This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/5DYhgE6Gy-jz0bHpZkw_dTeoiI0.roa File: 5DYhgE6Gy-jz0bHpZkw_dTeoiI0.roa (raw, json) Hash identifier: hypONzvuE+BKcrMRG2ro+AD/EpTXljhmDK5JDH3Cjno= Subject key identifier: E4:36:21:80:4E:86:CB:E8:F3:D1:B1:E9:66:4C:3F:75:37:A8:88:8D Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Certificate serial: 019B797E29F9B46440878C2E910E440D9479 Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/5DYhgE6Gy-jz0bHpZkw_dTeoiI0.roa Signing time: Thu 01 Jan 2026 12:17:50 +0000 ROA not before: Thu 01 Jan 2026 12:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44103 IP address blocks: 45.93.119.0/24 maxlen: 32 185.142.142.0/24 maxlen: 32 185.249.217.0/24 maxlen: 32 194.34.230.0/24 maxlen: 32 2a06:8e01::/44 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:29:f9:b4:64:40:87:8c:2e:91:0e:44:0d:94:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Validity Not Before: Jan 1 12:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e43621804e86cbe8f3d1b1e9664c3f7537a8888d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cc:a0:d1:76:03:27:f6:fa:4e:48:ea:24:f6: 78:73:8a:fe:10:35:04:f4:90:4d:ae:57:fd:91:01: 61:e0:e6:d3:2c:dd:40:0f:16:d3:bd:31:1c:82:bc: 6c:82:67:53:61:7d:d6:74:e3:bd:d8:ae:98:5a:fb: 17:b7:5a:16:4a:ec:74:dc:bb:25:cd:12:b8:3f:22: e5:a4:25:72:cd:11:44:ac:8e:1c:9c:4a:e3:80:5a: bf:89:b1:47:ac:81:a9:3e:7e:f9:5e:d9:5c:6e:fc: 37:fe:86:fd:82:e1:b4:77:9f:cd:28:97:b1:63:44: 78:b7:2f:b1:ce:55:7c:11:d4:95:17:58:c7:9c:ef: d4:9c:16:3f:f1:1b:aa:a0:b3:a4:8f:fb:54:4d:38: 98:9b:62:29:e1:e6:3d:74:e5:17:7a:a6:df:d2:68: 8a:35:a4:2a:8d:bd:48:5d:7b:5c:c3:46:ff:c5:38: f6:d9:bf:83:ed:ac:69:cc:29:20:18:64:15:ac:cf: 9c:3a:d6:21:89:70:43:dc:7e:12:f7:d9:94:04:05: ce:28:8b:95:a6:34:9d:50:f7:a9:00:43:58:92:0e: 22:e3:be:e7:d5:97:34:11:0f:af:dc:fe:d6:5e:33: 0e:15:af:09:40:e9:86:ae:1c:bf:48:82:a4:24:5c: 13:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:36:21:80:4E:86:CB:E8:F3:D1:B1:E9:66:4C:3F:75:37:A8:88:8D X509v3 Authority Key Identifier: keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/5DYhgE6Gy-jz0bHpZkw_dTeoiI0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.93.119.0/24 185.142.142.0/24 185.249.217.0/24 194.34.230.0/24 IPv6: 2a06:8e01::/44 Signature Algorithm: sha256WithRSAEncryption 1f:5f:86:1a:c7:c7:d3:03:0e:a9:71:4a:ea:af:6e:95:3f:36: c7:79:96:7b:0f:49:3c:71:c1:7a:1f:83:96:58:91:7b:30:46: be:3d:ef:b7:9b:83:48:d0:77:b5:19:a4:06:64:63:72:00:3d: 0c:3c:be:01:92:bc:94:5b:88:27:22:47:8f:20:2d:ad:5f:c5: d1:c0:a5:c7:b5:e5:02:18:a8:b9:e6:cd:4a:ad:5e:ec:91:9e: 80:b4:98:3b:a7:99:35:e1:e6:ae:c2:6b:51:a3:bb:d0:9a:3d: 30:52:db:2b:13:6e:60:75:0c:ac:da:8b:cc:3c:fd:de:e5:62: 16:ca:07:ee:8f:ad:32:1d:86:4c:75:7e:43:0f:a7:2c:96:95: 96:0c:a7:d9:fb:bc:d7:ab:8a:60:45:50:ca:aa:95:f5:16:25: 94:d6:c5:6c:9f:21:76:18:19:de:b9:4e:2d:ed:f9:40:95:60: 4b:50:82:8e:be:58:a4:5c:b4:78:c1:0e:04:9a:99:fb:18:a7: 1d:da:12:90:08:ad:e9:39:2d:ad:21:55:88:7a:7f:2e:18:4a: 59:dc:b5:1e:a5:12:9d:84:7d:20:1c:b8:12:f9:0e:2c:cf:ae: b1:ca:a3:c1:1d:44:2d:20:80:15:58:d2:6a:87:2e:98:26:1a: a9:88:e7:dd -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt5fin5tGRAh4wukQ5EDZR5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi YTU3NDUwHhcNMjYwMTAxMTIxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDM2MjE4MDRlODZjYmU4ZjNkMWIxZTk2NjRjM2Y3NTM3YTg4ODhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMyg0XYDJ/b6TkjqJPZ4c4r+EDUE 9JBNrlf9kQFh4ObTLN1ADxbTvTEcgrxsgmdTYX3WdOO92K6YWvsXt1oWSux03Lsl zRK4PyLlpCVyzRFErI4cnErjgFq/ibFHrIGpPn75Xtlcbvw3/ob9guG0d5/NKJex Y0R4ty+xzlV8EdSVF1jHnO/UnBY/8RuqoLOkj/tUTTiYm2Ip4eY9dOUXeqbf0miK NaQqjb1IXXtcw0b/xTj22b+D7axpzCkgGGQVrM+cOtYhiXBD3H4S99mUBAXOKIuV pjSdUPepAENYkg4i477n1Zc0EQ+v3P7WXjMOFa8JQOmGrhy/SIKkJFwTZQIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFOQ2IYBOhsvo89Gx6WZMP3U3qIiNMB8GA1UdIwQY MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt ZmVhYzI2ZWFlY2MyLzEvNURZaGdFNkd5LWp6MGJIcFprd19kVGVvaUkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAYAwQALV13AwQA uY6OAwQAufnZAwQAwiLmMA8EAgACMAkDBwQqBo4BAAAwDQYJKoZIhvcNAQELBQAD ggEBAB9fhhrHx9MDDqlxSuqvbpU/Nsd5lnsPSTxxwXofg5ZYkXswRr4977ebg0jQ d7UZpAZkY3IAPQw8vgGSvJRbiCciR48gLa1fxdHApce15QIYqLnmzUqtXuyRnoC0 mDunmTXh5q7Ca1Gju9CaPTBS2ysTbmB1DKzai8w8/d7lYhbKB+6PrTIdhkx1fkMP pyyWlZYMp9n7vNerimBFUMqqlfUWJZTWxWyfIXYYGd65Ti3t+UCVYEtQgo6+WKRc tHjBDgSamfsYpx3aEpAIrek5La0hVYh6fy4YSlnctR6lEp2EfSAcuBL5DizPrrHK o8EdRC0ggBVY0mqHLpgmGqmI590= -----END CERTIFICATE-----Generated at Mon Jan 19 20:29:25 2026 by rpki-client