This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/5sY9h0qGrz8rDQ22irLcBKem5Rk.roa File: 5sY9h0qGrz8rDQ22irLcBKem5Rk.roa (raw, json) Hash identifier: qU1BbUV5ZbT2zrnUlsy8hgu+htNH/2rCsUzsLD+vC5g= Subject key identifier: E6:C6:3D:87:4A:86:AF:3F:2B:0D:0D:B6:8A:B2:DC:04:A7:A6:E5:19 Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Certificate serial: 019B7EA74888C385990B4271DDC01A281519 Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/5sY9h0qGrz8rDQ22irLcBKem5Rk.roa Signing time: Fri 02 Jan 2026 12:20:50 +0000 ROA not before: Fri 02 Jan 2026 12:20:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3302 IP address blocks: 185.133.209.0/24 maxlen: 24 185.197.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 12:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:48:88:c3:85:99:0b:42:71:dd:c0:1a:28:15:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Validity Not Before: Jan 2 12:20:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e6c63d874a86af3f2b0d0db68ab2dc04a7a6e519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:50:70:7f:c8:ec:df:b2:60:f7:c5:14:83:5f: 3e:69:90:04:68:55:7b:80:1a:3e:88:de:f8:73:00: 03:5a:18:37:3f:d8:29:69:7d:1f:54:1a:30:af:07: 83:91:f0:db:92:1a:c5:cf:08:73:63:36:bd:f1:cc: ad:38:77:2a:e5:ad:68:42:c8:54:0c:27:82:ea:f3: f3:63:73:2a:7a:aa:fa:b0:1f:ad:51:75:18:64:75: a0:2a:53:be:91:52:57:b8:35:44:33:b7:8d:cc:97: 69:6f:19:47:25:ba:8e:fe:f2:7d:6b:4c:87:77:39: fb:6f:03:da:5e:92:2a:22:a5:a2:a8:27:7e:96:ed: e8:e6:a0:24:c7:74:28:6a:6d:f7:99:ab:3a:f8:d3: 3f:bb:80:bf:b0:bf:f4:cf:7d:01:d0:cb:65:f1:0d: e6:44:15:ad:ef:c8:63:bd:5f:08:7b:a1:be:ee:64: 81:97:69:ee:6f:ed:e5:be:85:c9:ca:82:76:0e:84: ab:51:fc:9a:63:a9:10:9a:2b:d9:d8:33:86:31:30: e3:e0:a4:e3:c6:2d:d1:31:e9:66:81:15:40:33:49: 35:3c:46:d5:94:9b:4f:53:73:a5:38:5d:52:22:07: 40:9f:09:1e:a5:33:dc:e8:4b:fb:cb:d8:c8:0b:28: c3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:C6:3D:87:4A:86:AF:3F:2B:0D:0D:B6:8A:B2:DC:04:A7:A6:E5:19 X509v3 Authority Key Identifier: keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/5sY9h0qGrz8rDQ22irLcBKem5Rk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.133.209.0/24 185.197.134.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:98:4d:80:5e:49:1e:5f:0e:64:84:f8:c1:98:be:53:75:14: 54:89:55:e8:00:f8:55:b4:54:4e:15:bc:0c:f2:c3:34:fd:04: 4e:2c:77:08:fd:27:9d:7d:b8:28:8d:bc:26:4b:64:37:30:20: bf:8e:31:d8:72:d0:f2:7d:f0:9f:08:a7:04:85:0f:42:96:a5: b9:9d:d0:3b:c6:f9:c2:3e:ca:da:b5:09:7d:28:99:a7:f9:53: 92:3d:1e:5f:82:72:01:1b:81:f8:29:64:05:62:d5:cb:76:65: 99:55:e6:48:4d:9a:ab:eb:62:ca:db:2f:3b:a4:9b:ae:64:10: da:80:3c:3d:a0:a6:b0:75:09:ca:d4:4e:a2:33:fd:d8:63:1d: f9:a2:2a:4a:60:f8:91:a8:74:b9:ae:3d:94:95:90:a7:e7:de: 8b:ef:b6:e3:3a:98:28:6b:0c:d5:85:68:5c:c8:17:1f:1f:af: 0c:c8:33:ab:3b:dc:4c:5d:23:48:74:75:3f:ec:32:7b:55:e8: 2b:66:fd:ac:6d:d1:dd:07:27:35:ad:5d:2d:71:ff:53:f8:73: 7b:04:4b:ab:7c:08:bf:c7:46:37:75:d4:e3:4d:5d:c5:5d:5a: 77:5a:c7:d1:10:70:e1:5d:6a:21:ac:b9:01:6a:96:bb:4a:72: f9:d6:a7:d8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+p0iIw4WZC0Jx3cAaKBUZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl ZDc5NTQwHhcNMjYwMTAyMTIyMDUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNmM2M2Q4NzRhODZhZjNmMmIwZDBkYjY4YWIyZGMwNGE3YTZlNTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFBwf8js37Jg98UUg18+aZAEaFV7 gBo+iN74cwADWhg3P9gpaX0fVBowrweDkfDbkhrFzwhzYza98cytOHcq5a1oQshU DCeC6vPzY3Mqeqr6sB+tUXUYZHWgKlO+kVJXuDVEM7eNzJdpbxlHJbqO/vJ9a0yH dzn7bwPaXpIqIqWiqCd+lu3o5qAkx3Qoam33mas6+NM/u4C/sL/0z30B0Mtl8Q3m RBWt78hjvV8Ie6G+7mSBl2nub+3lvoXJyoJ2DoSrUfyaY6kQmivZ2DOGMTDj4KTj xi3RMelmgRVAM0k1PEbVlJtPU3OlOF1SIgdAnwkepTPc6Ev7y9jICyjDkQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFObGPYdKhq8/Kw0Ntoqy3ASnpuUZMB8GA1UdIwQY MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt M2Q5MWVkZTViMmIxLzEvNXNZOWgwcUdyejhyRFEyMmlyTGNCS2VtNVJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuYXRAwQA ucWGMA0GCSqGSIb3DQEBCwUAA4IBAQAMmE2AXkkeXw5khPjBmL5TdRRUiVXoAPhV tFROFbwM8sM0/QROLHcI/SedfbgojbwmS2Q3MCC/jjHYctDyffCfCKcEhQ9ClqW5 ndA7xvnCPsratQl9KJmn+VOSPR5fgnIBG4H4KWQFYtXLdmWZVeZITZqr62LK2y87 pJuuZBDagDw9oKawdQnK1E6iM/3YYx35oipKYPiRqHS5rj2UlZCn596L77bjOpgo awzVhWhcyBcfH68MyDOrO9xMXSNIdHU/7DJ7VegrZv2sbdHdByc1rV0tcf9T+HN7 BEurfAi/x0Y3ddTjTV3FXVp3WsfREHDhXWohrLkBapa7SnL51qfY -----END CERTIFICATE-----Generated at Tue Jan 20 21:17:28 2026 by rpki-client