This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/5b9__Q8NOyZsGtNfArWmdCajUsQ.roa File: 5b9__Q8NOyZsGtNfArWmdCajUsQ.roa (raw, json) Hash identifier: JRUc1JqtkkmBfJnMJX95f2kq0cGDruqAawQMnKbLcRM= Subject key identifier: E5:BF:7F:FD:0F:0D:3B:26:6C:1A:D3:5F:02:B5:A6:74:26:A3:52:C4 Certificate issuer: /CN=92442f1cfc75ed110013877930a29d86f89ebbb6 Certificate serial: 019B7EA6FB3A239C2F427055E30B437952F4 Authority key identifier: 92:44:2F:1C:FC:75:ED:11:00:13:87:79:30:A2:9D:86:F8:9E:BB:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkQvHPx17REAE4d5MKKdhvieu7Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/5b9__Q8NOyZsGtNfArWmdCajUsQ.roa Signing time: Fri 02 Jan 2026 12:20:31 +0000 ROA not before: Fri 02 Jan 2026 12:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201248 IP address blocks: 185.80.240.0/22 maxlen: 22 2a05:83c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.crl rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft rsync://rpki.ripe.net/repository/DEFAULT/kkQvHPx17REAE4d5MKKdhvieu7Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:fb:3a:23:9c:2f:42:70:55:e3:0b:43:79:52:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92442f1cfc75ed110013877930a29d86f89ebbb6 Validity Not Before: Jan 2 12:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e5bf7ffd0f0d3b266c1ad35f02b5a67426a352c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:eb:8c:6c:14:6b:d3:07:3d:b1:49:c2:cf:0e: 18:0e:17:fa:46:5b:65:10:3e:0b:4a:41:a7:1d:bb: ba:ac:2f:e7:86:72:b4:e1:73:da:1f:d1:ce:ca:6a: f6:8e:1a:59:4b:21:4b:48:59:1e:0b:75:28:39:09: c9:97:2f:14:8b:1c:3d:5c:3b:9d:e7:fd:64:28:ac: dc:34:5d:2a:37:dd:64:b3:79:9d:fc:f1:e3:94:93: 96:bb:2e:a7:c4:95:1f:fe:9b:a0:48:49:15:4b:89: 20:2e:2c:74:57:b2:e4:aa:8c:98:70:7c:f1:df:48: b0:7f:8c:49:33:eb:4c:df:ad:c9:92:97:7d:96:37: e5:2b:1c:66:14:15:de:bf:1b:6d:80:a9:0d:9d:ca: 82:98:e3:bd:9b:b2:b8:8c:cb:b4:d1:19:ab:73:ab: 00:31:02:74:9a:cb:8b:3e:39:73:85:54:a6:6b:64: 5d:eb:f3:7e:e7:d0:62:57:5c:f6:bc:b8:ce:f7:db: 3a:13:c8:38:76:7c:ea:01:ce:2f:31:db:c3:f6:f0: 93:14:fc:ff:3f:c7:bb:1c:32:ea:c2:ad:d9:18:16: ab:0a:80:a3:13:8a:41:99:d7:05:00:9f:29:2c:82: f2:75:ef:d7:99:25:92:7c:81:04:98:1b:17:a8:95: 42:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:BF:7F:FD:0F:0D:3B:26:6C:1A:D3:5F:02:B5:A6:74:26:A3:52:C4 X509v3 Authority Key Identifier: keyid:92:44:2F:1C:FC:75:ED:11:00:13:87:79:30:A2:9D:86:F8:9E:BB:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkQvHPx17REAE4d5MKKdhvieu7Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/5b9__Q8NOyZsGtNfArWmdCajUsQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.80.240.0/22 IPv6: 2a05:83c0::/29 Signature Algorithm: sha256WithRSAEncryption 8b:4e:d7:76:09:a6:e5:15:d6:55:0e:c1:4d:59:69:57:4c:7d: dc:08:dc:4b:6a:65:f9:a8:7b:26:fb:a7:0e:da:d8:4d:3d:5c: c0:53:85:2a:77:8d:e8:70:0f:00:c3:93:7b:97:46:56:0e:b5: a5:d9:c0:3c:27:b8:d9:c3:46:36:3a:b1:dd:91:11:e9:d9:c4: 91:40:77:06:19:5c:5b:34:87:e0:48:78:19:4a:cd:ab:2f:a1: eb:4f:c1:14:b3:bd:04:2e:39:69:70:16:9a:9d:6b:c4:7c:4a: b9:a0:a0:a6:89:3d:29:c3:b8:e1:4d:17:e6:46:09:c9:8b:cd: 5e:de:cb:b1:23:0f:74:1f:be:ae:74:82:19:c0:07:2a:d6:0d: 7d:e9:d6:6c:f0:e8:1e:0e:52:84:ab:8e:50:dc:a9:2a:17:e7: b8:06:33:8c:67:16:12:00:46:2a:97:0a:38:c9:30:de:a8:75: 6e:f1:6d:09:11:58:66:e3:5d:6e:71:dd:49:5c:48:ce:5e:94: f4:1b:08:0c:20:ee:ed:3a:67:79:eb:e4:30:2a:de:4e:39:d0: 6e:69:5f:57:a4:58:be:c3:f8:3e:8f:b8:57:c0:41:d9:81:6a: 49:47:3a:09:41:45:b0:58:eb:15:6a:2b:1e:bc:52:59:77:58: b1:2e:66:05 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+pvs6I5wvQnBV4wtDeVL0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNDQyZjFjZmM3NWVkMTEwMDEzODc3OTMwYTI5ZDg2Zjg5 ZWJiYjYwHhcNMjYwMTAyMTIyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNWJmN2ZmZDBmMGQzYjI2NmMxYWQzNWYwMmI1YTY3NDI2YTM1MmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OuMbBRr0wc9sUnCzw4YDhf6Rltl ED4LSkGnHbu6rC/nhnK04XPaH9HOymr2jhpZSyFLSFkeC3UoOQnJly8Uixw9XDud 5/1kKKzcNF0qN91ks3md/PHjlJOWuy6nxJUf/pugSEkVS4kgLix0V7LkqoyYcHzx 30iwf4xJM+tM363Jkpd9ljflKxxmFBXevxttgKkNncqCmOO9m7K4jMu00Rmrc6sA MQJ0msuLPjlzhVSma2Rd6/N+59BiV1z2vLjO99s6E8g4dnzqAc4vMdvD9vCTFPz/ P8e7HDLqwq3ZGBarCoCjE4pBmdcFAJ8pLILyde/XmSWSfIEEmBsXqJVC3wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOW/f/0PDTsmbBrTXwK1pnQmo1LEMB8GA1UdIwQY MBaAFJJELxz8de0RABOHeTCinYb4nru2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2tRdkhQeDE3UkVBRTRkNU1LS2RodmlldTdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85YWY4ODEtYmEwZC00NTFkLWE2OWIt MDBmOTZmZmNmNzM0LzEvNWI5X19ROE5PeVpzR3ROZkFyV21kQ2FqVXNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi85YWY4ODEtYmEwZC00NTFkLWE2OWItMDBmOTZmZmNmNzM0 LzEva2tRdkhQeDE3UkVBRTRkNU1LS2RodmlldTdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuVDwMA0E AgACMAcDBQMqBYPAMA0GCSqGSIb3DQEBCwUAA4IBAQCLTtd2CablFdZVDsFNWWlX TH3cCNxLamX5qHsm+6cO2thNPVzAU4Uqd43ocA8Aw5N7l0ZWDrWl2cA8J7jZw0Y2 OrHdkRHp2cSRQHcGGVxbNIfgSHgZSs2rL6HrT8EUs70ELjlpcBaanWvEfEq5oKCm iT0pw7jhTRfmRgnJi81e3suxIw90H76udIIZwAcq1g196dZs8OgeDlKEq45Q3Kkq F+e4BjOMZxYSAEYqlwo4yTDeqHVu8W0JEVhm411ucd1JXEjOXpT0GwgMIO7tOmd5 6+QwKt5OOdBuaV9XpFi+w/g+j7hXwEHZgWpJRzoJQUWwWOsVaisevFJZd1ixLmYF -----END CERTIFICATE-----Generated at Mon Feb 9 22:37:04 2026 by rpki-client