This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/5kPvrhtoXX4Ae2eRbqSz1nbRjnQ.roa File: 5kPvrhtoXX4Ae2eRbqSz1nbRjnQ.roa (raw, json) Hash identifier: YG0ob+yzngn7BSX6xFfpLcDoVOW8WMqsMsHxFm+Bpyg= Subject key identifier: E6:43:EF:AE:1B:68:5D:7E:00:7B:67:91:6E:A4:B3:D6:76:D1:8E:74 Certificate issuer: /CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d Certificate serial: 019ADDDA633D12EE78282A7E0DEC062228AD Authority key identifier: 8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/5kPvrhtoXX4Ae2eRbqSz1nbRjnQ.roa Signing time: Tue 02 Dec 2025 06:57:48 +0000 ROA not before: Tue 02 Dec 2025 06:57:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212238 IP address blocks: 185.159.189.0/24 maxlen: 24 185.252.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 09:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:dd:da:63:3d:12:ee:78:28:2a:7e:0d:ec:06:22:28:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d Validity Not Before: Dec 2 06:57:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e643efae1b685d7e007b67916ea4b3d676d18e74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:83:36:3f:c8:52:ff:bc:84:69:d1:5d:c6:c9: 8d:d6:68:f5:c8:94:f3:80:fa:76:66:3d:0a:82:0d: 3f:a7:42:5f:b1:92:0d:f1:70:48:f4:8a:1b:9b:41: e0:61:49:f9:e2:cc:34:53:92:5e:32:36:2f:9b:2a: 7f:01:b2:8e:08:d7:75:7a:d1:07:d1:c2:7c:2e:f6: 3f:fe:74:7e:a0:dc:f2:4d:ba:22:f1:c9:54:4b:00: ae:5d:34:8a:88:17:e8:8e:76:26:ef:8c:bc:df:e4: 4c:f7:0c:bb:63:60:54:d3:f7:5a:77:6d:30:ff:2d: 01:ad:9e:4c:10:a2:a7:5c:08:1f:6a:4b:a4:b5:ac: 95:81:f0:8e:1d:bd:1d:81:3c:d3:56:c6:57:1b:87: c1:5a:8b:a1:e1:0a:c3:c2:38:4c:45:61:9b:d2:eb: 42:b9:7b:3b:9e:09:56:fd:55:14:cc:16:dd:d1:1e: a0:47:d1:6c:dc:42:18:19:a8:53:1b:38:bc:18:c6: bd:c5:0b:5b:ee:1d:e0:4c:f8:6a:61:56:61:b4:6a: 34:41:17:9b:0c:fa:ef:d5:e4:f6:4a:8b:5e:7b:20: c8:32:37:08:48:ea:3f:56:23:f9:83:18:8c:55:1d: 5f:e7:62:f7:ca:04:40:b7:a0:9d:b3:81:d7:3c:73: 24:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:43:EF:AE:1B:68:5D:7E:00:7B:67:91:6E:A4:B3:D6:76:D1:8E:74 X509v3 Authority Key Identifier: keyid:8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/5kPvrhtoXX4Ae2eRbqSz1nbRjnQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.159.189.0/24 185.252.84.0/24 Signature Algorithm: sha256WithRSAEncryption 91:83:d3:1b:01:38:af:14:42:01:e8:fc:0a:ce:b9:66:3c:d9: ab:e2:7f:47:10:64:6d:c4:fc:a7:24:5a:04:42:38:d0:e1:fe: f7:57:21:62:ff:66:d6:63:db:7a:55:1a:f4:4e:bb:df:13:55: 7f:b2:a2:7f:71:50:52:36:61:c9:6a:7f:e9:1a:82:7d:1e:45: 82:ce:8b:15:b7:c5:43:cd:72:e6:0b:9e:cd:5f:73:73:89:66: e7:7f:94:ed:1b:8a:c4:35:a1:71:7b:c8:45:57:d8:bd:76:03: d3:7b:15:c0:17:85:b2:65:12:8f:f8:a8:20:20:46:0d:a3:7f: 50:62:45:36:b3:2e:08:0b:89:6a:ae:31:05:7e:2f:86:8d:8a: 37:f4:0c:dc:da:17:53:ce:d2:fa:2e:48:6f:6b:8c:23:3b:40: a2:d6:b8:59:6d:73:11:e1:28:95:eb:09:1a:cf:e6:be:2e:08: 41:3d:22:c0:d9:9c:45:26:82:4f:66:2a:61:d2:7c:72:a6:30: c0:ee:ed:ad:72:a2:01:cf:e9:91:7e:7e:50:13:7e:e2:dc:ff: 10:4a:71:5d:cb:6c:a0:2f:80:4b:66:25:8e:18:04:4c:ee:cf: f3:02:07:06:0f:db:c1:ee:40:a1:4b:9f:28:91:23:98:50:91: f0:be:8d:cf -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZrd2mM9Eu54KCp+DewGIiitMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiNDdhYTA5ZjJjNjEwZjZmNDRiNGU3NWMxY2Q5ZGNkMzg4 NGU1NWQwHhcNMjUxMjAyMDY1NzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjQzZWZhZTFiNjg1ZDdlMDA3YjY3OTE2ZWE0YjNkNjc2ZDE4ZTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIM2P8hS/7yEadFdxsmN1mj1yJTz gPp2Zj0Kgg0/p0JfsZIN8XBI9Iobm0HgYUn54sw0U5JeMjYvmyp/AbKOCNd1etEH 0cJ8LvY//nR+oNzyTboi8clUSwCuXTSKiBfojnYm74y83+RM9wy7Y2BU0/dad20w /y0BrZ5MEKKnXAgfakuktayVgfCOHb0dgTzTVsZXG4fBWouh4QrDwjhMRWGb0utC uXs7nglW/VUUzBbd0R6gR9Fs3EIYGahTGzi8GMa9xQtb7h3gTPhqYVZhtGo0QReb DPrv1eT2SoteeyDIMjcISOo/ViP5gxiMVR1f52L3ygRAt6Cds4HXPHMkJQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOZD764baF1+AHtnkW6ks9Z20Y50MB8GA1UdIwQY MBaAFItHqgnyxhD29EtOdcHNnc04hOVdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTBlcUNmTEdFUGIwUzA1MXdjMmR6VGlFNVYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9mNTYwZTEtNzg0MC00OTUxLWFiNzgt NTAwMTUzOWQ3MTg1LzEvNWtQdnJodG9YWDRBZTJlUmJxU3oxbmJSam5RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9mNTYwZTEtNzg0MC00OTUxLWFiNzgtNTAwMTUzOWQ3MTg1 LzEvaTBlcUNmTEdFUGIwUzA1MXdjMmR6VGlFNVYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuZ+9AwQA ufxUMA0GCSqGSIb3DQEBCwUAA4IBAQCRg9MbATivFEIB6PwKzrlmPNmr4n9HEGRt xPynJFoEQjjQ4f73VyFi/2bWY9t6VRr0TrvfE1V/sqJ/cVBSNmHJan/pGoJ9HkWC zosVt8VDzXLmC57NX3NziWbnf5TtG4rENaFxe8hFV9i9dgPTexXAF4WyZRKP+Kgg IEYNo39QYkU2sy4IC4lqrjEFfi+GjYo39Azc2hdTztL6Lkhva4wjO0Ci1rhZbXMR 4SiV6wkaz+a+LghBPSLA2ZxFJoJPZiph0nxypjDA7u2tcqIBz+mRfn5QE37i3P8Q SnFdy2ygL4BLZiWOGARM7s/zAgcGD9vB7kChS58okSOYUJHwvo3P -----END CERTIFICATE-----Generated at Wed Dec 3 12:02:52 2025 by rpki-client