This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/5LOGjN1Wd__9ZDS6swjA9BXI75k.roa File: 5LOGjN1Wd__9ZDS6swjA9BXI75k.roa (raw, json) Hash identifier: ubLg2hQhVn8wtB0qM0jKTGRZflH411XYROdch/D1MJI= Subject key identifier: E4:B3:86:8C:DD:56:77:FF:FD:64:34:BA:B3:08:C0:F4:15:C8:EF:99 Certificate issuer: /CN=48167dc1dd2bf991d70cf6ee87f4361e75cef20d Certificate serial: 019B78A2369F00A4DEE8C56ADD672E68DE5C Authority key identifier: 48:16:7D:C1:DD:2B:F9:91:D7:0C:F6:EE:87:F4:36:1E:75:CE:F2:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/5LOGjN1Wd__9ZDS6swjA9BXI75k.roa Signing time: Thu 01 Jan 2026 08:17:35 +0000 ROA not before: Thu 01 Jan 2026 08:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49127 IP address blocks: 185.85.208.0/22 maxlen: 24 2a0d:9c80::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft rsync://rpki.ripe.net/repository/DEFAULT/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:36:9f:00:a4:de:e8:c5:6a:dd:67:2e:68:de:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48167dc1dd2bf991d70cf6ee87f4361e75cef20d Validity Not Before: Jan 1 08:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4b3868cdd5677fffd6434bab308c0f415c8ef99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:58:70:10:83:a7:6a:37:1e:97:c4:4c:f2:73: dc:ae:9d:6a:08:e9:93:51:ed:71:13:f8:df:0a:bc: ee:03:ac:d6:cc:5a:5c:cc:72:80:b9:b8:ba:c0:8d: 92:3f:3f:9b:cf:e3:20:59:e7:08:06:2f:35:6d:59: bb:c7:6d:97:0d:40:5b:59:00:eb:50:4b:71:74:0c: f3:59:ed:21:35:79:60:5d:cf:68:c3:49:98:73:aa: 4c:7c:2a:d5:7c:55:27:22:3e:31:a5:22:c2:23:4d: 58:e0:37:35:34:c2:3b:29:4b:eb:01:a7:c0:4b:a7: 2d:40:85:b0:a1:7e:9d:b5:4d:e5:1a:de:66:f3:e0: d0:17:3c:72:5b:54:1e:24:45:eb:7f:9b:d0:bc:82: 22:ec:8d:b7:75:ac:bf:16:d3:ce:f5:76:f2:5a:95: b4:95:da:1b:0e:10:81:e1:74:87:4e:e6:df:80:d4: 60:a0:13:7c:95:42:25:63:40:e7:c2:bf:fd:e9:e0: fa:24:2f:33:c8:76:4a:21:c4:ce:05:0c:09:a8:cc: ab:c0:b1:50:2b:a4:41:b1:75:3f:32:b4:cc:fc:be: 9e:f7:cc:92:7d:59:af:27:e2:2e:02:e7:7f:a3:fa: ad:b4:52:18:3f:d2:0d:d8:e7:fc:ab:5d:39:7b:c8: 6b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:B3:86:8C:DD:56:77:FF:FD:64:34:BA:B3:08:C0:F4:15:C8:EF:99 X509v3 Authority Key Identifier: keyid:48:16:7D:C1:DD:2B:F9:91:D7:0C:F6:EE:87:F4:36:1E:75:CE:F2:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/5LOGjN1Wd__9ZDS6swjA9BXI75k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.85.208.0/22 IPv6: 2a0d:9c80::/29 Signature Algorithm: sha256WithRSAEncryption 3d:bf:38:69:0f:10:75:27:93:dc:f2:3c:88:1e:7a:db:2b:83: 4d:fd:55:8c:b3:36:2c:6b:76:0a:32:3a:1e:5e:03:5a:68:28: 4d:ba:51:23:2a:be:a4:ba:22:ae:ab:10:52:85:74:dd:37:b6: 4e:ff:68:9d:81:b7:b7:59:84:de:13:f0:2b:35:7c:78:fa:f1: 6e:7c:49:3e:c8:c9:0c:b5:d3:de:9d:f1:52:af:90:d7:28:4a: 66:99:5a:4d:ea:a9:09:9d:13:e1:7c:cc:86:2b:29:7b:98:e6: 54:56:43:75:d8:77:62:62:f3:b1:3a:52:78:3a:00:83:7a:0a: 19:05:e6:62:fb:5b:61:66:db:f8:c4:60:77:36:ac:16:c3:1a: 46:45:77:44:09:4f:b5:8e:61:72:5f:8f:2a:92:03:32:8b:e1: 94:2f:28:44:eb:68:7b:f5:e2:ad:cf:de:56:66:02:2a:2f:ad: c4:ec:10:49:33:ec:52:59:73:9d:e2:f6:8e:1b:5c:ea:8b:0c: ff:e5:8a:7e:67:d9:ed:76:fe:41:cb:13:0b:77:24:69:3c:24: 3b:5b:7b:b4:fb:62:07:33:19:d7:03:cc:e8:dc:df:76:b5:79: c0:d3:fb:56:2e:d7:5d:8e:7f:ce:1d:00:30:cb:0c:81:28:43: cc:eb:d1:10 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4ojafAKTe6MVq3WcuaN5cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MTY3ZGMxZGQyYmY5OTFkNzBjZjZlZTg3ZjQzNjFlNzVj ZWYyMGQwHhcNMjYwMTAxMDgxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNGIzODY4Y2RkNTY3N2ZmZmQ2NDM0YmFiMzA4YzBmNDE1YzhlZjk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFhwEIOnajcel8RM8nPcrp1qCOmT Ue1xE/jfCrzuA6zWzFpczHKAubi6wI2SPz+bz+MgWecIBi81bVm7x22XDUBbWQDr UEtxdAzzWe0hNXlgXc9ow0mYc6pMfCrVfFUnIj4xpSLCI01Y4Dc1NMI7KUvrAafA S6ctQIWwoX6dtU3lGt5m8+DQFzxyW1QeJEXrf5vQvIIi7I23day/FtPO9XbyWpW0 ldobDhCB4XSHTubfgNRgoBN8lUIlY0Dnwr/96eD6JC8zyHZKIcTOBQwJqMyrwLFQ K6RBsXU/MrTM/L6e98ySfVmvJ+IuAud/o/qttFIYP9IN2Of8q105e8hrJQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOSzhozdVnf//WQ0urMIwPQVyO+ZMB8GA1UdIwQY MBaAFEgWfcHdK/mR1wz27of0Nh51zvINMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0JaOXdkMHItWkhYRFBidWhfUTJIblhPOGcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi82MTZjMDAtZmJlYi00YjMwLTllMjUt OWU5MWZjYTc4ZjQ3LzEvNUxPR2pOMVdkX185WkRTNnN3akE5QlhJNzVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi82MTZjMDAtZmJlYi00YjMwLTllMjUtOWU5MWZjYTc4ZjQ3 LzEvU0JaOXdkMHItWkhYRFBidWhfUTJIblhPOGcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuVXQMA0E AgACMAcDBQMqDZyAMA0GCSqGSIb3DQEBCwUAA4IBAQA9vzhpDxB1J5Pc8jyIHnrb K4NN/VWMszYsa3YKMjoeXgNaaChNulEjKr6kuiKuqxBShXTdN7ZO/2idgbe3WYTe E/ArNXx4+vFufEk+yMkMtdPenfFSr5DXKEpmmVpN6qkJnRPhfMyGKyl7mOZUVkN1 2HdiYvOxOlJ4OgCDegoZBeZi+1thZtv4xGB3NqwWwxpGRXdECU+1jmFyX48qkgMy i+GULyhE62h79eKtz95WZgIqL63E7BBJM+xSWXOd4vaOG1zqiwz/5Yp+Z9ntdv5B yxMLdyRpPCQ7W3u0+2IHMxnXA8zo3N92tXnA0/tWLtddjn/OHQAwywyBKEPM69EQ -----END CERTIFICATE-----Generated at Sun Jan 25 17:34:51 2026 by rpki-client