This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/B5RT0XtewP8cK9bXYSGvr5I78ZE.roa File: B5RT0XtewP8cK9bXYSGvr5I78ZE.roa (raw, json) Hash identifier: BqZxPf+eE3tSK4x6XVJzraCKqqoFgKdx7BkdQiQzZ6M= Subject key identifier: 07:94:53:D1:7B:5E:C0:FF:1C:2B:D6:D7:61:21:AF:AF:92:3B:F1:91 Certificate issuer: /CN=66f983138969f8da674f7b5c0133e0c2d029b4c8 Certificate serial: 019B79100A8BDDBA35C7F90E6BA61A7656A2 Authority key identifier: 66:F9:83:13:89:69:F8:DA:67:4F:7B:5C:01:33:E0:C2:D0:29:B4:C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvmDE4lp-NpnT3tcATPgwtAptMg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/B5RT0XtewP8cK9bXYSGvr5I78ZE.roa Signing time: Thu 01 Jan 2026 10:17:33 +0000 ROA not before: Thu 01 Jan 2026 10:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61417 IP address blocks: 185.90.124.0/22 maxlen: 22 2a03:87a0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.mft rsync://rpki.ripe.net/repository/DEFAULT/ZvmDE4lp-NpnT3tcATPgwtAptMg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:0a:8b:dd:ba:35:c7:f9:0e:6b:a6:1a:76:56:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66f983138969f8da674f7b5c0133e0c2d029b4c8 Validity Not Before: Jan 1 10:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=079453d17b5ec0ff1c2bd6d76121afaf923bf191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d5:d4:2c:9d:01:cc:18:24:36:2e:47:b1:a5: 85:21:92:aa:59:a8:89:05:f4:f6:25:bd:a9:ad:34: ac:4f:02:70:fb:b2:df:ed:a4:d1:83:e5:fa:12:16: a9:4f:78:d7:de:b4:be:7d:63:5d:8d:b1:62:8a:77: 21:e8:1a:08:3b:de:84:6d:88:60:bd:88:3d:90:43: fe:a9:09:f9:7c:ca:f6:a9:43:66:bc:ac:6b:11:c0: 1e:0e:3c:95:56:c1:e7:37:de:46:1e:61:d8:3e:e8: fd:24:71:24:38:1c:f5:a8:f7:46:9c:d0:5d:81:27: 79:0d:92:16:c4:80:06:84:a1:b0:f8:8a:e3:2a:84: b7:37:7d:3e:2c:99:16:cb:16:01:fb:c9:a4:34:4a: 81:d1:75:16:38:2e:4a:70:77:0e:69:df:13:30:4f: 3a:00:7e:2e:25:a8:88:6d:fd:eb:02:3e:01:e3:06: f7:9a:25:7f:0d:37:ae:64:0e:da:40:91:bf:09:a3: 93:a4:19:4e:a5:83:55:7c:ba:7f:ec:aa:70:2d:cf: 2c:19:06:63:b5:9b:67:a6:a8:c4:7f:0d:df:35:d2: 33:79:ec:e8:ba:c4:7b:09:83:35:ef:a9:4d:a2:fe: b3:6f:b7:b7:14:e4:9c:b6:93:36:de:1e:d8:5f:7a: 47:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:94:53:D1:7B:5E:C0:FF:1C:2B:D6:D7:61:21:AF:AF:92:3B:F1:91 X509v3 Authority Key Identifier: keyid:66:F9:83:13:89:69:F8:DA:67:4F:7B:5C:01:33:E0:C2:D0:29:B4:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvmDE4lp-NpnT3tcATPgwtAptMg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/B5RT0XtewP8cK9bXYSGvr5I78ZE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.90.124.0/22 IPv6: 2a03:87a0::/32 Signature Algorithm: sha256WithRSAEncryption 24:b0:37:36:5a:de:11:cc:25:a4:58:2e:15:16:3f:75:1a:cf: 48:c7:f2:0b:e8:6f:96:21:c6:21:ec:c0:90:39:41:70:f6:91: ec:fb:3f:33:fa:d7:f1:79:d7:34:83:21:dd:15:f9:0e:60:8b: 59:2b:fd:35:63:38:29:7a:e5:46:d9:1e:e9:40:d5:d6:39:0a: cd:ee:0e:99:b9:18:62:58:46:aa:b4:d7:de:45:11:95:69:fc: 2c:3e:77:92:fa:87:fb:a5:f8:e8:6a:8e:b9:16:a5:18:91:aa: fb:19:55:9a:e1:90:bd:60:12:5b:53:94:89:9a:bd:ed:32:f5: 90:9a:23:4f:2c:80:e5:df:a8:a3:b9:4b:0d:c7:fb:34:0c:ce: 73:50:4c:d5:9e:be:3c:b8:0e:44:dc:12:64:f8:c0:ad:2b:59: d3:e8:cd:26:0b:40:b6:13:b7:36:ec:34:f4:fb:c1:6e:48:6a: 39:8c:64:42:fa:c5:8e:68:fc:2f:2d:68:ff:59:30:4c:74:63: 63:56:ab:89:a8:61:d6:90:cd:24:54:91:bc:83:03:64:0a:a3: e8:51:78:10:bd:e6:7e:b2:69:0c:83:9f:86:6d:fb:19:b8:ac: 58:8c:9f:9f:86:b6:0b:88:12:d1:08:7c:57:54:61:dd:ac:ed: 9f:16:a0:93 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5EAqL3bo1x/kOa6YadlaiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2Zjk4MzEzODk2OWY4ZGE2NzRmN2I1YzAxMzNlMGMyZDAy OWI0YzgwHhcNMjYwMTAxMTAxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzk0NTNkMTdiNWVjMGZmMWMyYmQ2ZDc2MTIxYWZhZjkyM2JmMTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNXULJ0BzBgkNi5HsaWFIZKqWaiJ BfT2Jb2prTSsTwJw+7Lf7aTRg+X6EhapT3jX3rS+fWNdjbFiinch6BoIO96EbYhg vYg9kEP+qQn5fMr2qUNmvKxrEcAeDjyVVsHnN95GHmHYPuj9JHEkOBz1qPdGnNBd gSd5DZIWxIAGhKGw+IrjKoS3N30+LJkWyxYB+8mkNEqB0XUWOC5KcHcOad8TME86 AH4uJaiIbf3rAj4B4wb3miV/DTeuZA7aQJG/CaOTpBlOpYNVfLp/7KpwLc8sGQZj tZtnpqjEfw3fNdIzeezousR7CYM176lNov6zb7e3FOSctpM23h7YX3pH7QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFAeUU9F7XsD/HCvW12Ehr6+SO/GRMB8GA1UdIwQY MBaAFGb5gxOJafjaZ097XAEz4MLQKbTIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnZtREU0bHAtTnBuVDN0Y0FUUGd3dEFwdE1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9iODE2OWItOGJmZC00MGZmLWI5YmEt NDAzMDQzMDQ4MTE4LzEvQjVSVDBYdGV3UDhjSzliWFlTR3ZyNUk3OFpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9iODE2OWItOGJmZC00MGZmLWI5YmEtNDAzMDQzMDQ4MTE4 LzEvWnZtREU0bHAtTnBuVDN0Y0FUUGd3dEFwdE1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuVp8MA0E AgACMAcDBQAqA4egMA0GCSqGSIb3DQEBCwUAA4IBAQAksDc2Wt4RzCWkWC4VFj91 Gs9Ix/IL6G+WIcYh7MCQOUFw9pHs+z8z+tfxedc0gyHdFfkOYItZK/01YzgpeuVG 2R7pQNXWOQrN7g6ZuRhiWEaqtNfeRRGVafwsPneS+of7pfjoao65FqUYkar7GVWa 4ZC9YBJbU5SJmr3tMvWQmiNPLIDl36ijuUsNx/s0DM5zUEzVnr48uA5E3BJk+MCt K1nT6M0mC0C2E7c27DT0+8FuSGo5jGRC+sWOaPwvLWj/WTBMdGNjVquJqGHWkM0k VJG8gwNkCqPoUXgQveZ+smkMg5+GbfsZuKxYjJ+fhrYLiBLRCHxXVGHdrO2fFqCT -----END CERTIFICATE-----Generated at Mon Feb 9 18:38:07 2026 by rpki-client