This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/m5jHreeQ4z9KRhKurDrnV0MKOgE.roa File: m5jHreeQ4z9KRhKurDrnV0MKOgE.roa (raw, json) Hash identifier: 3hVvPZGhCr8fr8Ag3CkkypFJXNKDQDPy5oAw3gz/NcI= Subject key identifier: 9B:98:C7:AD:E7:90:E3:3F:4A:46:12:AE:AC:3A:E7:57:43:0A:3A:01 Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430 Certificate serial: 019B7FF193F5EEE4EC6B696C82DDBCB2E0B7 Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/m5jHreeQ4z9KRhKurDrnV0MKOgE.roa Signing time: Fri 02 Jan 2026 18:21:37 +0000 ROA not before: Fri 02 Jan 2026 18:21:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58678 IP address blocks: 185.24.149.0/24 maxlen: 24 212.16.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:93:f5:ee:e4:ec:6b:69:6c:82:dd:bc:b2:e0:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430 Validity Not Before: Jan 2 18:21:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b98c7ade790e33f4a4612aeac3ae757430a3a01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:ec:f4:20:60:fb:c1:0e:e6:b1:15:47:6f:3c: 1a:a5:1a:f3:d3:28:af:e6:39:47:74:0a:0a:be:39: ef:0a:d8:98:ed:54:59:d8:99:64:65:8c:80:d4:71: a1:62:21:8b:9f:3a:ae:ff:c6:a7:18:f5:70:2c:1a: 51:c5:70:35:53:c2:29:f0:97:79:73:bb:54:13:85: 39:86:f0:92:e1:f4:d5:a6:92:ee:21:2c:94:1e:d9: 23:8f:63:d2:c9:bc:a6:a3:6e:a0:8e:2c:20:80:93: 9c:dc:43:48:2b:69:8f:57:a4:bf:96:c1:44:38:d0: 57:65:c7:a2:77:f2:47:aa:b3:dc:61:7e:5c:71:fb: 97:29:ed:3b:1c:74:3c:a6:95:db:8b:0d:a8:ea:88: 5c:f5:53:7c:24:09:a1:2f:f7:24:d4:a4:e1:1e:03: 57:ff:71:94:27:d2:0d:2b:fe:f0:eb:2e:0c:5c:b5: 62:02:96:95:aa:01:63:9d:09:c4:df:d4:45:56:bc: 72:03:0a:b6:85:77:fb:57:b8:de:0a:4a:3f:97:3c: 2e:09:04:80:37:48:6b:bd:b3:c7:2b:e9:f0:16:d5: 0b:2f:2f:56:51:01:6d:28:d6:38:92:23:f5:eb:a6: cc:25:b9:8d:d6:74:b9:8a:45:73:be:6b:f8:e7:9c: bb:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:98:C7:AD:E7:90:E3:3F:4A:46:12:AE:AC:3A:E7:57:43:0A:3A:01 X509v3 Authority Key Identifier: keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/m5jHreeQ4z9KRhKurDrnV0MKOgE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.24.149.0/24 212.16.93.0/24 Signature Algorithm: sha256WithRSAEncryption 23:98:ef:28:29:ce:ff:28:7c:2a:c5:d0:8f:2e:ca:3b:46:4c: 44:eb:fe:1b:e6:35:73:1b:ca:16:18:b1:4c:05:96:18:c7:d0: 0e:19:25:36:e0:38:c9:64:19:b9:f8:79:b3:37:fe:8c:70:f7: 7e:a2:1c:d0:58:76:88:e7:d7:da:4e:69:90:7f:61:3d:c1:e4: 37:08:1d:1e:fa:1b:2b:31:45:93:4c:f5:3e:8e:44:50:df:84: 5e:37:5f:a4:a1:54:93:71:af:56:f4:90:0c:93:01:57:fe:97: f2:8a:64:54:82:f9:60:96:d3:51:a3:78:91:0b:96:bf:1c:2c: 1f:ce:9c:24:0c:87:55:6e:45:9e:40:7e:fc:3b:1a:54:3f:b9: 52:9e:92:3f:dc:91:b6:b5:cb:e0:49:db:cb:cc:9e:b6:72:64: 7d:9a:6f:af:15:ce:4e:1b:1b:f5:71:30:34:38:29:ef:83:7c: 37:f7:b2:71:31:22:a3:19:5c:87:d2:38:c5:88:ba:08:f5:16: d4:33:07:f8:18:61:28:27:62:05:90:38:69:12:79:8b:55:72: e8:0c:36:3b:24:cf:0e:cb:c2:10:9d:b9:1b:b4:4c:24:40:ae: 41:cf:f7:d2:8e:64:96:04:e9:ef:b6:88:48:6e:70:c4:2d:4d: 19:e7:9e:1f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/8ZP17uTsa2lsgt28suC3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj NWY0MzAwHhcNMjYwMTAyMTgyMTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Yjk4YzdhZGU3OTBlMzNmNGE0NjEyYWVhYzNhZTc1NzQzMGEzYTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8uz0IGD7wQ7msRVHbzwapRrz0yiv 5jlHdAoKvjnvCtiY7VRZ2JlkZYyA1HGhYiGLnzqu/8anGPVwLBpRxXA1U8Ip8Jd5 c7tUE4U5hvCS4fTVppLuISyUHtkjj2PSybymo26gjiwggJOc3ENIK2mPV6S/lsFE ONBXZceid/JHqrPcYX5ccfuXKe07HHQ8ppXbiw2o6ohc9VN8JAmhL/ck1KThHgNX /3GUJ9INK/7w6y4MXLViApaVqgFjnQnE39RFVrxyAwq2hXf7V7jeCko/lzwuCQSA N0hrvbPHK+nwFtULLy9WUQFtKNY4kiP166bMJbmN1nS5ikVzvmv455y7VQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJuYx63nkOM/SkYSrqw651dDCjoBMB8GA1UdIwQY MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt MmEwOWNjNTNhODA1LzEvbTVqSHJlZVE0ejlLUmhLdXJEcm5WME1LT2dFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1 LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuRiVAwQA 1BBdMA0GCSqGSIb3DQEBCwUAA4IBAQAjmO8oKc7/KHwqxdCPLso7RkxE6/4b5jVz G8oWGLFMBZYYx9AOGSU24DjJZBm5+HmzN/6McPd+ohzQWHaI59faTmmQf2E9weQ3 CB0e+hsrMUWTTPU+jkRQ34ReN1+koVSTca9W9JAMkwFX/pfyimRUgvlgltNRo3iR C5a/HCwfzpwkDIdVbkWeQH78OxpUP7lSnpI/3JG2tcvgSdvLzJ62cmR9mm+vFc5O Gxv1cTA0OCnvg3w397JxMSKjGVyH0jjFiLoI9RbUMwf4GGEoJ2IFkDhpEnmLVXLo DDY7JM8Oy8IQnbkbtEwkQK5Bz/fSjmSWBOnvtohIbnDELU0Z554f -----END CERTIFICATE-----Generated at Wed Jan 21 04:06:12 2026 by rpki-client