This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/g_5v-NLPXJHDeDJ-eO_icqkvidI.roa File: g_5v-NLPXJHDeDJ-eO_icqkvidI.roa (raw, json) Hash identifier: P02t/uzAF0chAVjdFzatZGDGtXVC3+wMdtFgd9K6CWU= Subject key identifier: 83:FE:6F:F8:D2:CF:5C:91:C3:78:32:7E:78:EF:E2:72:A9:2F:89:D2 Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Certificate serial: 019B7F846440A054899D17ED3FF404054CCE Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/g_5v-NLPXJHDeDJ-eO_icqkvidI.roa Signing time: Fri 02 Jan 2026 16:22:21 +0000 ROA not before: Fri 02 Jan 2026 16:22:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48678 IP address blocks: 85.153.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:64:40:a0:54:89:9d:17:ed:3f:f4:04:05:4c:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Validity Not Before: Jan 2 16:22:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=83fe6ff8d2cf5c91c378327e78efe272a92f89d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bb:0f:06:30:65:26:47:bc:be:c6:f6:e3:99: 09:be:75:99:ba:57:88:df:8a:7b:57:30:db:e2:2f: 9b:6f:ba:6a:3b:e6:b9:c7:e1:ff:3f:50:00:03:6d: 77:c9:d4:be:6b:30:88:5d:cd:d6:a2:0e:2f:c3:53: 72:ff:61:2b:50:f0:60:25:c9:c5:b3:ae:36:22:b9: 3b:79:c2:9f:ce:8f:42:ef:08:55:11:d7:45:ec:0b: 02:9e:9c:38:cf:c0:b1:27:bd:e5:ef:4c:09:95:dc: 77:15:60:31:49:ca:4e:5c:c1:aa:b5:22:2a:0d:f1: 02:d9:8e:35:6a:ac:8d:69:0c:8a:b7:64:35:56:5f: 9c:a5:e6:fc:26:7d:da:bb:f8:1b:8f:52:13:06:96: d3:65:b9:24:ee:d3:cc:82:b7:ba:98:b4:2b:43:c8: 23:f9:2e:67:06:53:cc:d9:c8:bb:60:bf:f7:dc:85: 0c:13:8f:03:97:ba:51:29:35:84:41:8b:ac:75:40: 5c:55:21:61:fc:ad:29:50:03:50:f7:5c:b4:83:53: e4:5c:a0:a3:81:85:37:6e:8c:44:0f:e7:91:40:ce: 25:a4:3b:f4:b1:70:89:f1:fa:1a:65:97:cb:af:41: 16:72:a3:d1:22:d0:62:95:cb:92:09:92:81:dc:b1: 07:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:FE:6F:F8:D2:CF:5C:91:C3:78:32:7E:78:EF:E2:72:A9:2F:89:D2 X509v3 Authority Key Identifier: keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/g_5v-NLPXJHDeDJ-eO_icqkvidI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.153.142.0/24 Signature Algorithm: sha256WithRSAEncryption 31:4c:e3:26:6b:d7:56:3f:19:fa:c6:0b:d6:fb:65:fb:d9:a0: b7:f0:10:97:4e:85:ae:3b:c5:31:5d:97:c2:4b:c2:c9:de:eb: 31:30:7e:7f:cf:b4:d6:14:6e:7c:33:42:84:83:da:93:ca:01: 62:5e:88:34:56:ec:81:95:e5:06:ce:61:28:99:a6:d9:67:27: 96:a1:11:b2:1e:08:db:91:ff:63:00:80:b5:4b:6b:cf:fd:e4: 7a:70:5f:84:ed:d5:3e:a8:95:69:8f:af:ad:4a:ca:e4:45:6c: c8:71:d6:d8:d5:e5:63:8b:36:fc:26:18:56:b0:2e:d1:64:69: 70:a5:66:2d:5e:98:a4:dc:17:e3:3b:4b:2e:f7:7a:93:7b:1d: 04:57:b3:38:d9:8a:c4:14:82:4b:7e:70:59:47:0a:1a:53:f7: fc:a8:83:00:28:41:dd:c2:4f:ba:6c:56:c6:91:e2:7a:ee:8e: 21:7e:dd:4d:75:a9:bb:63:74:f6:36:21:b3:31:95:72:95:f7: 2b:6b:79:72:cb:a3:a3:70:db:82:af:c5:60:ae:87:62:1f:a3: bf:28:4d:ad:8d:23:f7:c8:6f:5e:08:f9:d2:21:fe:8e:83:9f: a3:fc:72:de:f9:bf:36:21:63:fe:26:1e:db:2b:21:ef:3b:e8: 85:18:f2:b0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hGRAoFSJnRftP/QEBUzOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNTljNDMyM2Y3NjdjZTRmZmM4NWRhYWQyMDhiOTBjMDRm YmQzZTkwHhcNMjYwMTAyMTYyMjIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4M2ZlNmZmOGQyY2Y1YzkxYzM3ODMyN2U3OGVmZTI3MmE5MmY4OWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7sPBjBlJke8vsb245kJvnWZuleI 34p7VzDb4i+bb7pqO+a5x+H/P1AAA213ydS+azCIXc3Wog4vw1Ny/2ErUPBgJcnF s642Irk7ecKfzo9C7whVEddF7AsCnpw4z8CxJ73l70wJldx3FWAxScpOXMGqtSIq DfEC2Y41aqyNaQyKt2Q1Vl+cpeb8Jn3au/gbj1ITBpbTZbkk7tPMgre6mLQrQ8gj +S5nBlPM2ci7YL/33IUME48Dl7pRKTWEQYusdUBcVSFh/K0pUANQ91y0g1PkXKCj gYU3boxED+eRQM4lpDv0sXCJ8foaZZfLr0EWcqPRItBilcuSCZKB3LEHKwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIP+b/jSz1yRw3gyfnjv4nKpL4nSMB8GA1UdIwQY MBaAFI1ZxDI/dnzk/8hdqtIIuQwE+9PpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUt ZjJiZTlmNmM2NjRjLzEvZ181di1OTFBYSkhEZURKLWVPX2ljcWt2aWRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUtZjJiZTlmNmM2NjRj LzEvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVZmOMA0G CSqGSIb3DQEBCwUAA4IBAQAxTOMma9dWPxn6xgvW+2X72aC38BCXToWuO8UxXZfC S8LJ3usxMH5/z7TWFG58M0KEg9qTygFiXog0VuyBleUGzmEomabZZyeWoRGyHgjb kf9jAIC1S2vP/eR6cF+E7dU+qJVpj6+tSsrkRWzIcdbY1eVjizb8JhhWsC7RZGlw pWYtXpik3BfjO0su93qTex0EV7M42YrEFIJLfnBZRwoaU/f8qIMAKEHdwk+6bFbG keJ67o4hft1Ndam7Y3T2NiGzMZVylfcra3lyy6OjcNuCr8VgrodiH6O/KE2tjSP3 yG9eCPnSIf6Og5+j/HLe+b82IWP+Jh7bKyHvO+iFGPKw -----END CERTIFICATE-----Generated at Mon Jan 19 16:53:18 2026 by rpki-client