This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/5o_jXKDrMZ_VUtAMAA1b61XpZY4.roa File: 5o_jXKDrMZ_VUtAMAA1b61XpZY4.roa (raw, json) Hash identifier: cW/aLAiDeErlaNGgC/UoOefJEPVaWg9YZ9ILa/HwLxQ= Subject key identifier: E6:8F:E3:5C:A0:EB:31:9F:D5:52:D0:0C:00:0D:5B:EB:55:E9:65:8E Certificate issuer: /CN=d04079bb7070ed0eeea3a1a467c79462bcc5455f Certificate serial: 019B7C7FC236FB071D8CD2859281A004FC0B Authority key identifier: D0:40:79:BB:70:70:ED:0E:EE:A3:A1:A4:67:C7:94:62:BC:C5:45:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/5o_jXKDrMZ_VUtAMAA1b61XpZY4.roa Signing time: Fri 02 Jan 2026 02:18:26 +0000 ROA not before: Fri 02 Jan 2026 02:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198426 IP address blocks: 185.149.209.0/24 maxlen: 24 192.175.40.0/22 maxlen: 22 2a0d:a0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.crl rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.mft rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 02:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:c2:36:fb:07:1d:8c:d2:85:92:81:a0:04:fc:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d04079bb7070ed0eeea3a1a467c79462bcc5455f Validity Not Before: Jan 2 02:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e68fe35ca0eb319fd552d00c000d5beb55e9658e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4f:7a:f1:9c:f3:1a:b3:b3:69:51:6c:23:79: 78:37:71:2b:d7:77:12:e4:df:67:b1:0b:07:ca:9e: 49:ed:73:48:21:c9:66:88:0e:13:f7:47:23:83:e3: ab:a9:de:b8:e8:bf:11:8c:e7:41:c3:6b:40:a5:61: ee:37:40:78:1e:3d:68:ef:d9:ae:f5:a6:a0:1a:aa: 25:55:84:8e:fd:f6:36:e7:73:26:40:31:50:d3:fa: fb:b1:45:5f:0c:27:00:f8:b0:70:0b:7e:3d:cb:13: 58:04:f7:35:33:3a:fe:64:e2:d4:3d:8d:c7:dd:b3: a1:20:8d:53:b0:d2:24:9f:81:f8:89:bc:aa:31:93: 2c:ac:f8:d4:e2:b8:86:62:51:c0:b1:1f:a3:9c:bc: 2f:2d:02:e3:7a:c7:03:ab:5f:93:ac:25:3b:26:47: 4b:95:ca:3f:eb:a9:7e:54:14:d8:87:5e:d1:db:03: 7d:bd:00:63:98:8b:85:56:a0:78:15:c2:c6:42:9f: 50:3b:61:4f:49:19:f9:a2:f6:bb:fc:56:f5:e8:7c: e7:a4:cc:d7:50:4d:d3:99:6b:4d:84:9d:ac:49:a6: 51:61:55:15:d0:f3:d6:36:e8:dc:af:a4:f9:b3:22: e0:38:40:39:a3:f6:3a:17:d6:91:55:da:a0:4b:58: 9b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:8F:E3:5C:A0:EB:31:9F:D5:52:D0:0C:00:0D:5B:EB:55:E9:65:8E X509v3 Authority Key Identifier: keyid:D0:40:79:BB:70:70:ED:0E:EE:A3:A1:A4:67:C7:94:62:BC:C5:45:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/5o_jXKDrMZ_VUtAMAA1b61XpZY4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.149.209.0/24 192.175.40.0/22 IPv6: 2a0d:a0c0::/48 Signature Algorithm: sha256WithRSAEncryption a1:66:70:d3:3e:a6:67:d1:92:4c:1b:38:bd:67:e4:15:53:4c: 11:64:9d:22:64:bb:e0:4f:a0:4d:e6:0e:e0:39:a8:8e:f0:0d: 0a:d3:94:07:eb:31:db:fa:41:9e:81:ea:35:77:19:6e:17:2b: c9:5d:ec:2e:11:ae:cf:cc:15:10:ff:e1:78:e5:ab:a1:d3:0a: 6a:cd:da:37:e5:a9:d2:da:5e:2e:fd:31:3a:17:e2:ae:2a:7c: b2:b6:e7:10:b3:10:56:66:14:e5:c3:45:df:9e:55:b1:dc:2b: 1d:38:e2:00:ac:13:63:5c:a0:80:e9:39:f4:76:47:9d:39:7a: 1d:73:f5:09:ae:a0:61:0a:a2:b9:26:66:c5:21:27:db:a9:b7: 93:25:85:d6:06:ad:21:05:be:9a:6f:c1:34:df:a7:8d:98:1f: ea:21:e3:15:5f:0a:17:63:c6:24:b3:61:7e:02:89:38:74:69: ad:e2:2f:03:e6:d2:1e:c3:7e:47:8f:48:19:d3:a9:43:27:8a: b1:d1:ce:59:ed:79:cc:09:68:62:d1:c0:7c:2d:ba:96:d9:93: 52:c6:8e:3a:43:1b:bc:b8:9d:6b:7b:4a:99:82:33:c3:2e:45: c2:79:4c:3d:bf:c1:0a:41:2d:f4:b1:67:fd:81:ca:6a:5c:a2: cd:d7:8b:f9 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt8f8I2+wcdjNKFkoGgBPwLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwNDA3OWJiNzA3MGVkMGVlZWEzYTFhNDY3Yzc5NDYyYmNj NTQ1NWYwHhcNMjYwMTAyMDIxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjhmZTM1Y2EwZWIzMTlmZDU1MmQwMGMwMDBkNWJlYjU1ZTk2NThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqU968ZzzGrOzaVFsI3l4N3Er13cS 5N9nsQsHyp5J7XNIIclmiA4T90cjg+Orqd646L8RjOdBw2tApWHuN0B4Hj1o79mu 9aagGqolVYSO/fY253MmQDFQ0/r7sUVfDCcA+LBwC349yxNYBPc1Mzr+ZOLUPY3H 3bOhII1TsNIkn4H4ibyqMZMsrPjU4riGYlHAsR+jnLwvLQLjescDq1+TrCU7JkdL lco/66l+VBTYh17R2wN9vQBjmIuFVqB4FcLGQp9QO2FPSRn5ova7/Fb16HznpMzX UE3TmWtNhJ2sSaZRYVUV0PPWNujcr6T5syLgOEA5o/Y6F9aRVdqgS1ibqQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFOaP41yg6zGf1VLQDAANW+tV6WWOMB8GA1UdIwQY MBaAFNBAebtwcO0O7qOhpGfHlGK8xUVfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEVCNXUzQnc3UTd1bzZHa1o4ZVVZcnpGUlY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9hOTNkYTAtZTE1NS00MzI0LTliYTkt NjIwOThkMWVjMWU2LzEvNW9falhLRHJNWl9WVXRBTUFBMWI2MVhwWlk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9hOTNkYTAtZTE1NS00MzI0LTliYTktNjIwOThkMWVjMWU2 LzEvMEVCNXUzQnc3UTd1bzZHa1o4ZVVZcnpGUlY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAuZXRAwQC wK8oMA8EAgACMAkDBwAqDaDAAAAwDQYJKoZIhvcNAQELBQADggEBAKFmcNM+pmfR kkwbOL1n5BVTTBFknSJku+BPoE3mDuA5qI7wDQrTlAfrMdv6QZ6B6jV3GW4XK8ld 7C4Rrs/MFRD/4Xjlq6HTCmrN2jflqdLaXi79MToX4q4qfLK25xCzEFZmFOXDRd+e VbHcKx044gCsE2NcoIDpOfR2R505eh1z9QmuoGEKorkmZsUhJ9upt5MlhdYGrSEF vppvwTTfp42YH+oh4xVfChdjxiSzYX4CiTh0aa3iLwPm0h7DfkePSBnTqUMnirHR zlntecwJaGLRwHwtupbZk1LGjjpDG7y4nWt7SpmCM8MuRcJ5TD2/wQpBLfSxZ/2B ympcos3Xi/k= -----END CERTIFICATE-----Generated at Tue Feb 10 11:33:41 2026 by rpki-client