This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/5duaaoLxI2GH6cCYMPHCmMSHQ2A.roa File: 5duaaoLxI2GH6cCYMPHCmMSHQ2A.roa (raw, json) Hash identifier: pv7D776mN6xHh+aJuajkc1W+nQHEB1SubW6msOXjn6k= Subject key identifier: E5:DB:9A:6A:82:F1:23:61:87:E9:C0:98:30:F1:C2:98:C4:87:43:60 Certificate issuer: /CN=96d7ba651403d18dddb7a74b20ddc21deb94220e Certificate serial: 019B7B369352AC3EE13765A9E96E88AE7634 Authority key identifier: 96:D7:BA:65:14:03:D1:8D:DD:B7:A7:4B:20:DD:C2:1D:EB:94:22:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/5duaaoLxI2GH6cCYMPHCmMSHQ2A.roa Signing time: Thu 01 Jan 2026 20:18:52 +0000 ROA not before: Thu 01 Jan 2026 20:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29684 IP address blocks: 185.205.24.0/22 maxlen: 24 185.205.24.0/24 maxlen: 24 185.205.25.0/24 maxlen: 24 185.205.26.0/24 maxlen: 24 185.205.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.mft rsync://rpki.ripe.net/repository/DEFAULT/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:93:52:ac:3e:e1:37:65:a9:e9:6e:88:ae:76:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96d7ba651403d18dddb7a74b20ddc21deb94220e Validity Not Before: Jan 1 20:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e5db9a6a82f1236187e9c09830f1c298c4874360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:74:fb:91:81:1a:12:b3:ce:5e:75:92:2f:0b: 91:cc:c3:7f:d8:2a:f3:fe:30:13:96:e2:f7:70:5c: 44:f3:91:91:a9:3e:ed:0c:8f:cb:76:19:e6:4c:48: 6c:39:f4:17:b9:8a:b5:ae:3e:eb:e8:8d:b7:68:1b: 14:6f:92:9c:4f:97:2b:87:52:51:f9:52:82:04:b7: fc:82:3c:ae:fb:34:ae:f6:2b:07:ec:26:09:38:28: b3:85:81:ce:13:90:49:66:13:8e:8a:17:47:72:37: 96:00:ee:9d:e8:ef:0a:65:98:79:b9:a2:99:e4:15: 54:0d:a6:a5:a1:ab:4e:55:33:f3:e3:27:23:9f:0d: 8d:37:97:82:25:d6:2d:8c:05:d0:bd:6f:0d:61:5d: 0a:3b:c3:fb:7e:d3:52:18:62:06:c7:69:b6:d8:98: 37:73:85:b1:f0:65:37:dc:be:6b:50:00:86:61:f7: 17:98:b2:f5:a0:2d:06:63:ce:91:fe:ee:f5:7c:de: 78:01:2c:bf:b6:38:48:c5:ca:53:68:dc:c5:4f:45: fb:63:3a:38:31:5e:d5:76:0f:98:81:11:a3:a0:a6: 73:2e:c6:4f:dc:08:9e:1c:30:14:fd:11:4e:f3:65: da:36:95:53:5d:8c:9b:94:8d:53:54:df:1a:93:0a: 15:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:DB:9A:6A:82:F1:23:61:87:E9:C0:98:30:F1:C2:98:C4:87:43:60 X509v3 Authority Key Identifier: keyid:96:D7:BA:65:14:03:D1:8D:DD:B7:A7:4B:20:DD:C2:1D:EB:94:22:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/5duaaoLxI2GH6cCYMPHCmMSHQ2A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.205.24.0/22 Signature Algorithm: sha256WithRSAEncryption 4d:e0:63:d6:1c:5a:e8:61:ea:7b:51:4a:5f:aa:59:a0:75:bb: 12:ed:21:d9:ac:c5:89:ef:f7:8e:85:16:f9:c4:52:4a:f2:b4: ff:82:fc:c0:4c:98:93:3f:e0:01:5d:fc:ea:3e:bd:25:a2:20: 9a:f4:93:5c:56:d0:62:14:ea:df:c0:74:5c:f4:fc:a4:56:ad: 54:ed:18:1d:19:d7:7b:f3:6a:0b:ea:6d:68:79:4b:99:f3:c1: 49:df:be:51:92:24:f3:7d:58:64:cd:2d:9c:30:aa:8f:99:9c: ad:a1:f5:47:0b:bf:d2:80:7e:1e:f2:60:a8:a3:e0:bd:39:b5: ce:7f:a7:f4:46:52:c8:a3:12:c7:ba:44:c9:7a:5f:f5:da:63: 7e:48:37:73:28:c0:68:40:7b:33:5c:e1:1c:05:eb:06:47:4f: a2:34:4c:f5:10:36:4a:cf:a8:76:fe:f1:89:a0:81:e3:2d:ff: 74:c3:fc:ce:5d:01:37:74:1b:35:cc:27:3a:d1:37:6e:00:26: 42:12:61:f9:fc:ea:b0:94:72:b8:93:a8:b4:19:51:f1:12:e1: 1a:77:7d:6b:4b:a6:8d:29:ab:a3:33:20:1c:16:55:31:b2:33: be:d0:67:64:34:fd:3f:1b:8f:62:32:5c:68:dc:11:1b:41:c6: 0e:9c:86:93 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NpNSrD7hN2Wp6W6IrnY0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZDdiYTY1MTQwM2QxOGRkZGI3YTc0YjIwZGRjMjFkZWI5 NDIyMGUwHhcNMjYwMTAxMjAxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNWRiOWE2YTgyZjEyMzYxODdlOWMwOTgzMGYxYzI5OGM0ODc0MzYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nT7kYEaErPOXnWSLwuRzMN/2Crz /jATluL3cFxE85GRqT7tDI/LdhnmTEhsOfQXuYq1rj7r6I23aBsUb5KcT5crh1JR +VKCBLf8gjyu+zSu9isH7CYJOCizhYHOE5BJZhOOihdHcjeWAO6d6O8KZZh5uaKZ 5BVUDaaloatOVTPz4ycjnw2NN5eCJdYtjAXQvW8NYV0KO8P7ftNSGGIGx2m22Jg3 c4Wx8GU33L5rUACGYfcXmLL1oC0GY86R/u71fN54ASy/tjhIxcpTaNzFT0X7Yzo4 MV7Vdg+YgRGjoKZzLsZP3AieHDAU/RFO82XaNpVTXYyblI1TVN8akwoV6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOXbmmqC8SNhh+nAmDDxwpjEh0NgMB8GA1UdIwQY MBaAFJbXumUUA9GN3benSyDdwh3rlCIOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHRlNlpSUUQwWTNkdDZkTElOM0NIZXVVSWc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8wZDMzYzktNmE4NC00Y2UzLTgxYjAt NDE4YWY5MGFjYjhhLzEvNWR1YWFvTHhJMkdINmNDWU1QSENtTVNIUTJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi8wZDMzYzktNmE4NC00Y2UzLTgxYjAtNDE4YWY5MGFjYjhh LzEvbHRlNlpSUUQwWTNkdDZkTElOM0NIZXVVSWc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuc0YMA0G CSqGSIb3DQEBCwUAA4IBAQBN4GPWHFroYep7UUpfqlmgdbsS7SHZrMWJ7/eOhRb5 xFJK8rT/gvzATJiTP+ABXfzqPr0loiCa9JNcVtBiFOrfwHRc9PykVq1U7RgdGdd7 82oL6m1oeUuZ88FJ375RkiTzfVhkzS2cMKqPmZytofVHC7/SgH4e8mCoo+C9ObXO f6f0RlLIoxLHukTJel/12mN+SDdzKMBoQHszXOEcBesGR0+iNEz1EDZKz6h2/vGJ oIHjLf90w/zOXQE3dBs1zCc60TduACZCEmH5/OqwlHK4k6i0GVHxEuEad31rS6aN KaujMyAcFlUxsjO+0GdkNP0/G49iMlxo3BEbQcYOnIaT -----END CERTIFICATE-----Generated at Tue Jan 20 07:46:28 2026 by rpki-client