This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/0m0w4NNU4NOo-8_y3zxSZs-Hcdw.roa File: 0m0w4NNU4NOo-8_y3zxSZs-Hcdw.roa (raw, json) Hash identifier: d/QLJQ6M0z3RViK7W5MP6w1Y/VAa68ow0nmGzD8+98w= Subject key identifier: D2:6D:30:E0:D3:54:E0:D3:A8:FB:CF:F2:DF:3C:52:66:CF:87:71:DC Certificate issuer: /CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d Certificate serial: 019B78352555A3CBCD9FFA7D969057B9313D Authority key identifier: 5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/0m0w4NNU4NOo-8_y3zxSZs-Hcdw.roa Signing time: Thu 01 Jan 2026 06:18:27 +0000 ROA not before: Thu 01 Jan 2026 06:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57860 IP address blocks: 185.129.62.0/23 maxlen: 23 2a06:d380::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:25:55:a3:cb:cd:9f:fa:7d:96:90:57:b9:31:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d Validity Not Before: Jan 1 06:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d26d30e0d354e0d3a8fbcff2df3c5266cf8771dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:97:cc:3f:b5:3c:10:9a:8e:9a:77:a7:63:5a: 07:fa:e5:2e:54:2f:bd:3c:54:6d:c4:b0:70:c9:85: 1d:88:52:11:57:0e:2b:1d:47:e4:2a:cb:cf:45:9a: fd:c5:88:6c:34:dc:35:c2:48:64:1d:ca:76:f6:2a: 59:93:bf:45:a7:07:09:a2:f3:2e:f2:11:3f:77:b6: b7:bb:6c:0f:1c:8b:71:af:68:cc:b6:e7:cc:d7:d9: c0:a8:06:4c:47:a8:a5:0a:75:e7:93:8d:4a:9c:80: 0e:25:a9:8f:d6:17:bd:2a:a0:70:01:b4:28:0b:88: 17:76:e6:32:8e:7c:02:02:8e:fe:3f:e0:56:95:bf: 6a:c9:89:fc:94:00:91:77:20:cd:7f:a3:54:a9:c0: 50:39:7b:ab:85:1e:7e:fd:84:12:df:bd:c8:84:11: b9:95:5b:8f:b7:1e:e9:8c:5d:04:f6:c9:21:27:13: 80:b6:26:60:72:0f:5e:51:7c:a5:92:dd:ee:1a:c2: 78:8c:9d:6c:cf:5e:cf:94:08:eb:3f:08:59:6d:a2: 1a:83:50:52:f5:d8:d9:30:27:18:0d:c8:89:8c:0a: 79:9b:66:e8:ae:e1:2b:4f:05:82:5e:19:9f:1c:f6: 38:04:4e:5f:c3:1b:20:09:78:ce:6c:1a:40:64:ce: 97:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:6D:30:E0:D3:54:E0:D3:A8:FB:CF:F2:DF:3C:52:66:CF:87:71:DC X509v3 Authority Key Identifier: keyid:5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/0m0w4NNU4NOo-8_y3zxSZs-Hcdw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.129.62.0/23 IPv6: 2a06:d380::/29 Signature Algorithm: sha256WithRSAEncryption 4e:23:2c:eb:ac:62:42:ec:36:e2:0b:f8:04:ad:b0:4c:b5:5f: e6:52:a7:f4:97:a7:5a:a6:ed:9a:63:67:1f:4e:06:7b:ec:b2: 9f:1c:ac:6b:42:4b:aa:51:0b:a3:ab:d4:75:8f:fd:d3:d3:c4: 99:bc:df:b5:b8:34:73:8a:ce:da:40:5f:8a:92:8f:63:53:91: 35:e0:f5:fb:f1:87:11:71:1b:44:86:f1:47:5e:fa:eb:8a:b9: ce:bb:4a:b1:6a:93:68:6b:e6:a0:38:e8:5e:cc:34:47:9a:9c: c4:13:23:20:de:cb:6b:68:c8:f5:e8:d4:6e:29:54:87:2f:d0: 43:d1:01:de:63:59:8a:1b:f5:f5:21:0e:09:c4:a3:1e:b0:80: f7:74:90:85:99:70:7e:e1:fa:f7:e1:4c:a9:5c:c7:42:23:2b: 2d:b1:7e:35:58:ae:a4:0f:00:5c:9c:36:75:5b:e7:b6:63:3b: 90:78:af:2d:fe:58:93:08:52:83:40:9b:0a:94:39:3a:10:a4: 7f:f8:65:51:78:61:03:b9:a8:87:1a:ca:98:19:04:5e:28:c4: dc:f5:52:4f:19:79:0d:4c:7e:04:01:ae:c5:57:af:04:11:07: e4:bc:df:66:29:da:9c:a0:ec:05:86:36:34:32:69:b9:31:c4: 9a:eb:6c:ea -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4NSVVo8vNn/p9lpBXuTE9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDIzYzdhYzZlNjgyZmJjNTNiZTFhMGU5MzE4ZjZjY2Fl NzE5M2QwHhcNMjYwMTAxMDYxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjZkMzBlMGQzNTRlMGQzYThmYmNmZjJkZjNjNTI2NmNmODc3MWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5fMP7U8EJqOmnenY1oH+uUuVC+9 PFRtxLBwyYUdiFIRVw4rHUfkKsvPRZr9xYhsNNw1wkhkHcp29ipZk79FpwcJovMu 8hE/d7a3u2wPHItxr2jMtufM19nAqAZMR6ilCnXnk41KnIAOJamP1he9KqBwAbQo C4gXduYyjnwCAo7+P+BWlb9qyYn8lACRdyDNf6NUqcBQOXurhR5+/YQS373IhBG5 lVuPtx7pjF0E9skhJxOAtiZgcg9eUXylkt3uGsJ4jJ1sz17PlAjrPwhZbaIag1BS 9djZMCcYDciJjAp5m2boruErTwWCXhmfHPY4BE5fwxsgCXjObBpAZM6XeQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFNJtMODTVODTqPvP8t88UmbPh3HcMB8GA1UdIwQY MBaAFF3SPHrG5oL7xTvhoOkxj2zK5xk9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRJOGVzYm1ndnZGTy1HZzZUR1BiTXJuR1QwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9hNDJlOWMtZDkyZC00YjIwLWE1ZWIt ZWJlMjMzMmNhZjFjLzEvMG0wdzROTlU0Tk9vLThfeTN6eFNacy1IY2R3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9hNDJlOWMtZDkyZC00YjIwLWE1ZWItZWJlMjMzMmNhZjFj LzEvWGRJOGVzYm1ndnZGTy1HZzZUR1BiTXJuR1QwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBuYE+MA0E AgACMAcDBQMqBtOAMA0GCSqGSIb3DQEBCwUAA4IBAQBOIyzrrGJC7DbiC/gErbBM tV/mUqf0l6dapu2aY2cfTgZ77LKfHKxrQkuqUQujq9R1j/3T08SZvN+1uDRzis7a QF+Kko9jU5E14PX78YcRcRtEhvFHXvrrirnOu0qxapNoa+agOOhezDRHmpzEEyMg 3straMj16NRuKVSHL9BD0QHeY1mKG/X1IQ4JxKMesID3dJCFmXB+4fr34UypXMdC IystsX41WK6kDwBcnDZ1W+e2YzuQeK8t/liTCFKDQJsKlDk6EKR/+GVReGEDuaiH GsqYGQReKMTc9VJPGXkNTH4EAa7FV68EEQfkvN9mKdqcoOwFhjY0Mmm5McSa62zq -----END CERTIFICATE-----Generated at Tue Feb 10 08:36:52 2026 by rpki-client