This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/M5TKRTVkWD2dL6lM7wuEjIwDQL8.roa File: M5TKRTVkWD2dL6lM7wuEjIwDQL8.roa (raw, json) Hash identifier: 5Ex8CJURXx2MQOw6fymFtAlT+ga7jFjdM8E2vsEXzi8= Subject key identifier: 33:94:CA:45:35:64:58:3D:9D:2F:A9:4C:EF:0B:84:8C:8C:03:40:BF Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Certificate serial: 019B797E29A7366E36F526E97C8C9CB3481A Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/M5TKRTVkWD2dL6lM7wuEjIwDQL8.roa Signing time: Thu 01 Jan 2026 12:17:49 +0000 ROA not before: Thu 01 Jan 2026 12:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43350 IP address blocks: 185.142.141.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:29:a7:36:6e:36:f5:26:e9:7c:8c:9c:b3:48:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Validity Not Before: Jan 1 12:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3394ca453564583d9d2fa94cef0b848c8c0340bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:55:ca:c5:f2:3a:ae:89:5c:5f:ae:16:b6:12: 15:b4:f6:42:a2:8f:31:e8:d4:8b:88:35:3d:d4:c9: a5:1b:0e:f5:18:80:2a:0c:05:68:0a:6b:0a:50:d0: f2:62:0b:68:f2:bc:35:74:a9:f0:d3:ab:d8:af:fb: 14:77:e2:57:0c:49:81:21:12:fc:ea:ad:85:0d:22: 64:f2:e9:ca:40:28:21:ec:8d:b9:03:96:48:e1:f6: 7b:42:17:86:dc:1d:03:c8:84:a5:4b:0a:97:02:66: 78:61:23:7b:ba:64:c8:f2:14:fe:b9:e2:ff:59:4d: 79:5c:58:e1:32:58:a7:b7:07:15:43:f8:d9:f9:c2: 1e:39:ba:bc:99:95:56:c8:59:c3:38:50:b8:ea:77: b7:d0:90:31:01:75:23:b7:e3:b1:e5:18:e7:b8:21: 50:72:49:6b:a6:02:d3:60:3c:c1:0e:51:21:e9:38: 15:da:c6:6c:b8:3b:ea:91:e3:ac:47:5b:cb:c6:1f: 6d:34:ad:48:93:53:b9:ff:f7:f7:ad:da:62:c0:16: 8e:81:db:81:fe:b2:07:14:9a:db:ab:ce:38:8a:4b: 15:3e:e3:e9:e0:30:79:2e:f5:39:9b:44:4c:74:29: 5f:ed:83:25:39:a0:05:56:61:2c:44:a3:10:be:d3: 37:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:94:CA:45:35:64:58:3D:9D:2F:A9:4C:EF:0B:84:8C:8C:03:40:BF X509v3 Authority Key Identifier: keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/M5TKRTVkWD2dL6lM7wuEjIwDQL8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.142.141.0/24 Signature Algorithm: sha256WithRSAEncryption 80:a1:15:2b:27:b3:af:56:3d:3c:4e:2a:71:6e:17:59:ca:5d: f4:a1:fe:18:e9:93:b7:d4:f5:4c:ee:de:7a:1d:e3:c8:10:25: 75:cc:d0:d2:0b:d4:8e:3d:af:f0:73:c5:64:33:96:b1:34:e6: 07:13:c4:75:28:bf:56:d2:ab:23:ec:9a:78:43:cc:61:e2:9e: c0:ce:6c:c6:34:9f:d9:6c:97:21:1f:b6:9c:d9:cf:33:37:34: 86:a3:a1:e3:2e:ac:cd:dd:63:49:33:da:11:48:d5:0d:23:47: 3a:a7:84:51:7f:7b:34:88:dc:75:e3:9e:f4:cc:43:45:9b:a0: b3:0e:4d:9c:2b:97:f1:ae:4c:ee:01:02:84:5c:94:41:4f:75: 4d:76:ce:49:3b:53:ef:90:85:07:42:4d:b1:56:0b:ee:c4:d8: 24:34:97:4c:67:83:cf:46:af:db:9c:45:89:40:8e:d4:41:80: ea:82:93:f2:20:40:6f:fc:5c:2b:05:1a:73:46:62:76:29:e6: 9e:01:a1:ce:80:26:63:b0:3b:95:a5:bb:f2:3c:4e:bb:38:8a: b3:78:f1:05:95:78:74:d9:37:cd:cb:3b:8d:37:38:36:14:5e: 63:99:db:49:f0:cb:5d:bb:3e:ad:79:c0:8d:75:ba:b0:e8:e9: 49:fb:ec:3c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fimnNm429SbpfIycs0gaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi YTU3NDUwHhcNMjYwMTAxMTIxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzk0Y2E0NTM1NjQ1ODNkOWQyZmE5NGNlZjBiODQ4YzhjMDM0MGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6FXKxfI6rolcX64WthIVtPZCoo8x 6NSLiDU91MmlGw71GIAqDAVoCmsKUNDyYgto8rw1dKnw06vYr/sUd+JXDEmBIRL8 6q2FDSJk8unKQCgh7I25A5ZI4fZ7QheG3B0DyISlSwqXAmZ4YSN7umTI8hT+ueL/ WU15XFjhMlintwcVQ/jZ+cIeObq8mZVWyFnDOFC46ne30JAxAXUjt+Ox5RjnuCFQ cklrpgLTYDzBDlEh6TgV2sZsuDvqkeOsR1vLxh9tNK1Ik1O5//f3rdpiwBaOgduB /rIHFJrbq844iksVPuPp4DB5LvU5m0RMdClf7YMlOaAFVmEsRKMQvtM34QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDOUykU1ZFg9nS+pTO8LhIyMA0C/MB8GA1UdIwQY MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt ZmVhYzI2ZWFlY2MyLzEvTTVUS1JUVmtXRDJkTDZsTTd3dUVqSXdEUUw4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuY6NMA0G CSqGSIb3DQEBCwUAA4IBAQCAoRUrJ7OvVj08TipxbhdZyl30of4Y6ZO31PVM7t56 HePIECV1zNDSC9SOPa/wc8VkM5axNOYHE8R1KL9W0qsj7Jp4Q8xh4p7AzmzGNJ/Z bJchH7ac2c8zNzSGo6HjLqzN3WNJM9oRSNUNI0c6p4RRf3s0iNx14570zENFm6Cz Dk2cK5fxrkzuAQKEXJRBT3VNds5JO1PvkIUHQk2xVgvuxNgkNJdMZ4PPRq/bnEWJ QI7UQYDqgpPyIEBv/FwrBRpzRmJ2KeaeAaHOgCZjsDuVpbvyPE67OIqzePEFlXh0 2TfNyzuNNzg2FF5jmdtJ8Mtduz6tecCNdbqw6OlJ++w8 -----END CERTIFICATE-----Generated at Sat Jan 3 03:23:13 2026 by rpki-client