This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/M5qUQ15aukZoVO-1wIZHf8qSrFo.roa File: M5qUQ15aukZoVO-1wIZHf8qSrFo.roa (raw, json) Hash identifier: mUMc9uA7LKaG9gqLH9rxGSZ/XSZpWgN2IouebI+LFLY= Subject key identifier: 33:9A:94:43:5E:5A:BA:46:68:54:EF:B5:C0:86:47:7F:CA:92:AC:5A Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019B7BA401AB9B0C277E3E058CC7B8068595 Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/M5qUQ15aukZoVO-1wIZHf8qSrFo.roa Signing time: Thu 01 Jan 2026 22:18:24 +0000 ROA not before: Thu 01 Jan 2026 22:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52008 IP address blocks: 185.58.206.0/24 maxlen: 24 185.172.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:01:ab:9b:0c:27:7e:3e:05:8c:c7:b8:06:85:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Jan 1 22:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=339a94435e5aba466854efb5c086477fca92ac5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d2:37:e9:46:00:90:7c:ea:a9:b5:ee:7f:ee: 6e:b0:c3:ea:fb:e0:31:d7:6c:08:c2:e1:3d:05:44: 38:78:f3:27:50:d6:e6:21:7e:cd:9f:4a:d1:73:21: b3:f8:80:b7:c7:5e:d1:4a:7c:a0:12:a8:1c:30:9a: a8:37:58:f0:1e:3c:8e:a6:61:5f:77:ff:29:dd:f2: 3f:bf:12:4d:e7:bc:d7:24:4a:b8:54:f6:02:01:31: 25:41:31:58:4c:5d:7d:4f:fb:a8:82:91:36:e8:18: 33:e6:a9:5f:d9:4b:cb:d3:d9:6f:6a:a1:e5:2c:94: f6:b8:f8:a9:38:29:4a:f1:c4:c4:cb:ed:ce:7c:10: a0:66:20:49:6c:3c:2f:58:5a:d0:92:21:9c:76:91: 46:d2:66:00:71:d9:3e:7b:e3:b1:cd:aa:89:1e:12: b2:b3:78:3f:e3:d5:59:0e:c6:ff:a0:6d:70:7a:4f: e0:f6:7a:68:0a:0f:37:02:49:3a:7c:94:dd:c1:3e: ad:7c:b9:a2:19:66:30:b8:e4:26:3f:d2:55:cd:28: 56:58:18:b5:77:ad:e4:6d:c4:ef:b2:0f:61:e6:08: 90:9f:9f:45:e4:e3:58:48:b2:58:e7:a3:61:75:b3: b1:74:a8:ec:91:04:bb:fc:a6:55:6b:70:f1:4d:f1: 0b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:9A:94:43:5E:5A:BA:46:68:54:EF:B5:C0:86:47:7F:CA:92:AC:5A X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/M5qUQ15aukZoVO-1wIZHf8qSrFo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.58.206.0/24 185.172.128.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:84:91:eb:d2:b2:e2:0a:e3:d2:21:f1:f9:01:80:23:c2:05: 29:63:3a:c2:31:35:72:ac:a6:ce:21:74:b9:f8:08:9b:8a:b7: 90:b1:7b:f7:9d:68:58:af:5b:37:43:fe:b9:c4:87:2a:ce:d8: 11:a6:53:3c:6d:20:df:8b:83:2a:34:03:21:67:63:6e:96:91: 24:52:24:65:90:6f:ae:3c:8f:2c:b6:40:d9:65:57:48:cd:33: b6:c4:24:9c:3c:54:9a:d1:3f:32:c3:bc:46:c3:e1:fa:32:e1: b5:84:2c:33:c2:84:bf:a2:dd:6e:ed:e4:28:29:5d:a5:28:59: 83:42:61:a3:b0:1d:d8:4f:78:1f:d6:cc:40:e8:43:74:f9:a4: 68:4d:cf:a5:18:e0:58:d3:39:ac:8e:de:ed:a5:41:07:47:25: cd:78:f7:48:09:f3:7d:98:dc:8f:d4:71:dd:61:e0:5c:d0:85: cb:c8:9b:4c:d3:61:9e:e8:38:6d:46:b5:d7:27:a2:83:d9:1a: 76:07:53:8f:94:79:c0:10:c4:58:ae:80:e0:91:6b:eb:bb:b2: 48:2d:84:f4:f1:41:82:30:a8:d3:3b:4a:f6:8d:9a:db:e8:13: 17:af:a6:d6:f2:76:79:a2:58:74:67:a0:47:5e:0c:e5:61:9c: 86:86:52:d5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7pAGrmwwnfj4FjMe4BoWVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjYwMTAxMjIxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzlhOTQ0MzVlNWFiYTQ2Njg1NGVmYjVjMDg2NDc3ZmNhOTJhYzVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9I36UYAkHzqqbXuf+5usMPq++Ax 12wIwuE9BUQ4ePMnUNbmIX7Nn0rRcyGz+IC3x17RSnygEqgcMJqoN1jwHjyOpmFf d/8p3fI/vxJN57zXJEq4VPYCATElQTFYTF19T/uogpE26Bgz5qlf2UvL09lvaqHl LJT2uPipOClK8cTEy+3OfBCgZiBJbDwvWFrQkiGcdpFG0mYAcdk+e+OxzaqJHhKy s3g/49VZDsb/oG1wek/g9npoCg83Akk6fJTdwT6tfLmiGWYwuOQmP9JVzShWWBi1 d63kbcTvsg9h5giQn59F5ONYSLJY56NhdbOxdKjskQS7/KZVa3DxTfELMwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDOalENeWrpGaFTvtcCGR3/KkqxaMB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvTTVxVVExNWF1a1pvVk8tMXdJWkhmOHFTckZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuTrOAwQA uayAMA0GCSqGSIb3DQEBCwUAA4IBAQBrhJHr0rLiCuPSIfH5AYAjwgUpYzrCMTVy rKbOIXS5+AibireQsXv3nWhYr1s3Q/65xIcqztgRplM8bSDfi4MqNAMhZ2NulpEk UiRlkG+uPI8stkDZZVdIzTO2xCScPFSa0T8yw7xGw+H6MuG1hCwzwoS/ot1u7eQo KV2lKFmDQmGjsB3YT3gf1sxA6EN0+aRoTc+lGOBY0zmsjt7tpUEHRyXNePdICfN9 mNyP1HHdYeBc0IXLyJtM02Ge6DhtRrXXJ6KD2Rp2B1OPlHnAEMRYroDgkWvru7JI LYT08UGCMKjTO0r2jZrb6BMXr6bW8nZ5olh0Z6BHXgzlYZyGhlLV -----END CERTIFICATE-----Generated at Tue Jan 20 02:48:54 2026 by rpki-client