This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/5ktFpVoHtcv-4PVj4xQGVTm6rZs.roa File: 5ktFpVoHtcv-4PVj4xQGVTm6rZs.roa (raw, json) Hash identifier: Zqkw6KvI8acX/aUr49KfIKqTAKRlHDvQQG+hF6oNumM= Subject key identifier: E6:4B:45:A5:5A:07:B5:CB:FE:E0:F5:63:E3:14:06:55:39:BA:AD:9B Certificate issuer: /CN=3e24c7ecfa37d2487152fb9bbbab50be79de2619 Certificate serial: 019B7834EB85675AECD828D28892FA7709F1 Authority key identifier: 3E:24:C7:EC:FA:37:D2:48:71:52:FB:9B:BB:AB:50:BE:79:DE:26:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/5ktFpVoHtcv-4PVj4xQGVTm6rZs.roa Signing time: Thu 01 Jan 2026 06:18:12 +0000 ROA not before: Thu 01 Jan 2026 06:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 36351 IP address blocks: 185.71.228.0/24 maxlen: 24 185.71.229.0/24 maxlen: 24 185.71.231.0/24 maxlen: 24 185.125.84.0/24 maxlen: 24 185.125.85.0/24 maxlen: 24 185.125.87.0/24 maxlen: 24 193.0.180.0/24 maxlen: 24 193.0.181.0/24 maxlen: 24 2a05:3343::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 09:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:eb:85:67:5a:ec:d8:28:d2:88:92:fa:77:09:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e24c7ecfa37d2487152fb9bbbab50be79de2619 Validity Not Before: Jan 1 06:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e64b45a55a07b5cbfee0f563e314065539baad9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:86:1c:95:47:06:8d:20:56:8f:56:be:8f:d6: 66:ac:d1:14:80:33:92:5c:5a:23:8e:29:60:2b:7b: 7b:98:39:b7:14:70:1e:5a:30:30:7a:e8:cc:ce:52: 2a:03:90:92:5c:71:0b:4d:5f:39:22:02:5f:fa:5d: 06:67:6d:36:7c:82:c2:9d:81:48:be:7c:bf:bc:41: 75:f9:0a:0f:7e:f6:57:d7:9c:e2:3b:ff:04:d9:1e: 02:8f:ee:99:0e:30:3d:e5:cf:d6:ba:f7:a4:b2:bd: 7d:29:1d:53:f5:12:25:c7:d5:2a:ef:14:0c:4d:ea: 44:9c:f8:7f:8c:84:1b:61:0c:11:39:44:07:a6:77: 9b:4d:7f:3e:a8:99:6e:9b:70:9d:bb:df:e1:4b:f0: d8:fe:31:8d:a2:97:51:96:e0:0f:e3:fc:07:59:89: d2:35:1e:1f:b5:b8:e2:0b:66:ef:b0:74:04:27:54: 9a:84:2b:ff:39:b4:7a:60:8f:a2:7c:37:5d:e5:54: c3:e5:79:44:51:09:cc:74:17:78:9a:2a:b0:0f:b7: 9e:46:59:a2:d7:62:1c:ab:29:f5:c8:d8:5b:e6:70: c1:2e:59:b4:7a:cf:d6:e9:4b:88:ed:ec:f5:20:81: 7f:21:14:de:b3:e2:eb:7b:2e:fe:c1:8f:20:c0:e9: e7:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:4B:45:A5:5A:07:B5:CB:FE:E0:F5:63:E3:14:06:55:39:BA:AD:9B X509v3 Authority Key Identifier: keyid:3E:24:C7:EC:FA:37:D2:48:71:52:FB:9B:BB:AB:50:BE:79:DE:26:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/5ktFpVoHtcv-4PVj4xQGVTm6rZs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.71.228.0/23 185.71.231.0/24 185.125.84.0/23 185.125.87.0/24 193.0.180.0/23 IPv6: 2a05:3343::/42 Signature Algorithm: sha256WithRSAEncryption 3d:2c:9a:72:86:e5:ff:f8:d6:4f:1e:6d:09:bd:ff:79:c4:fa: dc:c0:c3:f1:b7:19:f6:06:f1:08:f0:b1:e0:e8:84:55:b6:93: c7:3a:2d:43:d2:1d:29:e1:d1:97:b6:68:bc:79:05:80:b1:67: 5b:7c:81:c8:51:da:c9:aa:7c:37:05:4a:6e:fe:59:ec:53:ad: 9b:70:93:b7:d6:e6:a6:17:ae:fa:ea:58:db:70:d1:c2:5a:a0: 2f:46:8a:2e:3d:3d:2e:c0:5f:03:6f:a5:f4:28:1f:e4:9a:fc: 3e:42:ce:00:ee:59:0c:4e:59:c7:b4:7b:b6:b2:18:0c:ef:9d: 02:f5:41:9a:25:f9:76:89:a1:74:49:8c:c7:ba:d8:e8:48:02: d4:c5:44:a2:3c:c2:4d:72:d6:66:16:3a:7d:a9:66:74:d4:b0: 31:89:dc:85:78:a9:27:aa:91:1b:c3:d6:4e:97:77:00:6b:38: df:e2:e3:56:df:53:b1:9c:06:f4:3e:74:c3:44:8a:de:b9:ba: 95:d1:4f:87:07:de:39:68:eb:35:0c:4c:08:fa:fd:da:7f:3a: 05:c1:ac:37:55:8d:61:52:96:c7:0e:26:3c:2f:93:b3:7d:57: d4:cd:ac:57:65:98:06:8c:ea:9a:d7:b6:bb:9a:c8:01:a1:d0: 45:34:8b:61 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISAZt4NOuFZ1rs2CjSiJL6dwnxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMjRjN2VjZmEzN2QyNDg3MTUyZmI5YmJiYWI1MGJlNzlk ZTI2MTkwHhcNMjYwMTAxMDYxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjRiNDVhNTVhMDdiNWNiZmVlMGY1NjNlMzE0MDY1NTM5YmFhZDliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7YYclUcGjSBWj1a+j9ZmrNEUgDOS XFojjilgK3t7mDm3FHAeWjAweujMzlIqA5CSXHELTV85IgJf+l0GZ202fILCnYFI vny/vEF1+QoPfvZX15ziO/8E2R4Cj+6ZDjA95c/Wuveksr19KR1T9RIlx9Uq7xQM TepEnPh/jIQbYQwROUQHpnebTX8+qJlum3Cdu9/hS/DY/jGNopdRluAP4/wHWYnS NR4ftbjiC2bvsHQEJ1SahCv/ObR6YI+ifDdd5VTD5XlEUQnMdBd4miqwD7eeRlmi 12Icqyn1yNhb5nDBLlm0es/W6UuI7ez1IIF/IRTes+Lrey7+wY8gwOnnYQIDAQAB o4ICMjCCAi4wHQYDVR0OBBYEFOZLRaVaB7XL/uD1Y+MUBlU5uq2bMB8GA1UdIwQY MBaAFD4kx+z6N9JIcVL7m7urUL553iYZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGlUSDdQbzMwa2h4VXZ1YnU2dFF2bm5lSmhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8zOWE1ZmMtZDI2ZS00ZDUzLTkxZTMt NDkzZDc3NGFhMWZmLzEvNWt0RnBWb0h0Y3YtNFBWajR4UUdWVG02clpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8zOWE1ZmMtZDI2ZS00ZDUzLTkxZTMtNDkzZDc3NGFhMWZm LzEvUGlUSDdQbzMwa2h4VXZ1YnU2dFF2bm5lSmhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAkBAIAATAeAwQBuUfkAwQA uUfnAwQBuX1UAwQAuX1XAwQBwQC0MA8EAgACMAkDBwYqBTNDAAAwDQYJKoZIhvcN AQELBQADggEBAD0smnKG5f/41k8ebQm9/3nE+tzAw/G3GfYG8QjwseDohFW2k8c6 LUPSHSnh0Ze2aLx5BYCxZ1t8gchR2smqfDcFSm7+WexTrZtwk7fW5qYXrvrqWNtw 0cJaoC9Gii49PS7AXwNvpfQoH+Sa/D5CzgDuWQxOWce0e7ayGAzvnQL1QZol+XaJ oXRJjMe62OhIAtTFRKI8wk1y1mYWOn2pZnTUsDGJ3IV4qSeqkRvD1k6XdwBrON/i 41bfU7GcBvQ+dMNEit65upXRT4cH3jlo6zUMTAj6/dp/OgXBrDdVjWFSlscOJjwv k7N9V9TNrFdlmAaM6prXtruayAGh0EU0i2E= -----END CERTIFICATE-----Generated at Fri Jan 2 16:24:20 2026 by rpki-client