This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/0f5d46-2950-4135-84f3-2e964e97ff88/1/lU5CFSCqh5EhHLA6o7I-2LSPKPg.roa File: lU5CFSCqh5EhHLA6o7I-2LSPKPg.roa (raw, json) Hash identifier: 8NkRUHu69JiUheqFS7oS32VLyi1jncdM+1WEdpyOzwU= Subject key identifier: 95:4E:42:15:20:AA:87:91:21:1C:B0:3A:A3:B2:3E:D8:B4:8F:28:F8 Certificate issuer: /CN=b0d9e2ce5e69b2a1f9e37401d3c5055c5d3de7ce Certificate serial: 019C2FD1032D3352E5BFCA384BD235E7E54E Authority key identifier: B0:D9:E2:CE:5E:69:B2:A1:F9:E3:74:01:D3:C5:05:5C:5D:3D:E7:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sNnizl5psqH543QB08UFXF09584.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/0f5d46-2950-4135-84f3-2e964e97ff88/1/lU5CFSCqh5EhHLA6o7I-2LSPKPg.roa Signing time: Thu 05 Feb 2026 21:59:12 +0000 ROA not before: Thu 05 Feb 2026 21:59:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213969 IP address blocks: 85.209.40.0/24 maxlen: 24 2a01:fbc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/0f5d46-2950-4135-84f3-2e964e97ff88/1/sNnizl5psqH543QB08UFXF09584.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/0f5d46-2950-4135-84f3-2e964e97ff88/1/sNnizl5psqH543QB08UFXF09584.mft rsync://rpki.ripe.net/repository/DEFAULT/sNnizl5psqH543QB08UFXF09584.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:2f:d1:03:2d:33:52:e5:bf:ca:38:4b:d2:35:e7:e5:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0d9e2ce5e69b2a1f9e37401d3c5055c5d3de7ce Validity Not Before: Feb 5 21:59:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=954e421520aa8791211cb03aa3b23ed8b48f28f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:fa:6e:b8:72:c0:12:65:90:ef:32:e0:51:89: 41:65:16:b5:4d:89:a9:fa:fe:e5:19:69:fa:30:0a: 7a:ee:69:ef:a8:79:0a:e8:f3:84:6c:9e:3d:c7:85: f6:ba:9e:a5:50:98:72:54:37:6a:0d:49:d2:20:38: cb:4c:1e:b5:21:ac:39:d8:55:46:4d:20:d3:89:ac: b8:a9:4a:fb:34:bd:fa:fb:50:81:fc:3e:84:c3:38: 71:db:e6:17:93:ea:df:1f:b0:0f:65:f6:69:b8:45: 71:66:a0:65:39:09:e4:d3:7f:27:ed:5f:4f:93:45: a1:28:c8:20:fc:f0:aa:90:8f:07:19:7d:41:7b:6d: e1:00:96:a7:5f:c3:c6:48:7e:43:25:81:dc:91:eb: 9e:66:a1:7b:c2:2e:f0:42:f5:7a:a7:b4:ba:c2:b3: 66:92:79:c8:40:dd:0a:d5:5a:2c:2d:11:46:6f:1a: c7:5c:66:65:7d:fd:b0:91:76:cb:11:62:62:5e:f7: ef:86:ed:84:56:6d:92:36:c6:e5:7d:8d:86:32:9b: 1e:38:84:d0:5d:af:94:7a:39:cc:3e:b7:51:e8:b7: 68:f7:64:57:d0:2e:67:74:d6:fa:38:9c:12:06:ba: 00:60:cd:2a:85:00:1f:3c:85:7d:ea:db:19:79:a8: 88:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:4E:42:15:20:AA:87:91:21:1C:B0:3A:A3:B2:3E:D8:B4:8F:28:F8 X509v3 Authority Key Identifier: keyid:B0:D9:E2:CE:5E:69:B2:A1:F9:E3:74:01:D3:C5:05:5C:5D:3D:E7:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sNnizl5psqH543QB08UFXF09584.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0f5d46-2950-4135-84f3-2e964e97ff88/1/lU5CFSCqh5EhHLA6o7I-2LSPKPg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0f5d46-2950-4135-84f3-2e964e97ff88/1/sNnizl5psqH543QB08UFXF09584.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.209.40.0/24 IPv6: 2a01:fbc0::/29 Signature Algorithm: sha256WithRSAEncryption 43:73:1b:67:61:9a:e7:0d:14:bb:20:c5:a8:2d:d3:78:16:ee: 3c:67:06:3a:a9:32:c4:0c:39:7f:44:21:33:ae:64:06:b3:1d: a7:fb:c2:d6:b8:f3:d6:73:ec:9e:ab:15:db:00:c5:22:3a:20: 66:9e:7d:51:40:d3:75:97:a2:ef:2e:60:0f:2d:57:da:fc:d6: 55:17:a7:6c:ca:7c:aa:d2:86:cf:ee:38:eb:91:db:3e:98:46: 80:7f:e0:70:72:8c:20:d7:72:6a:fb:a6:ca:f0:ab:bc:b4:06: f0:2c:d2:f6:7f:d5:d6:22:b9:32:df:49:a7:f9:4b:32:01:a1: 27:0f:b2:87:7d:b2:9a:78:b3:1a:7a:0e:75:58:b5:96:29:bb: 41:0c:3f:ee:b5:93:96:b7:da:70:e5:db:45:34:72:f4:98:df: fd:c4:a7:27:cf:15:41:17:ca:48:86:32:be:8b:fb:d0:78:6d: 6c:19:20:22:fe:04:62:99:c9:a9:2d:08:c2:ff:8e:13:c7:46: b5:a1:ea:75:b3:80:b6:27:f3:03:9f:5e:5c:0b:8d:f6:28:48: d0:6c:e0:48:90:02:47:28:7d:ae:b9:f3:14:40:17:6e:e9:d6: 01:f6:8f:b5:f3:a7:aa:b9:37:f7:67:d6:71:b3:1a:82:b6:d3: b9:b6:af:b1 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZwv0QMtM1Llv8o4S9I15+VOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwZDllMmNlNWU2OWIyYTFmOWUzNzQwMWQzYzUwNTVjNWQz ZGU3Y2UwHhcNMjYwMjA1MjE1OTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTRlNDIxNTIwYWE4NzkxMjExY2IwM2FhM2IyM2VkOGI0OGYyOGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPpuuHLAEmWQ7zLgUYlBZRa1TYmp +v7lGWn6MAp67mnvqHkK6POEbJ49x4X2up6lUJhyVDdqDUnSIDjLTB61Iaw52FVG TSDTiay4qUr7NL36+1CB/D6Ewzhx2+YXk+rfH7APZfZpuEVxZqBlOQnk038n7V9P k0WhKMgg/PCqkI8HGX1Be23hAJanX8PGSH5DJYHckeueZqF7wi7wQvV6p7S6wrNm knnIQN0K1VosLRFGbxrHXGZlff2wkXbLEWJiXvfvhu2EVm2SNsblfY2GMpseOITQ Xa+UejnMPrdR6Ldo92RX0C5ndNb6OJwSBroAYM0qhQAfPIV96tsZeaiI9wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJVOQhUgqoeRIRywOqOyPti0jyj4MB8GA1UdIwQY MBaAFLDZ4s5eabKh+eN0AdPFBVxdPefOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc05uaXpsNXBzcUg1NDNRQjA4VUZYRjA5NTg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8wZjVkNDYtMjk1MC00MTM1LTg0ZjMt MmU5NjRlOTdmZjg4LzEvbFU1Q0ZTQ3FoNUVoSExBNm83SS0yTFNQS1BnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8wZjVkNDYtMjk1MC00MTM1LTg0ZjMtMmU5NjRlOTdmZjg4 LzEvc05uaXpsNXBzcUg1NDNRQjA4VUZYRjA5NTg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAVdEoMA0E AgACMAcDBQMqAfvAMA0GCSqGSIb3DQEBCwUAA4IBAQBDcxtnYZrnDRS7IMWoLdN4 Fu48ZwY6qTLEDDl/RCEzrmQGsx2n+8LWuPPWc+yeqxXbAMUiOiBmnn1RQNN1l6Lv LmAPLVfa/NZVF6dsynyq0obP7jjrkds+mEaAf+Bwcowg13Jq+6bK8Ku8tAbwLNL2 f9XWIrky30mn+UsyAaEnD7KHfbKaeLMaeg51WLWWKbtBDD/utZOWt9pw5dtFNHL0 mN/9xKcnzxVBF8pIhjK+i/vQeG1sGSAi/gRimcmpLQjC/44Tx0a1oep1s4C2J/MD n15cC432KEjQbOBIkAJHKH2uufMUQBdu6dYB9o+186equTf3Z9ZxsxqCttO5tq+x -----END CERTIFICATE-----Generated at Mon Feb 9 20:44:48 2026 by rpki-client