This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/0614a6-d01c-4ff2-a993-7246457fd2b3/1/5HzcZ6a4XAtwOavRhWgPVbFXunY.roa File: 5HzcZ6a4XAtwOavRhWgPVbFXunY.roa (raw, json) Hash identifier: WuFbSIBYf/9ZwaN+lOrty44DR9s11eIeBklLm/eyCus= Subject key identifier: E4:7C:DC:67:A6:B8:5C:0B:70:39:AB:D1:85:68:0F:55:B1:57:BA:76 Certificate issuer: /CN=29f5240238b828f16e60229e2633503f04846599 Certificate serial: 019B797DFC9D526AEC6E5AA94FAB35FE16F0 Authority key identifier: 29:F5:24:02:38:B8:28:F1:6E:60:22:9E:26:33:50:3F:04:84:65:99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfUkAji4KPFuYCKeJjNQPwSEZZk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/0614a6-d01c-4ff2-a993-7246457fd2b3/1/5HzcZ6a4XAtwOavRhWgPVbFXunY.roa Signing time: Thu 01 Jan 2026 12:17:38 +0000 ROA not before: Thu 01 Jan 2026 12:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61407 IP address blocks: 185.29.211.0/24 maxlen: 24 2a07:5240::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/0614a6-d01c-4ff2-a993-7246457fd2b3/1/KfUkAji4KPFuYCKeJjNQPwSEZZk.crl rsync://rpki.ripe.net/repository/DEFAULT/52/0614a6-d01c-4ff2-a993-7246457fd2b3/1/KfUkAji4KPFuYCKeJjNQPwSEZZk.mft rsync://rpki.ripe.net/repository/DEFAULT/KfUkAji4KPFuYCKeJjNQPwSEZZk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:fc:9d:52:6a:ec:6e:5a:a9:4f:ab:35:fe:16:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29f5240238b828f16e60229e2633503f04846599 Validity Not Before: Jan 1 12:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e47cdc67a6b85c0b7039abd185680f55b157ba76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:9a:6a:e5:91:c7:b7:ac:38:41:c5:14:c2:a0: a7:3b:40:81:94:ed:12:bc:43:28:f1:06:26:f6:e8: 18:77:ed:54:ec:83:12:c0:e9:72:6c:11:d1:92:dc: a3:dd:40:ed:68:70:f6:80:a7:30:57:02:0e:11:a2: a8:17:ae:6d:26:53:20:13:f9:92:ee:be:8a:bf:91: 33:e8:ea:4a:fe:b3:23:65:5e:ba:e8:ac:93:75:b3: 5f:c3:89:2a:9c:96:92:be:28:e0:92:c9:bf:78:4b: 75:bd:d6:1f:b3:7a:c4:ed:75:a0:b3:8a:55:48:9f: f3:eb:d4:1f:f5:e3:41:7b:9e:38:04:d8:c9:eb:55: a3:bb:37:6e:c2:79:f0:04:26:59:5b:9c:ae:62:61: 21:12:1b:2b:4a:69:75:72:87:d0:36:2d:0e:f4:d8: 8d:b1:d9:ba:73:06:d4:02:1d:03:0d:87:9a:21:e1: 0f:2a:00:d9:7d:4b:05:8c:5e:d1:53:07:78:7b:6f: 06:9f:81:7a:72:cf:5a:db:c2:99:a9:26:de:57:5b: 9e:93:9c:05:99:cb:ef:c8:bc:4d:33:b0:8d:66:84: f4:1f:4a:1b:48:ec:a8:d2:26:e6:c9:72:6f:62:2d: 7b:41:67:5e:4c:92:ed:fd:22:2c:03:dc:e2:28:43: fd:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:7C:DC:67:A6:B8:5C:0B:70:39:AB:D1:85:68:0F:55:B1:57:BA:76 X509v3 Authority Key Identifier: keyid:29:F5:24:02:38:B8:28:F1:6E:60:22:9E:26:33:50:3F:04:84:65:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfUkAji4KPFuYCKeJjNQPwSEZZk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0614a6-d01c-4ff2-a993-7246457fd2b3/1/5HzcZ6a4XAtwOavRhWgPVbFXunY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0614a6-d01c-4ff2-a993-7246457fd2b3/1/KfUkAji4KPFuYCKeJjNQPwSEZZk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.29.211.0/24 IPv6: 2a07:5240::/29 Signature Algorithm: sha256WithRSAEncryption 8c:9d:5d:7c:f0:41:01:ca:b2:a9:f5:55:2a:5c:ec:59:69:9b: b6:fb:dc:ac:69:a9:71:f4:bb:cd:0b:82:13:28:c2:64:77:67: b5:d4:2a:ad:f7:b2:55:95:c9:68:5b:31:ef:d7:d8:68:1e:5f: ec:06:a0:39:ae:84:55:71:ff:fb:08:85:b7:02:7a:51:62:68: 9f:bf:81:d0:2a:f9:80:87:13:f2:58:9e:78:68:80:e8:53:ee: 1b:05:1f:7b:c0:a0:e2:b7:35:63:44:52:26:5c:28:1e:c3:96: bd:f5:da:4c:45:da:8c:18:87:b8:00:0d:ee:bd:b7:75:10:c9: 25:f2:44:2b:94:29:2c:38:c6:e4:6e:af:71:4d:95:fa:78:48: 1c:d2:6c:d1:0f:47:57:02:a9:1d:52:25:0d:48:b3:89:08:4b: 6f:c7:9b:7d:22:f6:6a:cd:70:18:5f:cb:d5:73:cc:92:04:3d: da:3e:1d:f1:08:f5:53:79:a9:f1:47:1e:23:fb:7c:e0:72:4a: 5e:b7:d5:27:bc:70:13:14:df:0d:11:81:67:2d:de:8f:20:d4: e4:c9:9f:3d:e6:4a:2a:9d:59:68:3d:2b:3f:05:2a:78:a1:5b: 71:db:e7:77:5f:4d:ed:17:b4:a4:f0:cd:fd:dd:88:f0:e1:7e: 4d:a5:26:f1 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5ffydUmrsblqpT6s1/hbwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZjUyNDAyMzhiODI4ZjE2ZTYwMjI5ZTI2MzM1MDNmMDQ4 NDY1OTkwHhcNMjYwMTAxMTIxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDdjZGM2N2E2Yjg1YzBiNzAzOWFiZDE4NTY4MGY1NWIxNTdiYTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ppq5ZHHt6w4QcUUwqCnO0CBlO0S vEMo8QYm9ugYd+1U7IMSwOlybBHRktyj3UDtaHD2gKcwVwIOEaKoF65tJlMgE/mS 7r6Kv5Ez6OpK/rMjZV666KyTdbNfw4kqnJaSvijgksm/eEt1vdYfs3rE7XWgs4pV SJ/z69Qf9eNBe544BNjJ61WjuzduwnnwBCZZW5yuYmEhEhsrSml1cofQNi0O9NiN sdm6cwbUAh0DDYeaIeEPKgDZfUsFjF7RUwd4e28Gn4F6cs9a28KZqSbeV1uek5wF mcvvyLxNM7CNZoT0H0obSOyo0ibmyXJvYi17QWdeTJLt/SIsA9ziKEP9QwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOR83GemuFwLcDmr0YVoD1WxV7p2MB8GA1UdIwQY MBaAFCn1JAI4uCjxbmAiniYzUD8EhGWZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2ZVa0FqaTRLUEZ1WUNLZUpqTlFQd1NFWlprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8wNjE0YTYtZDAxYy00ZmYyLWE5OTMt NzI0NjQ1N2ZkMmIzLzEvNUh6Y1o2YTRYQXR3T2F2UmhXZ1BWYkZYdW5ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi8wNjE0YTYtZDAxYy00ZmYyLWE5OTMtNzI0NjQ1N2ZkMmIz LzEvS2ZVa0FqaTRLUEZ1WUNLZUpqTlFQd1NFWlprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuR3TMA0E AgACMAcDBQMqB1JAMA0GCSqGSIb3DQEBCwUAA4IBAQCMnV188EEByrKp9VUqXOxZ aZu2+9ysaalx9LvNC4ITKMJkd2e11Cqt97JVlcloWzHv19hoHl/sBqA5roRVcf/7 CIW3AnpRYmifv4HQKvmAhxPyWJ54aIDoU+4bBR97wKDitzVjRFImXCgew5a99dpM RdqMGIe4AA3uvbd1EMkl8kQrlCksOMbkbq9xTZX6eEgc0mzRD0dXAqkdUiUNSLOJ CEtvx5t9IvZqzXAYX8vVc8ySBD3aPh3xCPVTeanxRx4j+3zgckpet9UnvHATFN8N EYFnLd6PINTkyZ895koqnVloPSs/BSp4oVtx2+d3X03tF7Sk8M393Yjw4X5NpSbx -----END CERTIFICATE-----Generated at Mon Feb 9 23:45:50 2026 by rpki-client