This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/15a7df-99b5-4a91-9bc7-d8a42f320eae/1/n5fGK8uQ1IXVs4gItqnXi96bOCA.roa File: n5fGK8uQ1IXVs4gItqnXi96bOCA.roa (raw, json) Hash identifier: 9Xe7j5MzjEYIo3j8TehBH8vYadVuml9WRHAXRG8x2oA= Subject key identifier: 9F:97:C6:2B:CB:90:D4:85:D5:B3:88:08:B6:A9:D7:8B:DE:9B:38:20 Certificate issuer: /CN=53a77fdfdd14c2df158ebfc2e6cfc2a279a648c1 Certificate serial: 019B7834D6E85E604CD9466BD7377CB9A866 Authority key identifier: 53:A7:7F:DF:DD:14:C2:DF:15:8E:BF:C2:E6:CF:C2:A2:79:A6:48:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U6d_390Uwt8Vjr_C5s_ConmmSME.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/15a7df-99b5-4a91-9bc7-d8a42f320eae/1/n5fGK8uQ1IXVs4gItqnXi96bOCA.roa Signing time: Thu 01 Jan 2026 06:18:07 +0000 ROA not before: Thu 01 Jan 2026 06:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211054 IP address blocks: 185.233.129.0/24 maxlen: 24 2a11:2c00::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/15a7df-99b5-4a91-9bc7-d8a42f320eae/1/U6d_390Uwt8Vjr_C5s_ConmmSME.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/15a7df-99b5-4a91-9bc7-d8a42f320eae/1/U6d_390Uwt8Vjr_C5s_ConmmSME.mft rsync://rpki.ripe.net/repository/DEFAULT/U6d_390Uwt8Vjr_C5s_ConmmSME.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:d6:e8:5e:60:4c:d9:46:6b:d7:37:7c:b9:a8:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53a77fdfdd14c2df158ebfc2e6cfc2a279a648c1 Validity Not Before: Jan 1 06:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f97c62bcb90d485d5b38808b6a9d78bde9b3820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:99:24:24:5c:9a:f7:70:58:c1:d6:eb:df:61: e2:92:97:5d:9b:50:aa:d9:13:42:7b:72:4d:f7:1a: c4:77:da:12:a8:71:2d:48:c1:83:ab:9b:31:94:01: 12:48:ae:a9:82:29:a7:f2:db:81:ad:d2:a2:89:76: b0:e8:99:98:86:e7:2e:2b:58:cc:69:73:f7:a5:1a: 27:c1:05:c0:c3:27:d0:22:70:55:fa:9f:1b:8f:9a: c6:a4:be:62:7f:dc:77:2b:b9:43:3f:fa:f1:87:71: da:38:ca:ed:71:02:79:29:35:29:d4:b2:8b:4c:83: 12:37:a5:42:32:d7:37:68:55:9c:29:0d:60:92:74: 0f:e6:97:fc:f7:90:cb:d5:c7:ac:f1:0f:81:18:3d: ad:8e:cf:2c:4e:c2:de:a1:24:57:b5:a3:79:89:7d: 61:4d:c7:a1:02:ea:81:de:ad:ff:b3:39:39:0d:6f: 36:d5:bc:9d:6c:58:bc:94:8d:cf:51:1d:f8:e2:8d: 82:2c:35:78:ac:c7:30:17:6a:55:48:63:cc:ce:7b: dc:2d:af:55:8f:cd:29:8d:2c:03:0e:d3:fd:26:54: fc:5c:df:d4:ab:d6:59:79:7e:19:e5:a6:ac:e3:21: f6:97:56:57:84:91:f4:40:02:97:56:b9:dd:d1:bd: 61:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:97:C6:2B:CB:90:D4:85:D5:B3:88:08:B6:A9:D7:8B:DE:9B:38:20 X509v3 Authority Key Identifier: keyid:53:A7:7F:DF:DD:14:C2:DF:15:8E:BF:C2:E6:CF:C2:A2:79:A6:48:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6d_390Uwt8Vjr_C5s_ConmmSME.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/15a7df-99b5-4a91-9bc7-d8a42f320eae/1/n5fGK8uQ1IXVs4gItqnXi96bOCA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/15a7df-99b5-4a91-9bc7-d8a42f320eae/1/U6d_390Uwt8Vjr_C5s_ConmmSME.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.233.129.0/24 IPv6: 2a11:2c00::/29 Signature Algorithm: sha256WithRSAEncryption 61:81:b4:cf:18:3a:23:03:38:6a:27:7a:9a:df:f6:dd:48:05: d1:d1:24:94:b6:fc:d9:b1:1d:d0:b7:ab:7e:9d:24:b6:06:23: 6c:1e:3a:77:b8:bc:37:cc:e6:9d:6e:70:11:89:c4:bc:2a:ee: b3:0e:35:9c:d0:71:a8:52:d4:e9:fb:37:c5:4c:96:f9:81:49: 89:f9:63:aa:45:7e:73:b1:2f:95:47:03:2e:ec:18:be:44:e0: 43:c4:f6:60:14:bc:00:20:e1:ab:90:03:4a:56:45:72:7b:7f: 8b:d1:f7:5d:ed:d2:2f:e3:f0:ed:7a:bf:54:fd:9d:9f:bf:8f: 2c:96:5c:ae:82:40:f5:42:d6:6e:03:a1:57:ef:86:b5:e7:60: ee:62:24:98:06:b9:e8:ef:34:a0:cd:65:0f:d5:be:87:4e:f3: 58:9d:dd:4f:68:d6:de:9d:6b:c4:70:33:1b:0e:6f:bd:de:cd: 55:07:f7:e3:45:44:d9:85:64:59:48:0b:21:d4:75:49:6f:b6: ae:b3:f9:58:2d:8e:f7:be:7c:71:78:45:96:2a:42:d0:57:46: 36:d2:ee:dd:69:cf:dd:8f:05:e4:61:be:ed:7f:ce:8b:0d:73: 84:70:44:e9:05:c1:3a:61:0b:40:9b:24:9d:1a:6e:18:6b:a0: c0:d2:96:5f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4NNboXmBM2UZr1zd8uahmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzYTc3ZmRmZGQxNGMyZGYxNThlYmZjMmU2Y2ZjMmEyNzlh NjQ4YzEwHhcNMjYwMTAxMDYxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Zjk3YzYyYmNiOTBkNDg1ZDViMzg4MDhiNmE5ZDc4YmRlOWIzODIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpkkJFya93BYwdbr32Hikpddm1Cq 2RNCe3JN9xrEd9oSqHEtSMGDq5sxlAESSK6pgimn8tuBrdKiiXaw6JmYhucuK1jM aXP3pRonwQXAwyfQInBV+p8bj5rGpL5if9x3K7lDP/rxh3HaOMrtcQJ5KTUp1LKL TIMSN6VCMtc3aFWcKQ1gknQP5pf895DL1ces8Q+BGD2tjs8sTsLeoSRXtaN5iX1h TcehAuqB3q3/szk5DW821bydbFi8lI3PUR344o2CLDV4rMcwF2pVSGPMznvcLa9V j80pjSwDDtP9JlT8XN/Uq9ZZeX4Z5aas4yH2l1ZXhJH0QAKXVrnd0b1hEQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJ+XxivLkNSF1bOICLap14vemzggMB8GA1UdIwQY MBaAFFOnf9/dFMLfFY6/wubPwqJ5pkjBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTZkXzM5MFV3dDhWanJfQzVzX0Nvbm1tU01FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8xNWE3ZGYtOTliNS00YTkxLTliYzct ZDhhNDJmMzIwZWFlLzEvbjVmR0s4dVExSVhWczRnSXRxblhpOTZiT0NBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi8xNWE3ZGYtOTliNS00YTkxLTliYzctZDhhNDJmMzIwZWFl LzEvVTZkXzM5MFV3dDhWanJfQzVzX0Nvbm1tU01FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuemBMA0E AgACMAcDBQMqESwAMA0GCSqGSIb3DQEBCwUAA4IBAQBhgbTPGDojAzhqJ3qa3/bd SAXR0SSUtvzZsR3Qt6t+nSS2BiNsHjp3uLw3zOadbnARicS8Ku6zDjWc0HGoUtTp +zfFTJb5gUmJ+WOqRX5zsS+VRwMu7Bi+ROBDxPZgFLwAIOGrkANKVkVye3+L0fdd 7dIv4/Dter9U/Z2fv48sllyugkD1QtZuA6FX74a152DuYiSYBrno7zSgzWUP1b6H TvNYnd1PaNbenWvEcDMbDm+93s1VB/fjRUTZhWRZSAsh1HVJb7aus/lYLY73vnxx eEWWKkLQV0Y20u7dac/djwXkYb7tf86LDXOEcETpBcE6YQtAmySdGm4Ya6DA0pZf -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:28 2026 by rpki-client