This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/5bBSbPRJU7MitFpRgPerCchom28.roa File: 5bBSbPRJU7MitFpRgPerCchom28.roa (raw, json) Hash identifier: QAwUl9Lhrh1n1EXirxYX4rz+UIQVZLyQirDHc9Fe4Ek= Subject key identifier: E5:B0:52:6C:F4:49:53:B3:22:B4:5A:51:80:F7:AB:09:C8:68:9B:6F Certificate issuer: /CN=ad4f879f3f97ad8cd73193d8069e49b01b6baddd Certificate serial: 019B7DC9AFAA69E960B204F6EB5CC64131CB Authority key identifier: AD:4F:87:9F:3F:97:AD:8C:D7:31:93:D8:06:9E:49:B0:1B:6B:AD:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/5bBSbPRJU7MitFpRgPerCchom28.roa Signing time: Fri 02 Jan 2026 08:18:48 +0000 ROA not before: Fri 02 Jan 2026 08:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20648 IP address blocks: 62.164.181.0/24 maxlen: 24 62.164.185.0/24 maxlen: 24 149.126.8.0/24 maxlen: 24 149.126.9.0/24 maxlen: 24 185.75.176.0/24 maxlen: 24 185.75.177.0/24 maxlen: 24 185.81.168.0/24 maxlen: 24 185.81.170.0/24 maxlen: 24 192.109.40.0/24 maxlen: 24 192.109.41.0/24 maxlen: 24 193.239.197.0/24 maxlen: 24 194.46.42.0/24 maxlen: 24 194.46.47.0/24 maxlen: 24 194.164.218.0/24 maxlen: 24 217.180.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.crl rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 23:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:af:aa:69:e9:60:b2:04:f6:eb:5c:c6:41:31:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad4f879f3f97ad8cd73193d8069e49b01b6baddd Validity Not Before: Jan 2 08:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e5b0526cf44953b322b45a5180f7ab09c8689b6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:29:e3:1a:bd:54:7f:dc:99:c8:be:12:c4:fb: 05:91:ff:45:52:6d:85:02:c6:fb:bc:53:5e:32:a9: 00:27:0e:a6:73:7f:42:8b:18:f0:72:66:ee:32:05: 3c:ec:f6:93:ba:36:0b:d0:00:38:5a:bf:4d:bd:c3: f0:44:a8:6d:ee:fe:f3:b6:84:dc:bd:f6:0e:e2:32: 9b:f7:d1:04:9d:69:12:fb:de:ff:77:ce:fc:b8:16: d5:31:f5:15:78:0c:23:0d:34:85:ba:36:53:54:ec: 7a:b2:a0:73:5d:5b:32:94:c0:81:66:c5:9d:36:0d: b4:66:77:00:17:9c:51:03:09:0d:b8:ac:6d:8c:21: 4b:fc:d0:13:3b:5d:f6:db:14:af:6d:c3:52:75:77: e4:4c:7f:c7:16:72:a9:d7:44:fd:6d:ba:6c:ab:7f: f1:e8:3b:ab:7d:30:39:10:ae:a1:87:2a:a3:3e:d6: 17:7a:1a:ab:ef:b4:9f:a2:b5:f5:a1:33:c8:a2:43: ed:ec:ad:5b:4c:d6:1c:20:d8:50:0d:34:26:79:ca: b1:72:fb:60:10:7e:8f:28:27:a0:57:34:12:dd:c6: a9:28:25:2e:09:8d:c1:87:24:76:e4:30:d2:a7:c3: 57:1e:be:d6:42:79:19:79:49:87:ef:1c:12:66:2b: 20:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:B0:52:6C:F4:49:53:B3:22:B4:5A:51:80:F7:AB:09:C8:68:9B:6F X509v3 Authority Key Identifier: keyid:AD:4F:87:9F:3F:97:AD:8C:D7:31:93:D8:06:9E:49:B0:1B:6B:AD:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/5bBSbPRJU7MitFpRgPerCchom28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.164.181.0/24 62.164.185.0/24 149.126.8.0/23 185.75.176.0/23 185.81.168.0/24 185.81.170.0/24 192.109.40.0/23 193.239.197.0/24 194.46.42.0/24 194.46.47.0/24 194.164.218.0/24 217.180.57.0/24 Signature Algorithm: sha256WithRSAEncryption a0:52:0b:b7:32:88:8a:c2:90:4e:bb:8d:b6:ab:bb:e2:b3:46: db:a5:b0:b3:08:57:ac:6c:6e:4e:8a:ef:c7:f8:d3:20:94:ef: 1e:27:cf:b8:e9:4b:a8:83:d0:49:38:9a:37:c0:b2:51:db:aa: 74:5d:90:13:d6:fb:46:eb:e2:50:30:c4:b3:c9:8f:be:a0:39: 8d:84:2d:90:d5:44:41:af:a6:d1:ea:ee:33:73:63:a1:b2:96: de:fc:f6:74:3a:db:3d:75:52:ea:89:5d:78:ff:00:6c:b2:84: f6:d6:59:8e:1c:22:b4:9f:da:31:f1:60:30:d8:c6:a5:44:df: d1:ef:7f:a7:95:ce:75:c3:0f:f0:4b:72:18:a8:92:8d:b5:13: 02:68:e0:a9:33:bf:ff:9c:b1:26:35:eb:ef:bc:e1:3d:7c:e3: 3e:e9:a4:70:88:e0:1b:bb:e2:f0:33:ca:a3:ad:f9:7e:8e:8b: 85:5c:4c:00:70:cb:1f:3a:04:61:0a:59:99:f4:05:d9:08:08: bc:5e:ff:ef:39:80:13:00:10:4e:e4:f4:ab:f5:3c:8f:16:68: d5:2f:bc:9d:41:aa:27:79:30:e8:c9:95:57:92:4c:79:5f:94: c5:8a:c9:34:da:16:6b:34:cd:68:db:0f:a4:3b:9d:4c:19:85: 75:aa:dc:fa -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgISAZt9ya+qaelgsgT261zGQTHLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkNGY4NzlmM2Y5N2FkOGNkNzMxOTNkODA2OWU0OWIwMWI2 YmFkZGQwHhcNMjYwMTAyMDgxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNWIwNTI2Y2Y0NDk1M2IzMjJiNDVhNTE4MGY3YWIwOWM4Njg5YjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSnjGr1Uf9yZyL4SxPsFkf9FUm2F Asb7vFNeMqkAJw6mc39CixjwcmbuMgU87PaTujYL0AA4Wr9NvcPwRKht7v7ztoTc vfYO4jKb99EEnWkS+97/d878uBbVMfUVeAwjDTSFujZTVOx6sqBzXVsylMCBZsWd Ng20ZncAF5xRAwkNuKxtjCFL/NATO1322xSvbcNSdXfkTH/HFnKp10T9bbpsq3/x 6DurfTA5EK6hhyqjPtYXehqr77SforX1oTPIokPt7K1bTNYcINhQDTQmecqxcvtg EH6PKCegVzQS3capKCUuCY3BhyR25DDSp8NXHr7WQnkZeUmH7xwSZisgpwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFOWwUmz0SVOzIrRaUYD3qwnIaJtvMB8GA1UdIwQY MBaAFK1Ph58/l62M1zGT2AaeSbAba63dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclUtSG56LVhyWXpYTVpQWUJwNUpzQnRycmQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8yZjEyMDctZWEwYS00NTA3LTlhNTQt OTRlZjE5NzA3MzgyLzEvNWJCU2JQUkpVN01pdEZwUmdQZXJDY2hvbTI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny8yZjEyMDctZWEwYS00NTA3LTlhNTQtOTRlZjE5NzA3Mzgy LzEvclUtSG56LVhyWXpYTVpQWUJwNUpzQnRycmQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQAPqS1AwQA PqS5AwQBlX4IAwQBuUuwAwQAuVGoAwQAuVGqAwQBwG0oAwQAwe/FAwQAwi4qAwQA wi4vAwQAwqTaAwQA2bQ5MA0GCSqGSIb3DQEBCwUAA4IBAQCgUgu3MoiKwpBOu422 q7vis0bbpbCzCFesbG5Oiu/H+NMglO8eJ8+46Uuog9BJOJo3wLJR26p0XZAT1vtG 6+JQMMSzyY++oDmNhC2Q1URBr6bR6u4zc2Ohspbe/PZ0Ots9dVLqiV14/wBssoT2 1lmOHCK0n9ox8WAw2MalRN/R73+nlc51ww/wS3IYqJKNtRMCaOCpM7//nLEmNevv vOE9fOM+6aRwiOAbu+LwM8qjrfl+jouFXEwAcMsfOgRhClmZ9AXZCAi8Xv/vOYAT ABBO5PSr9TyPFmjVL7ydQaoneTDoyZVXkkx5X5TFisk02hZrNM1o2w+kO51MGYV1 qtz6 -----END CERTIFICATE-----Generated at Thu Jan 8 08:55:10 2026 by rpki-client