This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/7f9be1-b72b-4585-a2bd-e4da8ac2b3db/1/m5RDqHDFlBLjo148wswkFX3AtM4.roa File: m5RDqHDFlBLjo148wswkFX3AtM4.roa (raw, json) Hash identifier: dGxmPGKQpIMe6i+11VC0Vb8f16IMacqv1zMOqCrB+SQ= Subject key identifier: 9B:94:43:A8:70:C5:94:12:E3:A3:5E:3C:C2:CC:24:15:7D:C0:B4:CE Certificate issuer: /CN=4e7856d295580936916a553fb9bfb59f3a176804 Certificate serial: 019B7AC7AB9678A08CF50E0CA3FF5C69447F Authority key identifier: 4E:78:56:D2:95:58:09:36:91:6A:55:3F:B9:BF:B5:9F:3A:17:68:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnhW0pVYCTaRalU_ub-1nzoXaAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/7f9be1-b72b-4585-a2bd-e4da8ac2b3db/1/m5RDqHDFlBLjo148wswkFX3AtM4.roa Signing time: Thu 01 Jan 2026 18:17:44 +0000 ROA not before: Thu 01 Jan 2026 18:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212320 IP address blocks: 89.39.128.0/21 maxlen: 21 89.39.128.0/22 maxlen: 22 89.39.128.0/23 maxlen: 23 2a14:9e80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/7f9be1-b72b-4585-a2bd-e4da8ac2b3db/1/TnhW0pVYCTaRalU_ub-1nzoXaAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/7f9be1-b72b-4585-a2bd-e4da8ac2b3db/1/TnhW0pVYCTaRalU_ub-1nzoXaAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/TnhW0pVYCTaRalU_ub-1nzoXaAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:ab:96:78:a0:8c:f5:0e:0c:a3:ff:5c:69:44:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e7856d295580936916a553fb9bfb59f3a176804 Validity Not Before: Jan 1 18:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b9443a870c59412e3a35e3cc2cc24157dc0b4ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:35:0b:b9:c1:5d:76:fa:be:e1:ad:51:fd:2a: 05:13:8f:df:06:7e:04:05:17:44:d4:b2:9d:69:ab: 06:67:29:06:32:5b:1c:cb:91:e3:c7:dc:c3:62:87: c9:d1:c4:76:96:05:94:cd:2d:99:40:b6:2f:e4:09: 04:a4:cb:98:76:4c:d6:45:17:ad:4c:89:0c:bf:6f: db:5d:b3:0d:91:77:2b:ab:e3:cd:0b:f5:14:b2:51: 03:3b:4e:95:c3:ca:2c:05:d3:e6:0d:cc:1f:99:22: 87:0f:3b:b7:eb:af:33:76:77:e5:4e:63:59:36:21: c7:38:0a:48:50:cc:3e:13:ac:d4:a7:65:ce:eb:24: 54:9e:92:45:16:82:fe:10:26:dc:07:b8:f0:ed:5b: bf:f9:69:e6:52:cf:8e:5b:59:4c:2b:05:c6:31:99: 82:2a:5f:6b:18:cb:1a:1e:ea:54:e4:a1:6e:f8:d0: 98:a9:d5:74:71:4c:21:d4:88:2f:fb:07:64:1c:19: 9d:df:dc:59:90:d8:75:a3:83:5b:c8:17:02:7f:17: c3:4e:0e:5f:d8:e8:fb:65:77:34:8b:6d:b3:04:e3: a5:8e:e2:9a:4b:b2:cf:64:93:f2:3e:3b:49:f2:2d: 83:2a:9d:86:e5:b4:c9:00:42:d2:a6:2f:8c:0e:95: f5:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:94:43:A8:70:C5:94:12:E3:A3:5E:3C:C2:CC:24:15:7D:C0:B4:CE X509v3 Authority Key Identifier: keyid:4E:78:56:D2:95:58:09:36:91:6A:55:3F:B9:BF:B5:9F:3A:17:68:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnhW0pVYCTaRalU_ub-1nzoXaAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/7f9be1-b72b-4585-a2bd-e4da8ac2b3db/1/m5RDqHDFlBLjo148wswkFX3AtM4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/7f9be1-b72b-4585-a2bd-e4da8ac2b3db/1/TnhW0pVYCTaRalU_ub-1nzoXaAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.39.128.0/21 IPv6: 2a14:9e80::/29 Signature Algorithm: sha256WithRSAEncryption a7:60:3b:db:be:52:47:fe:bf:14:ff:8b:5c:af:6e:20:72:03: 08:92:35:cb:db:51:02:5d:e5:23:65:df:45:9e:c4:0c:c8:58: d4:75:3f:3e:b8:96:75:48:27:76:b7:96:8e:2f:3c:93:95:bc: 71:4e:0b:bc:6d:5b:10:7e:e1:2b:76:f6:10:7b:a2:52:65:f7: e0:c9:43:23:37:92:5a:d6:7f:14:15:84:07:1e:67:02:f2:60: c2:93:57:ff:20:b9:41:08:f9:99:fb:f4:76:8a:36:ff:fd:01: 01:ac:97:80:08:32:67:3b:d2:99:9e:af:67:8e:21:da:ed:86: 4f:5b:af:83:7c:98:f8:ee:11:6b:28:b4:29:b4:44:ec:cc:2c: 78:9b:30:cb:f5:b7:6d:ab:a4:40:c0:e7:f8:c6:d4:4b:d5:98: 59:6b:d0:bc:37:83:f5:15:5c:31:a7:9b:4d:91:ca:68:b7:03: 87:3d:47:1f:48:5d:de:35:81:25:21:4b:2b:fd:f0:06:25:56: 9a:31:2b:df:d9:41:ee:ab:76:1a:8c:29:3b:ed:02:7f:74:bd: 4e:14:b7:fc:fe:e1:a1:60:92:d0:7f:d3:76:43:6d:b2:77:61: b1:ac:34:a6:01:07:f1:af:4b:b4:bf:db:84:e9:a5:50:02:cb: 38:2f:66:f9 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6x6uWeKCM9Q4Mo/9caUR/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlNzg1NmQyOTU1ODA5MzY5MTZhNTUzZmI5YmZiNTlmM2Ex NzY4MDQwHhcNMjYwMTAxMTgxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Yjk0NDNhODcwYzU5NDEyZTNhMzVlM2NjMmNjMjQxNTdkYzBiNGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzULucFddvq+4a1R/SoFE4/fBn4E BRdE1LKdaasGZykGMlscy5Hjx9zDYofJ0cR2lgWUzS2ZQLYv5AkEpMuYdkzWRRet TIkMv2/bXbMNkXcrq+PNC/UUslEDO06Vw8osBdPmDcwfmSKHDzu3668zdnflTmNZ NiHHOApIUMw+E6zUp2XO6yRUnpJFFoL+ECbcB7jw7Vu/+WnmUs+OW1lMKwXGMZmC Kl9rGMsaHupU5KFu+NCYqdV0cUwh1Igv+wdkHBmd39xZkNh1o4NbyBcCfxfDTg5f 2Oj7ZXc0i22zBOOljuKaS7LPZJPyPjtJ8i2DKp2G5bTJAELSpi+MDpX1GQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJuUQ6hwxZQS46NePMLMJBV9wLTOMB8GA1UdIwQY MBaAFE54VtKVWAk2kWpVP7m/tZ86F2gEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVG5oVzBwVllDVGFSYWxVX3ViLTFuem9YYUFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC83ZjliZTEtYjcyYi00NTg1LWEyYmQt ZTRkYThhYzJiM2RiLzEvbTVSRHFIREZsQkxqbzE0OHdzd2tGWDNBdE00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC83ZjliZTEtYjcyYi00NTg1LWEyYmQtZTRkYThhYzJiM2Ri LzEvVG5oVzBwVllDVGFSYWxVX3ViLTFuem9YYUFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDWSeAMA0E AgACMAcDBQMqFJ6AMA0GCSqGSIb3DQEBCwUAA4IBAQCnYDvbvlJH/r8U/4tcr24g cgMIkjXL21ECXeUjZd9FnsQMyFjUdT8+uJZ1SCd2t5aOLzyTlbxxTgu8bVsQfuEr dvYQe6JSZffgyUMjN5Ja1n8UFYQHHmcC8mDCk1f/ILlBCPmZ+/R2ijb//QEBrJeA CDJnO9KZnq9njiHa7YZPW6+DfJj47hFrKLQptETszCx4mzDL9bdtq6RAwOf4xtRL 1ZhZa9C8N4P1FVwxp5tNkcpotwOHPUcfSF3eNYElIUsr/fAGJVaaMSvf2UHuq3Ya jCk77QJ/dL1OFLf8/uGhYJLQf9N2Q22yd2GxrDSmAQfxr0u0v9uE6aVQAss4L2b5 -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:40 2026 by rpki-client