This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/05V7aSJJ1574Uj3BMJbyX1CU_Ks.roa File: 05V7aSJJ1574Uj3BMJbyX1CU_Ks.roa (raw, json) Hash identifier: W1ncaFZ2XrRWuQQ6O9v0I+g6Zq1amGJBP+gX3AlUnTA= Subject key identifier: D3:95:7B:69:22:49:D7:9E:F8:52:3D:C1:30:96:F2:5F:50:94:FC:AB Certificate issuer: /CN=b799ac989c44b2e1cdabc258e96ca93caad4bd64 Certificate serial: 019B78A32CBFD3853E2509585F45F3E2B797 Authority key identifier: B7:99:AC:98:9C:44:B2:E1:CD:AB:C2:58:E9:6C:A9:3C:AA:D4:BD:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5msmJxEsuHNq8JY6WypPKrUvWQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/05V7aSJJ1574Uj3BMJbyX1CU_Ks.roa Signing time: Thu 01 Jan 2026 08:18:38 +0000 ROA not before: Thu 01 Jan 2026 08:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204517 IP address blocks: 185.242.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.mft rsync://rpki.ripe.net/repository/DEFAULT/t5msmJxEsuHNq8JY6WypPKrUvWQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:2c:bf:d3:85:3e:25:09:58:5f:45:f3:e2:b7:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b799ac989c44b2e1cdabc258e96ca93caad4bd64 Validity Not Before: Jan 1 08:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d3957b692249d79ef8523dc13096f25f5094fcab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f2:b8:ee:ac:5c:a6:43:5e:f6:fe:3e:ee:92: 3d:bd:9e:4d:ea:fe:5a:c3:1d:96:1b:c4:82:8f:65: 28:ae:28:a2:72:e5:89:75:14:b5:f1:fa:12:fd:00: 3a:74:87:82:a1:b8:8d:d0:c6:0d:a8:9f:9a:fb:3b: fc:f8:ef:6f:54:c7:91:2f:f6:ce:d7:b7:a9:2c:72: 34:9a:59:73:91:a6:51:14:f9:4a:11:cf:68:23:10: 5c:3f:95:62:02:1b:2e:ab:86:f5:14:a1:40:72:f0: 1b:88:6e:af:5a:3d:b2:80:bb:1e:85:be:54:b6:2c: 0a:1a:af:34:fd:e1:e2:6f:58:6e:12:dd:6a:20:05: 5a:50:21:d8:4d:37:b9:c9:8a:41:42:62:52:f0:62: f3:c1:19:82:40:66:10:8c:2b:bf:d7:29:81:82:d1: 1b:17:f6:d7:5d:b1:5d:3e:8b:da:3d:cc:ed:6d:cc: 10:9f:ac:18:a0:f6:25:b1:be:b7:b2:be:e3:c0:75: 37:e7:6e:b9:ba:7b:8b:a9:9b:68:10:35:12:e9:cf: af:7c:23:2a:0c:18:43:72:a7:58:40:42:64:2d:1c: a8:c6:3e:05:23:4d:11:6b:01:6a:11:ba:52:7c:fe: 11:96:7d:7f:fc:72:b6:cc:03:1a:dd:43:3a:3a:a6: bc:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:95:7B:69:22:49:D7:9E:F8:52:3D:C1:30:96:F2:5F:50:94:FC:AB X509v3 Authority Key Identifier: keyid:B7:99:AC:98:9C:44:B2:E1:CD:AB:C2:58:E9:6C:A9:3C:AA:D4:BD:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5msmJxEsuHNq8JY6WypPKrUvWQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/05V7aSJJ1574Uj3BMJbyX1CU_Ks.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.242.138.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:f9:5c:89:bb:93:36:d5:1a:ad:06:e7:94:3f:0a:2c:f2:fe: 42:7f:a2:f8:eb:22:98:a1:e8:3b:ee:08:12:f3:93:25:d0:28: e7:1f:48:26:ae:c6:0d:34:3d:8e:f1:a5:c9:0f:f1:13:e6:f2: 08:3b:bf:db:96:84:c5:d7:cc:45:b9:54:d5:65:68:0b:c2:16: 40:3b:80:5d:4d:5e:f8:d4:69:88:1b:ea:79:59:68:82:81:ee: 2a:2b:64:19:f6:ec:5a:00:d1:93:4f:6d:01:8d:f8:1a:6e:3a: c4:99:ab:2b:03:03:a7:80:a0:c1:b7:22:43:6b:49:a7:80:1b: 08:a1:56:99:60:fa:70:b3:57:f6:f1:d5:3a:c7:4f:af:0b:7f: 6c:6f:c6:22:11:60:da:04:1e:b4:0f:7c:5e:9c:57:7c:50:24: b0:86:49:cb:1d:d1:0f:22:6d:18:cf:a8:a2:fa:fd:41:97:01: 64:ee:fb:85:54:71:55:91:14:c5:43:72:19:25:a2:73:33:8c: e3:72:6b:1e:b3:ef:3c:70:d2:4f:95:b7:d6:83:a8:57:80:ae: b9:0a:3f:5e:28:0f:87:ba:9f:49:a8:1f:0f:81:64:eb:f7:18: e8:32:5d:ff:ce:10:30:a9:81:61:65:8b:98:0a:ad:b0:4f:d3: f9:d3:c8:73 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oyy/04U+JQlYX0Xz4reXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3OTlhYzk4OWM0NGIyZTFjZGFiYzI1OGU5NmNhOTNjYWFk NGJkNjQwHhcNMjYwMTAxMDgxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzk1N2I2OTIyNDlkNzllZjg1MjNkYzEzMDk2ZjI1ZjUwOTRmY2FiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfK47qxcpkNe9v4+7pI9vZ5N6v5a wx2WG8SCj2UoriiicuWJdRS18foS/QA6dIeCobiN0MYNqJ+a+zv8+O9vVMeRL/bO 17epLHI0mllzkaZRFPlKEc9oIxBcP5ViAhsuq4b1FKFAcvAbiG6vWj2ygLsehb5U tiwKGq80/eHib1huEt1qIAVaUCHYTTe5yYpBQmJS8GLzwRmCQGYQjCu/1ymBgtEb F/bXXbFdPovaPcztbcwQn6wYoPYlsb63sr7jwHU35265unuLqZtoEDUS6c+vfCMq DBhDcqdYQEJkLRyoxj4FI00RawFqEbpSfP4Rln1//HK2zAMa3UM6Oqa8ZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNOVe2kiSdee+FI9wTCW8l9QlPyrMB8GA1UdIwQY MBaAFLeZrJicRLLhzavCWOlsqTyq1L1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDVtc21KeEVzdUhOcThKWTZXeXBQS3JVdldRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8yZTVjNDktMGQ3NC00ODdhLWE4MWMt OTE3NGRmNGRkYjlhLzEvMDVWN2FTSkoxNTc0VWozQk1KYnlYMUNVX0tzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC8yZTVjNDktMGQ3NC00ODdhLWE4MWMtOTE3NGRmNGRkYjlh LzEvdDVtc21KeEVzdUhOcThKWTZXeXBQS3JVdldRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufKKMA0G CSqGSIb3DQEBCwUAA4IBAQBr+VyJu5M21RqtBueUPwos8v5Cf6L46yKYoeg77ggS 85Ml0CjnH0gmrsYNND2O8aXJD/ET5vIIO7/bloTF18xFuVTVZWgLwhZAO4BdTV74 1GmIG+p5WWiCge4qK2QZ9uxaANGTT20BjfgabjrEmasrAwOngKDBtyJDa0mngBsI oVaZYPpws1f28dU6x0+vC39sb8YiEWDaBB60D3xenFd8UCSwhknLHdEPIm0Yz6ii +v1BlwFk7vuFVHFVkRTFQ3IZJaJzM4zjcmses+88cNJPlbfWg6hXgK65Cj9eKA+H up9JqB8PgWTr9xjoMl3/zhAwqYFhZYuYCq2wT9P508hz -----END CERTIFICATE-----Generated at Mon Feb 9 20:05:26 2026 by rpki-client