This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/1OlpkuQpAVvITqIzbJCzHhbZuaY.roa File: 1OlpkuQpAVvITqIzbJCzHhbZuaY.roa (raw, json) Hash identifier: 3R+s0povuTwLbXStSvGlYnJbOVvmE0QK+nYMWxPdz1U= Subject key identifier: D4:E9:69:92:E4:29:01:5B:C8:4E:A2:33:6C:90:B3:1E:16:D9:B9:A6 Certificate issuer: /CN=43594e55dc96cb9b980a52aa637e48a8d87389c0 Certificate serial: 019B79104F73FFAD58B16B327E9B6D0BBC8C Authority key identifier: 43:59:4E:55:DC:96:CB:9B:98:0A:52:AA:63:7E:48:A8:D8:73:89:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1lOVdyWy5uYClKqY35IqNhzicA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/1OlpkuQpAVvITqIzbJCzHhbZuaY.roa Signing time: Thu 01 Jan 2026 10:17:50 +0000 ROA not before: Thu 01 Jan 2026 10:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35193 IP address blocks: 5.145.120.0/21 maxlen: 21 5.145.120.0/24 maxlen: 24 5.145.121.0/24 maxlen: 24 5.145.122.0/23 maxlen: 23 5.145.124.0/22 maxlen: 22 85.239.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.mft rsync://rpki.ripe.net/repository/DEFAULT/Q1lOVdyWy5uYClKqY35IqNhzicA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:4f:73:ff:ad:58:b1:6b:32:7e:9b:6d:0b:bc:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43594e55dc96cb9b980a52aa637e48a8d87389c0 Validity Not Before: Jan 1 10:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d4e96992e429015bc84ea2336c90b31e16d9b9a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ea:c6:3d:83:92:01:92:45:be:16:4e:7c:98: 5b:1c:db:33:ed:ff:30:c7:c1:1d:d9:c3:9b:1a:d0: 98:b4:2e:6b:b8:c4:61:06:d3:db:a6:dd:08:ac:9a: 8f:bb:a5:86:43:58:6f:05:66:89:80:54:81:46:a6: 93:4a:7c:c8:e2:25:51:c3:c1:a9:48:bb:e4:d0:3a: 71:45:43:a4:bd:5d:d0:4a:a9:c0:ca:47:21:61:54: 8e:e4:5f:53:71:69:c3:41:72:cd:23:c4:a9:d3:a3: f1:d6:8a:6a:fb:a0:57:19:6d:c6:1f:3a:47:4b:b7: a7:9e:ff:3e:e5:56:5f:10:bb:9e:4f:4c:99:cf:75: 04:af:d4:39:b8:2e:ba:54:90:c2:84:94:b8:cd:3f: 3d:f8:78:1f:38:fa:5f:2c:da:0e:93:9e:ec:4e:13: e6:99:b4:04:e9:4f:a7:28:a0:ff:d8:6c:30:ca:ab: 53:e0:77:76:00:28:bd:f8:3f:43:4a:8e:80:10:a6: 8b:b1:1a:3b:b3:2f:69:17:9d:44:f4:6c:2b:f6:4e: 0f:9e:ee:e5:c2:a5:83:c0:03:3a:92:9e:ad:23:ee: a9:c7:a2:d8:3e:4c:13:a9:f2:d2:9c:5b:75:d9:57: 31:22:1d:44:0f:74:2d:c2:23:a8:e4:f7:62:a4:23: fe:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:E9:69:92:E4:29:01:5B:C8:4E:A2:33:6C:90:B3:1E:16:D9:B9:A6 X509v3 Authority Key Identifier: keyid:43:59:4E:55:DC:96:CB:9B:98:0A:52:AA:63:7E:48:A8:D8:73:89:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1lOVdyWy5uYClKqY35IqNhzicA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/1OlpkuQpAVvITqIzbJCzHhbZuaY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.145.120.0/21 85.239.160.0/19 Signature Algorithm: sha256WithRSAEncryption 0d:b5:1d:9d:3d:42:5b:aa:b0:ca:66:c3:17:1a:dc:21:1a:04: a3:8f:fe:91:23:eb:ef:b7:75:b6:c2:4e:81:f0:2a:9e:9c:ac: 2d:ba:b2:21:a2:6d:12:33:8e:4e:30:fb:93:4c:a5:a1:b0:4e: f1:45:fc:37:75:2b:d0:f0:7b:46:98:c5:9a:56:fa:0a:55:c8: 22:8c:97:2c:bc:4c:f4:3d:e7:b3:e9:60:bc:87:b5:2e:4f:37: 2c:85:6b:2b:2f:11:a5:08:f9:bf:72:85:37:cf:25:3c:95:7c: 15:6e:28:21:d9:7f:d9:14:14:be:12:17:8c:14:86:40:d6:91: 7b:61:85:0f:b8:9e:6e:99:4a:ee:16:9e:c4:9b:af:c0:f9:81: 78:f7:f3:2b:75:74:55:3b:81:a9:6b:df:ca:11:e5:c2:1d:90: 6e:a9:01:00:3a:37:d7:44:05:5b:91:d4:ea:6b:64:81:6a:8f: 4c:31:30:47:d0:f2:3a:fb:2a:3c:8e:98:1d:20:73:ea:71:c2: f3:16:ef:4f:00:64:33:48:a4:f9:1e:83:9d:5f:50:cb:24:a3: b5:fe:76:81:99:42:f3:b5:1d:52:71:31:9d:ac:e9:20:c3:8c: 7e:18:ff:e5:7e:91:5b:d0:2f:83:ac:bf:0b:f6:b4:af:fa:26: 2e:8f:5e:09 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EE9z/61YsWsyfpttC7yMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzNTk0ZTU1ZGM5NmNiOWI5ODBhNTJhYTYzN2U0OGE4ZDg3 Mzg5YzAwHhcNMjYwMTAxMTAxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNGU5Njk5MmU0MjkwMTViYzg0ZWEyMzM2YzkwYjMxZTE2ZDliOWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+rGPYOSAZJFvhZOfJhbHNsz7f8w x8Ed2cObGtCYtC5ruMRhBtPbpt0IrJqPu6WGQ1hvBWaJgFSBRqaTSnzI4iVRw8Gp SLvk0DpxRUOkvV3QSqnAykchYVSO5F9TcWnDQXLNI8Sp06Px1opq+6BXGW3GHzpH S7ennv8+5VZfELueT0yZz3UEr9Q5uC66VJDChJS4zT89+HgfOPpfLNoOk57sThPm mbQE6U+nKKD/2GwwyqtT4Hd2ACi9+D9DSo6AEKaLsRo7sy9pF51E9Gwr9k4Pnu7l wqWDwAM6kp6tI+6px6LYPkwTqfLSnFt12VcxIh1ED3QtwiOo5PdipCP+HQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNTpaZLkKQFbyE6iM2yQsx4W2bmmMB8GA1UdIwQY MBaAFENZTlXclsubmApSqmN+SKjYc4nAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTFsT1ZkeVd5NXVZQ2xLcVkzNUlxTmh6aWNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84NWUxMjUtODVkNi00M2YwLTk4YmYt ZDhmYTBlZGEzYWJlLzEvMU9scGt1UXBBVnZJVHFJemJKQ3pIaGJadWFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS84NWUxMjUtODVkNi00M2YwLTk4YmYtZDhmYTBlZGEzYWJl LzEvUTFsT1ZkeVd5NXVZQ2xLcVkzNUlxTmh6aWNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDBZF4AwQF Ve+gMA0GCSqGSIb3DQEBCwUAA4IBAQANtR2dPUJbqrDKZsMXGtwhGgSjj/6RI+vv t3W2wk6B8CqenKwturIhom0SM45OMPuTTKWhsE7xRfw3dSvQ8HtGmMWaVvoKVcgi jJcsvEz0Peez6WC8h7UuTzcshWsrLxGlCPm/coU3zyU8lXwVbigh2X/ZFBS+EheM FIZA1pF7YYUPuJ5umUruFp7Em6/A+YF49/MrdXRVO4Gpa9/KEeXCHZBuqQEAOjfX RAVbkdTqa2SBao9MMTBH0PI6+yo8jpgdIHPqccLzFu9PAGQzSKT5HoOdX1DLJKO1 /naBmULztR1ScTGdrOkgw4x+GP/lfpFb0C+DrL8L9rSv+iYuj14J -----END CERTIFICATE-----Generated at Mon Feb 9 20:10:20 2026 by rpki-client