This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/5goz8-8OWCAGaf7uOUR0Je34bUM.roa File: 5goz8-8OWCAGaf7uOUR0Je34bUM.roa (raw, json) Hash identifier: J9S/f1iEnZHS/9hQ1qliCFEtWZ5CLUMwNjtjL+9IEQU= Subject key identifier: E6:0A:33:F3:EF:0E:58:20:06:69:FE:EE:39:44:74:25:ED:F8:6D:43 Certificate issuer: /CN=5d99e8d5713a5e6382c0d1389d6242816f9d6fb9 Certificate serial: 019B76EB430BE6D48735136568065B2CAF30 Authority key identifier: 5D:99:E8:D5:71:3A:5E:63:82:C0:D1:38:9D:62:42:81:6F:9D:6F:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZno1XE6XmOCwNE4nWJCgW-db7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/5goz8-8OWCAGaf7uOUR0Je34bUM.roa Signing time: Thu 01 Jan 2026 00:18:08 +0000 ROA not before: Thu 01 Jan 2026 00:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202796 IP address blocks: 185.194.250.0/24 maxlen: 24 185.194.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.crl rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.mft rsync://rpki.ripe.net/repository/DEFAULT/XZno1XE6XmOCwNE4nWJCgW-db7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:43:0b:e6:d4:87:35:13:65:68:06:5b:2c:af:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d99e8d5713a5e6382c0d1389d6242816f9d6fb9 Validity Not Before: Jan 1 00:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e60a33f3ef0e58200669feee39447425edf86d43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:d5:03:0b:69:9b:d5:02:d2:d5:0b:ae:d2:57: 88:be:75:6c:99:30:c3:69:c0:59:78:33:82:75:8b: 4c:25:35:47:42:74:a6:6a:56:b7:59:24:93:06:3b: e4:2d:58:33:3f:18:23:b9:2d:27:39:fd:c9:e0:bf: 3c:b8:62:55:8d:53:73:de:ea:20:b5:9e:2f:36:96: ca:39:0c:ab:eb:05:d7:42:89:da:0d:8a:b1:1a:fe: dd:6b:4f:fe:23:d9:9e:52:f5:bf:e6:d9:e1:db:c1: 53:21:97:ec:bc:63:6f:29:dd:ae:50:d0:a0:da:ef: 93:56:38:cd:de:f0:ea:2d:1c:5b:3d:52:4c:5c:63: d4:55:64:87:ad:d8:f1:0b:d1:d2:a4:a3:6d:18:44: cf:24:e7:4f:d9:f6:52:54:e2:d8:54:89:c1:90:15: be:86:c6:4d:aa:d3:be:99:ef:68:64:a3:1e:d7:5b: 92:6d:36:03:5a:80:19:fb:8f:34:18:8f:fe:a2:d8: 4f:23:b6:b7:e6:4a:a5:0d:78:57:0f:c6:39:b0:a8: e2:55:3b:34:21:41:9b:58:2f:a9:54:37:fb:fa:58: 9a:76:39:43:17:47:67:e1:20:3b:c4:44:d6:54:24: d8:cf:20:13:65:e0:46:15:0c:da:e4:21:7f:a1:14: 30:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:0A:33:F3:EF:0E:58:20:06:69:FE:EE:39:44:74:25:ED:F8:6D:43 X509v3 Authority Key Identifier: keyid:5D:99:E8:D5:71:3A:5E:63:82:C0:D1:38:9D:62:42:81:6F:9D:6F:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZno1XE6XmOCwNE4nWJCgW-db7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/5goz8-8OWCAGaf7uOUR0Je34bUM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.194.250.0/23 Signature Algorithm: sha256WithRSAEncryption 3b:89:55:b8:c2:48:9f:f8:2b:e3:91:71:4a:be:e7:b5:78:32: 34:f0:a7:81:68:c0:fa:8b:e6:aa:71:65:a2:46:df:cc:34:ed: 13:65:79:d3:a3:fd:08:90:1f:40:0d:b4:b1:91:12:47:85:f1: fa:77:5f:14:b6:ac:e9:07:7a:b6:29:a2:0a:db:01:2d:0a:59: 88:78:b2:17:9a:0a:2b:93:86:19:39:01:88:a0:1c:24:52:d9: 3a:b1:79:b5:21:29:f8:e0:af:67:c0:92:2f:05:1a:a7:2e:97: 08:64:83:58:8c:1d:2b:38:fa:e0:98:0e:4e:cc:7f:15:32:a8: 70:ac:ca:38:06:54:3b:6b:a7:57:80:83:6c:b5:00:ce:7f:96: f5:73:e9:e0:f0:41:75:39:fa:31:04:2f:f8:a6:4e:b7:e1:96: f7:b5:6e:77:94:96:69:f2:9c:8d:d3:01:d7:b2:25:97:c6:ff: c2:19:4c:da:96:0d:88:26:38:c8:5e:9a:27:ee:1d:52:64:e3: 0f:bf:f7:be:b8:ac:02:2d:7b:44:d6:c5:73:47:06:02:65:88: dd:f5:e5:3a:f4:fe:ba:fb:87:92:bb:17:42:8a:ea:7c:0a:8c: 9f:56:fa:e4:ca:89:8f:a2:e6:38:b2:43:e5:ea:c8:7e:fd:71: 8c:b4:50:af -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt260ML5tSHNRNlaAZbLK8wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkOTllOGQ1NzEzYTVlNjM4MmMwZDEzODlkNjI0MjgxNmY5 ZDZmYjkwHhcNMjYwMTAxMDAxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjBhMzNmM2VmMGU1ODIwMDY2OWZlZWUzOTQ0NzQyNWVkZjg2ZDQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA89UDC2mb1QLS1Quu0leIvnVsmTDD acBZeDOCdYtMJTVHQnSmala3WSSTBjvkLVgzPxgjuS0nOf3J4L88uGJVjVNz3uog tZ4vNpbKOQyr6wXXQonaDYqxGv7da0/+I9meUvW/5tnh28FTIZfsvGNvKd2uUNCg 2u+TVjjN3vDqLRxbPVJMXGPUVWSHrdjxC9HSpKNtGETPJOdP2fZSVOLYVInBkBW+ hsZNqtO+me9oZKMe11uSbTYDWoAZ+480GI/+othPI7a35kqlDXhXD8Y5sKjiVTs0 IUGbWC+pVDf7+liadjlDF0dn4SA7xETWVCTYzyATZeBGFQza5CF/oRQwAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOYKM/PvDlggBmn+7jlEdCXt+G1DMB8GA1UdIwQY MBaAFF2Z6NVxOl5jgsDROJ1iQoFvnW+5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFpubzFYRTZYbU9Dd05FNG5XSkNnVy1kYjdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9kMmY5OTItM2ExNy00OTc1LTljMmMt OWNhOGVhOTBlNjE3LzEvNWdvejgtOE9XQ0FHYWY3dU9VUjBKZTM0YlVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9kMmY5OTItM2ExNy00OTc1LTljMmMtOWNhOGVhOTBlNjE3 LzEvWFpubzFYRTZYbU9Dd05FNG5XSkNnVy1kYjdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBucL6MA0G CSqGSIb3DQEBCwUAA4IBAQA7iVW4wkif+CvjkXFKvue1eDI08KeBaMD6i+aqcWWi Rt/MNO0TZXnTo/0IkB9ADbSxkRJHhfH6d18UtqzpB3q2KaIK2wEtClmIeLIXmgor k4YZOQGIoBwkUtk6sXm1ISn44K9nwJIvBRqnLpcIZINYjB0rOPrgmA5OzH8VMqhw rMo4BlQ7a6dXgINstQDOf5b1c+ng8EF1OfoxBC/4pk634Zb3tW53lJZp8pyN0wHX siWXxv/CGUzalg2IJjjIXpon7h1SZOMPv/e+uKwCLXtE1sVzRwYCZYjd9eU69P66 +4eSuxdCiup8CoyfVvrkyomPouY4skPl6sh+/XGMtFCv -----END CERTIFICATE-----Generated at Tue Feb 10 07:11:02 2026 by rpki-client