This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/5cWjha-GN6V_9NCDJSfw9KGOEhk.roa File: 5cWjha-GN6V_9NCDJSfw9KGOEhk.roa (raw, json) Hash identifier: H2Otkpibc9NdK0JV6LzlQxY+/YrLYIKAppuBF7pGTck= Subject key identifier: E5:C5:A3:85:AF:86:37:A5:7F:F4:D0:83:25:27:F0:F4:A1:8E:12:19 Certificate issuer: /CN=9be60d4ae70f6f559984c76b521ce377cc1ee721 Certificate serial: 019B77C6816467DE31457EB6E97109D711E3 Authority key identifier: 9B:E6:0D:4A:E7:0F:6F:55:99:84:C7:6B:52:1C:E3:77:CC:1E:E7:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-YNSucPb1WZhMdrUhzjd8we5yE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/5cWjha-GN6V_9NCDJSfw9KGOEhk.roa Signing time: Thu 01 Jan 2026 04:17:36 +0000 ROA not before: Thu 01 Jan 2026 04:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204409 IP address blocks: 185.249.112.0/22 maxlen: 24 2a0c:340::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft rsync://rpki.ripe.net/repository/DEFAULT/m-YNSucPb1WZhMdrUhzjd8we5yE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:81:64:67:de:31:45:7e:b6:e9:71:09:d7:11:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9be60d4ae70f6f559984c76b521ce377cc1ee721 Validity Not Before: Jan 1 04:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e5c5a385af8637a57ff4d0832527f0f4a18e1219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:47:96:9b:90:ef:dc:f0:b7:36:f0:9a:9a:ff: 4c:1e:b3:c3:bc:c3:c1:f9:6e:90:29:31:d0:d7:8a: d1:bb:fb:9c:86:3a:f2:bf:6b:e4:25:62:3e:c4:c5: 4f:c5:2a:89:4b:ce:ed:dc:57:87:cb:c3:61:55:37: 7f:f0:ee:4b:22:69:5f:64:28:9f:c7:cf:dd:d4:f2: 2d:0e:71:bd:54:68:61:ad:28:b9:3b:6f:8a:47:ae: f6:ab:45:da:e5:df:48:d3:90:8e:c3:8f:41:4d:5f: ec:5f:8b:32:5c:84:f6:f9:31:56:72:2d:8b:8a:2e: 5e:10:99:67:7e:65:3a:95:1c:59:9b:80:9f:f5:ad: cf:cd:ef:74:b1:86:f4:d8:49:d2:fa:0f:10:63:eb: 38:fd:dd:ef:40:3d:7f:19:4e:89:32:53:2e:ce:05: 06:da:71:02:3f:ab:21:30:c4:a4:7d:60:28:fe:af: b7:78:c4:3e:09:e1:60:00:36:81:87:25:4f:58:ed: 19:bc:a4:19:64:1d:15:4b:f0:e3:6c:e6:4b:7d:36: c0:55:ea:99:b2:43:04:b4:5f:3d:70:41:0e:fc:8e: b7:0f:0a:88:c1:de:01:c9:58:18:cf:88:16:63:e1: ac:7c:78:6c:5c:97:de:9d:27:5d:68:5a:90:97:9e: 59:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:C5:A3:85:AF:86:37:A5:7F:F4:D0:83:25:27:F0:F4:A1:8E:12:19 X509v3 Authority Key Identifier: keyid:9B:E6:0D:4A:E7:0F:6F:55:99:84:C7:6B:52:1C:E3:77:CC:1E:E7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-YNSucPb1WZhMdrUhzjd8we5yE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/5cWjha-GN6V_9NCDJSfw9KGOEhk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.249.112.0/22 IPv6: 2a0c:340::/32 Signature Algorithm: sha256WithRSAEncryption 05:51:84:a2:b6:28:7e:32:2d:d9:9a:f6:70:e2:19:0a:c6:c4: 41:52:4e:02:95:18:50:64:3b:c1:b7:9e:79:9c:15:c7:c4:34: 80:c3:d4:3d:8c:c9:a7:ff:e4:2a:b1:62:75:bc:1a:f0:da:b8: 4e:85:c8:3d:20:9b:a5:99:3a:8c:15:bf:a6:e1:de:cd:bf:5f: d8:5b:74:9f:94:f2:01:25:db:21:68:3b:74:d5:6b:c1:68:f9: dd:71:06:c9:47:56:9e:17:87:48:fe:42:23:51:d2:af:f9:89: e8:45:b4:cc:82:0c:84:70:b1:5a:2e:3f:80:83:eb:64:07:1a: a5:f2:86:f5:7f:4e:4c:73:5b:68:52:90:28:47:09:93:04:39: cc:12:7a:b6:13:79:a3:9e:02:be:06:bf:e0:4d:9e:a8:82:50: 5b:b5:4a:91:6e:07:ae:71:b6:6d:17:35:dd:20:e8:9c:e3:76: 71:f6:c2:60:17:37:16:01:99:86:ec:ea:4b:2a:a0:c5:4c:6f: 36:81:78:8a:8d:c5:e6:d1:8f:64:98:5f:bf:24:da:b8:08:ee: 9f:8d:5c:18:82:85:f6:b6:dd:e7:46:3d:2c:19:c8:e3:54:a5: 93:03:ec:e6:78:6c:c0:a8:d5:f2:1f:7d:06:ab:f9:55:6b:32: 8a:ec:e9:22 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3xoFkZ94xRX626XEJ1xHjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliZTYwZDRhZTcwZjZmNTU5OTg0Yzc2YjUyMWNlMzc3Y2Mx ZWU3MjEwHhcNMjYwMTAxMDQxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNWM1YTM4NWFmODYzN2E1N2ZmNGQwODMyNTI3ZjBmNGExOGUxMjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEeWm5Dv3PC3NvCamv9MHrPDvMPB +W6QKTHQ14rRu/uchjryv2vkJWI+xMVPxSqJS87t3FeHy8NhVTd/8O5LImlfZCif x8/d1PItDnG9VGhhrSi5O2+KR672q0Xa5d9I05COw49BTV/sX4syXIT2+TFWci2L ii5eEJlnfmU6lRxZm4Cf9a3Pze90sYb02EnS+g8QY+s4/d3vQD1/GU6JMlMuzgUG 2nECP6shMMSkfWAo/q+3eMQ+CeFgADaBhyVPWO0ZvKQZZB0VS/DjbOZLfTbAVeqZ skMEtF89cEEO/I63DwqIwd4ByVgYz4gWY+GsfHhsXJfenSddaFqQl55ZNQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOXFo4Wvhjelf/TQgyUn8PShjhIZMB8GA1UdIwQY MBaAFJvmDUrnD29VmYTHa1Ic43fMHuchMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbS1ZTlN1Y1BiMVdaaE1kclVoempkOHdlNXlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9jMDI4MjAtZmI2Ni00NzkyLTlkOGQt Y2M4ODU4NTdmYWYyLzEvNWNXamhhLUdONlZfOU5DREpTZnc5S0dPRWhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9jMDI4MjAtZmI2Ni00NzkyLTlkOGQtY2M4ODU4NTdmYWYy LzEvbS1ZTlN1Y1BiMVdaaE1kclVoempkOHdlNXlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuflwMA0E AgACMAcDBQAqDANAMA0GCSqGSIb3DQEBCwUAA4IBAQAFUYSitih+Mi3ZmvZw4hkK xsRBUk4ClRhQZDvBt555nBXHxDSAw9Q9jMmn/+QqsWJ1vBrw2rhOhcg9IJulmTqM Fb+m4d7Nv1/YW3SflPIBJdshaDt01WvBaPndcQbJR1aeF4dI/kIjUdKv+YnoRbTM ggyEcLFaLj+Ag+tkBxql8ob1f05Mc1toUpAoRwmTBDnMEnq2E3mjngK+Br/gTZ6o glBbtUqRbgeucbZtFzXdIOic43Zx9sJgFzcWAZmG7OpLKqDFTG82gXiKjcXm0Y9k mF+/JNq4CO6fjVwYgoX2tt3nRj0sGcjjVKWTA+zmeGzAqNXyH30Gq/lVazKK7Oki -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:20 2026 by rpki-client