This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/5Fc5Z8AnH0CEYZ9rDApWFLM4Ixc.roa File: 5Fc5Z8AnH0CEYZ9rDApWFLM4Ixc.roa (raw, json) Hash identifier: AfLLM9oPN1KP8gzsCP5Hel58qUP2VR96r0FexXMNtMk= Subject key identifier: E4:57:39:67:C0:27:1F:40:84:61:9F:6B:0C:0A:56:14:B3:38:23:17 Certificate issuer: /CN=a3e6e823f6dda67d283a9f41a72909906ac9a837 Certificate serial: 019B7B35CE2DFDCF1FEF918961C217C7FF68 Authority key identifier: A3:E6:E8:23:F6:DD:A6:7D:28:3A:9F:41:A7:29:09:90:6A:C9:A8:37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-boI_bdpn0oOp9BpykJkGrJqDc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/5Fc5Z8AnH0CEYZ9rDApWFLM4Ixc.roa Signing time: Thu 01 Jan 2026 20:18:02 +0000 ROA not before: Thu 01 Jan 2026 20:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199475 IP address blocks: 185.15.0.0/22 maxlen: 22 185.189.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.crl rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft rsync://rpki.ripe.net/repository/DEFAULT/o-boI_bdpn0oOp9BpykJkGrJqDc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:ce:2d:fd:cf:1f:ef:91:89:61:c2:17:c7:ff:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3e6e823f6dda67d283a9f41a72909906ac9a837 Validity Not Before: Jan 1 20:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4573967c0271f4084619f6b0c0a5614b3382317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:48:a9:f3:7c:e6:85:40:ab:bd:a1:c7:9f:81: 37:fd:27:3c:2e:f5:57:04:3e:fc:d4:1c:91:bd:eb: ce:7d:f6:29:9d:e0:a5:6e:8e:d3:bf:f3:77:5e:6e: 50:8c:61:86:d6:da:e9:5e:c5:a0:23:d9:13:3b:66: d0:da:6a:12:cc:cb:fa:a1:37:38:38:af:28:81:40: f0:c2:5f:c3:bb:d1:ae:bd:5d:f1:76:0c:26:a2:4b: e4:ea:cc:25:88:0d:fd:8a:2e:3c:0b:61:bb:9c:17: c6:84:26:45:a8:c7:e3:3d:ea:49:78:10:34:dd:a5: 92:a3:7d:91:e5:03:38:ad:86:60:dd:44:02:0c:99: 3d:1c:7e:ac:72:b6:82:cf:fe:b0:35:bf:59:8c:ac: 91:f9:92:1d:b0:c6:a8:72:f5:1a:83:75:30:2b:32: d9:c6:a7:39:9e:70:21:6a:f7:25:1c:73:05:d6:3c: 8f:c7:58:10:15:da:90:43:33:21:80:80:92:94:05: e2:61:a5:b0:5a:20:47:0e:d3:c1:b4:2e:ee:f6:75: 11:a2:fc:0d:9f:d6:ea:61:57:17:e6:c6:d4:57:11: 2c:85:4e:26:9f:46:9e:8f:0e:d2:12:54:6e:33:c6: 50:12:eb:ae:94:c3:ea:ef:49:c5:f4:8d:e5:d1:d3: 43:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:57:39:67:C0:27:1F:40:84:61:9F:6B:0C:0A:56:14:B3:38:23:17 X509v3 Authority Key Identifier: keyid:A3:E6:E8:23:F6:DD:A6:7D:28:3A:9F:41:A7:29:09:90:6A:C9:A8:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-boI_bdpn0oOp9BpykJkGrJqDc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/5Fc5Z8AnH0CEYZ9rDApWFLM4Ixc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.15.0.0/22 185.189.136.0/22 Signature Algorithm: sha256WithRSAEncryption ab:8a:1c:89:b6:1f:c4:a8:aa:96:49:87:cc:f3:dc:d5:44:af: 6c:2c:87:9f:64:94:fc:c6:a0:30:4f:bf:96:b8:07:12:d3:dd: da:19:95:05:d8:0c:e0:1f:92:9c:e3:11:b9:38:0e:a8:51:13: 6b:8e:1e:05:7a:03:3e:8e:5f:4e:a3:ca:d6:b2:03:b3:c4:e6: 44:f2:a6:29:10:2c:2c:f4:60:e7:1f:d7:78:6f:73:71:93:a6: 8f:3c:4e:a5:71:69:e6:b5:4d:b8:f7:aa:95:83:e4:ef:20:b6: 26:dd:47:2d:83:b3:80:4e:a6:4a:e0:4c:bd:f4:d1:f6:01:1a: 3b:26:2c:39:c3:6e:32:b7:d6:c1:f3:c6:93:83:0d:ad:e5:f6: 0c:17:07:0b:f5:f4:22:5c:51:f6:83:44:52:7c:87:bd:cd:71: 91:4d:ec:50:e2:7a:f4:b6:72:8d:4f:81:e7:f6:31:9d:b0:c9: 5a:40:8a:42:e4:60:e8:e0:70:b2:31:fa:91:d3:d5:4b:23:2c: e8:67:11:5e:d6:8f:94:3e:f5:e2:d9:37:dd:31:50:a1:82:39: f7:ae:fe:d0:fb:83:72:a4:68:2d:00:92:b3:f0:9c:87:c7:5c: d3:41:48:2d:ae:3c:ac:2b:b3:e7:63:bd:e7:09:95:28:c6:10: 23:a5:d3:76 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7Nc4t/c8f75GJYcIXx/9oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzZTZlODIzZjZkZGE2N2QyODNhOWY0MWE3MjkwOTkwNmFj OWE4MzcwHhcNMjYwMTAxMjAxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDU3Mzk2N2MwMjcxZjQwODQ2MTlmNmIwYzBhNTYxNGIzMzgyMzE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUip83zmhUCrvaHHn4E3/Sc8LvVX BD781ByRvevOffYpneClbo7Tv/N3Xm5QjGGG1trpXsWgI9kTO2bQ2moSzMv6oTc4 OK8ogUDwwl/Du9GuvV3xdgwmokvk6swliA39ii48C2G7nBfGhCZFqMfjPepJeBA0 3aWSo32R5QM4rYZg3UQCDJk9HH6scraCz/6wNb9ZjKyR+ZIdsMaocvUag3UwKzLZ xqc5nnAhavclHHMF1jyPx1gQFdqQQzMhgICSlAXiYaWwWiBHDtPBtC7u9nURovwN n9bqYVcX5sbUVxEshU4mn0aejw7SElRuM8ZQEuuulMPq70nF9I3l0dNDvwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFORXOWfAJx9AhGGfawwKVhSzOCMXMB8GA1UdIwQY MBaAFKPm6CP23aZ9KDqfQacpCZBqyag3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvby1ib0lfYmRwbjBvT3A5QnB5a0prR3JKcURjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8xOGExYmMtOTY3Yy00OTMxLTg1YjUt MDBmMDBhZjFjOGQ3LzEvNUZjNVo4QW5IMENFWVo5ckRBcFdGTE00SXhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8xOGExYmMtOTY3Yy00OTMxLTg1YjUtMDBmMDBhZjFjOGQ3 LzEvby1ib0lfYmRwbjBvT3A5QnB5a0prR3JKcURjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuQ8AAwQC ub2IMA0GCSqGSIb3DQEBCwUAA4IBAQCrihyJth/EqKqWSYfM89zVRK9sLIefZJT8 xqAwT7+WuAcS093aGZUF2AzgH5Kc4xG5OA6oURNrjh4FegM+jl9Oo8rWsgOzxOZE 8qYpECws9GDnH9d4b3Nxk6aPPE6lcWnmtU2496qVg+TvILYm3Uctg7OATqZK4Ey9 9NH2ARo7Jiw5w24yt9bB88aTgw2t5fYMFwcL9fQiXFH2g0RSfIe9zXGRTexQ4nr0 tnKNT4Hn9jGdsMlaQIpC5GDo4HCyMfqR09VLIyzoZxFe1o+UPvXi2TfdMVChgjn3 rv7Q+4NypGgtAJKz8JyHx1zTQUgtrjysK7PnY73nCZUoxhAjpdN2 -----END CERTIFICATE-----Generated at Tue Feb 10 02:33:31 2026 by rpki-client