This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/5_doYFv7yc7pk0TQwTiDRsnYDyk.roa File: 5_doYFv7yc7pk0TQwTiDRsnYDyk.roa (raw, json) Hash identifier: roZ57WpPuuxZ3dcx0tH7+LdHwoSOY302cY6k9E5x4os= Subject key identifier: E7:F7:68:60:5B:FB:C9:CE:E9:93:44:D0:C1:38:83:46:C9:D8:0F:29 Certificate issuer: /CN=878eca3bccd4e5c2efb3608ee83a57f9ae821be6 Certificate serial: 019B77C7494D7243D4E63E0D8E0D6BCB0111 Authority key identifier: 87:8E:CA:3B:CC:D4:E5:C2:EF:B3:60:8E:E8:3A:57:F9:AE:82:1B:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/5_doYFv7yc7pk0TQwTiDRsnYDyk.roa Signing time: Thu 01 Jan 2026 04:18:27 +0000 ROA not before: Thu 01 Jan 2026 04:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201333 IP address blocks: 185.196.164.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:49:4d:72:43:d4:e6:3e:0d:8e:0d:6b:cb:01:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=878eca3bccd4e5c2efb3608ee83a57f9ae821be6 Validity Not Before: Jan 1 04:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e7f768605bfbc9cee99344d0c1388346c9d80f29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e8:db:d5:bd:9f:76:c0:24:14:b7:62:45:9f: 5a:2a:5a:56:67:fd:b0:25:7b:af:07:9a:c7:c4:f1: 8b:7e:e3:80:57:34:51:6f:fd:37:19:48:ad:b8:35: 30:e4:f7:4f:ae:82:ee:1a:26:44:bc:eb:4a:8e:53: e2:ed:a2:c4:65:89:ce:eb:d8:3e:55:75:63:47:28: 4d:7c:bd:39:f4:73:64:08:b7:f9:5f:ed:88:5d:b7: 9b:41:93:2d:60:46:15:c2:2b:51:bd:2d:36:3c:2c: e9:0b:8b:2c:1b:06:01:44:70:a7:4b:7e:94:88:a4: 74:7f:11:ff:d1:cf:bb:37:5c:1f:b2:c2:93:b1:34: 47:6e:1c:77:49:94:88:a5:dc:94:60:03:87:76:c5: ae:89:e4:7c:02:56:b1:20:f7:14:98:d8:01:d9:2f: cc:df:32:08:c6:9c:87:d6:cc:43:49:13:e1:b4:ea: ab:ae:2d:6c:5f:36:4f:fa:e5:4f:a8:a0:64:1a:22: 28:ba:dd:2f:03:c2:5d:49:ef:27:78:2b:7a:ac:70: 6b:fd:fd:d7:6d:0b:5d:eb:f7:74:74:3a:bf:3e:3e: b7:7f:51:c1:bb:df:1f:e7:a3:aa:c5:20:e7:89:c3: f0:ba:22:f5:a9:d2:c3:94:f8:7e:bb:34:f2:ea:4e: bd:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:F7:68:60:5B:FB:C9:CE:E9:93:44:D0:C1:38:83:46:C9:D8:0F:29 X509v3 Authority Key Identifier: keyid:87:8E:CA:3B:CC:D4:E5:C2:EF:B3:60:8E:E8:3A:57:F9:AE:82:1B:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/5_doYFv7yc7pk0TQwTiDRsnYDyk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.196.164.0/22 Signature Algorithm: sha256WithRSAEncryption 89:fc:70:28:be:3e:29:35:8b:a7:2f:f7:ac:95:a0:07:19:59: 20:d2:03:f6:5e:b7:d5:8f:88:94:2e:f2:d2:cf:2e:64:62:12: bc:8e:14:44:be:01:2e:3c:73:99:71:48:8c:00:d5:57:34:c6: d3:ab:df:9e:05:ab:5d:39:8d:75:2f:b8:99:a4:7a:be:23:f2: 8d:48:25:4d:2c:30:45:b2:d0:23:c8:97:11:33:de:20:55:00: 84:d3:ee:11:e8:c0:a6:90:26:20:d9:a3:b6:33:41:02:e8:e4: 38:26:65:13:62:73:46:43:b7:3a:65:a9:d8:69:21:26:1e:4a: 7e:7a:67:53:6f:39:fe:23:0a:b6:9e:4e:fe:09:c3:79:21:b4: 61:33:c0:8a:ed:eb:8d:90:df:60:b8:4a:d3:64:4d:6a:41:b8: c1:85:3c:8c:15:a9:ae:23:96:49:3d:fb:d4:6a:2b:9d:e1:44: 81:b3:20:06:5a:f2:5b:33:4c:dc:29:11:2f:e8:37:a4:5e:d5: db:51:6d:e5:73:ec:69:9f:58:72:84:6b:2b:81:dd:c9:eb:7f: 44:be:b8:d0:d3:40:a6:36:0e:c4:16:ca:c2:92:4e:e6:8b:e8: bb:b2:06:34:bf:90:c2:2b:76:bb:65:33:c6:94:2d:49:23:35: 5c:8d:5a:75 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x0lNckPU5j4Njg1rywERMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3OGVjYTNiY2NkNGU1YzJlZmIzNjA4ZWU4M2E1N2Y5YWU4 MjFiZTYwHhcNMjYwMTAxMDQxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlN2Y3Njg2MDViZmJjOWNlZTk5MzQ0ZDBjMTM4ODM0NmM5ZDgwZjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApujb1b2fdsAkFLdiRZ9aKlpWZ/2w JXuvB5rHxPGLfuOAVzRRb/03GUituDUw5PdProLuGiZEvOtKjlPi7aLEZYnO69g+ VXVjRyhNfL059HNkCLf5X+2IXbebQZMtYEYVwitRvS02PCzpC4ssGwYBRHCnS36U iKR0fxH/0c+7N1wfssKTsTRHbhx3SZSIpdyUYAOHdsWuieR8AlaxIPcUmNgB2S/M 3zIIxpyH1sxDSRPhtOqrri1sXzZP+uVPqKBkGiIout0vA8JdSe8neCt6rHBr/f3X bQtd6/d0dDq/Pj63f1HBu98f56OqxSDnicPwuiL1qdLDlPh+uzTy6k69twIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOf3aGBb+8nO6ZNE0ME4g0bJ2A8pMB8GA1UdIwQY MBaAFIeOyjvM1OXC77Ngjug6V/mughvmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDQ3S084elU1Y0x2czJDTzZEcFgtYTZDRy1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9hYjJiMTAtNWU4Ny00NjI0LTk3NzYt NTlhMGM1ZmY2NTA1LzEvNV9kb1lGdjd5YzdwazBUUXdUaURSc25ZRHlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9hYjJiMTAtNWU4Ny00NjI0LTk3NzYtNTlhMGM1ZmY2NTA1 LzEvaDQ3S084elU1Y0x2czJDTzZEcFgtYTZDRy1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucSkMA0G CSqGSIb3DQEBCwUAA4IBAQCJ/HAovj4pNYunL/eslaAHGVkg0gP2XrfVj4iULvLS zy5kYhK8jhREvgEuPHOZcUiMANVXNMbTq9+eBatdOY11L7iZpHq+I/KNSCVNLDBF stAjyJcRM94gVQCE0+4R6MCmkCYg2aO2M0EC6OQ4JmUTYnNGQ7c6ZanYaSEmHkp+ emdTbzn+Iwq2nk7+CcN5IbRhM8CK7euNkN9guErTZE1qQbjBhTyMFamuI5ZJPfvU aiud4USBsyAGWvJbM0zcKREv6DekXtXbUW3lc+xpn1hyhGsrgd3J639EvrjQ00Cm Ng7EFsrCkk7mi+i7sgY0v5DCK3a7ZTPGlC1JIzVcjVp1 -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:04 2026 by rpki-client