This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/5W8H3hdhAkKM671WDMnpy7cCJuY.roa File: 5W8H3hdhAkKM671WDMnpy7cCJuY.roa (raw, json) Hash identifier: NKgi04O8geWs7LDTxcDB8TiJxs4zQ7+9gL3r7rWfDxU= Subject key identifier: E5:6F:07:DE:17:61:02:42:8C:EB:BD:56:0C:C9:E9:CB:B7:02:26:E6 Certificate issuer: /CN=3976e6ab084c9eeede86e2af6bde7215274b95a7 Certificate serial: 019B76EB77775E081EA93C22B7A50EE1045F Authority key identifier: 39:76:E6:AB:08:4C:9E:EE:DE:86:E2:AF:6B:DE:72:15:27:4B:95:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXbmqwhMnu7ehuKva95yFSdLlac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/5W8H3hdhAkKM671WDMnpy7cCJuY.roa Signing time: Thu 01 Jan 2026 00:18:21 +0000 ROA not before: Thu 01 Jan 2026 00:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206101 IP address blocks: 185.196.112.0/24 maxlen: 24 185.196.113.0/24 maxlen: 24 185.196.114.0/24 maxlen: 24 185.196.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.mft rsync://rpki.ripe.net/repository/DEFAULT/OXbmqwhMnu7ehuKva95yFSdLlac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:77:77:5e:08:1e:a9:3c:22:b7:a5:0e:e1:04:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3976e6ab084c9eeede86e2af6bde7215274b95a7 Validity Not Before: Jan 1 00:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e56f07de176102428cebbd560cc9e9cbb70226e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:95:c2:56:b5:db:36:e0:6d:6b:13:a4:c8:7f: c4:6f:8d:33:ba:3f:99:32:d4:07:c0:28:98:81:af: ba:84:49:f4:d9:8b:1a:53:b2:4a:37:54:84:db:3d: 8c:a5:30:0e:a9:58:3c:28:15:9b:76:c8:6e:b3:59: f8:fe:36:b5:ab:93:de:c6:c4:9e:d2:cf:31:af:4d: 96:2e:21:9c:ad:80:5f:a6:20:2e:fe:4e:1f:07:62: 0b:f8:7d:6d:94:4d:32:22:a7:fe:88:57:fa:c9:fa: 01:9d:1e:a7:ed:30:6a:32:2f:12:80:1a:69:b2:d4: db:62:45:5a:9e:89:44:7c:cd:25:22:36:a4:37:28: a2:e6:3e:76:6f:8b:a2:39:f7:43:6f:a0:a2:f9:38: e3:5a:5a:28:3f:0a:d6:52:25:1d:7c:1c:84:c1:b4: 1f:22:a8:85:74:33:e9:ce:63:fe:8a:c0:5b:01:97: 87:29:70:a2:5f:ac:4c:e2:14:ec:cf:d7:4c:4e:72: 38:26:d1:ec:29:80:f4:68:ed:d8:c7:44:65:b5:91: e2:38:ba:47:d5:4b:ae:a1:3d:87:94:d3:33:21:f3: 4f:75:f7:79:cd:0a:5c:13:43:37:ad:1e:c7:e3:28: 1f:dc:a6:fb:6b:fd:40:2e:95:03:85:3a:35:74:34: dd:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:6F:07:DE:17:61:02:42:8C:EB:BD:56:0C:C9:E9:CB:B7:02:26:E6 X509v3 Authority Key Identifier: keyid:39:76:E6:AB:08:4C:9E:EE:DE:86:E2:AF:6B:DE:72:15:27:4B:95:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXbmqwhMnu7ehuKva95yFSdLlac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/5W8H3hdhAkKM671WDMnpy7cCJuY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.196.112.0/22 Signature Algorithm: sha256WithRSAEncryption 3e:d0:19:17:e9:91:2e:3d:53:55:14:03:63:f3:26:60:91:81: 00:c7:e5:3c:30:68:45:5e:27:c2:68:2f:66:a2:b8:f2:f9:a4: 0a:12:05:80:81:60:b0:da:7e:75:f2:57:a1:bb:f7:0d:e6:84: 71:1f:21:70:d0:dd:12:1b:e1:05:c7:18:c2:7d:0e:4f:8b:34: 5a:2a:e4:c3:86:44:d0:91:9e:f5:1c:9d:5b:c4:08:a6:7b:02: 7e:e4:89:ba:49:48:dd:9f:e7:eb:4e:ef:48:94:9c:07:06:ed: 34:5e:f0:02:0c:10:4e:31:41:f0:1c:da:bf:3f:da:45:e3:6d: 25:cf:3a:6d:37:fe:0c:83:ca:5e:23:3b:e2:e1:db:bc:98:55: 9f:2b:b0:99:cc:82:2b:5e:5c:35:c9:a5:46:1a:41:26:40:d1: a3:18:fa:97:b9:21:1c:e1:c7:c9:79:b9:75:37:fc:b1:47:26: 1e:7b:52:d6:25:6a:bf:ce:5a:f2:ff:94:b1:83:76:d7:55:c4: 43:20:84:a2:fa:b6:bf:b2:f9:86:d8:d6:af:7f:0f:46:5c:a1: 50:65:25:d9:85:47:01:33:dd:0c:37:1b:fc:04:f5:b0:43:88: 26:0b:e6:9d:e2:a2:56:27:ff:19:98:c8:fe:36:84:c0:30:1c: fc:bf:79:37 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt263d3XggeqTwit6UO4QRfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5NzZlNmFiMDg0YzllZWVkZTg2ZTJhZjZiZGU3MjE1Mjc0 Yjk1YTcwHhcNMjYwMTAxMDAxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTZmMDdkZTE3NjEwMjQyOGNlYmJkNTYwY2M5ZTljYmI3MDIyNmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZXCVrXbNuBtaxOkyH/Eb40zuj+Z MtQHwCiYga+6hEn02YsaU7JKN1SE2z2MpTAOqVg8KBWbdshus1n4/ja1q5PexsSe 0s8xr02WLiGcrYBfpiAu/k4fB2IL+H1tlE0yIqf+iFf6yfoBnR6n7TBqMi8SgBpp stTbYkVanolEfM0lIjakNyii5j52b4uiOfdDb6Ci+TjjWlooPwrWUiUdfByEwbQf IqiFdDPpzmP+isBbAZeHKXCiX6xM4hTsz9dMTnI4JtHsKYD0aO3Yx0RltZHiOLpH 1UuuoT2HlNMzIfNPdfd5zQpcE0M3rR7H4ygf3Kb7a/1ALpUDhTo1dDTdiQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOVvB94XYQJCjOu9VgzJ6cu3AibmMB8GA1UdIwQY MBaAFDl25qsITJ7u3obir2vechUnS5WnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1hibXF3aE1udTdlaHVLdmE5NXlGU2RMbGFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC83MDI5Y2MtZDMzMS00NjA2LTg4OWMt ZDY2Njc0Y2ZhNDI0LzEvNVc4SDNoZGhBa0tNNjcxV0RNbnB5N2NDSnVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC83MDI5Y2MtZDMzMS00NjA2LTg4OWMtZDY2Njc0Y2ZhNDI0 LzEvT1hibXF3aE1udTdlaHVLdmE5NXlGU2RMbGFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucRwMA0G CSqGSIb3DQEBCwUAA4IBAQA+0BkX6ZEuPVNVFANj8yZgkYEAx+U8MGhFXifCaC9m orjy+aQKEgWAgWCw2n518lehu/cN5oRxHyFw0N0SG+EFxxjCfQ5PizRaKuTDhkTQ kZ71HJ1bxAimewJ+5Im6SUjdn+frTu9IlJwHBu00XvACDBBOMUHwHNq/P9pF420l zzptN/4Mg8peIzvi4du8mFWfK7CZzIIrXlw1yaVGGkEmQNGjGPqXuSEc4cfJebl1 N/yxRyYee1LWJWq/zlry/5Sxg3bXVcRDIISi+ra/svmG2Navfw9GXKFQZSXZhUcB M90MNxv8BPWwQ4gmC+ad4qJWJ/8ZmMj+NoTAMBz8v3k3 -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:24 2026 by rpki-client