This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/5qHTg4smmrtrrX5zna14_iX7BYk.roa File: 5qHTg4smmrtrrX5zna14_iX7BYk.roa (raw, json) Hash identifier: bTex3pwZL3UmEGT2D616ZNd//JAc7NnIdwAGgFlj7zw= Subject key identifier: E6:A1:D3:83:8B:26:9A:BB:6B:AD:7E:73:9D:AD:78:FE:25:FB:05:89 Certificate issuer: /CN=77c6fb655461d73fcf21e8612c318706a089a5c2 Certificate serial: 019B797EEFBB0EDFF94D98442C2DA2CCD0F6 Authority key identifier: 77:C6:FB:65:54:61:D7:3F:CF:21:E8:61:2C:31:87:06:A0:89:A5:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/5qHTg4smmrtrrX5zna14_iX7BYk.roa Signing time: Thu 01 Jan 2026 12:18:40 +0000 ROA not before: Thu 01 Jan 2026 12:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211090 IP address blocks: 185.172.230.0/24 maxlen: 24 185.172.231.0/24 maxlen: 24 2a0b:81c0::/29 maxlen: 29 2a0b:81c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:ef:bb:0e:df:f9:4d:98:44:2c:2d:a2:cc:d0:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77c6fb655461d73fcf21e8612c318706a089a5c2 Validity Not Before: Jan 1 12:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e6a1d3838b269abb6bad7e739dad78fe25fb0589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b7:72:b3:b8:f9:f4:3a:60:3f:7e:94:65:aa: 80:be:82:66:6a:66:d2:d8:af:11:a8:6c:76:5e:07: 14:86:4a:87:2a:89:e3:32:b5:b7:8a:76:99:b6:7b: 5c:9f:45:20:5c:0b:b6:ee:3a:0b:d3:22:3c:c0:fb: 7e:31:09:15:e4:91:32:4b:16:da:db:30:e4:89:16: 9d:ec:43:3f:7b:f1:a1:01:ae:59:4a:c1:56:d3:5b: cc:a3:79:ac:a8:c4:11:24:9e:04:25:a0:5a:8f:95: 0d:27:46:b3:1b:5f:c7:c9:85:9a:d6:0c:b1:16:ef: 64:54:ec:f2:2a:1c:72:f2:23:26:25:14:65:63:ec: f8:1f:1b:fc:dc:19:bf:87:5e:ab:6e:ea:81:31:55: 56:79:df:59:75:01:ed:e1:0a:ee:ba:9b:b9:1d:b0: 9a:22:46:35:2d:be:68:b3:74:0f:80:25:01:6b:d2: b1:fe:76:ae:da:8c:1f:f4:4f:52:16:71:73:65:46: 48:a1:01:41:09:c6:ea:48:14:86:61:15:d8:69:19: 80:10:41:06:29:2a:83:b4:74:dc:c2:69:98:03:49: 27:da:7b:3c:69:6b:9c:64:16:54:e7:4a:61:2e:33: 27:0d:8b:10:78:d4:8f:3e:ee:f6:fc:92:d3:58:b2: fe:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:A1:D3:83:8B:26:9A:BB:6B:AD:7E:73:9D:AD:78:FE:25:FB:05:89 X509v3 Authority Key Identifier: keyid:77:C6:FB:65:54:61:D7:3F:CF:21:E8:61:2C:31:87:06:A0:89:A5:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/5qHTg4smmrtrrX5zna14_iX7BYk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.172.230.0/23 IPv6: 2a0b:81c0::/29 Signature Algorithm: sha256WithRSAEncryption 99:46:ff:3a:6c:66:1a:00:99:c1:7f:e7:8e:3b:53:01:06:5d: 36:5d:f2:50:2b:f3:25:34:9a:2e:1d:53:29:52:83:1c:b4:2a: e2:15:c6:e2:fd:7f:05:c4:7a:56:e3:57:28:43:5c:0a:93:e0: 2d:09:05:62:15:f7:8a:0d:78:42:84:3a:e7:a2:08:51:96:75: be:85:0f:9c:d0:64:f5:1b:0b:a4:45:2a:be:c8:c2:ac:e3:01: fb:ff:83:55:d3:4f:bf:5d:d0:ed:6f:82:cd:3d:67:ac:55:42: b8:36:45:52:d8:ff:c0:d3:d8:9f:59:42:9b:8b:33:34:79:74: a2:bb:4b:61:2b:df:7c:c3:f6:ab:75:64:21:57:1b:7a:da:f4: db:6e:75:7f:b0:7c:17:46:02:8e:99:d2:09:74:41:21:08:20: 0d:ea:1f:2d:85:b6:00:c3:4c:d5:b0:dc:7e:78:73:bc:9f:c9: 38:9d:42:48:45:f3:00:dc:64:6f:4d:f6:99:38:68:1c:f6:7b: 61:92:c0:bb:f2:04:4b:ff:73:f7:7a:58:40:01:20:3d:fa:e2: 54:24:fe:c3:4b:66:a9:71:8e:05:18:08:dd:f5:1e:29:4f:6d: 31:36:dc:b3:01:48:6f:2b:7c:92:6a:67:b8:43:6c:63:2d:bb: b9:be:e9:81 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5fu+7Dt/5TZhELC2izND2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3YzZmYjY1NTQ2MWQ3M2ZjZjIxZTg2MTJjMzE4NzA2YTA4 OWE1YzIwHhcNMjYwMTAxMTIxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNmExZDM4MzhiMjY5YWJiNmJhZDdlNzM5ZGFkNzhmZTI1ZmIwNTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLdys7j59DpgP36UZaqAvoJmambS 2K8RqGx2XgcUhkqHKonjMrW3inaZtntcn0UgXAu27joL0yI8wPt+MQkV5JEySxba 2zDkiRad7EM/e/GhAa5ZSsFW01vMo3msqMQRJJ4EJaBaj5UNJ0azG1/HyYWa1gyx Fu9kVOzyKhxy8iMmJRRlY+z4Hxv83Bm/h16rbuqBMVVWed9ZdQHt4Qruupu5HbCa IkY1Lb5os3QPgCUBa9Kx/nau2owf9E9SFnFzZUZIoQFBCcbqSBSGYRXYaRmAEEEG KSqDtHTcwmmYA0kn2ns8aWucZBZU50phLjMnDYsQeNSPPu72/JLTWLL+SwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOah04OLJpq7a61+c52teP4l+wWJMB8GA1UdIwQY MBaAFHfG+2VUYdc/zyHoYSwxhwagiaXCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDhiN1pWUmgxel9QSWVoaExER0hCcUNKcGNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9kZjBlMTEtNTkzYS00ZWU0LThkY2Yt YWIzMDgxYjJhYmE0LzEvNXFIVGc0c21tcnRyclg1em5hMTRfaVg3QllrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9kZjBlMTEtNTkzYS00ZWU0LThkY2YtYWIzMDgxYjJhYmE0 LzEvZDhiN1pWUmgxel9QSWVoaExER0hCcUNKcGNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBuazmMA0E AgACMAcDBQMqC4HAMA0GCSqGSIb3DQEBCwUAA4IBAQCZRv86bGYaAJnBf+eOO1MB Bl02XfJQK/MlNJouHVMpUoMctCriFcbi/X8FxHpW41coQ1wKk+AtCQViFfeKDXhC hDrnoghRlnW+hQ+c0GT1GwukRSq+yMKs4wH7/4NV00+/XdDtb4LNPWesVUK4NkVS 2P/A09ifWUKbizM0eXSiu0thK998w/ardWQhVxt62vTbbnV/sHwXRgKOmdIJdEEh CCAN6h8thbYAw0zVsNx+eHO8n8k4nUJIRfMA3GRvTfaZOGgc9nthksC78gRL/3P3 elhAASA9+uJUJP7DS2apcY4FGAjd9R4pT20xNtyzAUhvK3ySame4Q2xjLbu5vumB -----END CERTIFICATE-----Generated at Sun Jan 25 21:03:05 2026 by rpki-client