This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/5_3H5oUB0Z5mLwXi_W_cQfYMDuk.roa File: 5_3H5oUB0Z5mLwXi_W_cQfYMDuk.roa (raw, json) Hash identifier: NEc7QIS1126HxAUD9gRMIkc83/j75nLK/QAT5XjvVaU= Subject key identifier: E7:FD:C7:E6:85:01:D1:9E:66:2F:05:E2:FD:6F:DC:41:F6:0C:0E:E9 Certificate issuer: /CN=40e3953c5cb452f159f8e1505fc702e883657e72 Certificate serial: 019B79EC9AD37BD400D011C6DF2A861E3A09 Authority key identifier: 40:E3:95:3C:5C:B4:52:F1:59:F8:E1:50:5F:C7:02:E8:83:65:7E:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/5_3H5oUB0Z5mLwXi_W_cQfYMDuk.roa Signing time: Thu 01 Jan 2026 14:18:27 +0000 ROA not before: Thu 01 Jan 2026 14:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25804 IP address blocks: 46.183.88.0/24 maxlen: 24 46.228.144.0/24 maxlen: 24 178.79.198.0/23 maxlen: 23 178.79.218.0/23 maxlen: 23 2a02:3d0:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.crl rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:9a:d3:7b:d4:00:d0:11:c6:df:2a:86:1e:3a:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40e3953c5cb452f159f8e1505fc702e883657e72 Validity Not Before: Jan 1 14:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e7fdc7e68501d19e662f05e2fd6fdc41f60c0ee9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:40:e8:3b:57:cb:5c:3a:6c:97:68:62:8b:e8: 47:78:f7:37:57:99:59:d9:b1:a2:56:b9:5f:68:2d: 7b:04:39:d1:c6:59:11:a6:33:5f:00:99:90:38:02: 7b:52:5e:53:cf:14:fd:d3:34:0d:c8:9c:8f:60:cb: 24:f0:3a:b3:94:93:55:1f:58:0b:9f:d0:3b:13:2d: 22:32:1f:84:e3:24:75:06:7d:7e:09:b8:7a:15:ea: c5:9d:05:7f:1a:f4:37:c6:42:ee:af:b2:78:5d:34: 56:9a:00:78:42:12:d8:c3:b1:73:ca:d4:34:07:45: 03:9f:db:63:a9:5c:ee:2b:be:99:6d:e2:e0:db:57: bc:df:20:82:0c:a4:fe:f2:79:9c:74:aa:0d:de:e4: 9e:16:28:54:d7:01:e1:26:f8:51:49:69:65:11:5c: f2:0c:84:18:d0:6a:b1:fd:8a:39:13:d5:46:28:0b: a7:81:eb:24:a4:96:6c:9f:8c:9a:2f:83:b3:ca:81: 06:f7:7d:7d:b8:d9:c4:4f:96:79:1c:d9:21:43:a2: 1b:21:10:26:2e:7c:8e:1d:e9:08:2d:13:89:8c:0a: 76:47:9a:98:76:85:7a:33:77:6d:03:e2:e7:dc:40: de:30:23:6f:04:5b:30:dd:f6:9b:77:1c:76:73:28: 38:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:FD:C7:E6:85:01:D1:9E:66:2F:05:E2:FD:6F:DC:41:F6:0C:0E:E9 X509v3 Authority Key Identifier: keyid:40:E3:95:3C:5C:B4:52:F1:59:F8:E1:50:5F:C7:02:E8:83:65:7E:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/5_3H5oUB0Z5mLwXi_W_cQfYMDuk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.183.88.0/24 46.228.144.0/24 178.79.198.0/23 178.79.218.0/23 IPv6: 2a02:3d0:8::/48 Signature Algorithm: sha256WithRSAEncryption 82:39:f0:79:dd:50:11:68:6b:20:87:2d:2f:55:17:d9:13:1e: 3d:96:bc:89:cc:0d:4d:d2:8e:cc:dc:0b:9f:02:49:f3:bd:f5: e8:52:93:d3:d6:eb:72:11:fd:73:a3:3d:ac:c6:22:51:db:40: 84:a0:e4:7a:25:73:dc:ea:de:53:cd:57:f9:60:79:a7:f1:25: b8:d7:ea:95:a8:a7:3b:cd:d9:18:74:2d:4f:b5:c4:7b:5d:7d: 1d:ba:ba:86:f5:f3:0f:96:19:bf:e6:17:51:f6:3b:6f:70:ba: b5:07:d8:a2:6d:ef:ec:14:eb:eb:2d:69:84:ed:8a:30:94:5a: 1d:90:49:94:3f:35:ee:d1:aa:e0:53:ba:b3:d8:26:99:51:dd: 16:77:ab:4a:5c:21:47:90:e5:45:3f:f7:20:2e:12:0c:47:f3: ba:f4:e5:ce:37:42:a8:48:eb:22:19:01:28:e2:d3:29:f6:76: 0f:f5:88:90:1f:64:71:65:d2:7c:0a:e1:9a:42:dd:0b:0c:db: 2a:03:54:b5:22:b1:75:3d:44:11:cf:82:d9:a7:7a:7b:ed:21: 73:bb:53:1d:4f:2b:f5:35:ad:dc:4a:e4:d8:87:99:f7:41:40: 39:e6:be:b8:4a:19:4a:98:79:0c:3d:2e:fd:19:64:3a:fc:37: 8b:96:72:e2 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt57JrTe9QA0BHG3yqGHjoJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZTM5NTNjNWNiNDUyZjE1OWY4ZTE1MDVmYzcwMmU4ODM2 NTdlNzIwHhcNMjYwMTAxMTQxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlN2ZkYzdlNjg1MDFkMTllNjYyZjA1ZTJmZDZmZGM0MWY2MGMwZWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkDoO1fLXDpsl2hii+hHePc3V5lZ 2bGiVrlfaC17BDnRxlkRpjNfAJmQOAJ7Ul5TzxT90zQNyJyPYMsk8DqzlJNVH1gL n9A7Ey0iMh+E4yR1Bn1+Cbh6FerFnQV/GvQ3xkLur7J4XTRWmgB4QhLYw7FzytQ0 B0UDn9tjqVzuK76ZbeLg21e83yCCDKT+8nmcdKoN3uSeFihU1wHhJvhRSWllEVzy DIQY0Gqx/Yo5E9VGKAungeskpJZsn4yaL4OzyoEG9319uNnET5Z5HNkhQ6IbIRAm LnyOHekILROJjAp2R5qYdoV6M3dtA+Ln3EDeMCNvBFsw3fabdxx2cyg4zQIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFOf9x+aFAdGeZi8F4v1v3EH2DA7pMB8GA1UdIwQY MBaAFEDjlTxctFLxWfjhUF/HAuiDZX5yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU9PVlBGeTBVdkZaLU9GUVg4Y0M2SU5sZm5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi83ZDg1MDUtMzg5OS00YTllLThjZjEt ZmE1YWYzOGRlYjVlLzEvNV8zSDVvVUIwWjVtTHdYaV9XX2NRZllNRHVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi83ZDg1MDUtMzg5OS00YTllLThjZjEtZmE1YWYzOGRlYjVl LzEvUU9PVlBGeTBVdkZaLU9GUVg4Y0M2SU5sZm5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAYAwQALrdYAwQA LuSQAwQBsk/GAwQBsk/aMA8EAgACMAkDBwAqAgPQAAgwDQYJKoZIhvcNAQELBQAD ggEBAII58HndUBFoayCHLS9VF9kTHj2WvInMDU3SjszcC58CSfO99ehSk9PW63IR /XOjPazGIlHbQISg5Holc9zq3lPNV/lgeafxJbjX6pWopzvN2Rh0LU+1xHtdfR26 uob18w+WGb/mF1H2O29wurUH2KJt7+wU6+staYTtijCUWh2QSZQ/Ne7RquBTurPY JplR3RZ3q0pcIUeQ5UU/9yAuEgxH87r05c43QqhI6yIZASji0yn2dg/1iJAfZHFl 0nwK4ZpC3QsM2yoDVLUisXU9RBHPgtmnenvtIXO7Ux1PK/U1rdxK5NiHmfdBQDnm vrhKGUqYeQw9Lv0ZZDr8N4uWcuI= -----END CERTIFICATE-----Generated at Mon Jan 26 01:01:47 2026 by rpki-client