This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/5p06foGY1-6MmabucJIJFtrtXb4.roa File: 5p06foGY1-6MmabucJIJFtrtXb4.roa (raw, json) Hash identifier: MnNFYKWiaH29yfqHBKKwGcB84QN49PuLUrqDgius3Jk= Subject key identifier: E6:9D:3A:7E:81:98:D7:EE:8C:99:A6:EE:70:92:09:16:DA:ED:5D:BE Certificate issuer: /CN=8777b5b36f66e13c4388c9934da507856515d073 Certificate serial: 019B7834F68F8778B847C6018890A39897B2 Authority key identifier: 87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/5p06foGY1-6MmabucJIJFtrtXb4.roa Signing time: Thu 01 Jan 2026 06:18:15 +0000 ROA not before: Thu 01 Jan 2026 06:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49964 IP address blocks: 37.19.8.0/21 maxlen: 24 46.18.33.0/24 maxlen: 24 46.18.34.0/23 maxlen: 24 46.18.34.0/24 maxlen: 24 46.18.35.0/24 maxlen: 24 46.18.36.0/22 maxlen: 24 46.18.36.0/24 maxlen: 24 46.18.37.0/24 maxlen: 24 46.18.38.0/24 maxlen: 24 46.18.39.0/24 maxlen: 24 62.112.29.0/24 maxlen: 24 62.112.31.0/24 maxlen: 24 85.119.216.0/21 maxlen: 24 109.69.216.0/23 maxlen: 24 109.69.217.16/28 maxlen: 28 109.69.219.0/24 maxlen: 24 109.69.220.0/24 maxlen: 24 109.69.221.0/24 maxlen: 24 109.69.221.192/28 maxlen: 28 109.69.222.0/24 maxlen: 24 185.185.228.0/24 maxlen: 24 185.185.229.0/24 maxlen: 24 185.185.231.0/24 maxlen: 24 2a00:1528::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:f6:8f:87:78:b8:47:c6:01:88:90:a3:98:97:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8777b5b36f66e13c4388c9934da507856515d073 Validity Not Before: Jan 1 06:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e69d3a7e8198d7ee8c99a6ee70920916daed5dbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:33:6f:5b:b0:f2:b9:84:cf:ee:1d:a3:44:fb: 85:69:e1:d2:5c:13:b5:1a:72:5b:f8:6a:b7:55:27: 97:ae:e5:41:49:15:83:c6:f3:9a:4f:e8:2b:d8:91: 3f:5f:88:d3:4e:4b:ec:fc:24:e5:8d:21:f6:b6:50: 6e:73:14:d3:02:8d:28:0a:ab:25:e9:96:e5:bd:ae: bc:3d:db:75:da:fc:d3:3b:09:95:8d:8b:7e:0c:68: c9:04:e6:4f:46:9b:06:a7:33:8b:12:ee:c2:c2:2e: e8:66:8d:29:de:46:b3:c3:5e:3f:15:4d:3e:67:36: bd:8e:14:b9:1f:cf:45:63:b2:8d:f0:fe:30:66:40: 78:be:1c:53:d2:d2:59:08:1e:56:64:6f:72:00:e2: 1d:e0:f0:09:da:38:32:2c:7b:52:9d:75:16:73:eb: e0:61:e5:17:33:91:29:d1:3e:5b:69:b0:b9:8c:05: 2c:31:b0:76:b0:e6:f9:d7:99:39:3e:a8:ee:d4:71: 4d:9e:69:0a:d5:4b:7d:a6:98:54:7d:f2:98:59:4e: dd:47:fa:c9:bf:d1:ea:0e:da:b7:57:0b:f4:87:70: 4b:f9:e3:9b:5d:fc:64:36:25:9f:14:01:b9:f5:ab: ee:1a:bf:19:1b:d5:73:16:35:b4:1b:05:b4:af:56: 9b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:9D:3A:7E:81:98:D7:EE:8C:99:A6:EE:70:92:09:16:DA:ED:5D:BE X509v3 Authority Key Identifier: keyid:87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/5p06foGY1-6MmabucJIJFtrtXb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.19.8.0/21 46.18.33.0-46.18.39.255 62.112.29.0/24 62.112.31.0/24 85.119.216.0/21 109.69.216.0/23 109.69.219.0-109.69.222.255 185.185.228.0/23 185.185.231.0/24 IPv6: 2a00:1528::/32 Signature Algorithm: sha256WithRSAEncryption 81:e9:18:55:70:9b:f2:30:7a:9c:6b:06:ef:e8:50:95:a3:7f: f1:f6:4d:44:2c:41:b7:1f:94:ee:82:c2:0c:f4:bd:f7:9a:37: 71:b8:5a:38:d3:fc:6f:be:86:a7:a6:13:10:11:ee:f9:05:8f: d3:7b:6d:5d:e7:0c:4c:50:92:4c:d9:06:cd:24:16:2a:97:90: 69:f8:36:6d:85:ea:73:61:a6:54:98:3c:e2:9c:0e:70:93:d4: 7e:6c:d7:be:72:c7:e2:8f:fa:68:36:40:a0:0b:a8:cf:63:be: 13:a4:45:14:09:23:38:3e:b7:44:d9:42:72:a9:a0:15:ad:c1: 9c:66:1c:d3:12:c8:c1:86:28:1a:33:a9:d9:36:64:66:47:25: e7:f6:11:da:fe:b0:f4:1e:c3:59:db:7c:41:ad:ae:c1:21:96: 5f:32:fb:f3:3d:27:d5:6e:c0:37:33:ce:7a:bf:27:1f:c3:b8: 6a:6b:bd:ba:4e:ba:69:df:d2:1c:97:a6:3b:61:52:f8:5e:fb: 34:fd:12:4c:35:38:db:ec:59:26:b6:19:7b:28:a7:bd:39:63: 11:0b:2f:e3:06:7d:cd:6a:36:8a:42:c2:1a:f6:cf:d3:cd:b3: 47:1e:7e:bc:b9:f2:5d:bf:74:1c:80:16:6a:e8:d6:63:53:c4: f1:45:ad:4c -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgISAZt4NPaPh3i4R8YBiJCjmJeyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NzdiNWIzNmY2NmUxM2M0Mzg4Yzk5MzRkYTUwNzg1NjUx NWQwNzMwHhcNMjYwMTAxMDYxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjlkM2E3ZTgxOThkN2VlOGM5OWE2ZWU3MDkyMDkxNmRhZWQ1ZGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzNvW7DyuYTP7h2jRPuFaeHSXBO1 GnJb+Gq3VSeXruVBSRWDxvOaT+gr2JE/X4jTTkvs/CTljSH2tlBucxTTAo0oCqsl 6Zblva68Pdt12vzTOwmVjYt+DGjJBOZPRpsGpzOLEu7Cwi7oZo0p3kazw14/FU0+ Zza9jhS5H89FY7KN8P4wZkB4vhxT0tJZCB5WZG9yAOId4PAJ2jgyLHtSnXUWc+vg YeUXM5Ep0T5babC5jAUsMbB2sOb515k5Pqju1HFNnmkK1Ut9pphUffKYWU7dR/rJ v9HqDtq3Vwv0h3BL+eObXfxkNiWfFAG59avuGr8ZG9VzFjW0GwW0r1abfwIDAQAB o4ICWDCCAlQwHQYDVR0OBBYEFOadOn6BmNfujJmm7nCSCRba7V2+MB8GA1UdIwQY MBaAFId3tbNvZuE8Q4jJk02lB4VlFdBzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2Mt ZWQxZjMwY2MxYzU3LzEvNXAwNmZvR1kxLTZNbWFidWNKSUpGdHJ0WGI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2MtZWQxZjMwY2MxYzU3 LzEvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG4GCCsGAQUFBwEHAQH/BF8wXTBMBAIAATBGAwQDJRMIMAwD BAAuEiEDBAMuEiADBAA+cB0DBAA+cB8DBANVd9gDBAFtRdgwDAMEAG1F2wMEAG1F 3gMEAbm55AMEALm55zANBAIAAjAHAwUAKgAVKDANBgkqhkiG9w0BAQsFAAOCAQEA gekYVXCb8jB6nGsG7+hQlaN/8fZNRCxBtx+U7oLCDPS995o3cbhaONP8b76Gp6YT EBHu+QWP03ttXecMTFCSTNkGzSQWKpeQafg2bYXqc2GmVJg84pwOcJPUfmzXvnLH 4o/6aDZAoAuoz2O+E6RFFAkjOD63RNlCcqmgFa3BnGYc0xLIwYYoGjOp2TZkZkcl 5/YR2v6w9B7DWdt8Qa2uwSGWXzL78z0n1W7ANzPOer8nH8O4amu9uk66ad/SHJem O2FS+F77NP0STDU42+xZJrYZeyinvTljEQsv4wZ9zWo2ikLCGvbP082zRx5+vLny Xb90HIAWaujWY1PE8UWtTA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:24 2026 by rpki-client