This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/Sg5TLd0LRzU1Kyw2aXOACqsG4yA.roa File: Sg5TLd0LRzU1Kyw2aXOACqsG4yA.roa (raw, json) Hash identifier: 4vlEE5O6rdTk7GzU24AHkksV5knXEZvyv5QSu+1PBWM= Subject key identifier: 4A:0E:53:2D:DD:0B:47:35:35:2B:2C:36:69:73:80:0A:AB:06:E3:20 Certificate issuer: /CN=faa5ac5d22ad9078a72e136996287247e9f1e131 Certificate serial: 019B7834F682540C6EC30BBF7D33BC1EF5F9 Authority key identifier: FA:A5:AC:5D:22:AD:90:78:A7:2E:13:69:96:28:72:47:E9:F1:E1:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qWsXSKtkHinLhNplihyR-nx4TE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/Sg5TLd0LRzU1Kyw2aXOACqsG4yA.roa Signing time: Thu 01 Jan 2026 06:18:15 +0000 ROA not before: Thu 01 Jan 2026 06:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207729 IP address blocks: 185.15.139.0/24 maxlen: 24 2a0f:cfc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft rsync://rpki.ripe.net/repository/DEFAULT/1-qWsXSKtkHinLhNplihyR-nx4TE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:f6:82:54:0c:6e:c3:0b:bf:7d:33:bc:1e:f5:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=faa5ac5d22ad9078a72e136996287247e9f1e131 Validity Not Before: Jan 1 06:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a0e532ddd0b4735352b2c366973800aab06e320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e1:90:41:b4:b5:6f:9f:4b:f3:1e:80:ae:7d: 12:5c:98:f6:cd:3a:0e:39:47:f1:53:a8:5f:24:c0: 2d:2c:13:6f:db:69:97:84:b7:86:4b:2d:af:27:d1: f9:a4:0d:cd:7c:20:e2:84:b4:6c:d8:ba:3c:3a:0b: fb:52:9c:e4:21:a8:60:5b:a8:4b:a0:5b:70:2e:45: 56:79:e2:04:cd:92:df:e0:30:ae:15:e6:d8:10:ae: 65:58:3b:aa:24:70:df:7c:e0:ec:d1:92:d8:51:81: ea:02:96:ca:e6:2f:00:72:25:9f:3f:ee:e8:2a:9d: 16:5a:95:cc:c1:93:7f:bf:d7:ca:e5:c8:04:a9:47: 88:46:6e:8e:b8:fb:3e:ea:4c:c8:97:fb:15:d8:df: 6a:67:87:88:bd:c8:43:f6:f6:5e:52:6d:c9:b3:45: 25:18:8c:dd:d3:a3:d7:c2:c0:23:97:0e:48:c6:8f: 3e:7b:e4:3b:57:46:22:d9:51:33:2e:42:e8:ac:1d: fa:a0:89:67:cf:04:48:45:dc:be:e4:5f:f8:f7:4b: f8:d5:03:a6:72:fd:29:c4:63:4a:a5:48:a4:cd:52: 40:c7:a9:65:43:b2:d1:be:19:46:66:d2:22:0e:d4: e1:c6:f5:09:7b:2a:1e:59:14:a7:78:b1:f1:80:52: a4:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:0E:53:2D:DD:0B:47:35:35:2B:2C:36:69:73:80:0A:AB:06:E3:20 X509v3 Authority Key Identifier: keyid:FA:A5:AC:5D:22:AD:90:78:A7:2E:13:69:96:28:72:47:E9:F1:E1:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qWsXSKtkHinLhNplihyR-nx4TE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/Sg5TLd0LRzU1Kyw2aXOACqsG4yA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.15.139.0/24 IPv6: 2a0f:cfc0::/32 Signature Algorithm: sha256WithRSAEncryption bd:d7:33:3d:57:15:cf:e8:b9:f0:09:28:21:bd:4e:b6:ab:55: 0c:4e:58:97:13:40:12:68:8b:47:18:11:3c:97:f0:ae:4e:2e: 18:a0:c7:07:28:a6:7f:9d:12:a0:a5:4b:ca:40:04:5b:7c:c0: 91:93:6c:35:74:81:21:cf:64:86:64:e6:1f:13:f9:a5:1d:a2: 71:6c:b4:6a:23:64:5c:11:d1:1f:be:2a:67:2f:a7:c6:76:43: 72:96:4f:1e:b5:77:56:39:c0:3b:f3:f6:c3:0f:37:eb:3c:f4: c7:50:10:0c:fa:58:bc:76:f1:4e:00:aa:58:02:6a:7b:a7:0c: a2:9f:36:76:e0:3a:7d:25:4d:20:05:5b:4f:f7:9f:d3:a3:1c: 7c:a5:5d:a6:0d:74:1e:e2:62:9a:ef:9f:f4:61:4d:90:f8:19: d1:a1:77:2f:10:f9:9b:9a:87:45:ee:b4:5e:6a:3a:bc:19:34: 8a:e9:db:1b:76:7c:1e:81:06:52:0f:91:db:79:bb:3a:ed:3b: 0f:fd:d2:c3:53:0e:6e:36:96:07:e6:90:cf:e5:ad:54:c0:bc: f5:dd:38:d4:1e:84:fa:98:ee:80:92:0b:84:b2:d0:38:a7:bb: 32:60:5f:76:8b:62:1d:be:5d:b5:2e:39:66:b0:5f:f6:03:41: b2:b7:15:78 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt4NPaCVAxuwwu/fTO8HvX5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhYTVhYzVkMjJhZDkwNzhhNzJlMTM2OTk2Mjg3MjQ3ZTlm MWUxMzEwHhcNMjYwMTAxMDYxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTBlNTMyZGRkMGI0NzM1MzUyYjJjMzY2OTczODAwYWFiMDZlMzIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+GQQbS1b59L8x6Arn0SXJj2zToO OUfxU6hfJMAtLBNv22mXhLeGSy2vJ9H5pA3NfCDihLRs2Lo8Ogv7UpzkIahgW6hL oFtwLkVWeeIEzZLf4DCuFebYEK5lWDuqJHDffODs0ZLYUYHqApbK5i8AciWfP+7o Kp0WWpXMwZN/v9fK5cgEqUeIRm6OuPs+6kzIl/sV2N9qZ4eIvchD9vZeUm3Js0Ul GIzd06PXwsAjlw5Ixo8+e+Q7V0Yi2VEzLkLorB36oIlnzwRIRdy+5F/490v41QOm cv0pxGNKpUikzVJAx6llQ7LRvhlGZtIiDtThxvUJeyoeWRSneLHxgFKkpwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFEoOUy3dC0c1NSssNmlzgAqrBuMgMB8GA1UdIwQY MBaAFPqlrF0irZB4py4TaZYockfp8eExMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1xV3NYU0t0a0hpbkxoTnBsaWh5Ui1ueDRURS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjkvYjU1YzA0LTZkNGEtNDk0OS1hYWE4 LTZlZTFhNzAwYjIxOS8xL1NnNVRMZDBMUnpVMUt5dzJhWE9BQ3FzRzR5QS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZjkvYjU1YzA0LTZkNGEtNDk0OS1hYWE4LTZlZTFhNzAwYjIx OS8xLzEtcVdzWFNLdGtIaW5MaE5wbGloeVItbng0VEUuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAC5D4sw DQQCAAIwBwMFACoPz8AwDQYJKoZIhvcNAQELBQADggEBAL3XMz1XFc/oufAJKCG9 TrarVQxOWJcTQBJoi0cYETyX8K5OLhigxwcopn+dEqClS8pABFt8wJGTbDV0gSHP ZIZk5h8T+aUdonFstGojZFwR0R++Kmcvp8Z2Q3KWTx61d1Y5wDvz9sMPN+s89MdQ EAz6WLx28U4AqlgCanunDKKfNnbgOn0lTSAFW0/3n9OjHHylXaYNdB7iYprvn/Rh TZD4GdGhdy8Q+Zuah0XutF5qOrwZNIrp2xt2fB6BBlIPkdt5uzrtOw/90sNTDm42 lgfmkM/lrVTAvPXdONQehPqY7oCSC4Sy0DinuzJgX3aLYh2+XbUuOWawX/YDQbK3 FXg= -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:23 2026 by rpki-client