This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/5uh-9bmbFKl3mY9dQ-trlVcyuXw.roa File: 5uh-9bmbFKl3mY9dQ-trlVcyuXw.roa (raw, json) Hash identifier: 7VoUKco9uMR4votOVTE4cFdkMXMlmmD0Z2XuyuOwo54= Subject key identifier: E6:E8:7E:F5:B9:9B:14:A9:77:99:8F:5D:43:EB:6B:95:57:32:B9:7C Certificate issuer: /CN=e29b9ac2ef631b92e82f595d73e4792c816ec6e6 Certificate serial: 019B797EC9525B1CD9FDC77A652EDE6B86FA Authority key identifier: E2:9B:9A:C2:EF:63:1B:92:E8:2F:59:5D:73:E4:79:2C:81:6E:C6:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/5uh-9bmbFKl3mY9dQ-trlVcyuXw.roa Signing time: Thu 01 Jan 2026 12:18:30 +0000 ROA not before: Thu 01 Jan 2026 12:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21243 IP address blocks: 37.247.244.0/23 maxlen: 23 37.247.246.0/23 maxlen: 23 212.2.105.0/24 maxlen: 24 212.2.106.0/23 maxlen: 23 2a01:2e1:ffff:6::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.mft rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:c9:52:5b:1c:d9:fd:c7:7a:65:2e:de:6b:86:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e29b9ac2ef631b92e82f595d73e4792c816ec6e6 Validity Not Before: Jan 1 12:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e6e87ef5b99b14a977998f5d43eb6b955732b97c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b9:5c:02:34:08:c5:4e:bb:9f:84:52:95:48: 7b:5c:e6:2d:3c:05:8c:0a:ee:5d:52:64:5d:96:3a: 61:ee:c4:a9:33:81:57:16:df:72:f0:84:19:06:03: cd:a9:37:2e:df:0a:ed:6e:88:11:c0:0a:b2:59:96: fb:3a:ef:15:e2:c8:05:c5:43:bd:08:02:b3:96:ae: 2d:f8:37:cf:b1:24:cf:65:07:29:9d:e4:46:0c:f0: e5:ba:03:79:55:a2:44:ed:0b:93:35:01:60:df:5f: 30:ca:6f:b6:fb:de:78:dc:9c:11:5c:1a:75:73:26: 3d:a8:de:51:23:c8:9c:7a:8b:b5:10:b1:10:89:50: 9d:83:7b:73:da:1a:a1:f6:bd:56:97:a1:34:f7:55: 4a:9f:6c:18:39:01:39:27:f7:bf:0c:6a:4d:c6:ee: 78:04:6a:54:3a:8e:22:29:e3:e2:6f:04:7a:70:d1: 82:dd:d1:52:63:84:5b:da:e0:23:9a:ff:20:1d:d7: 9f:9f:00:48:0e:ce:1d:6c:24:70:3c:ba:2f:17:cd: 79:af:30:e2:ea:d2:20:db:b2:ca:51:44:7e:0e:72: ee:81:a4:36:5c:31:d6:fa:ba:5e:d1:0d:56:f9:68: 35:62:4e:1f:ba:8c:ca:ad:e3:f3:87:96:c0:bc:7f: e9:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:E8:7E:F5:B9:9B:14:A9:77:99:8F:5D:43:EB:6B:95:57:32:B9:7C X509v3 Authority Key Identifier: keyid:E2:9B:9A:C2:EF:63:1B:92:E8:2F:59:5D:73:E4:79:2C:81:6E:C6:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/5uh-9bmbFKl3mY9dQ-trlVcyuXw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.247.244.0/22 212.2.105.0-212.2.107.255 IPv6: 2a01:2e1:ffff:6::/64 Signature Algorithm: sha256WithRSAEncryption 1f:53:0f:aa:92:05:81:f3:d7:89:85:1d:90:54:e4:98:34:c3: c9:a1:8c:69:1f:83:23:4e:b9:0c:a2:4b:73:7a:6d:70:4b:46: 47:b2:29:d0:e0:f5:d5:2b:66:9a:31:23:5f:ca:b0:c1:44:a7: 98:b8:d2:8e:7e:43:1e:5a:1a:6a:5d:f5:43:13:83:49:ac:4b: af:de:d4:fb:87:ed:7f:b1:f1:40:9d:c1:9a:63:b1:5b:c2:70: e2:7a:8f:96:c2:aa:52:06:de:36:d3:d0:9f:b5:b1:cf:9f:c7: 6f:8e:1d:ca:ae:6f:e1:7a:70:d7:a7:de:14:4e:6b:19:8c:2e: b6:cd:c0:bf:1a:b3:29:de:be:11:a6:f1:8e:29:95:ab:5f:92: 54:28:a2:ce:fe:54:7a:ae:ca:1f:a0:6e:ec:65:7f:b9:24:93: 1a:48:af:71:05:45:79:db:f9:87:0f:d7:93:a6:03:50:30:17: 40:70:b7:86:0e:35:81:c8:e2:61:66:ab:e0:55:45:81:05:b9: 8c:ad:d6:31:79:f1:b2:8d:7c:2d:79:d1:2a:b2:2a:a7:1e:a3: f4:b6:3f:5f:8c:f8:db:28:a0:9f:86:72:c3:7a:ce:38:54:7b: 90:bb:b1:15:26:7b:cb:bb:fd:da:b6:dc:0f:6d:28:be:4b:4a: a3:f9:5b:65 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt5fslSWxzZ/cd6ZS7ea4b6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyOWI5YWMyZWY2MzFiOTJlODJmNTk1ZDczZTQ3OTJjODE2 ZWM2ZTYwHhcNMjYwMTAxMTIxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNmU4N2VmNWI5OWIxNGE5Nzc5OThmNWQ0M2ViNmI5NTU3MzJiOTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurlcAjQIxU67n4RSlUh7XOYtPAWM Cu5dUmRdljph7sSpM4FXFt9y8IQZBgPNqTcu3wrtbogRwAqyWZb7Ou8V4sgFxUO9 CAKzlq4t+DfPsSTPZQcpneRGDPDlugN5VaJE7QuTNQFg318wym+2+9543JwRXBp1 cyY9qN5RI8iceou1ELEQiVCdg3tz2hqh9r1Wl6E091VKn2wYOQE5J/e/DGpNxu54 BGpUOo4iKePibwR6cNGC3dFSY4Rb2uAjmv8gHdefnwBIDs4dbCRwPLovF815rzDi 6tIg27LKUUR+DnLugaQ2XDHW+rpe0Q1W+Wg1Yk4fuozKrePzh5bAvH/pOQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFObofvW5mxSpd5mPXUPra5VXMrl8MB8GA1UdIwQY MBaAFOKbmsLvYxuS6C9ZXXPkeSyBbsbmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHB1YXd1OWpHNUxvTDFsZGMtUjVMSUZ1eHVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82OTAzNTctZGZiZS00ZDg2LWFmZDYt OTE2NGUzNTJhODNjLzEvNXVoLTlibWJGS2wzbVk5ZFEtdHJsVmN5dVh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi82OTAzNTctZGZiZS00ZDg2LWFmZDYtOTE2NGUzNTJhODNj LzEvNHB1YXd1OWpHNUxvTDFsZGMtUjVMSUZ1eHVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAaBAIAATAUAwQCJff0MAwD BADUAmkDBALUAmgwEQQCAAIwCwMJACoBAuH//wAGMA0GCSqGSIb3DQEBCwUAA4IB AQAfUw+qkgWB89eJhR2QVOSYNMPJoYxpH4MjTrkMoktzem1wS0ZHsinQ4PXVK2aa MSNfyrDBRKeYuNKOfkMeWhpqXfVDE4NJrEuv3tT7h+1/sfFAncGaY7FbwnDieo+W wqpSBt4209CftbHPn8dvjh3Krm/henDXp94UTmsZjC62zcC/GrMp3r4RpvGOKZWr X5JUKKLO/lR6rsofoG7sZX+5JJMaSK9xBUV52/mHD9eTpgNQMBdAcLeGDjWByOJh ZqvgVUWBBbmMrdYxefGyjXwtedEqsiqnHqP0tj9fjPjbKKCfhnLDes44VHuQu7EV JnvLu/3attwPbSi+S0qj+Vtl -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:43 2026 by rpki-client