This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/b5-DADKCVjuKzhVp8zb5pHDQlDY.roa File: b5-DADKCVjuKzhVp8zb5pHDQlDY.roa (raw, json) Hash identifier: v1dRssE16flHwJkl/g1hzFWbJg4j8hmGoWK4DX90HKk= Subject key identifier: 6F:9F:83:00:32:82:56:3B:8A:CE:15:69:F3:36:F9:A4:70:D0:94:36 Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c Certificate serial: 019B7AC787CB820517E16659BA502D988436 Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/b5-DADKCVjuKzhVp8zb5pHDQlDY.roa Signing time: Thu 01 Jan 2026 18:17:35 +0000 ROA not before: Thu 01 Jan 2026 18:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9123 IP address blocks: 85.209.8.0/24 maxlen: 24 92.246.76.0/24 maxlen: 24 185.68.22.0/24 maxlen: 24 213.226.124.0/24 maxlen: 24 213.226.125.0/24 maxlen: 24 213.226.126.0/24 maxlen: 24 213.226.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:87:cb:82:05:17:e1:66:59:ba:50:2d:98:84:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c Validity Not Before: Jan 1 18:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f9f83003282563b8ace1569f336f9a470d09436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b1:14:be:bf:61:47:5d:55:2b:18:68:cc:a7: 27:de:52:b7:4c:3d:e0:55:65:14:54:1b:6f:58:e7: ec:9b:3e:a7:89:ad:19:eb:b8:7b:01:bf:8c:1f:cb: d4:4c:b6:70:be:75:27:ee:4a:21:26:7f:7e:e3:2f: 44:a0:92:95:80:0a:65:10:93:59:50:4a:8f:2d:56: 5e:39:1c:87:eb:58:de:0c:e4:bb:88:88:7d:4e:28: 4d:b1:50:d8:2f:31:8d:e7:44:2a:bb:ae:56:d8:e0: 85:de:b7:a1:64:bf:da:d8:0c:3f:a7:e4:71:b3:d0: 91:a6:06:e3:9d:c9:94:9b:ee:b6:ef:48:6e:fd:c0: a3:b4:ec:97:1e:fb:27:ed:61:56:06:9f:b2:3b:98: fc:86:a9:48:54:5c:96:8b:8e:18:e9:47:2c:de:f5: b5:69:19:42:7d:b6:70:61:3c:08:b3:ac:71:fd:09: 74:a3:0e:84:bb:ec:8f:1f:f5:52:5e:d9:10:65:38: 8f:98:8d:c0:7c:90:2f:79:10:42:6d:6f:fc:33:c2: a5:32:03:8b:13:ef:b0:97:4f:65:18:35:c8:9e:ae: 24:d0:25:82:b4:b5:f5:ef:4c:f7:4b:2b:2a:86:31: 45:12:b6:40:1c:56:df:67:fe:27:c4:53:c2:a3:8c: 43:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:9F:83:00:32:82:56:3B:8A:CE:15:69:F3:36:F9:A4:70:D0:94:36 X509v3 Authority Key Identifier: keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/b5-DADKCVjuKzhVp8zb5pHDQlDY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.209.8.0/24 92.246.76.0/24 185.68.22.0/24 213.226.124.0/22 Signature Algorithm: sha256WithRSAEncryption 8b:6a:30:c3:ad:d4:eb:e2:81:a2:33:36:54:3f:a8:ed:2c:d4: 5c:1b:38:08:50:c3:05:c6:b3:d9:0d:c0:bf:05:05:d4:40:97: 53:87:1d:53:38:22:5b:b9:20:95:00:96:9e:83:50:94:10:82: 91:2b:c2:e7:26:46:7c:4b:e8:0f:6f:92:b5:d8:39:b2:fd:bc: 27:4b:40:06:d9:f0:fe:2a:39:3f:2a:46:1d:5a:31:75:24:b4: dc:b8:07:6c:10:43:2a:c5:ce:f9:32:a0:87:53:90:dc:df:75: ee:ef:4c:2c:ba:dc:05:ed:95:4a:53:5d:c9:e7:82:48:d4:3c: 13:b2:3f:f4:94:a1:a6:2a:61:32:3d:8b:bb:38:6f:df:9a:ef: 6a:55:d6:57:89:22:84:d6:a1:e2:cd:9c:14:dd:cc:d5:7b:d8: 4a:fa:36:3e:ea:1c:40:cf:f5:b5:6a:b6:b8:e6:63:4b:18:49: 83:27:8e:5d:35:a4:40:b9:77:60:ba:92:a5:cc:5b:5a:3a:66: 0d:4b:df:16:13:c7:d7:be:89:f2:13:06:a0:01:6c:59:0f:14: d2:0b:17:d4:b3:e1:6f:8c:2b:dc:f3:6d:9e:68:f3:01:ec:02: b7:0f:27:ee:e7:62:46:67:9c:3f:76:ad:73:bf:cc:1b:33:7a: 69:09:9a:be -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt6x4fLggUX4WZZulAtmIQ2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0 ODBiOWMwHhcNMjYwMTAxMTgxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjlmODMwMDMyODI1NjNiOGFjZTE1NjlmMzM2ZjlhNDcwZDA5NDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrEUvr9hR11VKxhozKcn3lK3TD3g VWUUVBtvWOfsmz6nia0Z67h7Ab+MH8vUTLZwvnUn7kohJn9+4y9EoJKVgAplEJNZ UEqPLVZeORyH61jeDOS7iIh9TihNsVDYLzGN50Qqu65W2OCF3rehZL/a2Aw/p+Rx s9CRpgbjncmUm+6270hu/cCjtOyXHvsn7WFWBp+yO5j8hqlIVFyWi44Y6Ucs3vW1 aRlCfbZwYTwIs6xx/Ql0ow6Eu+yPH/VSXtkQZTiPmI3AfJAveRBCbW/8M8KlMgOL E++wl09lGDXInq4k0CWCtLX170z3SysqhjFFErZAHFbfZ/4nxFPCo4xDLwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFG+fgwAyglY7is4VafM2+aRw0JQ2MB8GA1UdIwQY MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt NTczNzAxYzg0ODMzLzEvYjUtREFES0NWanVLemhWcDh6YjVwSERRbERZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEtNTczNzAxYzg0ODMz LzEvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAVdEIAwQA XPZMAwQAuUQWAwQC1eJ8MA0GCSqGSIb3DQEBCwUAA4IBAQCLajDDrdTr4oGiMzZU P6jtLNRcGzgIUMMFxrPZDcC/BQXUQJdThx1TOCJbuSCVAJaeg1CUEIKRK8LnJkZ8 S+gPb5K12Dmy/bwnS0AG2fD+Kjk/KkYdWjF1JLTcuAdsEEMqxc75MqCHU5Dc33Xu 70wsutwF7ZVKU13J54JI1DwTsj/0lKGmKmEyPYu7OG/fmu9qVdZXiSKE1qHizZwU 3czVe9hK+jY+6hxAz/W1ara45mNLGEmDJ45dNaRAuXdgupKlzFtaOmYNS98WE8fX vonyEwagAWxZDxTSCxfUs+FvjCvc822eaPMB7AK3Dyfu52JGZ5w/dq1zv8wbM3pp CZq+ -----END CERTIFICATE-----Generated at Mon Jan 19 20:37:17 2026 by rpki-client