This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/5XG7VoRUtaZiXlcoewj2e7C6mE0.roa File: 5XG7VoRUtaZiXlcoewj2e7C6mE0.roa (raw, json) Hash identifier: T89z8ZeY6iemMOK8ha2ziT113fQVxJiB+M90DtDTEhU= Subject key identifier: E5:71:BB:56:84:54:B5:A6:62:5E:57:28:7B:08:F6:7B:B0:BA:98:4D Certificate issuer: /CN=10eedc33aa442907189f0b3c563836951fb185bb Certificate serial: 019C28AECCBBFE91255429657F26289DB019 Authority key identifier: 10:EE:DC:33:AA:44:29:07:18:9F:0B:3C:56:38:36:95:1F:B1:85:BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/5XG7VoRUtaZiXlcoewj2e7C6mE0.roa Signing time: Wed 04 Feb 2026 12:44:30 +0000 ROA not before: Wed 04 Feb 2026 12:44:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51142 IP address blocks: 185.165.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:28:ae:cc:bb:fe:91:25:54:29:65:7f:26:28:9d:b0:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10eedc33aa442907189f0b3c563836951fb185bb Validity Not Before: Feb 4 12:44:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e571bb568454b5a6625e57287b08f67bb0ba984d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ad:26:af:37:0e:43:83:a9:bd:78:99:9b:8c: 97:93:da:24:ea:da:e3:2d:29:a8:39:94:b2:4c:f4: 12:5c:2b:7e:f6:6e:ca:68:69:3a:69:6a:cc:33:41: 54:db:f0:18:21:51:5e:36:f5:41:fe:49:e8:2f:17: b4:b7:18:ed:2b:d4:0a:6e:19:b3:18:90:bb:8e:4f: 93:98:c8:ed:f4:2b:f3:61:dc:e5:1c:81:08:77:55: 76:66:e7:93:58:b7:77:c8:dd:3d:0a:3e:08:37:f3: 6e:76:b0:50:30:9a:57:41:99:62:a3:dd:22:ec:76: 4e:4f:94:e5:fe:fd:b2:1d:a0:f5:df:7f:11:21:3b: b7:2e:b9:32:d1:7c:ce:ab:ad:26:ff:0c:a7:b6:60: 90:23:02:10:0f:ef:26:d0:c0:15:70:3b:8a:77:85: c1:68:a2:9f:e3:dc:a2:b3:47:bb:db:88:90:3f:9e: 30:a8:88:6e:c8:aa:7b:2f:96:9f:6d:fa:70:e5:f1: f4:75:72:5a:b2:28:f9:85:4f:87:8e:52:7a:c2:df: 79:4f:3d:69:72:ae:ce:a2:fd:89:08:c8:84:3b:e6: 82:cf:07:df:62:36:bb:4a:43:32:e6:17:6b:9d:ee: ec:28:7f:5c:fb:ca:12:6d:e5:18:ff:11:60:35:13: cd:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:71:BB:56:84:54:B5:A6:62:5E:57:28:7B:08:F6:7B:B0:BA:98:4D X509v3 Authority Key Identifier: keyid:10:EE:DC:33:AA:44:29:07:18:9F:0B:3C:56:38:36:95:1F:B1:85:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/5XG7VoRUtaZiXlcoewj2e7C6mE0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.165.222.0/24 Signature Algorithm: sha256WithRSAEncryption 90:6f:7f:b5:14:da:9c:2b:36:a9:0b:e7:6b:1d:ec:e9:c8:32: 8b:cc:ed:2a:57:a3:e4:36:d9:5e:80:92:aa:17:c1:cc:3e:f4: 3a:fd:1b:eb:60:4b:fa:18:69:39:56:47:6b:8a:07:4f:cb:8f: 58:3a:91:94:d0:f2:02:fb:1f:e4:92:f3:48:51:b4:f8:fc:06: be:46:26:0c:c3:71:1c:72:bc:e2:90:c6:68:e9:cd:02:18:12: 98:77:18:d8:ce:a6:89:1c:40:af:26:58:e9:cb:b8:15:25:78: 44:a0:d8:9f:6c:49:8b:b1:f1:a0:38:f1:d7:f9:99:da:e7:81: 62:a7:0c:52:8b:fd:58:98:0d:cc:eb:52:4d:23:2c:95:18:2c: 8f:a1:38:1e:5e:7e:59:95:05:9c:dc:78:93:6d:20:96:34:ce: 0c:3a:f5:a6:7e:03:47:f5:32:30:59:de:e9:cf:47:a0:6b:38: 9a:0e:06:18:23:4d:3c:35:d6:a5:0e:b6:e0:4f:e0:90:d2:88: bd:c4:11:d7:c9:11:ff:74:9f:74:12:98:63:96:77:c9:19:9a: e1:d1:a3:ba:81:33:36:59:9f:81:c4:a5:9c:08:98:01:04:e1: 7e:ca:03:72:50:05:74:55:03:dd:8c:cb:42:d1:87:77:02:9a: 46:41:1d:96 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZworsy7/pElVCllfyYonbAZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwZWVkYzMzYWE0NDI5MDcxODlmMGIzYzU2MzgzNjk1MWZi MTg1YmIwHhcNMjYwMjA0MTI0NDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTcxYmI1Njg0NTRiNWE2NjI1ZTU3Mjg3YjA4ZjY3YmIwYmE5ODRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmq0mrzcOQ4OpvXiZm4yXk9ok6trj LSmoOZSyTPQSXCt+9m7KaGk6aWrMM0FU2/AYIVFeNvVB/knoLxe0txjtK9QKbhmz GJC7jk+TmMjt9CvzYdzlHIEId1V2ZueTWLd3yN09Cj4IN/NudrBQMJpXQZlio90i 7HZOT5Tl/v2yHaD1338RITu3Lrky0XzOq60m/wyntmCQIwIQD+8m0MAVcDuKd4XB aKKf49yis0e724iQP54wqIhuyKp7L5afbfpw5fH0dXJasij5hU+HjlJ6wt95Tz1p cq7Oov2JCMiEO+aCzwffYja7SkMy5hdrne7sKH9c+8oSbeUY/xFgNRPNqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOVxu1aEVLWmYl5XKHsI9nuwuphNMB8GA1UdIwQY MBaAFBDu3DOqRCkHGJ8LPFY4NpUfsYW7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRU83Y002cEVLUWNZbndzOFZqZzJsUi14aGJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy81NDZjN2UtZDg0MC00ZTU0LTkyMjMt NTM0ZWJlZWYzMzg5LzEvNVhHN1ZvUlV0YVppWGxjb2V3ajJlN0M2bUUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy81NDZjN2UtZDg0MC00ZTU0LTkyMjMtNTM0ZWJlZWYzMzg5 LzEvRU83Y002cEVLUWNZbndzOFZqZzJsUi14aGJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaXeMA0G CSqGSIb3DQEBCwUAA4IBAQCQb3+1FNqcKzapC+drHezpyDKLzO0qV6PkNtlegJKq F8HMPvQ6/RvrYEv6GGk5VkdrigdPy49YOpGU0PIC+x/kkvNIUbT4/Aa+RiYMw3Ec crzikMZo6c0CGBKYdxjYzqaJHECvJljpy7gVJXhEoNifbEmLsfGgOPHX+Zna54Fi pwxSi/1YmA3M61JNIyyVGCyPoTgeXn5ZlQWc3HiTbSCWNM4MOvWmfgNH9TIwWd7p z0egaziaDgYYI008NdalDrbgT+CQ0oi9xBHXyRH/dJ90EphjlnfJGZrh0aO6gTM2 WZ+BxKWcCJgBBOF+ygNyUAV0VQPdjMtC0Yd3AppGQR2W -----END CERTIFICATE-----Generated at Mon Feb 9 22:32:00 2026 by rpki-client