This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/5UPZqCFDlJ5D1iQwuO7Whotg5SI.roa File: 5UPZqCFDlJ5D1iQwuO7Whotg5SI.roa (raw, json) Hash identifier: FxbZPuvP2Ml6gGQGICNHacA5M1J8tjtnjSqNFBDSXLU= Subject key identifier: E5:43:D9:A8:21:43:94:9E:43:D6:24:30:B8:EE:D6:86:8B:60:E5:22 Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97 Certificate serial: 019B7758BE165E7AC21FE45BBCE176C727B6 Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/5UPZqCFDlJ5D1iQwuO7Whotg5SI.roa Signing time: Thu 01 Jan 2026 02:17:42 +0000 ROA not before: Thu 01 Jan 2026 02:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209854 IP address blocks: 185.200.204.0/23 maxlen: 23 185.200.204.0/24 maxlen: 24 185.200.205.0/24 maxlen: 24 185.200.206.0/23 maxlen: 23 185.200.206.0/24 maxlen: 24 185.200.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:be:16:5e:7a:c2:1f:e4:5b:bc:e1:76:c7:27:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97 Validity Not Before: Jan 1 02:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e543d9a82143949e43d62430b8eed6868b60e522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:63:ea:c1:e3:ec:3b:cf:94:3e:46:52:07:06: 41:96:9a:69:5d:d4:36:b8:94:37:9e:3f:ed:86:a0: 4e:a0:ed:78:2d:1c:53:7f:e4:07:ad:1d:0b:2a:81: e5:c3:c2:f8:09:34:02:49:8a:a7:f1:4a:b0:2c:d6: 7e:e8:47:d8:51:1a:cb:cc:2e:66:36:50:54:99:7a: 7b:39:d5:d8:a8:fb:cb:95:ac:0f:fb:86:75:e1:a1: 17:4d:1d:ea:5d:a8:d9:18:19:72:ae:0c:2f:15:2d: 7a:11:84:7a:76:c7:e2:9d:49:ef:4e:f2:2c:65:cb: 88:09:32:f6:b1:e8:be:92:87:4e:f6:be:06:89:3e: f4:b6:a4:50:3d:db:55:93:43:4c:ef:c9:f3:04:81: fa:30:5f:7d:ab:36:90:12:21:ab:6c:ad:73:db:b0: f9:3c:e6:2d:2a:98:7f:16:6e:e4:0a:ed:71:94:2a: de:2f:13:db:cf:29:77:0a:39:3a:d4:a6:44:d8:00: 46:a6:27:6d:22:01:5a:6f:6e:7e:86:52:22:6b:af: 6a:79:73:d6:ac:84:cb:19:a0:9e:15:31:cb:59:2d: 3e:e0:cf:c6:ba:65:ae:94:92:6f:11:2b:e2:05:dd: ca:7d:de:d6:15:be:f5:c7:8f:c2:4f:9e:31:54:35: 84:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:43:D9:A8:21:43:94:9E:43:D6:24:30:B8:EE:D6:86:8B:60:E5:22 X509v3 Authority Key Identifier: keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/5UPZqCFDlJ5D1iQwuO7Whotg5SI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.200.204.0/22 Signature Algorithm: sha256WithRSAEncryption ad:b4:db:e5:cc:4e:03:15:ac:b7:d0:a8:4d:6a:70:df:39:a5: 63:26:27:7d:77:ae:12:1d:f1:48:f6:39:a0:e6:ed:ac:4b:2e: 31:87:08:72:7a:5e:98:61:94:29:4a:08:85:48:64:6a:f4:d1: a4:77:e7:3e:6d:ec:63:18:ef:98:24:14:a4:24:60:2e:f5:c5: bb:06:0d:4c:74:cd:67:75:5a:f6:4b:15:7e:75:24:69:28:8f: 2d:9a:03:c5:c8:08:f1:7e:6c:a5:c9:b4:c9:b3:e6:13:71:6b: c5:d8:37:eb:e9:87:c0:f9:e6:23:f8:47:f2:18:09:ea:b7:cb: cc:a9:52:a3:30:d5:72:39:13:5b:7f:56:2c:4b:c5:c3:5c:4b: 3e:49:17:e5:bc:b2:8f:2b:ec:2d:06:bd:4d:1e:0a:88:2e:f8: 79:9c:38:e0:e9:76:3a:d4:f6:5c:d0:13:b3:87:a8:0f:25:ba: f1:8c:70:8f:13:00:a1:2b:64:04:90:a1:b8:ea:b7:af:f2:8f: 3d:86:32:60:02:f2:12:d2:5d:5d:73:42:42:39:94:f0:b0:b8: 90:7e:0f:62:07:7f:fe:4e:23:86:e9:80:d3:81:b7:95:81:d5: 3d:f8:cb:0e:32:76:40:6f:2e:d7:1c:82:cd:f0:bf:0a:c5:13: 43:09:da:35 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WL4WXnrCH+RbvOF2xye2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMzdjYzhmMTZiM2M2Y2JkMzM0NmFhM2VkNjE3NzFmM2U4 M2FjOTcwHhcNMjYwMTAxMDIxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTQzZDlhODIxNDM5NDllNDNkNjI0MzBiOGVlZDY4NjhiNjBlNTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWPqwePsO8+UPkZSBwZBlpppXdQ2 uJQ3nj/thqBOoO14LRxTf+QHrR0LKoHlw8L4CTQCSYqn8UqwLNZ+6EfYURrLzC5m NlBUmXp7OdXYqPvLlawP+4Z14aEXTR3qXajZGBlyrgwvFS16EYR6dsfinUnvTvIs ZcuICTL2sei+kodO9r4GiT70tqRQPdtVk0NM78nzBIH6MF99qzaQEiGrbK1z27D5 POYtKph/Fm7kCu1xlCreLxPbzyl3Cjk61KZE2ABGpidtIgFab25+hlIia69qeXPW rITLGaCeFTHLWS0+4M/GumWulJJvESviBd3Kfd7WFb71x4/CT54xVDWE0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOVD2aghQ5SeQ9YkMLju1oaLYOUiMB8GA1UdIwQY MBaAFP03zI8Ws8bL0zRqo+1hdx8+g6yXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMt N2UwNWFiNDFiNmU0LzEvNVVQWnFDRkRsSjVEMWlRd3VPN1dob3RnNVNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMtN2UwNWFiNDFiNmU0 LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucjMMA0G CSqGSIb3DQEBCwUAA4IBAQCttNvlzE4DFay30KhNanDfOaVjJid9d64SHfFI9jmg 5u2sSy4xhwhyel6YYZQpSgiFSGRq9NGkd+c+bexjGO+YJBSkJGAu9cW7Bg1MdM1n dVr2SxV+dSRpKI8tmgPFyAjxfmylybTJs+YTcWvF2Dfr6YfA+eYj+EfyGAnqt8vM qVKjMNVyORNbf1YsS8XDXEs+SRflvLKPK+wtBr1NHgqILvh5nDjg6XY61PZc0BOz h6gPJbrxjHCPEwChK2QEkKG46rev8o89hjJgAvIS0l1dc0JCOZTwsLiQfg9iB3/+ TiOG6YDTgbeVgdU9+MsOMnZAby7XHILN8L8KxRNDCdo1 -----END CERTIFICATE-----Generated at Mon Jan 19 17:31:39 2026 by rpki-client