This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/5MvGTIWvypnynatSCOFj8eEvQKU.roa File: 5MvGTIWvypnynatSCOFj8eEvQKU.roa (raw, json) Hash identifier: zlpMkBrcV9PcuGvhpfeVQrRYScHNx6B9kKbHDGTMD3Y= Subject key identifier: E4:CB:C6:4C:85:AF:CA:99:F2:9D:AB:52:08:E1:63:F1:E1:2F:40:A5 Certificate issuer: /CN=2bf0a0197868c6d8c34dd16b3f44decc5e4236f5 Certificate serial: 019B7AC87689EBD9297F58DD274DF3F944F3 Authority key identifier: 2B:F0:A0:19:78:68:C6:D8:C3:4D:D1:6B:3F:44:DE:CC:5E:42:36:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_CgGXhoxtjDTdFrP0TezF5CNvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/5MvGTIWvypnynatSCOFj8eEvQKU.roa Signing time: Thu 01 Jan 2026 18:18:36 +0000 ROA not before: Thu 01 Jan 2026 18:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6758 IP address blocks: 176.121.52.0/22 maxlen: 22 185.243.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft rsync://rpki.ripe.net/repository/DEFAULT/K_CgGXhoxtjDTdFrP0TezF5CNvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:76:89:eb:d9:29:7f:58:dd:27:4d:f3:f9:44:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bf0a0197868c6d8c34dd16b3f44decc5e4236f5 Validity Not Before: Jan 1 18:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4cbc64c85afca99f29dab5208e163f1e12f40a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:01:a2:b0:60:1c:cb:4f:90:32:70:13:27:30: f3:50:4e:a9:d6:9e:74:f8:6a:39:d5:c1:6e:9b:60: 8b:df:e0:c0:81:92:b0:98:93:51:84:2d:ca:8b:b8: ea:13:02:ab:d4:86:2f:28:98:a1:b9:3d:70:18:8c: 76:1a:5c:6c:67:46:d3:88:41:82:dd:63:d3:34:c2: ad:e9:04:50:c1:26:28:78:aa:b4:64:4b:b2:d1:7b: 72:1f:36:b7:4c:c9:10:2c:32:18:f8:53:bf:72:32: 3b:9d:15:03:6d:15:a1:b1:b8:71:a8:b3:37:62:78: 6f:92:ee:20:d6:88:02:68:f6:27:12:47:cd:94:eb: d3:30:cf:65:63:fe:b3:7f:2e:a9:7b:cb:16:26:7d: 22:59:2b:ce:48:97:37:21:b2:ee:31:e1:ad:75:62: 03:55:d5:80:2e:8d:08:77:a3:2d:77:c7:f1:bb:7b: 0f:5f:03:89:f3:c8:b7:25:66:45:1f:47:3b:33:73: 37:f4:5b:ee:a4:a9:d5:cc:57:0e:89:92:cd:bf:52: 86:cc:f5:59:ea:89:72:6d:18:96:70:69:38:16:dd: 18:48:ee:2f:e2:1f:78:24:30:52:d1:d1:13:ee:ad: 98:39:2b:01:aa:dc:12:53:42:a1:fe:13:a7:98:3d: ee:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:CB:C6:4C:85:AF:CA:99:F2:9D:AB:52:08:E1:63:F1:E1:2F:40:A5 X509v3 Authority Key Identifier: keyid:2B:F0:A0:19:78:68:C6:D8:C3:4D:D1:6B:3F:44:DE:CC:5E:42:36:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_CgGXhoxtjDTdFrP0TezF5CNvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/5MvGTIWvypnynatSCOFj8eEvQKU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.121.52.0/22 185.243.3.0/24 Signature Algorithm: sha256WithRSAEncryption 19:a3:2c:e5:3c:c3:6b:b7:e9:6e:6f:4a:b8:fc:f2:5a:10:b4: a9:0a:f8:52:d8:1d:b2:7b:df:f4:9e:9d:52:9c:76:54:9d:77: 10:0f:8a:ef:d0:ac:50:ee:62:79:3b:c3:b6:43:74:7f:b1:e8: 5f:c6:19:7a:7d:c3:68:fb:d7:15:b9:ad:dd:6f:25:06:e8:c1: dc:52:c6:7e:23:70:e5:06:64:6a:f5:0a:86:6b:bb:33:04:36: e3:c0:63:8d:cb:89:00:e0:20:6e:af:ac:df:dc:19:2b:87:83: 0c:bd:4e:61:06:79:f2:f5:1c:b0:13:41:6c:5c:b6:0f:34:bc: dc:a0:0f:e8:94:78:77:40:48:f9:6e:a1:86:8e:04:af:48:0e: 96:da:26:37:09:5b:52:b5:1e:07:98:c8:2f:5d:84:87:de:9f: f8:d4:e8:2f:6d:de:85:d3:c5:f4:f2:2f:88:12:23:11:58:e5: bc:c6:1c:b7:7b:b1:a9:80:26:db:d0:1b:2f:96:d9:fb:6a:8d: 01:dc:70:9d:7b:61:b4:d6:b9:07:1a:53:9c:16:3a:78:b4:70: 7a:e2:59:a7:a1:7c:97:4a:ba:bb:5b:9c:c9:9c:3e:e8:99:95: 6b:90:ce:d7:e4:94:dd:c3:47:f9:02:57:0c:e4:8d:0c:72:a4: e4:b1:5d:18 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6yHaJ69kpf1jdJ03z+UTzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiZjBhMDE5Nzg2OGM2ZDhjMzRkZDE2YjNmNDRkZWNjNWU0 MjM2ZjUwHhcNMjYwMTAxMTgxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNGNiYzY0Yzg1YWZjYTk5ZjI5ZGFiNTIwOGUxNjNmMWUxMmY0MGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQGisGAcy0+QMnATJzDzUE6p1p50 +Go51cFum2CL3+DAgZKwmJNRhC3Ki7jqEwKr1IYvKJihuT1wGIx2GlxsZ0bTiEGC 3WPTNMKt6QRQwSYoeKq0ZEuy0XtyHza3TMkQLDIY+FO/cjI7nRUDbRWhsbhxqLM3 Ynhvku4g1ogCaPYnEkfNlOvTMM9lY/6zfy6pe8sWJn0iWSvOSJc3IbLuMeGtdWID VdWALo0Id6Mtd8fxu3sPXwOJ88i3JWZFH0c7M3M39FvupKnVzFcOiZLNv1KGzPVZ 6olybRiWcGk4Ft0YSO4v4h94JDBS0dET7q2YOSsBqtwSU0Kh/hOnmD3u7QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOTLxkyFr8qZ8p2rUgjhY/HhL0ClMB8GA1UdIwQY MBaAFCvwoBl4aMbYw03Raz9E3sxeQjb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS19DZ0dYaG94dGpEVGRGclAwVGV6RjVDTnZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80MGQyMjAtNjIxZC00NmZiLWFjOWMt NDhiODM2NmZmMjNlLzEvNU12R1RJV3Z5cG55bmF0U0NPRmo4ZUV2UUtVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80MGQyMjAtNjIxZC00NmZiLWFjOWMtNDhiODM2NmZmMjNl LzEvS19DZ0dYaG94dGpEVGRGclAwVGV6RjVDTnZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCsHk0AwQA ufMDMA0GCSqGSIb3DQEBCwUAA4IBAQAZoyzlPMNrt+lub0q4/PJaELSpCvhS2B2y e9/0np1SnHZUnXcQD4rv0KxQ7mJ5O8O2Q3R/sehfxhl6fcNo+9cVua3dbyUG6MHc UsZ+I3DlBmRq9QqGa7szBDbjwGONy4kA4CBur6zf3Bkrh4MMvU5hBnny9RywE0Fs XLYPNLzcoA/olHh3QEj5bqGGjgSvSA6W2iY3CVtStR4HmMgvXYSH3p/41Ogvbd6F 08X08i+IEiMRWOW8xhy3e7GpgCbb0Bsvltn7ao0B3HCde2G01rkHGlOcFjp4tHB6 4lmnoXyXSrq7W5zJnD7omZVrkM7X5JTdw0f5AlcM5I0McqTksV0Y -----END CERTIFICATE-----Generated at Tue Feb 10 01:14:21 2026 by rpki-client