This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/R5nQRJbnGIfuNPFQmSy5KyUN1Ng.roa File: R5nQRJbnGIfuNPFQmSy5KyUN1Ng.roa (raw, json) Hash identifier: S8J2YibhrFYHi+05w7dwd4Hy2ZPqL9ZfsTP/e0tcqoA= Subject key identifier: 47:99:D0:44:96:E7:18:87:EE:34:F1:50:99:2C:B9:2B:25:0D:D4:D8 Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab Certificate serial: 019B7E388788313AA195537D3256F7BD2285 Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/R5nQRJbnGIfuNPFQmSy5KyUN1Ng.roa Signing time: Fri 02 Jan 2026 10:19:52 +0000 ROA not before: Fri 02 Jan 2026 10:19:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49792 IP address blocks: 185.103.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:87:88:31:3a:a1:95:53:7d:32:56:f7:bd:22:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab Validity Not Before: Jan 2 10:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4799d04496e71887ee34f150992cb92b250dd4d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c6:e3:a0:61:ff:19:f9:ca:8f:ab:6c:48:e4: 98:a1:22:32:29:91:d5:38:aa:a8:dc:38:bc:9b:c6: 08:fc:97:08:84:bd:0e:b1:1e:df:f9:da:4d:17:3b: 27:1f:07:6b:e1:b7:ac:39:5a:35:60:ec:3b:76:34: 67:bc:be:f2:1a:f0:1d:7c:f8:0b:52:85:90:91:c9: aa:86:9d:8c:65:07:d4:8d:c1:29:69:05:65:cb:ab: 62:48:2a:72:7a:e7:0c:8c:44:3a:fa:39:df:d0:f7: 5d:a3:66:d8:a2:a7:80:b2:9b:a9:02:1a:d6:77:b8: 18:59:17:87:27:ec:0c:5c:96:bf:e1:c2:36:85:4f: a1:16:6c:e7:83:2b:2b:6c:0e:d7:ef:4c:c6:5f:e9: b8:79:16:09:25:ec:87:f6:f4:2d:75:57:02:ce:ed: 0e:e7:fb:c6:66:50:aa:4a:ae:a5:c6:99:7c:76:8f: 6d:b0:ba:95:0e:08:3e:a2:55:10:e2:1a:fc:fd:7e: 39:07:6f:86:f0:a8:6f:2f:98:3a:0a:e0:da:d4:b3: 76:c7:ef:ff:86:10:0b:79:4a:52:26:c5:76:9e:37: d9:36:96:19:49:c1:ba:ac:64:69:cb:71:99:de:bf: 3c:ac:a8:a3:76:be:b1:b2:a7:fa:12:36:6f:88:62: 32:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:99:D0:44:96:E7:18:87:EE:34:F1:50:99:2C:B9:2B:25:0D:D4:D8 X509v3 Authority Key Identifier: keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/R5nQRJbnGIfuNPFQmSy5KyUN1Ng.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.103.84.0/24 Signature Algorithm: sha256WithRSAEncryption 33:7b:0e:5a:d5:45:d5:e0:44:01:8a:14:da:52:03:a9:0f:96: e9:7c:54:be:cf:1d:15:84:bd:29:df:02:77:7e:b5:9d:6a:2c: 5a:ab:6a:7e:d1:be:a5:5b:8d:3c:56:86:76:4b:8e:d0:92:94: aa:f1:0b:17:d6:fb:04:59:e2:ff:18:ca:1d:4e:3f:4b:63:e3: 30:0c:41:d5:a4:f2:d8:d3:39:26:03:50:6a:6e:7a:c1:33:25: 16:67:88:ce:73:de:45:6e:99:eb:24:83:d9:2f:6b:74:9d:fa: 07:60:ac:eb:ca:c3:4d:18:74:0a:7d:f1:34:47:94:be:1a:1a: dd:88:18:4d:ff:17:21:b0:a1:b3:15:15:05:28:7e:fd:d5:2b: 58:48:8c:e0:ae:52:d5:44:5b:a3:d6:f3:a4:b1:d8:b6:45:c5: fe:3e:b9:23:ef:5f:30:68:de:f7:c9:50:0c:91:5e:65:39:a5: ef:04:93:8d:23:4d:49:64:f3:63:10:f2:fa:13:57:0d:f1:77: e1:f9:e9:71:ed:0f:c0:af:95:44:67:b9:e0:3b:da:5b:6d:9f: 9f:13:bf:79:4d:c0:17:b6:88:0a:51:27:8e:ec:87:ce:65:5f: 7b:51:6f:0e:38:96:5f:15:f0:e8:31:a0:26:38:20:98:40:a6: 2c:95:bd:21 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OIeIMTqhlVN9Mlb3vSKFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNmE0MzRjNGI1ZDIzOWM0ZTZlNDFiN2U1ODVjOGQ1OGY4 OTk1YWIwHhcNMjYwMTAyMTAxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Nzk5ZDA0NDk2ZTcxODg3ZWUzNGYxNTA5OTJjYjkyYjI1MGRkNGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMbjoGH/GfnKj6tsSOSYoSIyKZHV OKqo3Di8m8YI/JcIhL0OsR7f+dpNFzsnHwdr4besOVo1YOw7djRnvL7yGvAdfPgL UoWQkcmqhp2MZQfUjcEpaQVly6tiSCpyeucMjEQ6+jnf0Pddo2bYoqeAspupAhrW d7gYWReHJ+wMXJa/4cI2hU+hFmzngysrbA7X70zGX+m4eRYJJeyH9vQtdVcCzu0O 5/vGZlCqSq6lxpl8do9tsLqVDgg+olUQ4hr8/X45B2+G8KhvL5g6CuDa1LN2x+// hhALeUpSJsV2njfZNpYZScG6rGRpy3GZ3r88rKijdr6xsqf6EjZviGIyOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEeZ0ESW5xiH7jTxUJksuSslDdTYMB8GA1UdIwQY MBaAFC9qQ0xLXSOcTm5Bt+WFyNWPiZWrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWIt NDBiNmQ2N2ZjZDk0LzEvUjVuUVJKYm5HSWZ1TlBGUW1TeTVLeVVOMU5nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWItNDBiNmQ2N2ZjZDk0 LzEvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWdUMA0G CSqGSIb3DQEBCwUAA4IBAQAzew5a1UXV4EQBihTaUgOpD5bpfFS+zx0VhL0p3wJ3 frWdaixaq2p+0b6lW408VoZ2S47QkpSq8QsX1vsEWeL/GModTj9LY+MwDEHVpPLY 0zkmA1BqbnrBMyUWZ4jOc95FbpnrJIPZL2t0nfoHYKzrysNNGHQKffE0R5S+Ghrd iBhN/xchsKGzFRUFKH791StYSIzgrlLVRFuj1vOksdi2RcX+Prkj718waN73yVAM kV5lOaXvBJONI01JZPNjEPL6E1cN8Xfh+elx7Q/Ar5VEZ7ngO9pbbZ+fE795TcAX togKUSeO7IfOZV97UW8OOJZfFfDoMaAmOCCYQKYslb0h -----END CERTIFICATE-----Generated at Mon Jan 26 08:38:46 2026 by rpki-client