This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/F5S7c_lGCVk-Ybkd9IbxnVLn3vg.roa File: F5S7c_lGCVk-Ybkd9IbxnVLn3vg.roa (raw, json) Hash identifier: eVI8yrXfhvYwE0S/KV9hYg3kBr3HBxAmGlH35T90T1Y= Subject key identifier: 17:94:BB:73:F9:46:09:59:3E:61:B9:1D:F4:86:F1:9D:52:E7:DE:F8 Certificate issuer: /CN=0f4d50f390cf945c6fa5b900905b4d517ebb091a Certificate serial: 019B77C752127250C4FABBAA0E3EDD20DB42 Authority key identifier: 0F:4D:50:F3:90:CF:94:5C:6F:A5:B9:00:90:5B:4D:51:7E:BB:09:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D01Q85DPlFxvpbkAkFtNUX67CRo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/F5S7c_lGCVk-Ybkd9IbxnVLn3vg.roa Signing time: Thu 01 Jan 2026 04:18:29 +0000 ROA not before: Thu 01 Jan 2026 04:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199723 IP address blocks: 45.157.12.0/22 maxlen: 24 185.41.128.0/22 maxlen: 24 185.252.180.0/22 maxlen: 24 193.160.33.0/24 maxlen: 24 2a01:59a0::/29 maxlen: 48 2a05:8580::/29 maxlen: 48 2a0f:3880::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft rsync://rpki.ripe.net/repository/DEFAULT/D01Q85DPlFxvpbkAkFtNUX67CRo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:52:12:72:50:c4:fa:bb:aa:0e:3e:dd:20:db:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f4d50f390cf945c6fa5b900905b4d517ebb091a Validity Not Before: Jan 1 04:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1794bb73f94609593e61b91df486f19d52e7def8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8c:0a:2c:e6:d9:58:ca:56:ee:3d:dc:ab:c5: eb:95:7b:03:3e:42:0a:8f:a1:7d:30:19:90:64:a6: fa:4a:f4:67:80:16:cc:5a:d3:aa:4f:f9:f1:93:aa: 67:74:a0:77:05:bd:ca:5c:7e:b5:f5:e2:77:88:b1: d3:f7:38:3f:98:22:04:96:21:b4:d8:a1:46:44:52: a8:66:c0:d4:17:f5:3c:fb:21:86:f6:f2:4d:2d:71: 7e:4a:63:3f:70:37:e3:b9:0b:d8:50:f2:18:00:4e: 7a:ac:de:88:ec:3a:03:95:44:dd:48:d6:4b:9e:32: e5:6c:ef:c6:21:80:3a:da:41:ac:87:34:c7:4c:ab: 93:7f:a2:5f:79:02:5d:05:ca:b6:26:6d:90:c7:42: 14:09:2f:de:7a:ee:dd:61:bc:4d:b4:42:b9:1c:48: 78:fa:7f:88:d6:be:a8:d1:a2:95:ad:88:d9:22:f1: 80:15:e4:57:6a:5f:2e:93:fb:95:29:88:0e:fd:db: 7e:ff:fa:16:92:c5:ab:66:53:46:2f:f7:da:d5:00: f7:5a:10:57:03:98:4c:28:d7:66:ca:86:86:c2:35: d6:3b:9a:f5:c9:82:55:37:d5:fe:6f:ce:55:a1:7d: 90:8d:c4:d0:be:77:a9:98:09:a4:37:37:66:47:f8: ec:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:94:BB:73:F9:46:09:59:3E:61:B9:1D:F4:86:F1:9D:52:E7:DE:F8 X509v3 Authority Key Identifier: keyid:0F:4D:50:F3:90:CF:94:5C:6F:A5:B9:00:90:5B:4D:51:7E:BB:09:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D01Q85DPlFxvpbkAkFtNUX67CRo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/F5S7c_lGCVk-Ybkd9IbxnVLn3vg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.157.12.0/22 185.41.128.0/22 185.252.180.0/22 193.160.33.0/24 IPv6: 2a01:59a0::/29 2a05:8580::/29 2a0f:3880::/29 Signature Algorithm: sha256WithRSAEncryption 4a:11:42:d7:fc:71:0b:e9:77:0c:f0:1c:f2:86:cf:c4:13:7f: b3:7d:75:2a:d8:e5:78:71:77:ac:01:a1:d7:cc:ca:55:39:c9: cb:c3:8c:e3:2a:6c:48:82:69:e7:40:f9:bf:cc:e5:2f:31:98: b5:9d:5d:fd:2c:2d:6d:94:56:90:b5:22:2b:93:e3:b0:6d:dc: 12:72:d3:11:7d:d5:de:21:d7:32:88:f2:16:09:ad:76:56:ab: 70:1e:56:30:3c:54:86:3a:9f:f6:10:c3:51:79:da:e1:c0:95: ec:1a:de:75:4f:7b:2a:c6:03:0b:b1:12:21:d5:f0:af:0f:db: cf:b3:77:9f:d6:d6:34:40:99:51:ac:6b:3a:46:a0:64:86:fe: ef:62:3b:dd:af:9f:09:9e:d2:2a:44:e1:3f:d7:08:6e:30:97: e3:c4:c5:7b:81:4b:25:15:2e:d5:1f:1a:ed:41:9b:72:ba:d3: 64:f5:79:ac:7d:3d:33:c5:5e:ff:4d:e5:d3:a9:35:04:1c:0b: 8c:1d:2b:83:fc:0f:c1:5f:99:65:d7:04:22:7f:8b:ef:3e:03: 86:64:db:a0:5a:42:3f:dd:8d:b6:c5:fd:34:9b:08:c9:a4:c9: e6:a7:df:c6:74:f6:9c:7a:8a:c3:33:6e:35:57:9c:b1:5c:cb: e7:ef:8c:53 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgISAZt3x1ISclDE+ruqDj7dINtCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNGQ1MGYzOTBjZjk0NWM2ZmE1YjkwMDkwNWI0ZDUxN2Vi YjA5MWEwHhcNMjYwMTAxMDQxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzk0YmI3M2Y5NDYwOTU5M2U2MWI5MWRmNDg2ZjE5ZDUyZTdkZWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIwKLObZWMpW7j3cq8XrlXsDPkIK j6F9MBmQZKb6SvRngBbMWtOqT/nxk6pndKB3Bb3KXH619eJ3iLHT9zg/mCIEliG0 2KFGRFKoZsDUF/U8+yGG9vJNLXF+SmM/cDfjuQvYUPIYAE56rN6I7DoDlUTdSNZL njLlbO/GIYA62kGshzTHTKuTf6JfeQJdBcq2Jm2Qx0IUCS/eeu7dYbxNtEK5HEh4 +n+I1r6o0aKVrYjZIvGAFeRXal8uk/uVKYgO/dt+//oWksWrZlNGL/fa1QD3WhBX A5hMKNdmyoaGwjXWO5r1yYJVN9X+b85VoX2QjcTQvnepmAmkNzdmR/jsMwIDAQAB o4ICODCCAjQwHQYDVR0OBBYEFBeUu3P5RglZPmG5HfSG8Z1S5974MB8GA1UdIwQY MBaAFA9NUPOQz5Rcb6W5AJBbTVF+uwkaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDAxUTg1RFBsRnh2cGJrQWtGdE5VWDY3Q1JvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8zMmQ0OWMtZmJiOS00NjY0LTlhYjgt ZjJiZGMyMjc1YjZlLzEvRjVTN2NfbEdDVmstWWJrZDlJYnhuVkxuM3ZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8zMmQ0OWMtZmJiOS00NjY0LTlhYjgtZjJiZGMyMjc1YjZl LzEvRDAxUTg1RFBsRnh2cGJrQWtGdE5VWDY3Q1JvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAeBAIAATAYAwQCLZ0MAwQC uSmAAwQCufy0AwQAwaAhMBsEAgACMBUDBQMqAVmgAwUDKgWFgAMFAyoPOIAwDQYJ KoZIhvcNAQELBQADggEBAEoRQtf8cQvpdwzwHPKGz8QTf7N9dSrY5Xhxd6wBodfM ylU5ycvDjOMqbEiCaedA+b/M5S8xmLWdXf0sLW2UVpC1IiuT47Bt3BJy0xF91d4h 1zKI8hYJrXZWq3AeVjA8VIY6n/YQw1F52uHAlewa3nVPeyrGAwuxEiHV8K8P28+z d5/W1jRAmVGsazpGoGSG/u9iO92vnwme0ipE4T/XCG4wl+PExXuBSyUVLtUfGu1B m3K602T1eax9PTPFXv9N5dOpNQQcC4wdK4P8D8FfmWXXBCJ/i+8+A4Zk26BaQj/d jbbF/TSbCMmkyean38Z09px6isMzbjVXnLFcy+fvjFM= -----END CERTIFICATE-----Generated at Tue Feb 10 04:26:32 2026 by rpki-client