This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/46fa02-6587-4c62-973e-b12501f34ff0/1/n5FUtwJmC4hLyvlbNVZ9aYw4EWg.roa File: n5FUtwJmC4hLyvlbNVZ9aYw4EWg.roa (raw, json) Hash identifier: ApevewrPNzMKwdZYmudK6D8Ih9aFuZDtkDlyK/2Y0WA= Subject key identifier: 9F:91:54:B7:02:66:0B:88:4B:CA:F9:5B:35:56:7D:69:8C:38:11:68 Certificate issuer: /CN=d8ccbab3a2d810c5fa29dcda9d50202616efb9e8 Certificate serial: 019B79112C0799C4CA843FB9423E674A2076 Authority key identifier: D8:CC:BA:B3:A2:D8:10:C5:FA:29:DC:DA:9D:50:20:26:16:EF:B9:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2My6s6LYEMX6KdzanVAgJhbvueg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/46fa02-6587-4c62-973e-b12501f34ff0/1/n5FUtwJmC4hLyvlbNVZ9aYw4EWg.roa Signing time: Thu 01 Jan 2026 10:18:47 +0000 ROA not before: Thu 01 Jan 2026 10:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206940 IP address blocks: 185.156.76.0/23 maxlen: 23 185.156.78.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/46fa02-6587-4c62-973e-b12501f34ff0/1/2My6s6LYEMX6KdzanVAgJhbvueg.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/46fa02-6587-4c62-973e-b12501f34ff0/1/2My6s6LYEMX6KdzanVAgJhbvueg.mft rsync://rpki.ripe.net/repository/DEFAULT/2My6s6LYEMX6KdzanVAgJhbvueg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:2c:07:99:c4:ca:84:3f:b9:42:3e:67:4a:20:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8ccbab3a2d810c5fa29dcda9d50202616efb9e8 Validity Not Before: Jan 1 10:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f9154b702660b884bcaf95b35567d698c381168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7d:13:05:78:e3:d7:fb:47:2f:d3:02:06:e2: 68:27:e3:95:94:95:d1:93:3d:29:ef:89:f5:8c:13: 78:c4:e2:bb:69:1e:de:99:4a:21:24:dc:6b:4d:74: d2:16:74:a8:31:61:f2:08:17:18:82:d2:2b:ca:c2: 09:0e:86:7f:68:2d:ec:9f:fa:7f:d5:57:4b:b7:48: c1:8d:e0:06:d2:2d:18:46:90:13:93:8a:57:0b:db: cc:aa:33:3a:1e:66:9d:d9:28:a7:cb:ad:f1:fa:85: f2:54:04:e0:48:05:20:e3:73:09:4a:52:c9:a9:67: e7:0c:94:d1:2d:5a:3c:dd:6b:8d:ae:51:88:cc:14: cb:66:45:ad:c7:4d:51:fa:a1:7f:2b:9b:20:62:03: ea:8b:ea:2b:c9:0e:56:ef:50:9a:04:05:50:ae:22: ca:9c:44:d9:65:a6:c7:35:0d:c7:7a:ce:54:77:30: 45:f7:c5:3b:d2:39:64:44:35:11:74:2b:c4:08:b0: 62:c9:5c:3a:b3:78:52:21:e0:8c:82:f4:8a:f7:b7: 5f:72:c1:44:eb:63:f0:41:4e:a5:96:d9:91:c3:01: 3e:8e:c1:24:ef:ad:e8:70:b8:2e:7e:27:af:c9:19: ab:9b:e2:14:e2:7a:aa:fe:f9:3d:92:44:62:08:3e: d2:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:91:54:B7:02:66:0B:88:4B:CA:F9:5B:35:56:7D:69:8C:38:11:68 X509v3 Authority Key Identifier: keyid:D8:CC:BA:B3:A2:D8:10:C5:FA:29:DC:DA:9D:50:20:26:16:EF:B9:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2My6s6LYEMX6KdzanVAgJhbvueg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/46fa02-6587-4c62-973e-b12501f34ff0/1/n5FUtwJmC4hLyvlbNVZ9aYw4EWg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/46fa02-6587-4c62-973e-b12501f34ff0/1/2My6s6LYEMX6KdzanVAgJhbvueg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.156.76.0/22 Signature Algorithm: sha256WithRSAEncryption 39:60:7c:1e:ae:b1:c0:dd:ff:90:9c:99:5e:7c:e6:ad:98:a1: f2:90:44:13:f4:1a:a6:c6:b1:4c:39:21:a2:22:ac:bb:58:7b: 74:60:15:3c:e6:64:c1:e8:f2:b4:47:89:2f:3a:b8:75:d9:b5: f9:f5:62:a0:2d:88:2b:17:8b:85:e9:7e:8f:0c:19:ae:ec:ac: 0c:1c:85:69:56:35:52:9e:16:48:be:49:88:47:ce:61:c7:cf: 75:dd:b5:e5:c0:97:8a:1f:23:14:c3:47:f9:f9:12:57:ed:9a: b8:83:00:b5:b1:ee:c3:28:c1:7e:2a:47:1a:64:34:f4:a5:f2: c9:38:d0:a9:45:61:25:38:b7:32:ba:9f:47:a1:08:c8:f8:cb: 07:d0:f7:bd:ec:2c:88:f1:5e:28:44:cc:4d:d4:8e:e2:3f:5a: 24:93:ee:6f:e0:0c:bc:22:00:16:cb:44:c6:9b:32:91:e4:de: 5b:7b:eb:a1:a9:bd:11:37:ac:1d:5f:c0:1c:8b:d7:32:a2:a6: 0e:80:90:62:5c:c2:4a:e9:db:7a:4f:d1:27:b8:02:c4:b0:bc: cc:ab:62:ec:3f:62:31:ad:2d:24:c3:07:83:79:2c:91:04:2d: df:35:96:fb:27:fe:92:74:bb:21:ad:91:5d:8c:b3:89:47:52: 8d:99:58:3c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ESwHmcTKhD+5Qj5nSiB2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4Y2NiYWIzYTJkODEwYzVmYTI5ZGNkYTlkNTAyMDI2MTZl ZmI5ZTgwHhcNMjYwMTAxMTAxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjkxNTRiNzAyNjYwYjg4NGJjYWY5NWIzNTU2N2Q2OThjMzgxMTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy30TBXjj1/tHL9MCBuJoJ+OVlJXR kz0p74n1jBN4xOK7aR7emUohJNxrTXTSFnSoMWHyCBcYgtIrysIJDoZ/aC3sn/p/ 1VdLt0jBjeAG0i0YRpATk4pXC9vMqjM6Hmad2Siny63x+oXyVATgSAUg43MJSlLJ qWfnDJTRLVo83WuNrlGIzBTLZkWtx01R+qF/K5sgYgPqi+oryQ5W71CaBAVQriLK nETZZabHNQ3Hes5UdzBF98U70jlkRDURdCvECLBiyVw6s3hSIeCMgvSK97dfcsFE 62PwQU6lltmRwwE+jsEk763ocLgufievyRmrm+IU4nqq/vk9kkRiCD7S4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ+RVLcCZguIS8r5WzVWfWmMOBFoMB8GA1UdIwQY MBaAFNjMurOi2BDF+inc2p1QICYW77noMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMk15NnM2TFlFTVg2S2R6YW5WQWdKaGJ2dWVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi80NmZhMDItNjU4Ny00YzYyLTk3M2Ut YjEyNTAxZjM0ZmYwLzEvbjVGVXR3Sm1DNGhMeXZsYk5WWjlhWXc0RVdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi80NmZhMDItNjU4Ny00YzYyLTk3M2UtYjEyNTAxZjM0ZmYw LzEvMk15NnM2TFlFTVg2S2R6YW5WQWdKaGJ2dWVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZxMMA0G CSqGSIb3DQEBCwUAA4IBAQA5YHwerrHA3f+QnJlefOatmKHykEQT9BqmxrFMOSGi Iqy7WHt0YBU85mTB6PK0R4kvOrh12bX59WKgLYgrF4uF6X6PDBmu7KwMHIVpVjVS nhZIvkmIR85hx8913bXlwJeKHyMUw0f5+RJX7Zq4gwC1se7DKMF+KkcaZDT0pfLJ ONCpRWElOLcyup9HoQjI+MsH0Pe97CyI8V4oRMxN1I7iP1okk+5v4Ay8IgAWy0TG mzKR5N5be+uhqb0RN6wdX8Aci9cyoqYOgJBiXMJK6dt6T9EnuALEsLzMq2LsP2Ix rS0kwweDeSyRBC3fNZb7J/6SdLshrZFdjLOJR1KNmVg8 -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:02 2026 by rpki-client