This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/NI0rU5NU_yMWLdMY5fiZHA9jEIU.roa File: NI0rU5NU_yMWLdMY5fiZHA9jEIU.roa (raw, json) Hash identifier: zgCpmfGHX9eLBHHa8fHLJGnv4MNWWaIKvBvloGTjbOg= Subject key identifier: 34:8D:2B:53:93:54:FF:23:16:2D:D3:18:E5:F8:99:1C:0F:63:10:85 Certificate issuer: /CN=5be979fb8e477304bb591d6b68eea73da94a815b Certificate serial: 019B78A30D8172231B3ADF8CDD56DC4BE423 Authority key identifier: 5B:E9:79:FB:8E:47:73:04:BB:59:1D:6B:68:EE:A7:3D:A9:4A:81:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-l5-45HcwS7WR1raO6nPalKgVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/NI0rU5NU_yMWLdMY5fiZHA9jEIU.roa Signing time: Thu 01 Jan 2026 08:18:30 +0000 ROA not before: Thu 01 Jan 2026 08:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205538 IP address blocks: 185.214.89.0/24 maxlen: 24 185.214.90.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.mft rsync://rpki.ripe.net/repository/DEFAULT/W-l5-45HcwS7WR1raO6nPalKgVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:0d:81:72:23:1b:3a:df:8c:dd:56:dc:4b:e4:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5be979fb8e477304bb591d6b68eea73da94a815b Validity Not Before: Jan 1 08:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=348d2b539354ff23162dd318e5f8991c0f631085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ce:d3:a9:c0:d4:65:de:4f:8d:7e:ce:2e:c4: 8c:dd:91:ac:aa:bc:3c:0b:be:9a:e8:cf:00:f8:65: a5:5d:6a:28:f8:49:66:72:72:cf:b9:87:b0:95:a4: 66:04:47:28:b5:c9:fc:e6:8b:2a:3e:18:5e:49:c0: ae:7a:95:fe:3f:5e:69:05:be:4b:97:98:78:71:73: 0f:0f:a2:c8:0c:a3:48:44:38:72:cf:1e:e3:03:77: 5e:4c:11:4b:b5:39:00:e1:ec:74:10:03:68:00:75: 53:47:6f:d1:4b:08:c3:69:43:e3:67:a1:80:99:45: ce:b9:5f:34:ef:f9:a7:9b:36:a7:06:26:48:0a:7c: f3:57:20:d4:64:94:3f:f5:c9:50:67:d2:cc:66:5d: 03:9e:94:b3:dc:dc:55:93:d8:23:00:ac:66:17:35: 0b:02:e1:5f:58:da:89:81:aa:6c:07:a4:44:fd:ed: a4:e2:67:c1:e2:2c:53:53:58:da:3b:71:49:52:fd: 47:9a:2b:44:2f:74:81:08:07:44:6d:71:75:db:48: cb:19:4b:e7:e0:76:8f:f2:7b:a3:b2:5c:e0:6a:98: 11:db:14:5a:1d:50:26:8a:9e:44:06:1b:be:07:3a: c4:8c:92:f4:15:5b:43:ea:45:c7:dd:b5:b6:a3:cc: 05:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:8D:2B:53:93:54:FF:23:16:2D:D3:18:E5:F8:99:1C:0F:63:10:85 X509v3 Authority Key Identifier: keyid:5B:E9:79:FB:8E:47:73:04:BB:59:1D:6B:68:EE:A7:3D:A9:4A:81:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-l5-45HcwS7WR1raO6nPalKgVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/NI0rU5NU_yMWLdMY5fiZHA9jEIU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.214.89.0-185.214.91.255 Signature Algorithm: sha256WithRSAEncryption 4a:07:af:5b:33:9e:2b:2a:41:a3:d7:95:9b:89:cc:0f:1b:70: e3:4d:73:4d:11:4e:21:66:2d:78:87:df:a1:71:aa:87:79:78: 8c:5b:a3:63:f4:2c:22:4c:4b:29:1f:3e:c8:0a:1e:d0:f0:12: 91:63:0c:9c:13:db:4c:51:ac:ad:36:12:6c:a4:0c:c2:42:46: 6d:ed:1c:ba:b9:2c:61:45:e0:c4:12:c9:14:17:bf:b4:42:00: 14:97:0a:b8:61:31:ba:30:51:fe:9e:14:7a:11:33:32:a1:42: 00:6a:3e:70:11:90:ab:ed:27:eb:1b:20:0e:d3:23:f9:f1:0a: fd:84:1f:bd:48:7f:e2:d4:c2:a6:29:1a:81:1c:e3:be:fc:6b: 0e:87:1f:69:12:b2:d6:d2:48:08:a1:0f:92:75:a2:82:db:f0: dc:a4:9d:87:2a:ba:f3:5c:ec:2f:19:41:de:01:26:ea:7b:f1: cd:f1:de:bf:98:ec:fc:ab:52:cc:16:54:d1:cb:58:9b:65:85: 2d:1f:3a:3d:e5:d2:4a:45:38:e6:bf:d9:26:22:77:db:45:f9: 8f:ab:94:02:43:c5:13:8b:de:ad:80:b8:f4:37:b6:d2:0b:dc: 9c:97:2a:c1:22:d1:53:0b:d6:cb:20:85:7c:6c:34:73:12:1a: e8:f3:a9:4f -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt4ow2BciMbOt+M3VbcS+QjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViZTk3OWZiOGU0NzczMDRiYjU5MWQ2YjY4ZWVhNzNkYTk0 YTgxNWIwHhcNMjYwMTAxMDgxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDhkMmI1MzkzNTRmZjIzMTYyZGQzMThlNWY4OTkxYzBmNjMxMDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApM7TqcDUZd5PjX7OLsSM3ZGsqrw8 C76a6M8A+GWlXWoo+ElmcnLPuYewlaRmBEcotcn85osqPhheScCuepX+P15pBb5L l5h4cXMPD6LIDKNIRDhyzx7jA3deTBFLtTkA4ex0EANoAHVTR2/RSwjDaUPjZ6GA mUXOuV807/mnmzanBiZICnzzVyDUZJQ/9clQZ9LMZl0DnpSz3NxVk9gjAKxmFzUL AuFfWNqJgapsB6RE/e2k4mfB4ixTU1jaO3FJUv1HmitEL3SBCAdEbXF120jLGUvn 4HaP8nujslzgapgR2xRaHVAmip5EBhu+BzrEjJL0FVtD6kXH3bW2o8wFeQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFDSNK1OTVP8jFi3TGOX4mRwPYxCFMB8GA1UdIwQY MBaAFFvpefuOR3MEu1kda2jupz2pSoFbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVy1sNS00NUhjd1M3V1IxcmFPNm5QYWxLZ1ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84MzExZGYtYzNiMi00NjFlLWJkMjMt MTYwNWIxYmQyOThlLzEvTkkwclU1TlVfeU1XTGRNWTVmaVpIQTlqRUlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC84MzExZGYtYzNiMi00NjFlLWJkMjMtMTYwNWIxYmQyOThl LzEvVy1sNS00NUhjd1M3V1IxcmFPNm5QYWxLZ1ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC51lkD BAK51lgwDQYJKoZIhvcNAQELBQADggEBAEoHr1sznisqQaPXlZuJzA8bcONNc00R TiFmLXiH36Fxqod5eIxbo2P0LCJMSykfPsgKHtDwEpFjDJwT20xRrK02EmykDMJC Rm3tHLq5LGFF4MQSyRQXv7RCABSXCrhhMbowUf6eFHoRMzKhQgBqPnARkKvtJ+sb IA7TI/nxCv2EH71If+LUwqYpGoEc4778aw6HH2kSstbSSAihD5J1ooLb8NyknYcq uvNc7C8ZQd4BJup78c3x3r+Y7PyrUswWVNHLWJtlhS0fOj3l0kpFOOa/2SYid9tF +Y+rlAJDxROL3q2AuPQ3ttIL3JyXKsEi0VML1ssghXxsNHMSGujzqU8= -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:28 2026 by rpki-client