This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/5vpEBDoytppmUG_e9rj_C25Xyl8.roa File: 5vpEBDoytppmUG_e9rj_C25Xyl8.roa (raw, json) Hash identifier: WBDmOCdQ0a30XWFeqB9R0DXCUU5WmVW9tSy74+sYoEQ= Subject key identifier: E6:FA:44:04:3A:32:B6:9A:66:50:6F:DE:F6:B8:FF:0B:6E:57:CA:5F Certificate issuer: /CN=fcf9ada9b28b6997fda1c468a8d869638407a0bb Certificate serial: 019B7D5C16D238F9E34775EEEF01AC227B27 Authority key identifier: FC:F9:AD:A9:B2:8B:69:97:FD:A1:C4:68:A8:D8:69:63:84:07:A0:BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_PmtqbKLaZf9ocRoqNhpY4QHoLs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/5vpEBDoytppmUG_e9rj_C25Xyl8.roa Signing time: Fri 02 Jan 2026 06:19:05 +0000 ROA not before: Fri 02 Jan 2026 06:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202814 IP address blocks: 171.22.140.0/22 maxlen: 24 185.139.192.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft rsync://rpki.ripe.net/repository/DEFAULT/_PmtqbKLaZf9ocRoqNhpY4QHoLs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:16:d2:38:f9:e3:47:75:ee:ef:01:ac:22:7b:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcf9ada9b28b6997fda1c468a8d869638407a0bb Validity Not Before: Jan 2 06:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e6fa44043a32b69a66506fdef6b8ff0b6e57ca5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:51:2d:a4:36:f9:d1:98:d1:27:6b:43:ae:85: 39:44:3a:d2:e9:17:c7:38:e3:08:42:11:ce:df:20: e3:35:b6:a8:23:34:6a:cb:a2:1a:6f:e4:92:92:87: f7:07:fc:75:9a:89:07:60:33:dd:7f:15:4c:d5:da: 56:2c:b0:5e:d0:f6:4a:ae:70:83:b2:57:de:fb:78: 37:a5:08:c3:b7:30:d0:4a:a5:69:18:22:31:0c:a7: 6b:d7:ab:42:4d:71:b8:f9:70:2f:ff:a0:39:85:4f: f4:a7:8d:4c:03:24:96:a5:12:a5:93:51:b6:cc:11: 62:d7:54:94:81:63:f1:d3:06:c7:77:51:91:b5:fb: 55:ad:9b:3c:fc:ec:3d:99:d5:10:46:15:b5:f3:18: 94:eb:53:2e:f9:d2:1f:d0:ab:59:8d:4b:05:50:05: 9b:75:eb:e9:d8:5a:77:f8:18:70:49:ac:a8:3b:3a: 23:da:0e:8f:ae:77:09:fd:ad:81:e7:ee:f1:97:d3: b3:94:ac:58:51:f0:e7:06:09:c1:b4:0f:53:e4:3b: b8:1d:eb:11:03:cd:64:c4:78:73:1e:30:e4:2d:ce: 9f:dc:37:c0:92:d1:a6:d3:bd:43:8a:da:49:d2:11: 07:f4:aa:63:1c:03:dc:05:0b:bb:b2:74:df:44:cd: dd:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:FA:44:04:3A:32:B6:9A:66:50:6F:DE:F6:B8:FF:0B:6E:57:CA:5F X509v3 Authority Key Identifier: keyid:FC:F9:AD:A9:B2:8B:69:97:FD:A1:C4:68:A8:D8:69:63:84:07:A0:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PmtqbKLaZf9ocRoqNhpY4QHoLs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/5vpEBDoytppmUG_e9rj_C25Xyl8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 171.22.140.0/22 185.139.192.0/22 Signature Algorithm: sha256WithRSAEncryption b1:39:56:35:02:75:f7:b5:8d:db:ca:6e:5b:5a:e0:92:0d:6f: b1:81:fc:de:6d:d6:a1:6f:36:0e:c5:f2:a2:a5:49:52:0b:1d: 79:cc:ad:cb:50:2f:34:23:10:71:98:91:2d:4f:8a:46:3e:16: f2:c5:4e:1e:b3:50:a0:58:b6:6e:9b:1b:db:f2:3c:5e:46:cb: b2:7d:60:78:4b:8e:53:93:b5:ba:2d:08:39:d8:61:63:20:16: ca:d5:23:35:65:6c:43:36:bd:2b:06:85:a5:68:05:85:5d:b2: 61:21:0f:90:cd:f9:3f:7a:64:d8:0a:72:40:c8:f7:ef:ee:3e: a0:18:cf:9e:2a:ec:ec:ad:1d:da:c3:82:1c:d3:60:a2:a5:c9: 50:c6:d2:cc:f1:5e:75:d3:ae:4a:23:02:8c:4a:e2:c4:b5:6b: 82:6e:64:ec:85:25:2e:dd:20:6d:71:f4:07:ec:43:32:da:e1: 67:f5:26:3c:29:82:db:0c:11:a9:eb:86:73:8a:5d:66:b3:ee: 21:07:d3:96:a2:9c:f1:4e:1f:c3:d7:c3:84:30:5a:89:bf:81: 3e:f5:54:cc:b4:75:97:7a:29:97:19:10:34:69:b0:53:5e:70: 43:80:0f:c3:77:dd:fa:ed:c0:04:d3:dd:b8:95:8e:3f:49:18: e1:fa:aa:5f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XBbSOPnjR3Xu7wGsInsnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjZjlhZGE5YjI4YjY5OTdmZGExYzQ2OGE4ZDg2OTYzODQw N2EwYmIwHhcNMjYwMTAyMDYxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNmZhNDQwNDNhMzJiNjlhNjY1MDZmZGVmNmI4ZmYwYjZlNTdjYTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1EtpDb50ZjRJ2tDroU5RDrS6RfH OOMIQhHO3yDjNbaoIzRqy6Iab+SSkof3B/x1mokHYDPdfxVM1dpWLLBe0PZKrnCD slfe+3g3pQjDtzDQSqVpGCIxDKdr16tCTXG4+XAv/6A5hU/0p41MAySWpRKlk1G2 zBFi11SUgWPx0wbHd1GRtftVrZs8/Ow9mdUQRhW18xiU61Mu+dIf0KtZjUsFUAWb devp2Fp3+BhwSayoOzoj2g6PrncJ/a2B5+7xl9OzlKxYUfDnBgnBtA9T5Du4HesR A81kxHhzHjDkLc6f3DfAktGm071DitpJ0hEH9KpjHAPcBQu7snTfRM3dRQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOb6RAQ6MraaZlBv3va4/wtuV8pfMB8GA1UdIwQY MBaAFPz5ramyi2mX/aHEaKjYaWOEB6C7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1BtdHFiS0xhWmY5b2NSb3FOaHBZNFFIb0xzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS83YTk2ZDEtY2YxYi00ZjQ3LTkzZWUt MjU5ZmUxNzUwZWViLzEvNXZwRUJEb3l0cHBtVUdfZTlyal9DMjVYeWw4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS83YTk2ZDEtY2YxYi00ZjQ3LTkzZWUtMjU5ZmUxNzUwZWVi LzEvX1BtdHFiS0xhWmY5b2NSb3FOaHBZNFFIb0xzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCqxaMAwQC uYvAMA0GCSqGSIb3DQEBCwUAA4IBAQCxOVY1AnX3tY3bym5bWuCSDW+xgfzebdah bzYOxfKipUlSCx15zK3LUC80IxBxmJEtT4pGPhbyxU4es1CgWLZumxvb8jxeRsuy fWB4S45Tk7W6LQg52GFjIBbK1SM1ZWxDNr0rBoWlaAWFXbJhIQ+Qzfk/emTYCnJA yPfv7j6gGM+eKuzsrR3aw4Ic02CipclQxtLM8V51065KIwKMSuLEtWuCbmTshSUu 3SBtcfQH7EMy2uFn9SY8KYLbDBGp64Zzil1ms+4hB9OWopzxTh/D18OEMFqJv4E+ 9VTMtHWXeimXGRA0abBTXnBDgA/Dd9367cAE0924lY4/SRjh+qpf -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:10 2026 by rpki-client