This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/5wBvYH18mnYKydx8H19r86HtE0Q.roa File: 5wBvYH18mnYKydx8H19r86HtE0Q.roa (raw, json) Hash identifier: VUGd6jaGsjCSaa2yqTqiiqwge8OaZ7jM3DegnmT+3+Q= Subject key identifier: E7:00:6F:60:7D:7C:9A:76:0A:C9:DC:7C:1F:5F:6B:F3:A1:ED:13:44 Certificate issuer: /CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100 Certificate serial: 019B7C12A590856B960534D56CE3E5BE63A0 Authority key identifier: EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/5wBvYH18mnYKydx8H19r86HtE0Q.roa Signing time: Fri 02 Jan 2026 00:19:15 +0000 ROA not before: Fri 02 Jan 2026 00:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212879 IP address blocks: 185.155.136.0/24 maxlen: 24 185.155.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:a5:90:85:6b:96:05:34:d5:6c:e3:e5:be:63:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100 Validity Not Before: Jan 2 00:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e7006f607d7c9a760ac9dc7c1f5f6bf3a1ed1344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8d:4d:bf:38:c5:d3:45:d0:f1:a6:69:37:e1: a2:4b:31:5b:d2:24:2a:f6:2b:bc:d6:34:63:89:11: 3d:0a:02:0d:ed:de:30:51:d4:23:e4:22:68:68:e4: b7:4e:d1:81:78:67:c0:95:62:c6:3e:e6:55:26:4e: 11:f6:d4:1a:0a:41:b6:be:26:02:78:46:d1:dd:3e: 5a:38:2c:a7:ad:a4:fe:f4:77:60:31:3b:ae:bf:c3: 66:9a:4e:42:ba:3d:d1:77:e4:06:8d:8e:10:d6:70: 13:3f:f7:46:0b:62:b8:00:0c:0a:9c:36:73:40:34: 7c:ac:36:02:a1:97:f8:0e:f3:d4:36:b4:53:91:de: 43:b2:16:57:b9:55:b6:1f:36:7d:82:98:f6:b4:95: 99:f9:14:bc:97:6b:0f:a7:55:cc:7a:f4:4f:2e:cd: d9:7e:ce:fa:e8:dd:da:39:d4:00:08:f9:71:4a:ea: 88:a3:a1:e7:a7:4b:2b:35:c5:44:9a:f2:a0:f8:bc: 1d:76:44:62:57:99:ff:a3:00:62:b4:0c:9d:b8:93: 86:01:39:1f:72:38:5f:30:07:0e:52:2a:22:b5:42: 0d:ff:b4:b0:ee:59:c9:17:84:80:56:76:0d:3e:c0: 05:40:68:ee:39:ed:0c:e3:61:5b:c2:51:e3:b2:e0: f7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:00:6F:60:7D:7C:9A:76:0A:C9:DC:7C:1F:5F:6B:F3:A1:ED:13:44 X509v3 Authority Key Identifier: keyid:EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/5wBvYH18mnYKydx8H19r86HtE0Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.155.136.0/24 185.155.138.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:cd:b3:c5:89:63:c9:0d:ff:9c:06:91:85:07:05:2f:e3:8b: 45:63:fa:54:85:69:34:dc:50:ca:c4:90:46:8e:00:de:41:5f: 6d:b5:dc:17:ec:fc:ed:fe:1f:b8:23:f8:61:60:09:21:b8:82: 3d:30:62:53:ab:9e:a2:03:ef:91:b9:e1:f8:d0:a9:47:d2:93: 47:74:24:db:99:dd:94:8a:ac:e7:7b:aa:59:75:58:bb:83:2d: 37:ef:dd:cb:72:58:8b:58:f1:6c:c6:f2:20:53:ef:77:b0:2e: 5a:58:c7:65:67:a0:2c:bf:6b:01:b8:d5:3e:cb:be:3b:a6:22: 90:df:d7:d6:95:cb:16:2e:2f:43:85:46:2b:2b:7f:c9:70:b9: b2:6f:90:05:63:c1:25:bf:ad:a2:53:37:c2:fb:40:28:00:8d: ae:c6:80:16:ed:3b:a2:1c:b5:8a:61:16:8f:6a:9c:0a:45:96: 60:92:c2:36:d2:3e:04:b4:b1:7e:4b:d5:11:a7:32:ba:c3:e1: 46:27:16:1a:76:90:76:41:a0:69:f9:d5:e5:ff:07:f2:dc:6c: 47:64:d2:ed:b2:aa:1c:6b:79:7d:58:11:d9:d8:0f:45:4c:0f: 2b:85:68:3a:9d:6f:15:de:06:8a:96:f3:89:45:49:51:ef:fd: 0e:f6:99:ce -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8EqWQhWuWBTTVbOPlvmOgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMWNjZTkwMWU1ZmI3YzkyZjA5YTkxNWNmNmU2NTZmNjkz YmExMDAwHhcNMjYwMTAyMDAxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzAwNmY2MDdkN2M5YTc2MGFjOWRjN2MxZjVmNmJmM2ExZWQxMzQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzY1NvzjF00XQ8aZpN+GiSzFb0iQq 9iu81jRjiRE9CgIN7d4wUdQj5CJoaOS3TtGBeGfAlWLGPuZVJk4R9tQaCkG2viYC eEbR3T5aOCynraT+9HdgMTuuv8Nmmk5Cuj3Rd+QGjY4Q1nATP/dGC2K4AAwKnDZz QDR8rDYCoZf4DvPUNrRTkd5DshZXuVW2HzZ9gpj2tJWZ+RS8l2sPp1XMevRPLs3Z fs766N3aOdQACPlxSuqIo6Hnp0srNcVEmvKg+LwddkRiV5n/owBitAyduJOGATkf cjhfMAcOUioitUIN/7Sw7lnJF4SAVnYNPsAFQGjuOe0M42FbwlHjsuD32QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOcAb2B9fJp2CsncfB9fa/Oh7RNEMB8GA1UdIwQY MBaAFO4czpAeX7fJLwmpFc9uZW9pO6EAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2h6T2tCNWZ0OGt2Q2FrVnoyNWxiMms3b1FBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zOWQ1ZjEtNjZmNy00OWQ4LWFmYmEt MTRhMTkwOWIxMjM3LzEvNXdCdllIMThtbllLeWR4OEgxOXI4Nkh0RTBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8zOWQ1ZjEtNjZmNy00OWQ4LWFmYmEtMTRhMTkwOWIxMjM3 LzEvN2h6T2tCNWZ0OGt2Q2FrVnoyNWxiMms3b1FBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuZuIAwQA uZuKMA0GCSqGSIb3DQEBCwUAA4IBAQCdzbPFiWPJDf+cBpGFBwUv44tFY/pUhWk0 3FDKxJBGjgDeQV9ttdwX7Pzt/h+4I/hhYAkhuII9MGJTq56iA++RueH40KlH0pNH dCTbmd2Uiqzne6pZdVi7gy03793LcliLWPFsxvIgU+93sC5aWMdlZ6Asv2sBuNU+ y747piKQ39fWlcsWLi9DhUYrK3/JcLmyb5AFY8Elv62iUzfC+0AoAI2uxoAW7Tui HLWKYRaPapwKRZZgksI20j4EtLF+S9URpzK6w+FGJxYadpB2QaBp+dXl/wfy3GxH ZNLtsqoca3l9WBHZ2A9FTA8rhWg6nW8V3gaKlvOJRUlR7/0O9pnO -----END CERTIFICATE-----Generated at Sun Jan 25 18:09:30 2026 by rpki-client