This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/05215b-7152-4742-9b38-cbcc090f4a0f/1/5BkAJ7OSXY4SP7j3-fbqz5bpSEY.roa File: 5BkAJ7OSXY4SP7j3-fbqz5bpSEY.roa (raw, json) Hash identifier: Nj/dFE0ShVqEkO5zoMZ/0/zZii3em6nlg2XD7KAhuw8= Subject key identifier: E4:19:00:27:B3:92:5D:8E:12:3F:B8:F7:F9:F6:EA:CF:96:E9:48:46 Certificate issuer: /CN=85c004eed4cfb1c2767138222ffc09528a2a5c86 Certificate serial: 019B7CEDC8F9F183E8A3E45908CC3388FDDB Authority key identifier: 85:C0:04:EE:D4:CF:B1:C2:76:71:38:22:2F:FC:09:52:8A:2A:5C:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hcAE7tTPscJ2cTgiL_wJUooqXIY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/05215b-7152-4742-9b38-cbcc090f4a0f/1/5BkAJ7OSXY4SP7j3-fbqz5bpSEY.roa Signing time: Fri 02 Jan 2026 04:18:36 +0000 ROA not before: Fri 02 Jan 2026 04:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44383 IP address blocks: 91.201.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/05215b-7152-4742-9b38-cbcc090f4a0f/1/hcAE7tTPscJ2cTgiL_wJUooqXIY.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/05215b-7152-4742-9b38-cbcc090f4a0f/1/hcAE7tTPscJ2cTgiL_wJUooqXIY.mft rsync://rpki.ripe.net/repository/DEFAULT/hcAE7tTPscJ2cTgiL_wJUooqXIY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:c8:f9:f1:83:e8:a3:e4:59:08:cc:33:88:fd:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85c004eed4cfb1c2767138222ffc09528a2a5c86 Validity Not Before: Jan 2 04:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4190027b3925d8e123fb8f7f9f6eacf96e94846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5e:fe:f3:6e:1b:9e:3e:21:0f:6a:68:2e:56: 0f:94:a6:f5:ed:cf:d2:d6:3b:28:62:a4:63:07:86: 53:1c:80:c8:56:17:8e:d1:24:86:af:c6:ae:65:ea: 19:8b:c6:f1:0b:7b:04:6a:6b:6e:9d:45:41:ea:51: c0:62:43:88:e4:81:98:fd:da:b0:cd:35:ab:d8:28: c5:86:82:d9:3b:40:9a:97:85:f0:06:66:53:c8:f8: 13:42:db:89:ff:1a:31:a4:c1:6c:6a:89:2e:1e:a6: 2a:0a:51:1c:46:4a:47:54:46:ca:42:80:62:4f:1a: f8:b5:d3:0a:23:0f:d0:65:ce:a4:b1:21:98:dc:40: 0c:50:7b:05:41:f9:78:00:bc:b8:f9:37:36:d2:9f: cf:a2:95:91:b4:4e:5c:9d:8e:de:c5:7c:76:01:79: 5a:06:cc:23:4c:5d:3e:81:f6:4b:8b:6e:3b:af:94: 4d:93:b9:7a:08:d2:4f:07:4f:35:52:05:e6:74:af: b8:d0:f5:47:af:c5:cc:ce:6a:22:44:59:57:15:c0: 5d:a3:29:8d:36:76:da:f0:e0:d2:86:ae:f4:7a:60: 76:16:c1:87:0f:6a:9c:29:31:95:d2:8c:2a:5f:b9: 0b:7e:69:a8:19:2e:c0:a2:68:75:2c:d9:8b:3d:a1: da:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:19:00:27:B3:92:5D:8E:12:3F:B8:F7:F9:F6:EA:CF:96:E9:48:46 X509v3 Authority Key Identifier: keyid:85:C0:04:EE:D4:CF:B1:C2:76:71:38:22:2F:FC:09:52:8A:2A:5C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hcAE7tTPscJ2cTgiL_wJUooqXIY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/05215b-7152-4742-9b38-cbcc090f4a0f/1/5BkAJ7OSXY4SP7j3-fbqz5bpSEY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/05215b-7152-4742-9b38-cbcc090f4a0f/1/hcAE7tTPscJ2cTgiL_wJUooqXIY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.201.180.0/22 Signature Algorithm: sha256WithRSAEncryption a0:43:21:a7:9b:7e:d5:ea:b3:c6:23:5d:2d:89:b1:15:af:dd: fb:d1:75:ff:82:66:c3:a4:d5:8a:11:95:46:51:7a:a6:68:1f: 4e:97:10:91:b3:84:4e:a5:c1:40:c8:73:fc:50:a5:a6:a1:d5: 1e:a2:6c:92:8c:97:7b:e3:4a:2a:4a:ba:83:aa:e9:8a:ab:c7: f6:ab:b0:a3:08:13:66:68:dc:d1:2c:dc:01:87:a5:be:11:16: 22:4a:8e:27:66:ee:04:62:e0:1f:55:6a:db:20:f6:a6:ff:6b: 2e:87:c9:ce:56:80:3c:0e:a9:6b:b9:5b:f2:3b:1c:81:20:25: 95:d1:38:9a:b1:2c:ed:8f:97:e2:cd:4b:a0:8e:98:5a:17:7b: 65:3c:35:7e:56:d6:ab:d3:69:e1:eb:48:76:4c:71:c1:5f:15: 4c:b7:50:bb:59:81:df:62:88:bc:f7:bf:93:62:02:5a:42:b3: 5b:20:92:86:02:ba:2e:b5:d1:d4:49:36:ea:78:4a:30:bd:dd: 61:03:b3:70:9f:95:d2:ad:ca:18:37:1b:9a:6f:fb:88:5f:c0: 36:bd:28:e1:a6:0c:63:36:4d:9e:56:06:d1:61:2c:ce:bb:23: bf:ac:a4:1d:ca:40:ea:ed:b6:7f:72:93:60:1f:48:61:b9:2a: a3:24:07:01 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87cj58YPoo+RZCMwziP3bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1YzAwNGVlZDRjZmIxYzI3NjcxMzgyMjJmZmMwOTUyOGEy YTVjODYwHhcNMjYwMTAyMDQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDE5MDAyN2IzOTI1ZDhlMTIzZmI4ZjdmOWY2ZWFjZjk2ZTk0ODQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp17+824bnj4hD2poLlYPlKb17c/S 1jsoYqRjB4ZTHIDIVheO0SSGr8auZeoZi8bxC3sEamtunUVB6lHAYkOI5IGY/dqw zTWr2CjFhoLZO0Cal4XwBmZTyPgTQtuJ/xoxpMFsaokuHqYqClEcRkpHVEbKQoBi Txr4tdMKIw/QZc6ksSGY3EAMUHsFQfl4ALy4+Tc20p/PopWRtE5cnY7exXx2AXla BswjTF0+gfZLi247r5RNk7l6CNJPB081UgXmdK+40PVHr8XMzmoiRFlXFcBdoymN Nnba8ODShq70emB2FsGHD2qcKTGV0owqX7kLfmmoGS7Aomh1LNmLPaHalwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOQZACezkl2OEj+49/n26s+W6UhGMB8GA1UdIwQY MBaAFIXABO7Uz7HCdnE4Ii/8CVKKKlyGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGNBRTd0VFBzY0oyY1RnaUxfd0pVb29xWElZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8wNTIxNWItNzE1Mi00NzQyLTliMzgt Y2JjYzA5MGY0YTBmLzEvNUJrQUo3T1NYWTRTUDdqMy1mYnF6NWJwU0VZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi8wNTIxNWItNzE1Mi00NzQyLTliMzgtY2JjYzA5MGY0YTBm LzEvaGNBRTd0VFBzY0oyY1RnaUxfd0pVb29xWElZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW8m0MA0G CSqGSIb3DQEBCwUAA4IBAQCgQyGnm37V6rPGI10tibEVr9370XX/gmbDpNWKEZVG UXqmaB9OlxCRs4ROpcFAyHP8UKWmodUeomySjJd740oqSrqDqumKq8f2q7CjCBNm aNzRLNwBh6W+ERYiSo4nZu4EYuAfVWrbIPam/2suh8nOVoA8DqlruVvyOxyBICWV 0TiasSztj5fizUugjphaF3tlPDV+Vtar02nh60h2THHBXxVMt1C7WYHfYoi897+T YgJaQrNbIJKGAroutdHUSTbqeEowvd1hA7Nwn5XSrcoYNxuab/uIX8A2vSjhpgxj Nk2eVgbRYSzOuyO/rKQdykDq7bZ/cpNgH0hhuSqjJAcB -----END CERTIFICATE-----Generated at Mon Feb 9 19:38:36 2026 by rpki-client