This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/PreLEhXrBI_UKFJOTXBGTgHoYF0.roa File: PreLEhXrBI_UKFJOTXBGTgHoYF0.roa (raw, json) Hash identifier: YyPA9bxM1XffwGYRaKy9yqFp9gB0LZF+tWz17YqGofw= Subject key identifier: 3E:B7:8B:12:15:EB:04:8F:D4:28:52:4E:4D:70:46:4E:01:E8:60:5D Certificate issuer: /CN=86b22303de4b0a870fcfe7b6556c024f75c76a34 Certificate serial: 019B79ED5DA806CF3131DE5555D8B4056CA1 Authority key identifier: 86:B2:23:03:DE:4B:0A:87:0F:CF:E7:B6:55:6C:02:4F:75:C7:6A:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hrIjA95LCocPz-e2VWwCT3XHajQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/PreLEhXrBI_UKFJOTXBGTgHoYF0.roa Signing time: Thu 01 Jan 2026 14:19:17 +0000 ROA not before: Thu 01 Jan 2026 14:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25591 IP address blocks: 5.183.68.0/22 maxlen: 22 92.118.200.0/22 maxlen: 22 185.140.134.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hrIjA95LCocPz-e2VWwCT3XHajQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:5d:a8:06:cf:31:31:de:55:55:d8:b4:05:6c:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86b22303de4b0a870fcfe7b6556c024f75c76a34 Validity Not Before: Jan 1 14:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3eb78b1215eb048fd428524e4d70464e01e8605d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:79:2a:46:7c:d8:90:96:ea:10:1f:1f:cd:fb: e3:75:88:6f:1f:01:45:33:31:8d:a2:ed:fb:41:1c: 46:9f:34:72:63:0e:79:58:b2:36:04:0a:dc:6f:ef: 8e:98:14:4c:41:85:0e:de:9e:8d:86:bb:6a:91:da: be:63:49:44:12:a8:67:16:68:bb:94:85:a8:99:b1: 98:75:c2:aa:c5:90:54:3a:bb:94:c5:69:7c:cb:1c: 83:7f:6c:fa:5f:df:68:c6:ea:6f:55:c4:59:16:a9: b0:6b:c1:e6:c7:7b:11:1b:b9:a9:16:2b:32:49:6a: 01:af:d1:54:db:7f:88:a7:3a:39:ab:2f:d6:51:a6: ad:74:ae:b9:aa:43:62:b6:e4:8d:2f:96:91:4f:e1: 07:2a:c1:f8:7d:e8:08:3a:25:74:9d:f9:0a:74:2c: 41:27:ba:1c:5c:50:41:6b:5f:65:58:77:c3:90:b2: 37:7f:a5:4c:f3:e0:da:db:7b:84:2a:3f:21:00:26: e0:fd:da:cd:54:4e:d0:db:ff:a8:2e:e1:74:0f:a3: 37:59:0f:f8:82:05:eb:58:10:05:6a:b9:25:48:78: 68:5c:c4:8e:f8:57:af:5b:7b:bf:41:50:29:bb:28: 80:55:d4:5a:c5:10:87:c4:f9:6c:af:80:a7:aa:7e: ea:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:B7:8B:12:15:EB:04:8F:D4:28:52:4E:4D:70:46:4E:01:E8:60:5D X509v3 Authority Key Identifier: keyid:86:B2:23:03:DE:4B:0A:87:0F:CF:E7:B6:55:6C:02:4F:75:C7:6A:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hrIjA95LCocPz-e2VWwCT3XHajQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/PreLEhXrBI_UKFJOTXBGTgHoYF0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.183.68.0/22 92.118.200.0/22 185.140.134.0/23 Signature Algorithm: sha256WithRSAEncryption a3:35:f5:f6:b9:9c:d1:ab:1c:a2:bc:90:53:23:3b:fb:07:8a: 81:1b:0d:b2:c6:44:4f:6c:a2:4b:e9:8f:0b:68:cf:7f:48:c5: 94:bb:00:0d:a7:44:db:b5:9c:4b:37:cc:6a:4e:98:0f:1a:62: 4a:2c:24:9a:01:c2:b0:56:a1:81:16:69:ef:1b:d7:1c:c6:92: 54:e3:84:1a:f6:b2:c2:34:01:f1:c8:a7:a8:18:c0:64:2c:02: 34:42:18:af:5d:a8:08:57:d5:b8:de:fc:bb:f4:01:a5:77:ac: cf:a4:67:e2:35:b6:56:9e:f2:82:ce:a4:5b:f7:71:c1:cc:3c: 1e:ca:0d:59:7a:00:f8:ed:d3:ca:01:78:bd:84:6a:57:8b:e6: 79:96:5c:87:3a:a6:cb:07:b1:23:56:9c:a4:ed:0c:90:ba:bf: 1f:17:aa:d4:a9:56:ca:56:bb:c6:85:59:85:00:69:5f:b2:5d: b5:23:99:2d:eb:df:88:ab:f5:1a:44:4b:14:6e:bc:1f:29:be: df:cc:18:c8:20:d9:fc:35:34:c8:d0:11:c0:6e:f5:49:4b:09: 5f:f5:50:ea:fe:fb:55:69:1c:76:0d:32:32:c8:ca:3d:fe:6c: 6e:ab:5b:c0:f9:c1:ec:e2:ea:bd:46:7b:a1:14:a3:72:c9:43: b7:c6:7f:af -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt57V2oBs8xMd5VVdi0BWyhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2YjIyMzAzZGU0YjBhODcwZmNmZTdiNjU1NmMwMjRmNzVj NzZhMzQwHhcNMjYwMTAxMTQxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZWI3OGIxMjE1ZWIwNDhmZDQyODUyNGU0ZDcwNDY0ZTAxZTg2MDVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3kqRnzYkJbqEB8fzfvjdYhvHwFF MzGNou37QRxGnzRyYw55WLI2BArcb++OmBRMQYUO3p6Nhrtqkdq+Y0lEEqhnFmi7 lIWombGYdcKqxZBUOruUxWl8yxyDf2z6X99oxupvVcRZFqmwa8Hmx3sRG7mpFisy SWoBr9FU23+Ipzo5qy/WUaatdK65qkNituSNL5aRT+EHKsH4fegIOiV0nfkKdCxB J7ocXFBBa19lWHfDkLI3f6VM8+Da23uEKj8hACbg/drNVE7Q2/+oLuF0D6M3WQ/4 ggXrWBAFarklSHhoXMSO+FevW3u/QVApuyiAVdRaxRCHxPlsr4Cnqn7qrQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFD63ixIV6wSP1ChSTk1wRk4B6GBdMB8GA1UdIwQY MBaAFIayIwPeSwqHD8/ntlVsAk91x2o0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHJJakE5NUxDb2NQei1lMlZXd0NUM1hIYWpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hZmQ3MGYtYzMwMC00OWNiLWI3Mjkt NzJhYjU5ODdmNjA5LzEvUHJlTEVoWHJCSV9VS0ZKT1RYQkdUZ0hvWUYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9hZmQ3MGYtYzMwMC00OWNiLWI3MjktNzJhYjU5ODdmNjA5 LzEvaHJJakE5NUxDb2NQei1lMlZXd0NUM1hIYWpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCBbdEAwQC XHbIAwQBuYyGMA0GCSqGSIb3DQEBCwUAA4IBAQCjNfX2uZzRqxyivJBTIzv7B4qB Gw2yxkRPbKJL6Y8LaM9/SMWUuwANp0TbtZxLN8xqTpgPGmJKLCSaAcKwVqGBFmnv G9ccxpJU44Qa9rLCNAHxyKeoGMBkLAI0QhivXagIV9W43vy79AGld6zPpGfiNbZW nvKCzqRb93HBzDweyg1ZegD47dPKAXi9hGpXi+Z5llyHOqbLB7EjVpyk7QyQur8f F6rUqVbKVrvGhVmFAGlfsl21I5kt69+Iq/UaREsUbrwfKb7fzBjIINn8NTTI0BHA bvVJSwlf9VDq/vtVaRx2DTIyyMo9/mxuq1vA+cHs4uq9RnuhFKNyyUO3xn+v -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:14 2026 by rpki-client