This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/5zuquzvoPSv-HJr2QhNMX3OYMgA.roa File: 5zuquzvoPSv-HJr2QhNMX3OYMgA.roa (raw, json) Hash identifier: bcYgeaY8QXTzK+9kyXA0UgosAczZtORy6M/Ez+Fizn8= Subject key identifier: E7:3B:AA:BB:3B:E8:3D:2B:FE:1C:9A:F6:42:13:4C:5F:73:98:32:00 Certificate issuer: /CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100 Certificate serial: 019B7C12A4DA6D23E1D3AB41EB3AB6103FF7 Authority key identifier: EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/5zuquzvoPSv-HJr2QhNMX3OYMgA.roa Signing time: Fri 02 Jan 2026 00:19:15 +0000 ROA not before: Fri 02 Jan 2026 00:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 10122 IP address blocks: 185.155.137.0/24 maxlen: 24 185.155.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:a4:da:6d:23:e1:d3:ab:41:eb:3a:b6:10:3f:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100 Validity Not Before: Jan 2 00:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e73baabb3be83d2bfe1c9af642134c5f73983200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:82:ce:11:d2:6a:43:89:ec:8a:fc:de:be:86: 48:e4:4f:bb:57:80:df:33:22:22:29:71:db:2e:84: 0b:7d:38:bc:47:7b:09:b6:d5:9d:93:ee:51:d1:37: f6:de:5a:45:69:dd:5b:51:d5:1a:9a:97:b2:f0:ac: a5:cc:b3:b2:85:b1:93:4d:01:39:54:f5:b5:29:5a: 04:d7:55:61:1d:49:86:9d:b6:e7:33:34:c9:e1:79: a6:be:85:6a:b4:21:b4:4b:52:68:45:07:b4:2a:43: dc:f2:24:3f:58:c8:67:b1:70:a8:28:c1:7f:bb:41: a7:39:0b:7a:ae:06:2f:88:41:86:98:c3:67:c9:9f: 4a:db:9d:c3:75:5d:af:d9:32:0d:0d:81:f9:2d:82: 64:d6:41:97:f0:3a:55:e4:23:20:7f:48:52:c3:95: 8b:bb:f4:e4:5d:12:32:cc:64:5d:7e:0c:00:a9:07: 57:87:bf:d4:41:29:37:f3:c5:c6:26:4b:ac:b7:e1: 8c:33:ef:63:c3:23:d4:b8:61:a3:67:af:c9:47:74: 77:f4:a5:63:c1:a3:21:a2:34:87:60:02:18:85:59: f6:d8:12:d2:06:e9:4f:0d:65:79:c9:3d:2f:12:d3: bd:37:94:a4:e2:fe:dd:fd:fd:c5:63:36:ff:3d:a8: 76:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:3B:AA:BB:3B:E8:3D:2B:FE:1C:9A:F6:42:13:4C:5F:73:98:32:00 X509v3 Authority Key Identifier: keyid:EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/5zuquzvoPSv-HJr2QhNMX3OYMgA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.155.137.0/24 185.155.139.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:ca:6c:eb:1d:be:89:57:90:b8:d4:0a:41:9d:26:9f:c5:14: ee:b5:05:bc:5c:f1:48:20:ba:31:fb:56:62:dc:ff:7b:9b:b1: 59:97:a7:d2:d3:12:f2:1f:0a:cb:54:76:e4:f4:0b:4b:c1:5a: 08:dc:1e:17:8f:95:c4:60:92:6e:02:85:6e:22:1b:62:3c:3a: 15:12:d8:ee:5c:a8:a1:7a:14:f4:85:cb:20:15:09:a8:1b:29: 71:fc:96:96:62:74:9c:8b:90:f9:43:4e:af:de:a0:b3:3d:fa: 02:ab:85:c3:d3:ac:d9:1c:4b:7a:09:0d:c9:a1:8e:e6:b8:66: 52:58:a5:43:13:03:04:7b:99:dd:95:74:63:57:7e:8a:7e:89: 75:f6:82:6a:71:fb:07:69:1b:f2:3d:64:f6:07:a5:f7:24:1c: 7b:c2:77:66:5e:ef:41:b2:b8:1f:9f:04:9a:d7:c2:85:4c:2d: f3:12:e8:bd:26:f3:b4:5b:48:4b:84:59:53:fe:88:e0:f3:2c: 7f:21:ca:31:ea:fe:0c:07:5a:e0:64:00:60:4b:77:4e:df:cb: 14:ad:27:c0:b3:5c:3c:6b:b7:a9:fb:bd:5c:31:91:08:69:9d: 80:be:56:26:61:b7:97:d4:3c:b6:16:d6:47:fd:20:bc:d9:82: 4f:7f:eb:8d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8EqTabSPh06tB6zq2ED/3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMWNjZTkwMWU1ZmI3YzkyZjA5YTkxNWNmNmU2NTZmNjkz YmExMDAwHhcNMjYwMTAyMDAxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzNiYWFiYjNiZTgzZDJiZmUxYzlhZjY0MjEzNGM1ZjczOTgzMjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4LOEdJqQ4nsivzevoZI5E+7V4Df MyIiKXHbLoQLfTi8R3sJttWdk+5R0Tf23lpFad1bUdUampey8KylzLOyhbGTTQE5 VPW1KVoE11VhHUmGnbbnMzTJ4XmmvoVqtCG0S1JoRQe0KkPc8iQ/WMhnsXCoKMF/ u0GnOQt6rgYviEGGmMNnyZ9K253DdV2v2TINDYH5LYJk1kGX8DpV5CMgf0hSw5WL u/TkXRIyzGRdfgwAqQdXh7/UQSk388XGJkust+GMM+9jwyPUuGGjZ6/JR3R39KVj waMhojSHYAIYhVn22BLSBulPDWV5yT0vEtO9N5Sk4v7d/f3FYzb/Pah2RQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOc7qrs76D0r/hya9kITTF9zmDIAMB8GA1UdIwQY MBaAFO4czpAeX7fJLwmpFc9uZW9pO6EAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2h6T2tCNWZ0OGt2Q2FrVnoyNWxiMms3b1FBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zOWQ1ZjEtNjZmNy00OWQ4LWFmYmEt MTRhMTkwOWIxMjM3LzEvNXp1cXV6dm9QU3YtSEpyMlFoTk1YM09ZTWdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8zOWQ1ZjEtNjZmNy00OWQ4LWFmYmEtMTRhMTkwOWIxMjM3 LzEvN2h6T2tCNWZ0OGt2Q2FrVnoyNWxiMms3b1FBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuZuJAwQA uZuLMA0GCSqGSIb3DQEBCwUAA4IBAQAeymzrHb6JV5C41ApBnSafxRTutQW8XPFI ILox+1Zi3P97m7FZl6fS0xLyHwrLVHbk9AtLwVoI3B4Xj5XEYJJuAoVuIhtiPDoV EtjuXKihehT0hcsgFQmoGylx/JaWYnSci5D5Q06v3qCzPfoCq4XD06zZHEt6CQ3J oY7muGZSWKVDEwMEe5ndlXRjV36Kfol19oJqcfsHaRvyPWT2B6X3JBx7wndmXu9B srgfnwSa18KFTC3zEui9JvO0W0hLhFlT/ojg8yx/Icox6v4MB1rgZABgS3dO38sU rSfAs1w8a7ep+71cMZEIaZ2AvlYmYbeX1Dy2FtZH/SC82YJPf+uN -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:03 2026 by rpki-client