This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/jr5zaX72B88EPr7fF-QkGP5Dx98.roa File: jr5zaX72B88EPr7fF-QkGP5Dx98.roa (raw, json) Hash identifier: oiKQk5Ow8W6lhAid4jGIfOCDhwPg0xWcUUAnbvjLz5k= Subject key identifier: 8E:BE:73:69:7E:F6:07:CF:04:3E:BE:DF:17:E4:24:18:FE:43:C7:DF Certificate issuer: /CN=39027738f978feda24a9d87b0cb8bb9aa7af540d Certificate serial: 019B7F156BAFCC2229C43F0C4A4A852A76B4 Authority key identifier: 39:02:77:38:F9:78:FE:DA:24:A9:D8:7B:0C:B8:BB:9A:A7:AF:54:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQJ3OPl4_tokqdh7DLi7mqevVA0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/jr5zaX72B88EPr7fF-QkGP5Dx98.roa Signing time: Fri 02 Jan 2026 14:21:08 +0000 ROA not before: Fri 02 Jan 2026 14:21:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202207 IP address blocks: 5.56.160.0/21 maxlen: 24 5.56.160.0/22 maxlen: 22 5.56.160.0/24 maxlen: 24 5.56.164.0/22 maxlen: 22 5.181.44.0/22 maxlen: 24 5.181.44.0/23 maxlen: 23 5.181.46.0/23 maxlen: 23 185.5.124.0/22 maxlen: 24 185.5.124.0/23 maxlen: 23 185.5.126.0/23 maxlen: 23 2a03:1c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.crl rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.mft rsync://rpki.ripe.net/repository/DEFAULT/OQJ3OPl4_tokqdh7DLi7mqevVA0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:6b:af:cc:22:29:c4:3f:0c:4a:4a:85:2a:76:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39027738f978feda24a9d87b0cb8bb9aa7af540d Validity Not Before: Jan 2 14:21:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ebe73697ef607cf043ebedf17e42418fe43c7df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a6:00:42:25:e1:6b:09:38:1e:ca:13:6d:0d: c3:19:bf:45:bc:2d:30:c8:fc:b7:d8:69:5e:9b:d5: 23:0e:a5:aa:0f:56:20:f2:6b:b5:90:2a:d3:07:5a: e0:b3:e7:81:12:4e:fa:90:b7:ca:e8:27:e8:8b:9d: a2:b0:be:48:e9:96:a0:57:df:db:e0:89:47:7a:da: 96:62:45:83:06:d0:4a:b8:23:c6:50:d3:5c:19:2f: 63:98:aa:b3:f9:de:a6:69:33:57:43:c4:06:57:46: 16:2c:91:d0:99:74:e4:3d:45:65:23:ad:c1:b5:ab: 2d:54:52:0e:bf:6d:69:fd:3f:aa:f1:ae:8d:ad:74: 2d:f1:34:70:96:85:1e:e3:0a:99:a2:cd:cb:51:a7: fd:75:86:69:76:24:24:7e:0e:12:67:e9:1b:13:c6: e3:f1:ed:84:80:4b:b8:08:e9:69:39:1f:20:1b:3b: a5:e7:b3:cd:a3:d6:98:ec:e1:c0:a9:ff:71:d7:f1: 00:d1:f7:8a:d4:33:e0:a2:49:08:76:a6:15:8f:fa: 39:ce:20:27:95:8d:57:aa:19:7b:05:db:0f:34:4e: 60:64:02:5a:8c:96:26:40:8b:a1:20:43:29:5e:da: 31:ef:25:30:2a:7a:49:16:d5:81:7f:55:04:c3:ce: 75:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:BE:73:69:7E:F6:07:CF:04:3E:BE:DF:17:E4:24:18:FE:43:C7:DF X509v3 Authority Key Identifier: keyid:39:02:77:38:F9:78:FE:DA:24:A9:D8:7B:0C:B8:BB:9A:A7:AF:54:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQJ3OPl4_tokqdh7DLi7mqevVA0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/jr5zaX72B88EPr7fF-QkGP5Dx98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.56.160.0/21 5.181.44.0/22 185.5.124.0/22 IPv6: 2a03:1c0::/32 Signature Algorithm: sha256WithRSAEncryption 0b:b9:21:21:6d:63:30:02:8c:1d:41:72:94:41:21:0b:b8:00: 94:cb:d5:02:53:90:15:53:8b:79:70:e5:a2:cb:38:f9:e8:e1: d6:04:59:36:68:63:c9:9e:c6:a8:7c:08:b8:9a:87:7f:69:a3: e2:2c:9c:f2:dd:c6:cf:30:bd:ae:29:c7:0d:43:4f:d9:fd:80: 2d:89:ee:fa:20:00:5a:43:5c:9f:eb:40:76:5d:d4:c0:c1:50: 54:d4:27:d5:b1:22:00:9e:37:fa:9e:1b:d9:96:2f:8f:35:ac: 3e:21:92:5a:98:9f:65:c4:d0:44:16:cf:d1:2b:08:83:1a:d5: 50:bf:9f:b8:a8:af:e1:39:94:81:50:95:36:bf:bd:89:90:f3: 5d:4d:ab:71:7e:ea:96:a3:d7:c9:6b:33:b3:45:ac:ef:9e:cd: 51:29:b2:e1:f8:b6:2b:62:d7:b9:50:ac:55:bd:6b:66:47:1f: 7d:9f:e1:a2:8b:da:be:b8:c7:b1:fa:bc:48:8e:df:83:13:10: 3f:0d:85:57:d6:7e:ce:c6:7c:3d:d1:6d:f1:5c:1e:3b:28:ac: 2a:22:7c:c3:b8:7b:50:30:a7:b2:55:45:4b:11:e4:7d:95:a3: 60:8d:ce:80:d3:1f:09:50:48:34:b3:ad:3f:15:8b:16:be:5a: 3c:1c:5a:24 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt/FWuvzCIpxD8MSkqFKna0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MDI3NzM4Zjk3OGZlZGEyNGE5ZDg3YjBjYjhiYjlhYTdh ZjU0MGQwHhcNMjYwMTAyMTQyMTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZWJlNzM2OTdlZjYwN2NmMDQzZWJlZGYxN2U0MjQxOGZlNDNjN2RmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qYAQiXhawk4HsoTbQ3DGb9FvC0w yPy32Glem9UjDqWqD1Yg8mu1kCrTB1rgs+eBEk76kLfK6Cfoi52isL5I6ZagV9/b 4IlHetqWYkWDBtBKuCPGUNNcGS9jmKqz+d6maTNXQ8QGV0YWLJHQmXTkPUVlI63B tastVFIOv21p/T+q8a6NrXQt8TRwloUe4wqZos3LUaf9dYZpdiQkfg4SZ+kbE8bj 8e2EgEu4COlpOR8gGzul57PNo9aY7OHAqf9x1/EA0feK1DPgokkIdqYVj/o5ziAn lY1Xqhl7BdsPNE5gZAJajJYmQIuhIEMpXtox7yUwKnpJFtWBf1UEw851oQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFI6+c2l+9gfPBD6+3xfkJBj+Q8ffMB8GA1UdIwQY MBaAFDkCdzj5eP7aJKnYewy4u5qnr1QNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1FKM09QbDRfdG9rcWRoN0RMaTdtcWV2VkEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9iOTExN2MtNTFjNS00YWY4LWJiZWYt ZjVkOGFiN2MxNWYwLzEvanI1emFYNzJCODhFUHI3ZkYtUWtHUDVEeDk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9iOTExN2MtNTFjNS00YWY4LWJiZWYtZjVkOGFiN2MxNWYw LzEvT1FKM09QbDRfdG9rcWRoN0RMaTdtcWV2VkEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDBTigAwQC BbUsAwQCuQV8MA0EAgACMAcDBQAqAwHAMA0GCSqGSIb3DQEBCwUAA4IBAQALuSEh bWMwAowdQXKUQSELuACUy9UCU5AVU4t5cOWiyzj56OHWBFk2aGPJnsaofAi4mod/ aaPiLJzy3cbPML2uKccNQ0/Z/YAtie76IABaQ1yf60B2XdTAwVBU1CfVsSIAnjf6 nhvZli+PNaw+IZJamJ9lxNBEFs/RKwiDGtVQv5+4qK/hOZSBUJU2v72JkPNdTatx fuqWo9fJazOzRazvns1RKbLh+LYrYte5UKxVvWtmRx99n+Gii9q+uMex+rxIjt+D ExA/DYVX1n7Oxnw90W3xXB47KKwqInzDuHtQMKeyVUVLEeR9laNgjc6A0x8JUEg0 s60/FYsWvlo8HFok -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:39 2026 by rpki-client