This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/5bKPRm_QqbpBlNc2dNoKywZCqLk.roa File: 5bKPRm_QqbpBlNc2dNoKywZCqLk.roa (raw, json) Hash identifier: BZLesRHJpEK+89kXNO/B3a8GOQOgqURlpuFb3G1CoFc= Subject key identifier: E5:B2:8F:46:6F:D0:A9:BA:41:94:D7:36:74:DA:0A:CB:06:42:A8:B9 Certificate issuer: /CN=2037512e5355e815acf064603f8ae3f5528a5e3b Certificate serial: 019B7D5BDFAE6EF36DB1A37D57A6350A0A45 Authority key identifier: 20:37:51:2E:53:55:E8:15:AC:F0:64:60:3F:8A:E3:F5:52:8A:5E:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/5bKPRm_QqbpBlNc2dNoKywZCqLk.roa Signing time: Fri 02 Jan 2026 06:18:51 +0000 ROA not before: Fri 02 Jan 2026 06:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 38913 IP address blocks: 88.214.28.0/22 maxlen: 22 88.214.28.0/24 maxlen: 24 2a09:8b00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.crl rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:df:ae:6e:f3:6d:b1:a3:7d:57:a6:35:0a:0a:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2037512e5355e815acf064603f8ae3f5528a5e3b Validity Not Before: Jan 2 06:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e5b28f466fd0a9ba4194d73674da0acb0642a8b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:be:b9:d4:23:29:c2:8e:38:71:26:9f:2d:6a: 60:3e:3b:e0:f9:d6:6b:ce:75:d8:2a:da:0d:ba:3f: eb:88:9d:39:1d:1e:3e:5e:7d:aa:a8:f8:20:40:58: 37:63:ae:11:1e:a7:26:7a:dc:08:85:95:a3:64:92: 0d:61:da:6c:0f:86:37:ce:87:bb:c9:13:7b:7b:95: a4:52:91:83:ea:20:07:59:bf:45:9e:1b:8c:29:4e: a5:e4:19:23:74:33:05:3c:ca:c6:c0:96:7a:5c:86: 1c:a0:d9:5e:f5:1f:2a:2c:c0:96:13:0b:11:18:cb: d8:80:64:7e:33:cd:5d:a8:6c:ac:2e:9d:66:51:dc: 42:6a:b7:2a:bf:5b:5a:da:88:a7:03:ad:6d:5a:7d: 4d:69:57:21:67:4f:94:57:d3:ce:ae:ff:7d:f5:e7: 1d:5d:fb:e5:b8:34:b5:9b:7d:ba:71:2c:37:5b:46: 3f:b9:95:77:79:c9:20:46:46:1a:bd:a7:b5:31:e1: 37:d0:fb:a6:50:95:b4:39:c5:15:31:69:78:92:0b: c1:59:29:a2:1b:c9:e8:c7:99:23:50:78:55:2f:ab: 37:1d:d3:6e:12:95:42:25:f3:c3:f5:e2:7e:2e:a9: 12:93:fa:8d:92:36:21:6d:26:49:f4:7e:f3:1c:bb: e6:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:B2:8F:46:6F:D0:A9:BA:41:94:D7:36:74:DA:0A:CB:06:42:A8:B9 X509v3 Authority Key Identifier: keyid:20:37:51:2E:53:55:E8:15:AC:F0:64:60:3F:8A:E3:F5:52:8A:5E:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/5bKPRm_QqbpBlNc2dNoKywZCqLk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.214.28.0/22 IPv6: 2a09:8b00::/29 Signature Algorithm: sha256WithRSAEncryption 98:ec:84:e9:a2:fa:3b:99:b6:f5:f6:36:fe:03:a1:0e:4c:f8: c1:5f:d0:91:16:d0:a2:3a:73:e6:d6:b3:5a:f8:72:86:80:99: 02:01:46:ea:8f:a8:f4:77:7a:f4:1e:88:4b:f2:4b:d3:fb:8b: e7:91:8d:96:b0:15:1a:1b:7c:df:50:e1:c1:45:c2:ec:ee:05: a6:8a:d2:82:92:19:85:00:4b:38:b0:26:19:b3:79:a4:af:9c: b0:a7:ca:2a:2e:e4:13:bc:63:00:f1:51:0f:3b:eb:e1:b4:07: 21:e2:54:6f:44:72:0c:c6:df:a2:d1:ca:3c:c2:13:a8:62:86: 8a:af:65:89:03:e0:55:78:d3:9a:7c:a7:6d:d3:e4:26:12:d4: a4:f3:f0:0a:f3:da:1e:4d:7d:bf:04:e1:1f:57:88:a7:d1:30: df:9a:31:f3:9a:8e:bc:20:21:a5:db:c4:49:a1:5d:3d:ba:57: ba:2a:ca:cd:66:d4:bb:e4:19:8b:3b:5e:d8:32:5d:a1:8b:fb: ca:43:16:4c:55:77:37:3a:70:da:55:ac:c4:d8:3c:db:3e:57: c0:7d:92:ba:1d:bb:eb:77:67:2f:1c:fa:8e:ca:c9:04:47:e3: cb:52:93:e5:13:19:a5:08:97:f0:de:b7:e2:aa:47:65:7a:f9: c0:fc:85:7d -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9W9+ubvNtsaN9V6Y1CgpFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwMzc1MTJlNTM1NWU4MTVhY2YwNjQ2MDNmOGFlM2Y1NTI4 YTVlM2IwHhcNMjYwMTAyMDYxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNWIyOGY0NjZmZDBhOWJhNDE5NGQ3MzY3NGRhMGFjYjA2NDJhOGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArb651CMpwo44cSafLWpgPjvg+dZr znXYKtoNuj/riJ05HR4+Xn2qqPggQFg3Y64RHqcmetwIhZWjZJINYdpsD4Y3zoe7 yRN7e5WkUpGD6iAHWb9FnhuMKU6l5BkjdDMFPMrGwJZ6XIYcoNle9R8qLMCWEwsR GMvYgGR+M81dqGysLp1mUdxCarcqv1ta2oinA61tWn1NaVchZ0+UV9POrv999ecd XfvluDS1m326cSw3W0Y/uZV3eckgRkYavae1MeE30PumUJW0OcUVMWl4kgvBWSmi G8nox5kjUHhVL6s3HdNuEpVCJfPD9eJ+LqkSk/qNkjYhbSZJ9H7zHLvmIQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOWyj0Zv0Km6QZTXNnTaCssGQqi5MB8GA1UdIwQY MBaAFCA3US5TVegVrPBkYD+K4/VSil47MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSURkUkxsTlY2QldzOEdSZ1A0cmo5VktLWGpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9iMTQ3NWQtZmNjMi00OGJiLWFlMDEt YzJiYTI0NjUzZjdiLzEvNWJLUFJtX1FxYnBCbE5jMmROb0t5d1pDcUxrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9iMTQ3NWQtZmNjMi00OGJiLWFlMDEtYzJiYTI0NjUzZjdi LzEvSURkUkxsTlY2QldzOEdSZ1A0cmo5VktLWGpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCWNYcMA0E AgACMAcDBQMqCYsAMA0GCSqGSIb3DQEBCwUAA4IBAQCY7ITpovo7mbb19jb+A6EO TPjBX9CRFtCiOnPm1rNa+HKGgJkCAUbqj6j0d3r0HohL8kvT+4vnkY2WsBUaG3zf UOHBRcLs7gWmitKCkhmFAEs4sCYZs3mkr5ywp8oqLuQTvGMA8VEPO+vhtAch4lRv RHIMxt+i0co8whOoYoaKr2WJA+BVeNOafKdt0+QmEtSk8/AK89oeTX2/BOEfV4in 0TDfmjHzmo68ICGl28RJoV09ule6KsrNZtS75BmLO17YMl2hi/vKQxZMVXc3OnDa VazE2DzbPlfAfZK6Hbvrd2cvHPqOyskER+PLUpPlExmlCJfw3rfiqkdlevnA/IV9 -----END CERTIFICATE-----Generated at Mon Jan 26 08:38:47 2026 by rpki-client