This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/5mevMZ6zfxkx-6wdz4bsftQO_GU.roa File: 5mevMZ6zfxkx-6wdz4bsftQO_GU.roa (raw, json) Hash identifier: P9cZpqJMiI+LCnBsIg75xPvytqlb9VxBjd2D4dIOJhM= Subject key identifier: E6:67:AF:31:9E:B3:7F:19:31:FB:AC:1D:CF:86:EC:7E:D4:0E:FC:65 Certificate issuer: /CN=9ae7d661afca3d3370b8e634494d5246b83d585f Certificate serial: 019B7B363ED9CF1A81EA85341913F51008BA Authority key identifier: 9A:E7:D6:61:AF:CA:3D:33:70:B8:E6:34:49:4D:52:46:B8:3D:58:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mufWYa_KPTNwuOY0SU1SRrg9WF8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/5mevMZ6zfxkx-6wdz4bsftQO_GU.roa Signing time: Thu 01 Jan 2026 20:18:31 +0000 ROA not before: Thu 01 Jan 2026 20:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24951 IP address blocks: 89.45.84.0/22 maxlen: 22 185.39.228.0/22 maxlen: 22 2a01:4aa0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/mufWYa_KPTNwuOY0SU1SRrg9WF8.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/mufWYa_KPTNwuOY0SU1SRrg9WF8.mft rsync://rpki.ripe.net/repository/DEFAULT/mufWYa_KPTNwuOY0SU1SRrg9WF8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:3e:d9:cf:1a:81:ea:85:34:19:13:f5:10:08:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ae7d661afca3d3370b8e634494d5246b83d585f Validity Not Before: Jan 1 20:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e667af319eb37f1931fbac1dcf86ec7ed40efc65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7e:b1:02:3d:99:43:50:da:73:cc:84:be:8c: 90:56:1c:55:35:94:93:21:45:14:fd:a8:ed:74:e8: 87:db:7c:d6:ef:b5:b7:40:36:77:9c:bf:ea:b0:a9: 7e:c5:df:bc:bb:2e:c2:01:61:92:90:39:5a:86:ae: ff:18:fe:9b:77:f1:35:ea:2d:e9:2b:1c:32:2b:b1: da:54:49:45:39:e4:90:26:dc:5a:f7:a5:94:0b:06: cf:24:f5:30:01:2c:0b:e5:89:e1:a3:a8:79:28:97: 09:09:e6:37:93:13:c7:55:33:4a:7d:29:5a:d0:2d: 27:d2:15:ea:0f:5c:56:06:04:19:aa:f1:41:03:03: 04:0a:60:17:ea:02:01:cf:b3:81:f9:62:0e:b3:4d: b5:22:c3:0e:f8:18:ce:a5:78:1b:5b:48:3a:46:6a: 0b:b3:b0:8b:a0:7b:20:93:1d:e3:45:a7:aa:50:54: 6b:ee:d8:43:98:7c:b9:c3:96:af:ac:38:e2:f3:87: df:62:ec:41:ee:2f:c0:1e:a3:a5:38:cd:74:2c:d9: b6:5f:14:02:a6:7a:7e:8a:b1:77:c4:91:4f:24:e9: 26:e8:1f:0c:26:95:94:1e:85:30:03:05:f7:dd:43: 08:69:9a:c7:10:82:c4:43:62:74:fb:86:c0:95:dc: 7d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:67:AF:31:9E:B3:7F:19:31:FB:AC:1D:CF:86:EC:7E:D4:0E:FC:65 X509v3 Authority Key Identifier: keyid:9A:E7:D6:61:AF:CA:3D:33:70:B8:E6:34:49:4D:52:46:B8:3D:58:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mufWYa_KPTNwuOY0SU1SRrg9WF8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/5mevMZ6zfxkx-6wdz4bsftQO_GU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/mufWYa_KPTNwuOY0SU1SRrg9WF8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.45.84.0/22 185.39.228.0/22 IPv6: 2a01:4aa0::/32 Signature Algorithm: sha256WithRSAEncryption 32:32:5c:a0:b8:c1:98:c6:d6:8f:9c:09:36:8e:6a:8c:07:19: fc:f1:cd:1c:ed:62:8d:f7:09:6a:f6:50:a6:df:85:3a:81:bc: 7f:59:99:83:74:f1:7f:d4:63:9e:e9:d3:a4:f5:7f:db:8b:19: 6a:85:2d:da:55:96:87:56:15:e2:77:0c:9e:6f:66:0d:e1:03: 4f:e5:68:08:75:0d:a6:28:82:60:5e:9e:2e:01:87:8e:83:60: 73:35:0c:76:b9:43:4d:b6:58:44:53:4a:32:4d:10:f7:39:32: 6d:86:ec:66:99:5b:96:ac:da:b3:e9:ef:b3:52:2a:c4:ac:dd: 03:c9:d8:c9:56:39:70:09:b8:f7:ff:f9:e5:c2:9a:29:f8:77: ba:03:46:ed:c8:f9:8f:7a:02:e7:dc:b3:78:85:e8:98:1b:77: 67:72:00:ba:7c:37:d2:57:67:37:56:1b:83:39:4f:bf:3e:c9: 44:cb:bd:98:d4:4c:d4:76:4f:9f:7e:fe:60:eb:db:55:65:d4: b8:7e:64:cc:ba:ed:e1:a6:f1:0c:6d:79:5d:25:d2:cf:43:6a: 44:ea:c6:76:a0:b4:b1:a7:bd:41:3b:d3:8c:a8:91:e0:e1:e0: 9d:f9:87:a1:a1:a5:54:42:98:94:ca:96:89:ce:ea:30:91:20: 90:71:8f:90 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt7Nj7ZzxqB6oU0GRP1EAi6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhZTdkNjYxYWZjYTNkMzM3MGI4ZTYzNDQ5NGQ1MjQ2Yjgz ZDU4NWYwHhcNMjYwMTAxMjAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjY3YWYzMTllYjM3ZjE5MzFmYmFjMWRjZjg2ZWM3ZWQ0MGVmYzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtX6xAj2ZQ1Dac8yEvoyQVhxVNZST IUUU/ajtdOiH23zW77W3QDZ3nL/qsKl+xd+8uy7CAWGSkDlahq7/GP6bd/E16i3p KxwyK7HaVElFOeSQJtxa96WUCwbPJPUwASwL5Ynho6h5KJcJCeY3kxPHVTNKfSla 0C0n0hXqD1xWBgQZqvFBAwMECmAX6gIBz7OB+WIOs021IsMO+BjOpXgbW0g6RmoL s7CLoHsgkx3jRaeqUFRr7thDmHy5w5avrDji84ffYuxB7i/AHqOlOM10LNm2XxQC pnp+irF3xJFPJOkm6B8MJpWUHoUwAwX33UMIaZrHEILEQ2J0+4bAldx9JQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFOZnrzGes38ZMfusHc+G7H7UDvxlMB8GA1UdIwQY MBaAFJrn1mGvyj0zcLjmNElNUka4PVhfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXVmV1lhX0tQVE53dU9ZMFNVMVNScmc5V0Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9lNDcwNWMtZTZkYS00MjJlLTg1OWMt M2I2OGE0OWRjMDQyLzEvNW1ldk1aNnpmeGt4LTZ3ZHo0YnNmdFFPX0dVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9lNDcwNWMtZTZkYS00MjJlLTg1OWMtM2I2OGE0OWRjMDQy LzEvbXVmV1lhX0tQVE53dU9ZMFNVMVNScmc5V0Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCWS1UAwQC uSfkMA0EAgACMAcDBQAqAUqgMA0GCSqGSIb3DQEBCwUAA4IBAQAyMlyguMGYxtaP nAk2jmqMBxn88c0c7WKN9wlq9lCm34U6gbx/WZmDdPF/1GOe6dOk9X/bixlqhS3a VZaHVhXidwyeb2YN4QNP5WgIdQ2mKIJgXp4uAYeOg2BzNQx2uUNNtlhEU0oyTRD3 OTJthuxmmVuWrNqz6e+zUirErN0DydjJVjlwCbj3//nlwpop+He6A0btyPmPegLn 3LN4heiYG3dncgC6fDfSV2c3VhuDOU+/PslEy72Y1EzUdk+ffv5g69tVZdS4fmTM uu3hpvEMbXldJdLPQ2pE6sZ2oLSxp71BO9OMqJHg4eCd+YehoaVUQpiUypaJzuow kSCQcY+Q -----END CERTIFICATE-----Generated at Tue Feb 10 01:14:19 2026 by rpki-client