This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/5S_7thf2DaNAtWCpIaM3S8JGyIw.roa File: 5S_7thf2DaNAtWCpIaM3S8JGyIw.roa (raw, json) Hash identifier: gFO7mmA7nFE7H8OIcfxRMIamOyG5pl0gNHLu/ghYBzU= Subject key identifier: E5:2F:FB:B6:17:F6:0D:A3:40:B5:60:A9:21:A3:37:4B:C2:46:C8:8C Certificate issuer: /CN=037f532fa262f5c6bd9615bcd79d6edd43f2e075 Certificate serial: 019B7B361A8F987BEB5A44DF8193B4ACA20E Authority key identifier: 03:7F:53:2F:A2:62:F5:C6:BD:96:15:BC:D7:9D:6E:DD:43:F2:E0:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/5S_7thf2DaNAtWCpIaM3S8JGyIw.roa Signing time: Thu 01 Jan 2026 20:18:21 +0000 ROA not before: Thu 01 Jan 2026 20:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9121 IP address blocks: 185.186.108.0/24 maxlen: 24 185.186.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.crl rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 08:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:1a:8f:98:7b:eb:5a:44:df:81:93:b4:ac:a2:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=037f532fa262f5c6bd9615bcd79d6edd43f2e075 Validity Not Before: Jan 1 20:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e52ffbb617f60da340b560a921a3374bc246c88c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:13:13:16:f2:c4:41:55:e2:40:6a:59:e8:6e: 3f:86:19:1e:e0:18:db:f8:f6:f0:34:6e:99:3f:54: b0:4e:d1:d6:7c:57:41:d0:12:94:f8:80:32:e2:41: 2a:6c:53:38:49:da:d6:1c:b9:50:e3:d5:32:e5:d0: 02:b0:2d:4f:2d:6d:64:d5:19:18:33:14:63:4f:c4: c7:73:da:f5:af:7b:cf:b2:5a:fc:8f:91:59:04:b3: 9b:a7:19:42:d3:37:64:7d:37:d7:d3:fe:a4:73:95: 26:f3:ed:a4:ae:4b:5d:5a:ad:57:7a:8b:34:0c:88: 4c:52:41:c4:3f:96:69:b4:2a:d0:cf:cf:9b:ac:01: 01:06:91:29:8b:32:c2:9c:f9:34:ed:04:c6:3a:99: 2e:70:a8:de:04:1b:2c:d6:15:54:8d:98:65:00:83: 5e:5c:e4:b5:7c:1f:31:82:73:ee:e8:cc:cd:b3:b2: ff:d8:c6:0c:81:d4:45:fa:ce:42:89:b6:91:ff:f1: c8:51:2e:e1:92:7a:5f:8e:5a:d8:7a:c2:13:85:b1: f6:e9:12:39:52:95:70:71:db:86:23:99:5d:09:28: 2d:e7:af:2e:6d:09:f3:f8:71:a3:97:9b:fb:79:0d: 12:0b:e2:3d:78:02:47:48:f0:19:c4:a8:5d:11:71: 41:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:2F:FB:B6:17:F6:0D:A3:40:B5:60:A9:21:A3:37:4B:C2:46:C8:8C X509v3 Authority Key Identifier: keyid:03:7F:53:2F:A2:62:F5:C6:BD:96:15:BC:D7:9D:6E:DD:43:F2:E0:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/5S_7thf2DaNAtWCpIaM3S8JGyIw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.186.108.0/23 Signature Algorithm: sha256WithRSAEncryption 90:fe:14:a0:aa:a5:4c:2c:d2:b1:2b:ed:cd:4f:0c:a2:73:5e: 2b:64:64:83:26:77:b5:48:64:85:7e:d1:0b:af:7c:53:ef:c2: ea:04:4a:ff:85:b3:a7:c7:95:a9:26:a5:11:ef:48:f2:a0:ff: 42:d5:7c:48:23:99:91:75:f3:7e:7b:c1:54:85:f5:90:4e:ef: c7:fd:d6:75:69:15:70:6f:43:4b:cf:ea:4b:0c:e4:5d:64:0f: d4:17:70:6d:00:dc:85:84:9e:b2:aa:4d:d2:88:e6:80:ea:38: 54:15:1d:66:33:2e:1d:93:52:a7:ff:b1:92:af:d7:7f:a1:da: f9:95:30:5c:d6:89:bd:08:a8:97:0a:1d:a6:12:a0:9f:bf:89: d1:69:fc:b5:b3:9c:00:b4:45:0e:a6:5e:f3:c7:a5:76:ba:3f: ac:3a:a9:ed:b9:7e:7d:07:b8:92:d1:85:58:0c:11:60:b0:0b: 95:a8:7c:99:77:1c:5f:49:b4:c4:7d:e7:4e:0c:28:b1:65:b1: 77:a8:87:3d:c4:31:15:b4:95:c9:44:7a:49:7c:8a:90:da:86: 26:6a:1d:69:f5:df:9e:59:7d:98:03:40:d2:ab:32:b3:7d:e9: 25:fd:1d:2f:56:f6:4c:6f:cd:44:27:2d:f4:83:1f:82:93:ed: 78:4f:34:a2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NhqPmHvrWkTfgZO0rKIOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzN2Y1MzJmYTI2MmY1YzZiZDk2MTViY2Q3OWQ2ZWRkNDNm MmUwNzUwHhcNMjYwMTAxMjAxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTJmZmJiNjE3ZjYwZGEzNDBiNTYwYTkyMWEzMzc0YmMyNDZjODhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RMTFvLEQVXiQGpZ6G4/hhke4Bjb +PbwNG6ZP1SwTtHWfFdB0BKU+IAy4kEqbFM4SdrWHLlQ49Uy5dACsC1PLW1k1RkY MxRjT8THc9r1r3vPslr8j5FZBLObpxlC0zdkfTfX0/6kc5Um8+2krktdWq1Xeos0 DIhMUkHEP5ZptCrQz8+brAEBBpEpizLCnPk07QTGOpkucKjeBBss1hVUjZhlAINe XOS1fB8xgnPu6MzNs7L/2MYMgdRF+s5CibaR//HIUS7hknpfjlrYesIThbH26RI5 UpVwcduGI5ldCSgt568ubQnz+HGjl5v7eQ0SC+I9eAJHSPAZxKhdEXFBRwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOUv+7YX9g2jQLVgqSGjN0vCRsiMMB8GA1UdIwQY MBaAFAN/Uy+iYvXGvZYVvNedbt1D8uB1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTM5VEw2Smk5Y2E5bGhXODE1MXUzVVB5NEhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8wOGU1N2MtZDcxNi00NzA1LTk1NjEt MDNhZGZiYzY4YzkxLzEvNVNfN3RoZjJEYU5BdFdDcElhTTNTOEpHeUl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8wOGU1N2MtZDcxNi00NzA1LTk1NjEtMDNhZGZiYzY4Yzkx LzEvQTM5VEw2Smk5Y2E5bGhXODE1MXUzVVB5NEhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBubpsMA0G CSqGSIb3DQEBCwUAA4IBAQCQ/hSgqqVMLNKxK+3NTwyic14rZGSDJne1SGSFftEL r3xT78LqBEr/hbOnx5WpJqUR70jyoP9C1XxII5mRdfN+e8FUhfWQTu/H/dZ1aRVw b0NLz+pLDORdZA/UF3BtANyFhJ6yqk3SiOaA6jhUFR1mMy4dk1Kn/7GSr9d/odr5 lTBc1om9CKiXCh2mEqCfv4nRafy1s5wAtEUOpl7zx6V2uj+sOqntuX59B7iS0YVY DBFgsAuVqHyZdxxfSbTEfedODCixZbF3qIc9xDEVtJXJRHpJfIqQ2oYmah1p9d+e WX2YA0DSqzKzfekl/R0vVvZMb81EJy30gx+Ck+14TzSi -----END CERTIFICATE-----Generated at Wed Jan 21 14:30:36 2026 by rpki-client