This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/5pNr9oZlPMBetthQzoOm3nGfv-0.roa File: 5pNr9oZlPMBetthQzoOm3nGfv-0.roa (raw, json) Hash identifier: gJrzrjvQq/P/Q/vZMPPsPNzmhbW1JrdQ6SIA/n8WWGI= Subject key identifier: E6:93:6B:F6:86:65:3C:C0:5E:B6:D8:50:CE:83:A6:DE:71:9F:BF:ED Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B665821F2FCC4FCE4E1E3CF68A86F7D58 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/5pNr9oZlPMBetthQzoOm3nGfv-0.roa Signing time: Sun 28 Dec 2025 19:03:30 +0000 ROA not before: Sun 28 Dec 2025 19:03:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 400992 IP address blocks: 45.159.79.0/24 maxlen: 24 185.121.12.0/24 maxlen: 24 185.121.15.0/24 maxlen: 24 185.196.41.0/24 maxlen: 24 185.218.16.0/24 maxlen: 24 185.218.19.0/24 maxlen: 24 185.232.205.0/24 maxlen: 24 185.236.25.0/24 maxlen: 24 185.236.26.0/24 maxlen: 24 185.236.27.0/24 maxlen: 24 185.245.34.0/24 maxlen: 24 185.245.35.0/24 maxlen: 24 185.250.180.0/24 maxlen: 24 193.17.183.0/24 maxlen: 24 194.48.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 04:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:58:21:f2:fc:c4:fc:e4:e1:e3:cf:68:a8:6f:7d:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Dec 28 19:03:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e6936bf686653cc05eb6d850ce83a6de719fbfed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b9:e3:a7:3f:ab:c1:6d:42:5b:21:2d:9a:15: 15:2f:dd:e1:b7:8d:04:1d:1e:13:89:ec:71:a0:de: f2:fa:17:99:f7:de:f9:33:9f:12:49:ad:18:f3:fa: b7:fb:3b:31:e8:2c:23:69:a7:d8:d1:4f:fd:18:bc: 8d:ee:10:ee:c6:a3:16:10:0c:90:f9:64:cb:42:cd: 79:ad:6d:a4:c5:bc:e0:3a:a2:30:cf:b8:a0:59:88: 2c:f6:44:bc:66:66:45:0e:b3:f9:5f:c1:39:f8:3d: b2:48:a9:c1:c6:8e:ff:45:8c:1e:d4:ae:e3:12:f0: c5:32:67:3f:38:93:4c:ab:9d:03:a2:0a:bb:12:76: 4a:85:03:c2:e7:a6:e4:d4:f9:0e:5f:49:a0:c7:80: 55:f1:12:c3:65:89:b0:b9:22:93:43:c9:84:ae:d2: a1:74:ea:0e:b4:8e:4e:96:e5:92:c1:1d:87:39:1b: 15:22:47:17:0e:89:97:4b:be:92:29:3b:41:5a:01: ca:3a:ae:a2:7e:d3:b7:df:29:f9:6f:2e:98:87:f6: b2:dd:11:fb:4d:68:f8:2c:32:4e:0e:a3:8a:4b:ac: 77:0d:c1:f6:b5:f3:5e:00:ba:80:a0:de:a9:eb:6d: f5:fa:2c:d2:46:47:2c:74:3e:74:67:21:bf:7d:4d: 2c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:93:6B:F6:86:65:3C:C0:5E:B6:D8:50:CE:83:A6:DE:71:9F:BF:ED X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/5pNr9oZlPMBetthQzoOm3nGfv-0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.159.79.0/24 185.121.12.0/24 185.121.15.0/24 185.196.41.0/24 185.218.16.0/24 185.218.19.0/24 185.232.205.0/24 185.236.25.0-185.236.27.255 185.245.34.0/23 185.250.180.0/24 193.17.183.0/24 194.48.142.0/24 Signature Algorithm: sha256WithRSAEncryption 15:3b:6c:73:44:e7:ea:e9:dc:b0:b3:59:f1:14:16:8e:54:d9: 6c:b7:db:0a:05:41:b2:be:87:d3:c1:b2:3b:9b:d8:68:b6:60: 77:33:4c:55:05:86:6e:79:18:d9:e9:ae:82:96:6b:4a:ff:ec: 63:ec:6d:fd:b7:df:d6:b0:65:b6:05:0b:19:74:31:3a:83:42: 96:4d:db:b3:ca:f9:e1:e1:10:99:3c:4d:c6:cf:66:9c:e5:5c: 9c:65:f2:6c:77:a9:10:49:4a:75:ca:ef:e1:2c:de:6e:57:e7: 04:81:1c:13:4e:9e:3a:b9:ae:47:d0:57:ef:6f:98:e2:c0:2f: e6:80:a2:70:2a:34:ab:f6:77:92:1f:e7:c4:33:ab:2a:d5:cf: 1b:f1:25:48:cb:3d:f9:45:58:17:26:f5:03:ff:0c:9c:63:d7: 0b:7b:13:e6:0a:32:87:c6:aa:58:f2:83:14:ee:60:22:ba:4e: 66:f8:ca:89:36:27:9b:51:b3:4d:e4:6b:8d:72:5e:48:7c:fa: 7a:34:b3:98:cc:a9:87:c8:ab:60:9f:57:c1:a5:ab:92:76:43: c5:f3:0c:64:23:cd:06:80:b2:e6:90:56:13:52:b2:a1:85:82: d3:71:ed:35:00:af:a7:c7:7f:71:f2:dc:bc:a7:d7:48:96:c9: 9a:ef:0a:81 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgISAZtmWCHy/MT85OHjz2iob31YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjUxMjI4MTkwMzMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjkzNmJmNjg2NjUzY2MwNWViNmQ4NTBjZTgzYTZkZTcxOWZiZmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLnjpz+rwW1CWyEtmhUVL93ht40E HR4TiexxoN7y+heZ9975M58SSa0Y8/q3+zsx6CwjaafY0U/9GLyN7hDuxqMWEAyQ +WTLQs15rW2kxbzgOqIwz7igWYgs9kS8ZmZFDrP5X8E5+D2ySKnBxo7/RYwe1K7j EvDFMmc/OJNMq50Dogq7EnZKhQPC56bk1PkOX0mgx4BV8RLDZYmwuSKTQ8mErtKh dOoOtI5OluWSwR2HORsVIkcXDomXS76SKTtBWgHKOq6iftO33yn5by6Yh/ay3RH7 TWj4LDJODqOKS6x3DcH2tfNeALqAoN6p6231+izSRkcsdD50ZyG/fU0s0wIDAQAB o4ICUzCCAk8wHQYDVR0OBBYEFOaTa/aGZTzAXrbYUM6Dpt5xn7/tMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvNXBOcjlvWmxQTUJldHRoUXpvT20zbkdmdi0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGkGCCsGAQUFBwEHAQH/BFowWDBWBAIAATBQAwQALZ9PAwQA uXkMAwQAuXkPAwQAucQpAwQAudoQAwQAudoTAwQAuejNMAwDBAC57BkDBAK57BgD BAG59SIDBAC5+rQDBADBEbcDBADCMI4wDQYJKoZIhvcNAQELBQADggEBABU7bHNE 5+rp3LCzWfEUFo5U2Wy32woFQbK+h9PBsjub2Gi2YHczTFUFhm55GNnproKWa0r/ 7GPsbf2339awZbYFCxl0MTqDQpZN27PK+eHhEJk8TcbPZpzlXJxl8mx3qRBJSnXK 7+Es3m5X5wSBHBNOnjq5rkfQV+9vmOLAL+aAonAqNKv2d5If58QzqyrVzxvxJUjL PflFWBcm9QP/DJxj1wt7E+YKMofGqljygxTuYCK6Tmb4yok2J5tRs03ka41yXkh8 +no0s5jMqYfIq2CfV8Glq5J2Q8XzDGQjzQaAsuaQVhNSsqGFgtNx7TUAr6fHf3Hy 3Lyn10iWyZrvCoE= -----END CERTIFICATE-----Generated at Mon Dec 29 07:55:35 2025 by rpki-client