This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/5tBrp55-EAXMGlNBrWNqj744wk4.roa File: 5tBrp55-EAXMGlNBrWNqj744wk4.roa (raw, json) Hash identifier: rV+tN1f8sl1mzbaoUz6eUbNwGQ89OtRS1uDIueamB+M= Subject key identifier: E6:D0:6B:A7:9E:7E:10:05:CC:1A:53:41:AD:63:6A:8F:BE:38:C2:4E Certificate issuer: /CN=7a17259a863c3d637d457e119b750df95e003fd6 Certificate serial: 019B79ECEA4BF46BF38BA5F7650B3CCD3A55 Authority key identifier: 7A:17:25:9A:86:3C:3D:63:7D:45:7E:11:9B:75:0D:F9:5E:00:3F:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/5tBrp55-EAXMGlNBrWNqj744wk4.roa Signing time: Thu 01 Jan 2026 14:18:48 +0000 ROA not before: Thu 01 Jan 2026 14:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33915 IP address blocks: 185.222.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:ea:4b:f4:6b:f3:8b:a5:f7:65:0b:3c:cd:3a:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a17259a863c3d637d457e119b750df95e003fd6 Validity Not Before: Jan 1 14:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e6d06ba79e7e1005cc1a5341ad636a8fbe38c24e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:70:ff:7e:6f:74:63:0d:ae:d0:c6:d6:26:24: e3:32:84:f7:4a:68:d1:4c:79:02:4d:35:e0:af:88: 06:ed:01:24:a5:b2:cf:af:a2:a6:9f:c7:ab:ca:4a: ab:92:03:bb:c9:2f:94:1e:76:af:21:26:60:92:e4: 3f:71:06:92:1f:0a:2c:f1:6f:9b:bc:e9:aa:0f:98: 48:50:e0:71:00:ae:6f:4f:f5:08:8c:4a:e1:66:cb: 3d:57:8b:28:01:0b:e9:a6:35:93:7b:7f:a6:da:28: da:ab:0f:8c:74:5c:8d:20:4e:91:bf:fd:17:51:3c: 18:1e:1b:eb:c6:84:77:9d:00:f2:d5:64:31:7c:95: 53:5a:8d:50:fa:11:44:7c:eb:bd:4e:05:61:0a:74: e6:f1:35:75:69:a4:e5:8e:94:b7:79:08:bf:d8:0d: ce:aa:a2:27:af:45:1c:90:1d:8b:4b:3b:f4:13:0b: 2b:a3:5b:99:24:2f:37:f7:3f:c7:89:8a:c4:af:f6: 8d:92:bd:ee:a4:e5:25:86:71:88:0b:02:f7:65:9a: 17:24:24:60:a3:39:b1:00:dc:fc:24:ec:e9:e0:e8: 00:80:69:9b:c0:23:05:0f:34:6d:05:e6:f0:25:41: 8e:a7:6f:75:c6:95:2f:0d:c7:a5:f4:e5:be:d6:c8: da:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:D0:6B:A7:9E:7E:10:05:CC:1A:53:41:AD:63:6A:8F:BE:38:C2:4E X509v3 Authority Key Identifier: keyid:7A:17:25:9A:86:3C:3D:63:7D:45:7E:11:9B:75:0D:F9:5E:00:3F:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/5tBrp55-EAXMGlNBrWNqj744wk4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.222.228.0/22 Signature Algorithm: sha256WithRSAEncryption 83:3c:4d:38:bf:c3:bf:76:41:d7:a4:31:25:d5:0d:fa:70:4b: 4f:55:3b:ff:b8:fc:b2:cc:2d:06:9d:54:8d:a3:36:94:0f:ab: f0:d6:65:8b:8b:34:58:e3:c0:67:2a:69:cf:a4:1a:f5:5d:b4: d4:4c:55:c0:0e:3b:33:bf:a6:f7:45:c8:33:e5:00:33:99:21: dc:c8:6f:13:b3:a1:fa:61:a4:e4:c4:f4:6d:10:70:e9:7b:05: 22:f5:a8:96:04:1c:c2:8b:91:37:1c:2b:31:48:71:3d:27:9d: 77:fa:9e:52:2c:3a:0d:ff:37:7d:da:5d:8f:24:7e:fe:6e:de: 61:5f:4d:d0:60:52:cf:3f:30:80:d9:cf:0c:9d:8c:ba:31:5e: 64:24:9c:5e:c3:c9:f8:5e:55:c6:2c:ff:73:e3:03:86:88:f8: aa:22:2d:87:b8:42:ff:55:82:96:d9:13:24:e4:07:26:34:69: bd:16:aa:44:8c:d6:88:8a:50:5c:86:ea:a8:82:36:34:51:35: 79:4a:59:9b:4d:d5:c9:01:d3:f6:30:0e:c1:50:65:0e:1a:c4: d8:7d:88:97:67:32:26:19:5b:57:10:f4:61:38:22:02:b1:f9: 12:e4:48:02:64:bf:46:e1:8f:f1:8e:c3:a9:2f:2b:6b:33:9d: ad:aa:20:b2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57OpL9Gvzi6X3ZQs8zTpVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhMTcyNTlhODYzYzNkNjM3ZDQ1N2UxMTliNzUwZGY5NWUw MDNmZDYwHhcNMjYwMTAxMTQxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNmQwNmJhNzllN2UxMDA1Y2MxYTUzNDFhZDYzNmE4ZmJlMzhjMjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nD/fm90Yw2u0MbWJiTjMoT3SmjR THkCTTXgr4gG7QEkpbLPr6Kmn8erykqrkgO7yS+UHnavISZgkuQ/cQaSHwos8W+b vOmqD5hIUOBxAK5vT/UIjErhZss9V4soAQvppjWTe3+m2ijaqw+MdFyNIE6Rv/0X UTwYHhvrxoR3nQDy1WQxfJVTWo1Q+hFEfOu9TgVhCnTm8TV1aaTljpS3eQi/2A3O qqInr0UckB2LSzv0Ewsro1uZJC839z/HiYrEr/aNkr3upOUlhnGICwL3ZZoXJCRg ozmxANz8JOzp4OgAgGmbwCMFDzRtBebwJUGOp291xpUvDcel9OW+1sjanwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFObQa6eefhAFzBpTQa1jao++OMJOMB8GA1UdIwQY MBaAFHoXJZqGPD1jfUV+EZt1DfleAD/WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWhjbG1vWThQV045Ulg0Um0zVU4tVjRBUDlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8wMDg0OWUtZDhlNi00YmIxLWFkMzAt YWQ4YmM4YmM3OTY3LzEvNXRCcnA1NS1FQVhNR2xOQnJXTnFqNzQ0d2s0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy8wMDg0OWUtZDhlNi00YmIxLWFkMzAtYWQ4YmM4YmM3OTY3 LzEvZWhjbG1vWThQV045Ulg0Um0zVU4tVjRBUDlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCud7kMA0G CSqGSIb3DQEBCwUAA4IBAQCDPE04v8O/dkHXpDEl1Q36cEtPVTv/uPyyzC0GnVSN ozaUD6vw1mWLizRY48BnKmnPpBr1XbTUTFXADjszv6b3Rcgz5QAzmSHcyG8Ts6H6 YaTkxPRtEHDpewUi9aiWBBzCi5E3HCsxSHE9J513+p5SLDoN/zd92l2PJH7+bt5h X03QYFLPPzCA2c8MnYy6MV5kJJxew8n4XlXGLP9z4wOGiPiqIi2HuEL/VYKW2RMk 5AcmNGm9FqpEjNaIilBchuqogjY0UTV5SlmbTdXJAdP2MA7BUGUOGsTYfYiXZzIm GVtXEPRhOCICsfkS5EgCZL9G4Y/xjsOpLytrM52tqiCy -----END CERTIFICATE-----Generated at Mon Jan 26 22:36:20 2026 by rpki-client