This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/5NXTbG8sm81rKhiC9dfgOCFuM3U.roa File: 5NXTbG8sm81rKhiC9dfgOCFuM3U.roa (raw, json) Hash identifier: JHdBlVBVaFySvrz7D7dzWmx8fejZEdrtpfO6y9P0DL4= Subject key identifier: E4:D5:D3:6C:6F:2C:9B:CD:6B:2A:18:82:F5:D7:E0:38:21:6E:33:75 Certificate issuer: /CN=0ac98267a5db26c65e41e646648f1016636e544e Certificate serial: 019B7C1214C49E16EAC6B442DF80F6160CD7 Authority key identifier: 0A:C9:82:67:A5:DB:26:C6:5E:41:E6:46:64:8F:10:16:63:6E:54:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/5NXTbG8sm81rKhiC9dfgOCFuM3U.roa Signing time: Fri 02 Jan 2026 00:18:38 +0000 ROA not before: Fri 02 Jan 2026 00:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203457 IP address blocks: 185.132.136.0/22 maxlen: 23 185.132.136.0/23 maxlen: 23 185.132.138.0/23 maxlen: 23 2a03:a320::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.crl rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft rsync://rpki.ripe.net/repository/DEFAULT/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:14:c4:9e:16:ea:c6:b4:42:df:80:f6:16:0c:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ac98267a5db26c65e41e646648f1016636e544e Validity Not Before: Jan 2 00:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4d5d36c6f2c9bcd6b2a1882f5d7e038216e3375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:38:55:91:49:5d:c2:c2:88:65:07:9c:44:f7: fb:c0:8e:cf:96:26:b7:db:1b:a8:08:22:c8:28:cf: b6:68:60:82:13:a2:f6:ea:3e:a6:a7:39:98:18:6e: 23:0c:c7:ad:46:39:39:ab:a1:bc:dc:8a:04:99:22: cc:78:23:83:ee:e6:52:56:3a:79:aa:aa:70:0e:b4: 04:d5:55:cc:b5:12:68:52:33:d3:73:fb:70:5f:5c: c6:ad:f8:4b:35:1c:c4:8e:11:1e:a9:00:dc:07:38: ae:a5:8c:3c:95:ec:c5:ca:a0:79:62:f6:de:dc:43: 57:40:53:43:d2:42:e3:55:4a:cc:2d:0b:47:6e:7c: 73:12:9d:96:8a:c1:56:d4:6f:ce:a9:0c:9d:13:a8: b2:8d:93:1a:8c:64:6a:17:9a:10:36:ce:1a:6a:cc: 28:df:e3:d1:4d:cf:10:3a:d1:d9:88:83:53:c5:96: 75:52:b9:ff:b1:bd:a1:6b:a9:f1:8c:c6:56:04:6b: 48:6c:d9:a4:ce:9c:e5:69:9a:14:1a:e0:28:18:0b: d1:00:7f:0d:07:f4:cb:39:c9:fe:1b:fc:7a:18:1c: 3e:e3:52:13:18:b3:8c:c0:fb:06:5f:62:09:db:4e: 1d:3f:da:e3:3d:43:5b:5f:ba:40:01:81:d4:25:d2: 7c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:D5:D3:6C:6F:2C:9B:CD:6B:2A:18:82:F5:D7:E0:38:21:6E:33:75 X509v3 Authority Key Identifier: keyid:0A:C9:82:67:A5:DB:26:C6:5E:41:E6:46:64:8F:10:16:63:6E:54:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/5NXTbG8sm81rKhiC9dfgOCFuM3U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.132.136.0/22 IPv6: 2a03:a320::/32 Signature Algorithm: sha256WithRSAEncryption 8f:47:32:dc:f9:34:e7:79:54:55:31:c1:c6:7b:b4:58:02:70: ab:0a:43:e4:51:7a:c0:95:a5:71:06:72:46:1c:11:f5:33:b2: 3e:38:0d:f1:e7:07:3f:fa:e6:83:e8:f1:f3:7c:3c:90:2d:ab: b2:89:f1:b6:dd:6e:cf:7e:e8:df:f3:b4:0b:eb:c0:cc:c2:ce: d5:ac:96:6c:27:80:7f:39:28:d3:44:5b:ff:42:b7:ef:07:39: da:03:fe:1e:06:3d:fb:d0:97:da:9e:eb:9c:95:32:93:b8:f6: a2:06:1a:b9:76:f2:bf:44:95:e9:69:03:ab:61:71:86:89:11: b3:a6:11:71:14:3d:b9:a7:3d:f0:50:07:e1:23:c7:4e:62:1d: ee:e3:7c:a0:7f:71:ff:b0:5f:0d:2d:3c:25:b5:9d:39:25:2d: 7a:32:1e:97:96:1f:f0:6e:bc:1e:3b:ab:13:fe:32:1c:34:48: e7:55:af:63:7d:a0:e8:d8:74:b8:93:c1:3a:88:ef:19:e3:db: 5c:f7:d6:9f:3f:1f:77:7d:13:b8:cb:48:84:ae:33:c3:68:5e: d0:6f:e3:33:42:ad:ad:76:c5:40:9c:aa:b5:73:13:43:e7:94: 3b:5b:f3:b3:ea:ab:2e:ec:84:4b:a3:ea:ea:ca:c3:06:d9:96: a9:e1:74:ae -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8EhTEnhbqxrRC34D2FgzXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhYzk4MjY3YTVkYjI2YzY1ZTQxZTY0NjY0OGYxMDE2NjM2 ZTU0NGUwHhcNMjYwMTAyMDAxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNGQ1ZDM2YzZmMmM5YmNkNmIyYTE4ODJmNWQ3ZTAzODIxNmUzMzc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjhVkUldwsKIZQecRPf7wI7Plia3 2xuoCCLIKM+2aGCCE6L26j6mpzmYGG4jDMetRjk5q6G83IoEmSLMeCOD7uZSVjp5 qqpwDrQE1VXMtRJoUjPTc/twX1zGrfhLNRzEjhEeqQDcBziupYw8lezFyqB5Yvbe 3ENXQFND0kLjVUrMLQtHbnxzEp2WisFW1G/OqQydE6iyjZMajGRqF5oQNs4aaswo 3+PRTc8QOtHZiINTxZZ1Urn/sb2ha6nxjMZWBGtIbNmkzpzlaZoUGuAoGAvRAH8N B/TLOcn+G/x6GBw+41ITGLOMwPsGX2IJ204dP9rjPUNbX7pAAYHUJdJ8RwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOTV02xvLJvNayoYgvXX4DghbjN1MB8GA1UdIwQY MBaAFArJgmel2ybGXkHmRmSPEBZjblROMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3NtQ1o2WGJKc1plUWVaR1pJOFFGbU51VkU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zNzk5ZmEtOWRiOS00ZmM4LThmZDYt MmQ5ZTk5ZjQ3MjJjLzEvNU5YVGJHOHNtODFyS2hpQzlkZmdPQ0Z1TTNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8zNzk5ZmEtOWRiOS00ZmM4LThmZDYtMmQ5ZTk5ZjQ3MjJj LzEvQ3NtQ1o2WGJKc1plUWVaR1pJOFFGbU51VkU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuYSIMA0E AgACMAcDBQAqA6MgMA0GCSqGSIb3DQEBCwUAA4IBAQCPRzLc+TTneVRVMcHGe7RY AnCrCkPkUXrAlaVxBnJGHBH1M7I+OA3x5wc/+uaD6PHzfDyQLauyifG23W7Pfujf 87QL68DMws7VrJZsJ4B/OSjTRFv/QrfvBznaA/4eBj370JfanuuclTKTuPaiBhq5 dvK/RJXpaQOrYXGGiRGzphFxFD25pz3wUAfhI8dOYh3u43ygf3H/sF8NLTwltZ05 JS16Mh6Xlh/wbrweO6sT/jIcNEjnVa9jfaDo2HS4k8E6iO8Z49tc99afPx93fRO4 y0iErjPDaF7Qb+MzQq2tdsVAnKq1cxND55Q7W/Oz6qsu7IRLo+rqysMG2Zap4XSu -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:25 2026 by rpki-client