This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/5z8EHLNlOMTaqhnq-7mzsrklHBA.roa File: 5z8EHLNlOMTaqhnq-7mzsrklHBA.roa (raw, json) Hash identifier: 2JlTQ4KJ6TRtRR53AGoqYj2XNX1lPxwhYUuY7T8Bgtk= Subject key identifier: E7:3F:04:1C:B3:65:38:C4:DA:AA:19:EA:FB:B9:B3:B2:B9:25:1C:10 Certificate issuer: /CN=83876bfbb5ae8cfe116bb5f5f2864a116213aa4f Certificate serial: 019B76EB4B0B61446DB9892C6FD393BEB06F Authority key identifier: 83:87:6B:FB:B5:AE:8C:FE:11:6B:B5:F5:F2:86:4A:11:62:13:AA:4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4dr-7WujP4Ra7X18oZKEWITqk8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/5z8EHLNlOMTaqhnq-7mzsrklHBA.roa Signing time: Thu 01 Jan 2026 00:18:10 +0000 ROA not before: Thu 01 Jan 2026 00:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207520 IP address blocks: 185.211.40.0/24 maxlen: 24 188.116.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.mft rsync://rpki.ripe.net/repository/DEFAULT/g4dr-7WujP4Ra7X18oZKEWITqk8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:4b:0b:61:44:6d:b9:89:2c:6f:d3:93:be:b0:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83876bfbb5ae8cfe116bb5f5f2864a116213aa4f Validity Not Before: Jan 1 00:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e73f041cb36538c4daaa19eafbb9b3b2b9251c10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:47:37:54:fa:6d:f3:66:18:d9:b8:ef:d0:c7: 85:0f:38:3a:66:18:e9:64:02:8e:e8:95:0c:9a:38: e1:92:3c:cd:c6:d8:a5:ca:c8:f6:eb:e9:cb:6c:67: 69:63:12:24:f5:3c:8a:d5:d9:5f:29:c9:6d:4f:ea: db:ae:57:a8:05:6f:b9:2e:38:3d:a7:ac:ba:a7:29: 3d:94:fd:a1:23:19:35:6b:7a:90:95:98:06:2f:04: 33:7a:cb:c0:bd:4d:91:dd:57:03:99:5f:b6:b3:ad: b1:f5:ba:06:01:eb:31:11:8a:08:fc:df:0d:55:fc: af:4e:64:9e:74:b2:9a:90:a4:d4:5a:3f:cf:3e:4a: f0:40:2b:96:75:db:f1:e3:6d:2e:e7:da:af:27:f4: 45:33:e5:2e:66:6e:a8:96:0f:21:ea:1a:76:d5:f0: 79:89:f1:fa:26:56:4d:9e:dc:e7:e6:59:59:42:ff: 8d:21:42:ff:56:dd:86:14:c3:8e:b2:c6:99:f0:bd: 87:5b:46:5d:b6:2f:77:79:9a:0c:ef:0b:8f:95:44: 88:4b:bd:6a:8e:0b:66:ec:46:c6:c2:66:85:18:3c: ad:43:84:38:db:3c:10:6d:fa:02:ca:9e:de:d6:67: 25:fe:aa:e9:98:f1:7a:1c:b1:8b:db:dc:6c:0e:f8: ea:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:3F:04:1C:B3:65:38:C4:DA:AA:19:EA:FB:B9:B3:B2:B9:25:1C:10 X509v3 Authority Key Identifier: keyid:83:87:6B:FB:B5:AE:8C:FE:11:6B:B5:F5:F2:86:4A:11:62:13:AA:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4dr-7WujP4Ra7X18oZKEWITqk8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/5z8EHLNlOMTaqhnq-7mzsrklHBA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.211.40.0/24 188.116.41.0/24 Signature Algorithm: sha256WithRSAEncryption 83:3c:d3:27:b2:ee:f9:11:e0:57:38:e7:9d:77:2c:61:43:f7: e2:e4:85:6e:0b:45:da:f5:41:61:77:86:87:4f:c7:42:83:9b: ff:a7:dc:16:95:9f:83:6d:f2:4f:9f:c4:37:e1:bf:be:a9:7b: 1c:ba:a5:33:de:21:f1:a8:6d:26:79:0f:3b:1e:af:0b:bf:9d: b6:d9:2f:4e:10:5b:d6:ff:56:5e:0e:51:a4:1d:48:c2:06:25: 56:7a:3b:7e:9b:24:b8:70:2b:67:0c:76:e1:94:e1:d7:63:25: 91:0d:6a:79:c8:9e:a4:d7:0c:7b:ba:9a:bd:0a:42:32:e1:a2: da:fa:2a:1d:b6:2b:65:ca:9c:9f:4b:62:d2:77:67:68:09:d7: c3:e0:35:d1:60:93:8f:22:23:75:98:1f:9e:1d:4f:fb:a4:90: 1a:c1:26:c7:27:35:ad:5d:85:31:13:90:6f:b0:56:69:78:3d: 21:fd:61:03:38:d3:f1:34:ee:d2:b2:45:a0:bb:e2:1a:6c:cf: 0b:df:97:1c:6c:f3:04:e9:64:2e:0d:2d:74:32:50:02:d8:59: 7b:9d:2f:96:1f:1c:ac:be:cf:17:63:f7:55:08:ed:79:c5:f8: a7:c5:fb:fd:9e:87:b6:94:f3:02:f9:f6:e0:bc:07:bb:23:01: fd:26:55:60 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt260sLYURtuYksb9OTvrBvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzODc2YmZiYjVhZThjZmUxMTZiYjVmNWYyODY0YTExNjIx M2FhNGYwHhcNMjYwMTAxMDAxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzNmMDQxY2IzNjUzOGM0ZGFhYTE5ZWFmYmI5YjNiMmI5MjUxYzEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukc3VPpt82YY2bjv0MeFDzg6Zhjp ZAKO6JUMmjjhkjzNxtilysj26+nLbGdpYxIk9TyK1dlfKcltT+rbrleoBW+5Ljg9 p6y6pyk9lP2hIxk1a3qQlZgGLwQzesvAvU2R3VcDmV+2s62x9boGAesxEYoI/N8N VfyvTmSedLKakKTUWj/PPkrwQCuWddvx420u59qvJ/RFM+UuZm6olg8h6hp21fB5 ifH6JlZNntzn5llZQv+NIUL/Vt2GFMOOssaZ8L2HW0Zdti93eZoM7wuPlUSIS71q jgtm7EbGwmaFGDytQ4Q42zwQbfoCyp7e1mcl/qrpmPF6HLGL29xsDvjq2wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOc/BByzZTjE2qoZ6vu5s7K5JRwQMB8GA1UdIwQY MBaAFIOHa/u1roz+EWu19fKGShFiE6pPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzRkci03V3VqUDRSYTdYMThvWktFV0lUcWs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS80MmJkNWQtNGMzZS00M2Y0LWE4NTct N2U3MDlhZjA1N2Q1LzEvNXo4RUhMTmxPTVRhcWhucS03bXpzcmtsSEJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS80MmJkNWQtNGMzZS00M2Y0LWE4NTctN2U3MDlhZjA1N2Q1 LzEvZzRkci03V3VqUDRSYTdYMThvWktFV0lUcWs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAudMoAwQA vHQpMA0GCSqGSIb3DQEBCwUAA4IBAQCDPNMnsu75EeBXOOeddyxhQ/fi5IVuC0Xa 9UFhd4aHT8dCg5v/p9wWlZ+DbfJPn8Q34b++qXscuqUz3iHxqG0meQ87Hq8Lv522 2S9OEFvW/1ZeDlGkHUjCBiVWejt+myS4cCtnDHbhlOHXYyWRDWp5yJ6k1wx7upq9 CkIy4aLa+iodtitlypyfS2LSd2doCdfD4DXRYJOPIiN1mB+eHU/7pJAawSbHJzWt XYUxE5BvsFZpeD0h/WEDONPxNO7SskWgu+IabM8L35ccbPME6WQuDS10MlAC2Fl7 nS+WHxysvs8XY/dVCO15xfinxfv9noe2lPMC+fbgvAe7IwH9JlVg -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:29 2026 by rpki-client