This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/5SV9yLFClS0rtDz8fvJnS6J9W6g.roa File: 5SV9yLFClS0rtDz8fvJnS6J9W6g.roa (raw, json) Hash identifier: wxSbJvADvi+JoVtEMjMQ/p8f+j3ecPxHDeFzbrEqmdg= Subject key identifier: E5:25:7D:C8:B1:42:95:2D:2B:B4:3C:FC:7E:F2:67:4B:A2:7D:5B:A8 Certificate issuer: /CN=847dc765d1a039e6fbd6b8fbb64d07d58bf584f5 Certificate serial: 019B775965E5931629529274E7B874E4F11E Authority key identifier: 84:7D:C7:65:D1:A0:39:E6:FB:D6:B8:FB:B6:4D:07:D5:8B:F5:84:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hH3HZdGgOeb71rj7tk0H1Yv1hPU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/5SV9yLFClS0rtDz8fvJnS6J9W6g.roa Signing time: Thu 01 Jan 2026 02:18:26 +0000 ROA not before: Thu 01 Jan 2026 02:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59482 IP address blocks: 95.215.228.0/24 maxlen: 24 95.215.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/hH3HZdGgOeb71rj7tk0H1Yv1hPU.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/hH3HZdGgOeb71rj7tk0H1Yv1hPU.mft rsync://rpki.ripe.net/repository/DEFAULT/hH3HZdGgOeb71rj7tk0H1Yv1hPU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:65:e5:93:16:29:52:92:74:e7:b8:74:e4:f1:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=847dc765d1a039e6fbd6b8fbb64d07d58bf584f5 Validity Not Before: Jan 1 02:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e5257dc8b142952d2bb43cfc7ef2674ba27d5ba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:84:08:f0:1b:0e:db:2a:c3:bc:6d:0a:66:05: c9:ac:dd:f8:29:cf:46:dc:a6:fb:27:44:6c:04:3a: 41:0a:c9:56:ed:42:87:5a:00:0b:96:46:c0:59:82: e4:fc:93:ef:68:4e:c3:4c:00:e0:cd:15:0a:17:da: dd:25:5f:2d:77:20:12:35:2b:d1:1b:dc:52:8e:7e: bb:62:98:b8:a8:50:07:2a:8d:93:ab:38:4e:66:50: 75:d3:b6:ab:b3:75:cd:ab:2c:e7:da:d3:d0:0b:78: 9c:53:56:76:cf:b2:95:7b:91:20:34:4a:a6:e0:8a: 22:f9:17:09:fa:95:2f:6d:ee:56:5e:a4:4e:93:71: 85:23:6b:c1:68:5e:0a:48:f0:5c:71:02:eb:d2:11: cc:27:cc:76:68:1e:8c:4f:87:4c:35:ce:1f:86:02: 83:9a:67:92:38:3d:c5:25:a9:1d:ca:9a:3a:01:18: 57:03:1b:7d:ef:43:f0:b2:0a:83:8b:dd:56:88:57: c9:3f:ef:f8:53:b1:43:46:63:b0:14:23:8e:0e:8d: 12:01:0b:79:7d:38:43:e7:30:8c:6d:1d:f3:95:74: 00:07:d7:57:d1:23:2a:66:0f:d7:de:6d:1a:3e:09: 06:04:8a:3a:c2:8e:b3:9a:08:ba:eb:42:c2:0a:97: 12:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:25:7D:C8:B1:42:95:2D:2B:B4:3C:FC:7E:F2:67:4B:A2:7D:5B:A8 X509v3 Authority Key Identifier: keyid:84:7D:C7:65:D1:A0:39:E6:FB:D6:B8:FB:B6:4D:07:D5:8B:F5:84:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hH3HZdGgOeb71rj7tk0H1Yv1hPU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/5SV9yLFClS0rtDz8fvJnS6J9W6g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/hH3HZdGgOeb71rj7tk0H1Yv1hPU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.215.228.0/23 Signature Algorithm: sha256WithRSAEncryption 9e:34:06:53:fe:3d:1e:cb:8a:80:0e:a6:60:29:ca:1a:ce:58: aa:89:5d:8b:72:c5:a6:de:0f:15:07:d7:26:01:c7:f3:69:3a: 22:bf:e5:e2:91:76:9d:33:24:b4:7f:af:9e:41:d8:dc:07:87: c0:84:23:db:4d:75:f5:04:d4:70:53:6e:0c:a3:a4:70:2c:a7: c7:85:ea:4f:3f:a6:37:ac:61:54:01:6e:9a:e7:b1:b2:ae:5f: ca:15:32:3f:b5:cb:83:70:73:f1:4b:42:53:ff:13:37:b2:20: cc:b1:8d:08:43:19:0c:0e:d2:5d:4c:50:98:04:81:8c:48:a0: 7d:19:6f:18:9e:ed:aa:77:1f:60:3f:f0:35:0b:89:8c:35:8a: 4b:34:59:8d:41:87:61:e4:51:d0:d5:ae:36:23:f1:b3:b7:cc: fc:05:c8:8a:c3:2e:dc:5b:6d:fa:1e:09:69:3f:8d:21:50:c8: 01:60:da:e2:f5:f0:c7:28:f3:fc:cd:ff:7a:ce:d4:f7:d4:8e: 70:f6:37:a5:38:5b:f3:60:bc:0e:b6:d7:02:7a:c2:83:68:bb: 35:7b:49:b6:ee:80:f9:47:3d:39:58:db:02:7c:2e:ef:6a:66: 63:74:32:33:c4:fc:30:fa:bc:72:54:01:1e:0b:91:43:38:f6: ab:0b:0c:f8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WWXlkxYpUpJ057h05PEeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0N2RjNzY1ZDFhMDM5ZTZmYmQ2YjhmYmI2NGQwN2Q1OGJm NTg0ZjUwHhcNMjYwMTAxMDIxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTI1N2RjOGIxNDI5NTJkMmJiNDNjZmM3ZWYyNjc0YmEyN2Q1YmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYQI8BsO2yrDvG0KZgXJrN34Kc9G 3Kb7J0RsBDpBCslW7UKHWgALlkbAWYLk/JPvaE7DTADgzRUKF9rdJV8tdyASNSvR G9xSjn67Ypi4qFAHKo2TqzhOZlB107ars3XNqyzn2tPQC3icU1Z2z7KVe5EgNEqm 4Ioi+RcJ+pUvbe5WXqROk3GFI2vBaF4KSPBccQLr0hHMJ8x2aB6MT4dMNc4fhgKD mmeSOD3FJakdypo6ARhXAxt970PwsgqDi91WiFfJP+/4U7FDRmOwFCOODo0SAQt5 fThD5zCMbR3zlXQAB9dX0SMqZg/X3m0aPgkGBIo6wo6zmgi660LCCpcSNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOUlfcixQpUtK7Q8/H7yZ0uifVuoMB8GA1UdIwQY MBaAFIR9x2XRoDnm+9a4+7ZNB9WL9YT1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEgzSFpkR2dPZWI3MXJqN3RrMEgxWXYxaFBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC83ZTUwMzAtZGEyNC00YmJiLTliOTUt MDljZjdlNzJhMDMzLzEvNVNWOXlMRkNsUzBydER6OGZ2Sm5TNko5VzZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC83ZTUwMzAtZGEyNC00YmJiLTliOTUtMDljZjdlNzJhMDMz LzEvaEgzSFpkR2dPZWI3MXJqN3RrMEgxWXYxaFBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBX9fkMA0G CSqGSIb3DQEBCwUAA4IBAQCeNAZT/j0ey4qADqZgKcoazliqiV2LcsWm3g8VB9cm AcfzaToiv+XikXadMyS0f6+eQdjcB4fAhCPbTXX1BNRwU24Mo6RwLKfHhepPP6Y3 rGFUAW6a57Gyrl/KFTI/tcuDcHPxS0JT/xM3siDMsY0IQxkMDtJdTFCYBIGMSKB9 GW8Ynu2qdx9gP/A1C4mMNYpLNFmNQYdh5FHQ1a42I/Gzt8z8BciKwy7cW236Hglp P40hUMgBYNri9fDHKPP8zf96ztT31I5w9jelOFvzYLwOttcCesKDaLs1e0m27oD5 Rz05WNsCfC7vamZjdDIzxPww+rxyVAEeC5FDOParCwz4 -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:24 2026 by rpki-client