This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/5u4yfVKLM7CuktVTwTBtBI5l6mE.roa File: 5u4yfVKLM7CuktVTwTBtBI5l6mE.roa (raw, json) Hash identifier: uO9x72nmQmlknEm+PYx41lDnMkhqVv8VEIukGO6B+TE= Subject key identifier: E6:EE:32:7D:52:8B:33:B0:AE:92:D5:53:C1:30:6D:04:8E:65:EA:61 Certificate issuer: /CN=05df1ca3b665f24cbe101cfc2f38344da8b1768d Certificate serial: 019B7F8230468FD16F90022DD4FDBACE7438 Authority key identifier: 05:DF:1C:A3:B6:65:F2:4C:BE:10:1C:FC:2F:38:34:4D:A8:B1:76:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/5u4yfVKLM7CuktVTwTBtBI5l6mE.roa Signing time: Fri 02 Jan 2026 16:19:56 +0000 ROA not before: Fri 02 Jan 2026 16:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197190 IP address blocks: 185.209.216.0/24 maxlen: 24 185.209.217.0/24 maxlen: 24 185.209.218.0/24 maxlen: 24 185.209.219.0/24 maxlen: 24 2a0b:5240::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft rsync://rpki.ripe.net/repository/DEFAULT/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:30:46:8f:d1:6f:90:02:2d:d4:fd:ba:ce:74:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05df1ca3b665f24cbe101cfc2f38344da8b1768d Validity Not Before: Jan 2 16:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e6ee327d528b33b0ae92d553c1306d048e65ea61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:cb:25:88:65:1c:37:11:ef:57:a6:b8:d6:ec: 55:bc:4a:03:1b:35:42:e9:86:2b:d8:da:1a:af:08: 9c:7b:98:d6:6d:73:c1:8c:c7:c9:74:20:23:c1:ae: d6:2f:04:21:2c:76:df:25:18:73:7b:1e:3c:ef:09: 9f:0e:fc:1c:28:5b:c3:f4:3d:12:d5:99:18:71:a4: 11:d4:1b:5b:06:bb:54:e1:b4:dd:ab:5b:95:e7:69: 82:6e:cc:36:e3:38:07:b4:6c:a2:ff:f5:41:a7:4b: e8:f2:6f:3e:d5:b3:f2:ab:9e:8c:2b:d9:87:4f:b2: 4d:9b:2d:7a:70:c6:14:7b:69:0d:5d:46:d2:b3:3d: 84:f8:39:3c:53:a3:7c:f0:ed:f8:f2:2a:d3:41:b6: 5b:55:4f:45:30:2e:22:85:74:06:6b:9d:85:5e:91: de:40:10:58:10:4d:dd:a2:98:aa:86:5c:6b:4a:67: 96:d7:52:cd:02:8f:08:fd:8e:78:41:0f:1d:11:06: a3:b7:2e:1c:d8:df:20:e9:8a:d1:c6:a0:cc:ad:ad: f3:7e:31:1d:1d:6f:6c:95:5f:e1:df:b3:1a:6a:f3: b8:7d:d2:ac:d0:db:40:7d:76:3e:b1:30:7b:d8:ac: 45:21:70:4f:8a:7a:09:e4:0b:b8:be:5a:6c:41:ed: 55:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:EE:32:7D:52:8B:33:B0:AE:92:D5:53:C1:30:6D:04:8E:65:EA:61 X509v3 Authority Key Identifier: keyid:05:DF:1C:A3:B6:65:F2:4C:BE:10:1C:FC:2F:38:34:4D:A8:B1:76:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/5u4yfVKLM7CuktVTwTBtBI5l6mE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.209.216.0/22 IPv6: 2a0b:5240::/29 Signature Algorithm: sha256WithRSAEncryption 9b:a0:cd:e6:87:82:71:02:2f:d2:da:09:b5:c6:77:1c:d9:69: 00:43:7e:83:6e:83:3f:e8:6d:65:5e:31:fe:92:fd:df:98:f6: 97:6a:bb:42:d9:13:76:b6:02:9f:36:40:08:3d:2f:39:47:98: 1f:76:e3:69:8a:f8:2b:78:ad:45:73:fa:93:9f:aa:d7:80:aa: 89:c8:dd:c1:dc:3c:8b:48:cc:5e:1d:6e:4f:5e:da:e3:48:04: 7d:6e:34:a6:57:c4:70:6a:4e:6a:6d:2e:7b:f1:1e:93:36:d5: 48:e6:a3:e5:e7:14:ec:71:1b:b1:78:16:96:f6:29:19:5c:17: b3:2c:d5:35:8d:71:1c:08:22:60:35:44:6a:ae:0f:41:8e:10: c1:7f:6c:a8:33:c2:a2:cb:0e:b8:3e:2f:c9:13:73:02:29:f6: 6a:c8:f9:99:75:30:a0:ab:5c:14:b8:95:e6:58:50:fe:98:a9: 31:9f:48:32:42:54:4f:7f:78:56:24:03:11:28:85:bb:4c:9d: 91:b0:69:f5:5a:f2:0d:a9:9e:d4:83:66:59:cc:91:39:2f:d8: 95:b5:85:bf:74:99:8e:7b:26:73:65:57:a6:4a:2c:37:e2:75: b1:4d:5a:10:90:67:d1:13:0d:29:13:1b:40:92:52:c4:5c:b4: 4d:dc:7e:cf -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/gjBGj9FvkAIt1P26znQ4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZGYxY2EzYjY2NWYyNGNiZTEwMWNmYzJmMzgzNDRkYThi MTc2OGQwHhcNMjYwMTAyMTYxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNmVlMzI3ZDUyOGIzM2IwYWU5MmQ1NTNjMTMwNmQwNDhlNjVlYTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhssliGUcNxHvV6a41uxVvEoDGzVC 6YYr2Noarwice5jWbXPBjMfJdCAjwa7WLwQhLHbfJRhzex487wmfDvwcKFvD9D0S 1ZkYcaQR1BtbBrtU4bTdq1uV52mCbsw24zgHtGyi//VBp0vo8m8+1bPyq56MK9mH T7JNmy16cMYUe2kNXUbSsz2E+Dk8U6N88O348irTQbZbVU9FMC4ihXQGa52FXpHe QBBYEE3dopiqhlxrSmeW11LNAo8I/Y54QQ8dEQajty4c2N8g6YrRxqDMra3zfjEd HW9slV/h37MaavO4fdKs0NtAfXY+sTB72KxFIXBPinoJ5Au4vlpsQe1ViQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFObuMn1SizOwrpLVU8EwbQSOZephMB8GA1UdIwQY MBaAFAXfHKO2ZfJMvhAc/C84NE2osXaNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmQ4Y283Wmw4a3ktRUJ6OEx6ZzBUYWl4ZG8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84OGQzYjMtODI1Ny00N2FhLWEyMjct ZDAyYWFmYjgzMmM0LzEvNXU0eWZWS0xNN0N1a3RWVHdUQnRCSTVsNm1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi84OGQzYjMtODI1Ny00N2FhLWEyMjctZDAyYWFmYjgzMmM0 LzEvQmQ4Y283Wmw4a3ktRUJ6OEx6ZzBUYWl4ZG8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCudHYMA0E AgACMAcDBQMqC1JAMA0GCSqGSIb3DQEBCwUAA4IBAQCboM3mh4JxAi/S2gm1xncc 2WkAQ36DboM/6G1lXjH+kv3fmPaXartC2RN2tgKfNkAIPS85R5gfduNpivgreK1F c/qTn6rXgKqJyN3B3DyLSMxeHW5PXtrjSAR9bjSmV8Rwak5qbS578R6TNtVI5qPl 5xTscRuxeBaW9ikZXBezLNU1jXEcCCJgNURqrg9BjhDBf2yoM8Kiyw64Pi/JE3MC KfZqyPmZdTCgq1wUuJXmWFD+mKkxn0gyQlRPf3hWJAMRKIW7TJ2RsGn1WvINqZ7U g2ZZzJE5L9iVtYW/dJmOeyZzZVemSiw34nWxTVoQkGfREw0pExtAklLEXLRN3H7P -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:12 2026 by rpki-client