This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/5gNENNsVRr6Z3Z2kDivAVxx-WQg.roa File: 5gNENNsVRr6Z3Z2kDivAVxx-WQg.roa (raw, json) Hash identifier: jTpmttv4j/3i6QtQ6v5DJnqHH5NP5RbZJYeJEXUUVHc= Subject key identifier: E6:03:44:34:DB:15:46:BE:99:DD:9D:A4:0E:2B:C0:57:1C:7E:59:08 Certificate issuer: /CN=32facf5d02730268d3b1e76c96b0f8588d998b4f Certificate serial: 019B797F13EF1396930292E2B5E0685F9704 Authority key identifier: 32:FA:CF:5D:02:73:02:68:D3:B1:E7:6C:96:B0:F8:58:8D:99:8B:4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/5gNENNsVRr6Z3Z2kDivAVxx-WQg.roa Signing time: Thu 01 Jan 2026 12:18:49 +0000 ROA not before: Thu 01 Jan 2026 12:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43754 IP address blocks: 185.162.217.0/24 maxlen: 24 185.162.218.0/24 maxlen: 24 185.162.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:13:ef:13:96:93:02:92:e2:b5:e0:68:5f:97:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32facf5d02730268d3b1e76c96b0f8588d998b4f Validity Not Before: Jan 1 12:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e6034434db1546be99dd9da40e2bc0571c7e5908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:cc:56:02:71:8a:68:14:25:03:6a:de:f6:8b: 9b:df:85:ef:e1:11:06:80:32:da:07:e0:d6:12:83: 38:62:a8:bc:70:f8:38:8e:e2:fe:c7:1b:8a:77:dc: 57:fb:f1:01:71:a5:99:cd:e3:e1:2c:dd:29:27:d6: 48:78:59:e3:f8:63:7e:84:7b:91:6c:32:5a:41:37: 68:7a:82:c4:03:25:f3:65:a7:4f:8f:0a:45:a2:77: b1:47:cf:fc:b7:bc:ce:d7:17:9f:84:44:29:33:60: 68:a7:81:f7:a0:9c:1e:69:21:f4:ca:19:2c:ae:c2: 8c:f4:30:51:12:5a:eb:5a:cc:5e:ae:f5:44:fc:62: 4a:8d:75:87:37:94:4a:45:d4:e1:49:3b:29:9c:1f: 86:d4:b5:4a:a0:67:63:4e:7b:13:f2:82:e0:09:e8: 6b:6c:2c:92:bf:fd:6d:36:5c:a0:df:3f:ea:eb:b4: bc:92:6b:21:eb:7a:e6:2e:68:40:6b:67:bb:e4:e2: 39:0f:4b:57:b0:44:a8:6f:df:a6:ea:c1:a4:eb:d9: 54:01:01:19:4a:0a:e2:16:74:7c:d7:87:6c:7f:83: 19:b3:b0:5c:31:ed:e9:ed:94:ad:13:cf:43:f0:86: af:cd:3b:fa:1f:8a:6c:98:db:5f:ba:f2:5b:49:c2: 35:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:03:44:34:DB:15:46:BE:99:DD:9D:A4:0E:2B:C0:57:1C:7E:59:08 X509v3 Authority Key Identifier: keyid:32:FA:CF:5D:02:73:02:68:D3:B1:E7:6C:96:B0:F8:58:8D:99:8B:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/5gNENNsVRr6Z3Z2kDivAVxx-WQg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.162.217.0-185.162.219.255 Signature Algorithm: sha256WithRSAEncryption b2:a1:af:84:ba:1d:43:ce:2a:16:a7:28:b7:7a:15:c7:5c:fa: cc:f9:58:34:c4:39:a4:cc:25:95:7b:59:87:49:aa:86:40:b2: 35:26:64:78:56:b5:79:98:6d:48:dc:01:e7:38:a6:1e:af:62: 9c:15:4b:95:d7:b2:b7:1a:73:fc:ae:4c:aa:96:9c:ea:24:8a: 63:16:d3:82:3f:04:17:d8:b4:74:c5:f7:e4:8a:fc:04:c3:8d: 8c:a0:f5:69:ac:d3:06:f8:03:2f:ce:e5:5f:12:2e:95:9b:a2: 5f:a6:e8:35:ca:6e:3f:13:a4:9b:df:ca:2f:4b:19:73:8f:9d: ff:60:3b:38:ec:0d:d4:1a:31:32:9e:29:65:f8:72:d7:38:58: 6c:78:e9:a2:37:de:5a:bf:f3:2f:88:93:5e:a0:bb:7a:ee:bd: 06:2c:b7:17:93:e2:2b:32:81:ee:cc:96:83:aa:c7:0d:54:a1: 74:5d:e0:8f:55:9e:cf:a7:4c:8f:e9:54:7a:04:76:d9:6e:a7: ab:7e:04:08:b1:9c:d4:3c:9b:c6:14:e8:4d:39:8d:92:d5:40: 0b:53:4e:ac:3e:38:a7:66:8e:2e:00:ba:05:b7:92:5c:cb:ca: 66:3c:ce:8d:6b:fa:b3:d8:e1:66:b2:d1:d6:13:4f:7a:6c:a3: 25:45:ea:3e -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt5fxPvE5aTApLiteBoX5cEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyZmFjZjVkMDI3MzAyNjhkM2IxZTc2Yzk2YjBmODU4OGQ5 OThiNGYwHhcNMjYwMTAxMTIxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjAzNDQzNGRiMTU0NmJlOTlkZDlkYTQwZTJiYzA1NzFjN2U1OTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcxWAnGKaBQlA2re9oub34Xv4REG gDLaB+DWEoM4Yqi8cPg4juL+xxuKd9xX+/EBcaWZzePhLN0pJ9ZIeFnj+GN+hHuR bDJaQTdoeoLEAyXzZadPjwpFonexR8/8t7zO1xefhEQpM2Bop4H3oJweaSH0yhks rsKM9DBRElrrWsxervVE/GJKjXWHN5RKRdThSTspnB+G1LVKoGdjTnsT8oLgCehr bCySv/1tNlyg3z/q67S8kmsh63rmLmhAa2e75OI5D0tXsESob9+m6sGk69lUAQEZ SgriFnR814dsf4MZs7BcMe3p7ZStE89D8IavzTv6H4psmNtfuvJbScI1QQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFOYDRDTbFUa+md2dpA4rwFccflkIMB8GA1UdIwQY MBaAFDL6z10CcwJo07HnbJaw+FiNmYtPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXZyUFhRSnpBbWpUc2Vkc2xyRDRXSTJaaTA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9hNGNiOTUtOTEyNy00ODY5LThmOTAt OWU0ZTQ2ZjYwYTY4LzEvNWdORU5Oc1ZScjZaM1oya0RpdkFWeHgtV1FnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9hNGNiOTUtOTEyNy00ODY5LThmOTAtOWU0ZTQ2ZjYwYTY4 LzEvTXZyUFhRSnpBbWpUc2Vkc2xyRDRXSTJaaTA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC5otkD BAK5otgwDQYJKoZIhvcNAQELBQADggEBALKhr4S6HUPOKhanKLd6Fcdc+sz5WDTE OaTMJZV7WYdJqoZAsjUmZHhWtXmYbUjcAec4ph6vYpwVS5XXsrcac/yuTKqWnOok imMW04I/BBfYtHTF9+SK/ATDjYyg9Wms0wb4Ay/O5V8SLpWbol+m6DXKbj8TpJvf yi9LGXOPnf9gOzjsDdQaMTKeKWX4ctc4WGx46aI33lq/8y+Ik16gu3ruvQYstxeT 4isyge7MloOqxw1UoXRd4I9Vns+nTI/pVHoEdtlup6t+BAixnNQ8m8YU6E05jZLV QAtTTqw+OKdmji4AugW3klzLymY8zo1r+rPY4Way0dYTT3psoyVF6j4= -----END CERTIFICATE-----Generated at Mon Jan 26 22:57:21 2026 by rpki-client