This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/sdkPwBAzXT8V1hVHIyJeK_vXL5w.roa File: sdkPwBAzXT8V1hVHIyJeK_vXL5w.roa (raw, json) Hash identifier: 3O67CS2riHupZNulhyVmJc5RtCecgenRYd/XninEIbg= Subject key identifier: B1:D9:0F:C0:10:33:5D:3F:15:D6:15:47:23:22:5E:2B:FB:D7:2F:9C Certificate issuer: /CN=3072cd5df7323957ab87c07f5cdd15c91effc8d5 Certificate serial: 019BF1E40382DF7276D369CD2EDD1281FD37 Authority key identifier: 30:72:CD:5D:F7:32:39:57:AB:87:C0:7F:5C:DD:15:C9:1E:FF:C8:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/sdkPwBAzXT8V1hVHIyJeK_vXL5w.roa Signing time: Sat 24 Jan 2026 21:23:30 +0000 ROA not before: Sat 24 Jan 2026 21:23:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57935 IP address blocks: 5.61.26.0/24 maxlen: 24 5.61.27.0/24 maxlen: 24 92.119.56.0/24 maxlen: 24 92.119.59.0/24 maxlen: 24 185.73.113.0/24 maxlen: 24 185.73.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f1:e4:03:82:df:72:76:d3:69:cd:2e:dd:12:81:fd:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3072cd5df7323957ab87c07f5cdd15c91effc8d5 Validity Not Before: Jan 24 21:23:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b1d90fc010335d3f15d6154723225e2bfbd72f9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:70:7e:27:d9:3e:5a:53:46:19:45:49:7c:8b: ab:65:90:dd:e5:89:1a:b8:66:33:2f:eb:73:a6:bd: a1:04:8d:b3:24:53:e0:62:93:35:89:69:db:43:7c: 09:ae:27:af:bd:d4:e2:0e:cc:ff:c6:ac:41:6c:e9: 93:cc:3e:6a:89:72:be:63:70:ca:d3:93:77:60:c8: 87:da:11:23:90:da:91:b4:30:b4:88:bf:bd:62:70: 88:99:ca:89:cc:20:3c:17:2d:4e:60:04:cb:0d:8f: 8e:6e:b8:0b:04:3d:e4:38:32:3c:6a:98:2f:e7:2a: 75:27:72:a9:0b:ee:cc:fd:e0:9b:c4:b2:b0:f2:8b: 76:7b:9f:78:5c:bf:60:29:50:e1:f8:5f:aa:79:2f: 0f:61:22:6f:f2:67:a5:d5:f5:d5:cc:a3:0e:a0:a9: ed:5f:98:b7:15:9d:85:82:5d:f2:54:6a:cd:a0:3a: 91:47:a8:4e:eb:fc:b9:57:1f:b2:51:4c:97:05:8a: 4d:61:36:7a:5b:f1:90:02:fb:5e:11:8e:a1:27:73: 33:10:55:15:26:3a:06:7b:3e:ab:a2:fb:4a:ae:8a: 22:b7:f9:47:63:11:77:b3:c2:24:0f:b0:22:ce:62: 74:e3:c4:d2:7c:e7:0d:d9:a1:90:9e:c3:df:86:87: 9d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:D9:0F:C0:10:33:5D:3F:15:D6:15:47:23:22:5E:2B:FB:D7:2F:9C X509v3 Authority Key Identifier: keyid:30:72:CD:5D:F7:32:39:57:AB:87:C0:7F:5C:DD:15:C9:1E:FF:C8:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/sdkPwBAzXT8V1hVHIyJeK_vXL5w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.61.26.0/23 92.119.56.0/24 92.119.59.0/24 185.73.113.0/24 185.73.115.0/24 Signature Algorithm: sha256WithRSAEncryption 25:f5:69:f3:c2:e8:28:c6:b2:da:5f:30:fd:f9:7a:e4:9f:1e: fc:9e:38:62:93:26:84:bc:c7:99:22:f7:71:dd:b0:9b:6b:b9: 2a:a8:c5:b7:ff:bd:f2:b3:78:e7:fe:72:20:bf:ab:cf:3b:cc: ee:74:6c:b9:46:52:51:8d:b5:c6:3b:b6:59:7a:f1:76:7f:27: d2:3d:e3:b0:d4:14:b5:7d:e1:b0:1f:a3:cf:bf:a8:91:d2:4c: 3e:6c:70:10:f1:8f:d1:a7:f1:d7:07:a2:be:42:ef:c0:0e:6e: e1:72:6a:14:f9:51:e6:e4:79:47:7f:11:0f:46:e0:21:86:b0: 4c:54:1b:a3:d9:f6:59:d5:b7:28:0d:eb:a1:f2:2b:87:83:44: 4c:68:13:27:d0:38:86:c8:d1:81:9b:57:42:1e:4f:5e:0f:67: c5:bc:07:36:d0:13:c8:cf:78:b4:6b:d8:7f:e2:e2:cb:5a:a4: 37:89:2d:c9:db:b7:dc:08:61:70:b8:11:6a:24:1a:04:c4:16: 17:13:4f:61:a9:1d:11:70:5b:45:9a:63:a5:ae:37:17:5a:8e: ac:c3:7b:c6:ff:54:74:94:79:e4:25:86:6e:cf:a1:35:57:2b: c2:2f:bb:0e:e3:6f:d1:65:48:d0:85:87:46:05:da:19:5c:aa: e0:65:c6:2b -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZvx5AOC33J202nNLt0Sgf03MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNzJjZDVkZjczMjM5NTdhYjg3YzA3ZjVjZGQxNWM5MWVm ZmM4ZDUwHhcNMjYwMTI0MjEyMzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMWQ5MGZjMDEwMzM1ZDNmMTVkNjE1NDcyMzIyNWUyYmZiZDcyZjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXB+J9k+WlNGGUVJfIurZZDd5Yka uGYzL+tzpr2hBI2zJFPgYpM1iWnbQ3wJrievvdTiDsz/xqxBbOmTzD5qiXK+Y3DK 05N3YMiH2hEjkNqRtDC0iL+9YnCImcqJzCA8Fy1OYATLDY+ObrgLBD3kODI8apgv 5yp1J3KpC+7M/eCbxLKw8ot2e594XL9gKVDh+F+qeS8PYSJv8mel1fXVzKMOoKnt X5i3FZ2Fgl3yVGrNoDqRR6hO6/y5Vx+yUUyXBYpNYTZ6W/GQAvteEY6hJ3MzEFUV JjoGez6rovtKrooit/lHYxF3s8IkD7AizmJ048TSfOcN2aGQnsPfhoed+wIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFLHZD8AQM10/FdYVRyMiXiv71y+cMB8GA1UdIwQY MBaAFDByzV33MjlXq4fAf1zdFcke/8jVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUhMTlhmY3lPVmVyaDhCX1hOMFZ5UjdfeU5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8zM2IxODYtZWY0Mi00NTE3LWIzMmYt NWU5NzQzNzc2MDBjLzEvc2RrUHdCQXpYVDhWMWhWSEl5SmVLX3ZYTDV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8zM2IxODYtZWY0Mi00NTE3LWIzMmYtNWU5NzQzNzc2MDBj LzEvTUhMTlhmY3lPVmVyaDhCX1hOMFZ5UjdfeU5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBBT0aAwQA XHc4AwQAXHc7AwQAuUlxAwQAuUlzMA0GCSqGSIb3DQEBCwUAA4IBAQAl9Wnzwugo xrLaXzD9+Xrknx78njhikyaEvMeZIvdx3bCba7kqqMW3/73ys3jn/nIgv6vPO8zu dGy5RlJRjbXGO7ZZevF2fyfSPeOw1BS1feGwH6PPv6iR0kw+bHAQ8Y/Rp/HXB6K+ Qu/ADm7hcmoU+VHm5HlHfxEPRuAhhrBMVBuj2fZZ1bcoDeuh8iuHg0RMaBMn0DiG yNGBm1dCHk9eD2fFvAc20BPIz3i0a9h/4uLLWqQ3iS3J27fcCGFwuBFqJBoExBYX E09hqR0RcFtFmmOlrjcXWo6sw3vG/1R0lHnkJYZuz6E1VyvCL7sO42/RZUjQhYdG BdoZXKrgZcYr -----END CERTIFICATE-----Generated at Tue Feb 10 07:12:49 2026 by rpki-client