This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/35SOLMh2Tr_jR_FO2LonZS0Dwzw.roa File: 35SOLMh2Tr_jR_FO2LonZS0Dwzw.roa (raw, json) Hash identifier: cO/Z6F7txV6TpV/V5lfE+W3QYDMUy+GuCUzsuf9Drjg= Subject key identifier: DF:94:8E:2C:C8:76:4E:BF:E3:47:F1:4E:D8:BA:27:65:2D:03:C3:3C Certificate issuer: /CN=e4c86da3f483246518d368034bc86113906a55a3 Certificate serial: 019B7C127AA7844BF8CF81C44096E368C314 Authority key identifier: E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/35SOLMh2Tr_jR_FO2LonZS0Dwzw.roa Signing time: Fri 02 Jan 2026 00:19:04 +0000 ROA not before: Fri 02 Jan 2026 00:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42689 IP address blocks: 5.39.196.0/23 maxlen: 24 5.39.198.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.mft rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:54:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:7a:a7:84:4b:f8:cf:81:c4:40:96:e3:68:c3:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4c86da3f483246518d368034bc86113906a55a3 Validity Not Before: Jan 2 00:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df948e2cc8764ebfe347f14ed8ba27652d03c33c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c8:70:0b:87:25:29:1c:c9:98:16:1d:93:08: b0:45:85:54:a2:e9:0d:57:6d:68:e9:98:28:15:9a: 99:75:db:bd:61:74:4f:83:c4:42:f1:ef:2f:ed:e7: 62:13:a1:df:3f:23:04:02:06:6f:e9:c1:a5:d9:ac: 84:dc:7d:d5:82:bb:ca:db:d9:41:b2:64:01:f8:b0: 8b:2a:d3:cb:48:cb:fb:54:db:21:23:ec:16:ce:ff: 5d:dc:22:49:e4:83:7f:ac:0e:a7:70:5b:6d:eb:62: 45:f7:ff:3d:47:62:0d:cd:9a:da:ca:23:10:0a:2d: 4b:31:22:a8:7f:31:6e:f6:68:a5:65:b1:4c:a6:70: 87:77:8b:c9:32:45:73:f4:53:12:9b:18:f2:a1:a6: 27:95:5c:d9:3e:73:18:43:87:64:62:2d:8a:1f:e0: be:b8:39:37:73:b8:cc:63:a5:35:4c:0d:f6:1c:5d: 8d:d4:de:61:ab:83:a0:36:48:ac:7f:26:57:74:88: e1:fa:81:0c:f3:1d:a3:84:55:84:c9:a5:c0:a2:44: 5e:07:cc:bd:67:7a:a6:d6:61:ea:e1:0e:f1:6d:a0: 8f:4e:82:ab:e8:bd:22:43:91:8a:7f:77:5f:30:5a: 72:6a:a2:7a:20:c2:71:9e:85:b4:11:c5:e0:06:4f: 76:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:94:8E:2C:C8:76:4E:BF:E3:47:F1:4E:D8:BA:27:65:2D:03:C3:3C X509v3 Authority Key Identifier: keyid:E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/35SOLMh2Tr_jR_FO2LonZS0Dwzw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.39.196.0/22 Signature Algorithm: sha256WithRSAEncryption 7b:63:1f:3b:94:c6:ce:7d:a7:84:68:82:6d:93:d6:0b:5a:32: a9:1a:2d:83:c2:0a:79:b7:1e:c3:e5:e8:27:f3:cc:9c:d7:5f: f9:65:48:4c:4d:36:35:29:03:dc:4e:77:c6:0b:74:8e:cd:4d: ab:69:92:8a:5b:07:a4:c6:0b:03:dc:c4:d1:b2:37:de:8f:cc: f3:3e:66:ab:8f:60:7f:0f:7a:5a:0f:28:8a:71:f4:1b:2f:e8: 55:13:85:f7:07:4f:93:ca:1b:02:f4:5e:de:67:35:ce:55:90: 29:25:25:ac:c3:b8:31:90:68:d6:b5:9f:b6:50:2e:63:e2:04: e9:b9:91:88:ca:16:ef:58:b3:4a:dd:52:0f:1a:10:ec:74:ed: 41:3a:79:a4:9d:0e:9b:a6:15:b3:e1:2d:5c:77:28:91:41:39: 97:dc:17:0c:71:40:59:6b:a0:15:33:9e:bb:ec:ca:9b:bb:57: c5:c7:7a:09:8d:f1:fd:f9:a8:ba:38:53:8c:48:b1:38:e6:6f: 69:8f:a6:55:d2:ab:d5:64:0b:51:a9:2d:40:fa:8d:23:af:08: 4e:13:86:2a:0d:0b:b2:f2:28:41:cc:bf:1c:e6:67:f8:3b:7d: ba:33:50:28:ad:c1:b8:79:ba:07:8f:8c:8f:53:e6:d4:2d:b4: e2:bb:b5:65 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EnqnhEv4z4HEQJbjaMMUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0Yzg2ZGEzZjQ4MzI0NjUxOGQzNjgwMzRiYzg2MTEzOTA2 YTU1YTMwHhcNMjYwMTAyMDAxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjk0OGUyY2M4NzY0ZWJmZTM0N2YxNGVkOGJhMjc2NTJkMDNjMzNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApchwC4clKRzJmBYdkwiwRYVUoukN V21o6ZgoFZqZddu9YXRPg8RC8e8v7ediE6HfPyMEAgZv6cGl2ayE3H3VgrvK29lB smQB+LCLKtPLSMv7VNshI+wWzv9d3CJJ5IN/rA6ncFtt62JF9/89R2INzZrayiMQ Ci1LMSKofzFu9milZbFMpnCHd4vJMkVz9FMSmxjyoaYnlVzZPnMYQ4dkYi2KH+C+ uDk3c7jMY6U1TA32HF2N1N5hq4OgNkisfyZXdIjh+oEM8x2jhFWEyaXAokReB8y9 Z3qm1mHq4Q7xbaCPToKr6L0iQ5GKf3dfMFpyaqJ6IMJxnoW0EcXgBk92MwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN+UjizIdk6/40fxTti6J2UtA8M8MB8GA1UdIwQY MBaAFOTIbaP0gyRlGNNoA0vIYROQalWjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNU1odG9fU0RKR1VZMDJnRFM4aGhFNUJxVmFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9iNGU1MDMtNTc0Yi00NTY1LTkyMTct YzUxMWEzZTkxMmI2LzEvMzVTT0xNaDJUcl9qUl9GTzJMb25aUzBEd3p3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9iNGU1MDMtNTc0Yi00NTY1LTkyMTctYzUxMWEzZTkxMmI2 LzEvNU1odG9fU0RKR1VZMDJnRFM4aGhFNUJxVmFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBSfEMA0G CSqGSIb3DQEBCwUAA4IBAQB7Yx87lMbOfaeEaIJtk9YLWjKpGi2Dwgp5tx7D5egn 88yc11/5ZUhMTTY1KQPcTnfGC3SOzU2raZKKWwekxgsD3MTRsjfej8zzPmarj2B/ D3paDyiKcfQbL+hVE4X3B0+TyhsC9F7eZzXOVZApJSWsw7gxkGjWtZ+2UC5j4gTp uZGIyhbvWLNK3VIPGhDsdO1BOnmknQ6bphWz4S1cdyiRQTmX3BcMcUBZa6AVM567 7Mqbu1fFx3oJjfH9+ai6OFOMSLE45m9pj6ZV0qvVZAtRqS1A+o0jrwhOE4YqDQuy 8ihBzL8c5mf4O326M1AorcG4eboHj4yPU+bULbTiu7Vl -----END CERTIFICATE-----Generated at Mon Jan 19 23:21:45 2026 by rpki-client