:65:d1:f3:05:5b:d9:3a:ee:9b:8f:5e:c7:20: 8c:26:b5:3d:5f:04:86:c5:77:a4:2f:54:02:8c:72: a7:ca:0c:43:8e:20:ee:43:78:bc:a3:21:ef:b7:fa: 1f:09:f3:d1:7e:03:57:bf:8a:a8:38:27:fe:eb:4a: af:0d:44:c7:69:af:08:5e:15:83:c6:2c:18:25:a0: df:93:8c:37:fd:a1:cc:a8:65:b3:05:84:3b:5b:70: 6d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:90:22:92:E2:DB:B7:6A:36:C1:91:71:F3:50:24:C4:B2:A5:6D:B1 X509v3 Authority Key Identifier: keyid:5E:39:9F:BA:9A:AE:9D:2D:6F:FE:52:AE:8C:74:AE:38:FC:6C:1A:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/v5AikuLbt2o2wZFx81AkxLKlbbE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.198.70.0/24 IPv6: 2a11:6c0::/29 Signature Algorithm: sha256WithRSAEncryption 15:39:7e:85:a8:70:e4:5d:4f:37:88:5b:1d:d4:01:d1:a7:51: 2a:34:0e:f1:7e:b7:c4:00:86:8d:16:79:d1:86:aa:73:6a:4d: 94:ea:ce:09:0b:46:84:93:18:fa:d8:8c:b0:e2:47:00:c1:31: 54:3e:f1:b0:b7:50:d5:90:bb:7f:d3:90:fb:04:d2:0c:a0:1e: cb:cf:c6:2f:9d:f7:c2:01:66:b0:ce:08:da:75:0c:39:2d:69: a9:8c:da:7e:61:d0:0f:80:f1:94:dd:e9:c3:d9:3e:49:02:6b: d4:1a:8a:4b:d7:84:c2:06:ca:41:15:4f:19:73:a7:cd:1a:b3: fa:e1:24:df:c2:ab:f6:c5:33:ff:ae:29:9f:6d:a9:be:01:0f: 99:04:14:40:4a:01:34:f8:cc:c8:76:68:ef:d7:13:fd:e3:d9: 14:15:f8:82:e7:50:42:2f:36:ae:5a:13:74:f1:2f:41:de:3e: e6:89:36:2e:79:1f:42:df:e5:80:bf:57:66:fb:4e:56:da:fa: 46:02:d2:a0:79:46:9d:8e:56:5e:de:c9:71:db:0c:8d:b2:17: ed:86:97:fe:0a:3d:22:a0:be:8f:9e:1e:8d:0b:94:da:fc:2a: ea:f1:b6:ad:c6:e5:75:26:98:15:8e:f5:62:47:ca:a5:1b:51: 6d:42:90:c7 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5EPtVWQRqMK1jG+eTDg0nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMzk5ZmJhOWFhZTlkMmQ2ZmZlNTJhZThjNzRhZTM4ZmM2 YzFhZjEwHhcNMjYwMTAxMTAxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjkwMjI5MmUyZGJiNzZhMzZjMTkxNzFmMzUwMjRjNGIyYTU2ZGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UZKF4+kvQ/t0BfDyzBptaN7VdTY k0JpPGbzwbPyt6D/U3q99YSmDBUyvZcU3vZXzCwIgjIJiL+z8hU6pyf4RwxRktjp +TD4vMXIimVb/bD1Sp/pFL9ne5DrIYsPM2x9+g8oOb1Dqnf+N3tCbTQCwNgQh/Rh MRx+UeQYYFWe5qVlot2osAgZaI66UP1wHBXFO52WCAuCEKwE2/ovgjdxigi2ChXj AGXR8wVb2Trum49exyCMJrU9XwSGxXekL1QCjHKnygxDjiDuQ3i8oyHvt/ofCfPR fgNXv4qoOCf+60qvDUTHaa8IXhWDxiwYJaDfk4w3/aHMqGWzBYQ7W3BtJQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFL+QIpLi27dqNsGRcfNQJMSypW2xMB8GA1UdIwQY MBaAFF45n7qarp0tb/5Srox0rjj8bBrxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGptZnVwcXVuUzF2X2xLdWpIU3VPUHhzR3ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9iOTFkMDUtNmEwMy00MGVkLWE5ODMt YmQ4MDlkOWRlZGI5LzEvdjVBaWt1TGJ0Mm8yd1pGeDgxQWt4TEtsYmJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9iOTFkMDUtNmEwMy00MGVkLWE5ODMtYmQ4MDlkOWRlZGI5 LzEvWGptZnVwcXVuUzF2X2xLdWpIU3VPUHhzR3ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAucZGMA0E AgACMAcDBQMqEQbAMA0GCSqGSIb3DQEBCwUAA4IBAQAVOX6FqHDkXU83iFsd1AHR p1EqNA7xfrfEAIaNFnnRhqpzak2U6s4JC0aEkxj62Iyw4kcAwTFUPvGwt1DVkLt/ 05D7BNIMoB7Lz8YvnffCAWawzgjadQw5LWmpjNp+YdAPgPGU3enD2T5JAmvUGopL 14TCBspBFU8Zc6fNGrP64STfwqv2xTP/rimfbam+AQ+ZBBRASgE0+MzIdmjv1xP9 49kUFfiC51BCLzauWhN08S9B3j7miTYueR9C3+WAv1dm+05W2vpGAtKgeUadjlZe 3slx2wyNshfthpf+Cj0ioL6Pnh6NC5Ta/Crq8batxuV1JpgVjvViR8qlG1FtQpDH -----END CERTIFICATE-----Generated at Mon Jan 26 10:13:37 2026 by rpki-client