This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/5qo0L1TQGmfb0DZ40F5QQ1AXwt4.roa File: 5qo0L1TQGmfb0DZ40F5QQ1AXwt4.roa (raw, json) Hash identifier: y83T+J2MWgz8Ab4dhxXSEXxv3P/YMscFEjT4/HScAVk= Subject key identifier: E6:AA:34:2F:54:D0:1A:67:DB:D0:36:78:D0:5E:50:43:50:17:C2:DE Certificate issuer: /CN=96d7ba651403d18dddb7a74b20ddc21deb94220e Certificate serial: 019B7B36939574FB63635F14C2A560301CDE Authority key identifier: 96:D7:BA:65:14:03:D1:8D:DD:B7:A7:4B:20:DD:C2:1D:EB:94:22:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/5qo0L1TQGmfb0DZ40F5QQ1AXwt4.roa Signing time: Thu 01 Jan 2026 20:18:52 +0000 ROA not before: Thu 01 Jan 2026 20:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59771 IP address blocks: 185.205.24.0/22 maxlen: 24 185.205.24.0/24 maxlen: 24 185.205.25.0/24 maxlen: 24 185.205.26.0/24 maxlen: 24 185.205.27.0/24 maxlen: 24 193.105.119.0/24 maxlen: 24 195.85.224.0/24 maxlen: 24 2001:678:39c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.mft rsync://rpki.ripe.net/repository/DEFAULT/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:93:95:74:fb:63:63:5f:14:c2:a5:60:30:1c:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96d7ba651403d18dddb7a74b20ddc21deb94220e Validity Not Before: Jan 1 20:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e6aa342f54d01a67dbd03678d05e50435017c2de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:08:f9:68:29:ef:ef:f1:7c:e8:95:a9:35:23: 3a:32:1b:85:b7:8d:f0:22:79:fa:ed:25:af:ac:52: 61:2b:1b:d7:17:d6:ec:41:a3:d4:93:38:e6:55:aa: fe:e7:1a:f3:9a:80:97:37:72:c8:52:ac:4f:20:6f: b3:c3:62:3b:da:8f:c1:b5:c8:46:73:64:f3:f0:5f: a9:25:03:c8:07:91:33:ed:bc:4e:37:98:ff:da:b5: 63:f5:78:e5:3c:98:c6:3d:0b:f0:f1:1e:fb:53:46: 18:71:50:3e:5a:5e:8d:ce:bd:bd:11:e1:60:6a:b4: 22:08:e8:56:47:23:3f:20:b2:0d:62:45:c1:31:e6: f1:fe:67:3b:38:0a:15:b4:d2:4f:9d:b8:83:f2:4f: 9d:0d:e0:36:1b:ee:55:a7:ba:a5:c2:60:37:08:10: 0f:94:36:cf:09:60:a2:1b:8c:df:f2:25:7b:32:f0: 38:d9:03:1f:d6:a1:d6:b6:4c:02:db:a5:6d:31:8c: c4:e0:34:4b:20:86:b6:ed:74:9b:9a:5e:ce:ce:6a: a7:2f:f0:5a:0a:74:72:1c:17:19:1a:9f:d3:5c:78: 42:3a:9e:45:dc:54:96:d5:91:0c:41:c4:7c:76:52: fb:ab:90:2b:74:76:df:81:7e:bb:3d:a3:5b:5d:26: fe:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:AA:34:2F:54:D0:1A:67:DB:D0:36:78:D0:5E:50:43:50:17:C2:DE X509v3 Authority Key Identifier: keyid:96:D7:BA:65:14:03:D1:8D:DD:B7:A7:4B:20:DD:C2:1D:EB:94:22:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/5qo0L1TQGmfb0DZ40F5QQ1AXwt4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.205.24.0/22 193.105.119.0/24 195.85.224.0/24 IPv6: 2001:678:39c::/48 Signature Algorithm: sha256WithRSAEncryption db:6f:b1:a2:2f:5c:d5:c2:6b:80:d0:34:f7:14:3a:e9:04:18: ae:0b:ce:d2:65:e5:73:c6:2a:4c:84:58:09:f4:9d:5d:d2:d7: 29:d8:55:f0:b3:0f:4a:95:0d:83:a2:30:e2:b3:28:7a:43:a4: c4:e4:fa:70:c8:da:d8:0d:7d:0c:3c:64:11:bc:87:24:a0:e1: dc:8f:f1:be:25:cc:41:d2:25:06:5b:bb:a0:c9:a0:a5:ca:c7: 3b:4d:9f:b6:1f:93:93:0d:9e:92:2f:2f:08:7d:17:84:be:d1: 0d:70:fd:d8:1f:bd:76:7e:42:49:2f:f4:61:81:47:4e:41:18: 45:c3:59:6d:c1:ff:46:bb:d5:f3:c7:57:0f:0f:7f:c2:0f:b2: ea:f2:8c:fd:7b:54:d8:e8:9a:d9:fa:71:8d:3b:89:b0:74:65: 45:b1:4e:0c:0e:65:3f:16:d7:4e:71:ed:3b:c0:74:7d:fb:ac: 2c:ad:a4:25:15:7a:aa:ba:20:88:e1:f3:a1:aa:ff:11:52:8e: 4c:de:c8:25:f6:55:62:cb:da:77:a4:08:1a:10:0c:ce:47:1b: 6e:51:68:0d:04:9f:4b:24:74:8e:5f:f4:40:69:2b:d3:b5:97: 9c:12:2a:de:51:6c:75:7c:cc:17:15:f5:31:07:06:f1:8d:b3: 55:89:d0:0c -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt7NpOVdPtjY18UwqVgMBzeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZDdiYTY1MTQwM2QxOGRkZGI3YTc0YjIwZGRjMjFkZWI5 NDIyMGUwHhcNMjYwMTAxMjAxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNmFhMzQyZjU0ZDAxYTY3ZGJkMDM2NzhkMDVlNTA0MzUwMTdjMmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Aj5aCnv7/F86JWpNSM6MhuFt43w Inn67SWvrFJhKxvXF9bsQaPUkzjmVar+5xrzmoCXN3LIUqxPIG+zw2I72o/BtchG c2Tz8F+pJQPIB5Ez7bxON5j/2rVj9XjlPJjGPQvw8R77U0YYcVA+Wl6Nzr29EeFg arQiCOhWRyM/ILINYkXBMebx/mc7OAoVtNJPnbiD8k+dDeA2G+5Vp7qlwmA3CBAP lDbPCWCiG4zf8iV7MvA42QMf1qHWtkwC26VtMYzE4DRLIIa27XSbml7OzmqnL/Ba CnRyHBcZGp/TXHhCOp5F3FSW1ZEMQcR8dlL7q5ArdHbfgX67PaNbXSb+fQIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFOaqNC9U0Bpn29A2eNBeUENQF8LeMB8GA1UdIwQY MBaAFJbXumUUA9GN3benSyDdwh3rlCIOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHRlNlpSUUQwWTNkdDZkTElOM0NIZXVVSWc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8wZDMzYzktNmE4NC00Y2UzLTgxYjAt NDE4YWY5MGFjYjhhLzEvNXFvMEwxVFFHbWZiMERaNDBGNVFRMUFYd3Q0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi8wZDMzYzktNmE4NC00Y2UzLTgxYjAtNDE4YWY5MGFjYjhh LzEvbHRlNlpSUUQwWTNkdDZkTElOM0NIZXVVSWc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQCuc0YAwQA wWl3AwQAw1XgMA8EAgACMAkDBwAgAQZ4A5wwDQYJKoZIhvcNAQELBQADggEBANtv saIvXNXCa4DQNPcUOukEGK4LztJl5XPGKkyEWAn0nV3S1ynYVfCzD0qVDYOiMOKz KHpDpMTk+nDI2tgNfQw8ZBG8hySg4dyP8b4lzEHSJQZbu6DJoKXKxztNn7Yfk5MN npIvLwh9F4S+0Q1w/dgfvXZ+Qkkv9GGBR05BGEXDWW3B/0a71fPHVw8Pf8IPsury jP17VNjomtn6cY07ibB0ZUWxTgwOZT8W105x7TvAdH37rCytpCUVeqq6IIjh86Gq /xFSjkzeyCX2VWLL2nekCBoQDM5HG25RaA0En0skdI5f9EBpK9O1l5wSKt5RbHV8 zBcV9TEHBvGNs1WJ0Aw= -----END CERTIFICATE-----Generated at Tue Jan 20 11:09:45 2026 by rpki-client