This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/rMIMTjbHaNV7xR9gPtw0A_pkuLU.roa File: rMIMTjbHaNV7xR9gPtw0A_pkuLU.roa (raw, json) Hash identifier: NFH0+DidyU00k9B3v8wVAxHBrFD7dy/UWv2YYeeqFAo= Subject key identifier: AC:C2:0C:4E:36:C7:68:D5:7B:C5:1F:60:3E:DC:34:03:FA:64:B8:B5 Certificate issuer: /CN=d5f264e3805a3d104537357a14ff926ac029599c Certificate serial: 019B79ED5B6C0527CC967159ED591AC7B271 Authority key identifier: D5:F2:64:E3:80:5A:3D:10:45:37:35:7A:14:FF:92:6A:C0:29:59:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/rMIMTjbHaNV7xR9gPtw0A_pkuLU.roa Signing time: Thu 01 Jan 2026 14:19:17 +0000 ROA not before: Thu 01 Jan 2026 14:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8772 IP address blocks: 185.36.102.0/24 maxlen: 24 2a05:4cc0::/29 maxlen: 48 2a05:4cc0:f1c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:5b:6c:05:27:cc:96:71:59:ed:59:1a:c7:b2:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5f264e3805a3d104537357a14ff926ac029599c Validity Not Before: Jan 1 14:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=acc20c4e36c768d57bc51f603edc3403fa64b8b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:78:81:c1:00:8a:44:e6:00:d6:b4:af:cb:5c: 81:4f:c4:bf:b2:aa:5c:8d:b1:4c:a8:8e:ff:d7:29: 53:29:d4:e9:23:a6:c7:7e:2d:04:31:eb:33:5e:60: d7:ae:f3:39:08:6b:94:ee:e0:ec:f7:00:c6:39:f4: 6a:d7:03:f3:c7:13:c0:11:26:2b:02:49:8a:62:19: ef:5d:44:7a:bc:fa:50:cb:06:ab:6b:5d:a2:50:06: 45:a8:88:f9:3a:63:6a:f1:d9:ec:59:14:d7:e4:88: 04:4d:55:50:66:3e:76:46:c6:4d:0f:f4:8e:b4:f7: 55:78:41:a9:cb:cb:f3:5b:b8:02:47:62:32:6c:46: 3e:20:f4:a6:b6:6e:f3:b0:53:77:40:f1:56:df:48: b9:dd:da:05:e7:2f:31:67:fc:d3:9f:a1:1a:25:43: ec:45:c3:c7:93:4b:9d:5a:88:3f:36:94:b3:8a:a9: 9f:f0:39:77:23:97:f4:29:24:45:34:ed:6f:ef:d9: 62:0e:2e:b4:21:2d:15:28:eb:5f:61:77:ff:24:de: fc:e6:92:0e:2a:57:e6:f2:ce:a8:3f:dc:14:a2:a2: 1b:db:ff:f3:28:b1:14:79:a9:88:60:d1:5c:e5:0f: ac:87:d8:d4:d3:d9:70:05:6c:22:40:06:c9:39:8a: 71:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:C2:0C:4E:36:C7:68:D5:7B:C5:1F:60:3E:DC:34:03:FA:64:B8:B5 X509v3 Authority Key Identifier: keyid:D5:F2:64:E3:80:5A:3D:10:45:37:35:7A:14:FF:92:6A:C0:29:59:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/rMIMTjbHaNV7xR9gPtw0A_pkuLU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.36.102.0/24 IPv6: 2a05:4cc0::/29 Signature Algorithm: sha256WithRSAEncryption 8b:fc:1a:d6:49:d8:d1:51:47:cc:d3:10:f9:d5:59:87:f6:9f: 89:c5:6f:34:18:32:81:75:9e:53:35:64:95:0c:16:73:c0:4a: 74:58:9a:10:b3:db:ea:19:19:6a:14:b9:a3:4c:91:e7:6a:67: 9f:b4:82:d3:5e:93:d6:2b:2c:ae:c1:0d:06:91:f0:db:6c:2d: 66:97:d3:da:7d:41:8e:8c:25:18:fd:4f:7d:33:d0:fb:e9:a8: 46:ae:36:29:24:fc:ee:59:2f:09:95:b1:f3:a6:b2:c1:ea:1e: 95:14:ff:d9:7b:2e:d5:50:91:e6:01:6c:8b:48:dd:f2:bb:b6: c1:7c:d5:b9:b5:43:9b:e4:e7:38:78:39:44:fc:47:96:16:aa: be:ed:c7:15:f3:ee:43:32:ed:a0:45:bb:b0:22:d9:14:81:3f: e6:a4:7b:39:3e:e5:56:43:22:d7:6e:47:d6:16:5a:65:e6:57: 0c:8a:13:15:63:32:9d:96:e3:e4:71:6e:dd:d7:9c:2b:9d:41: 71:5b:0e:cc:5e:1a:6d:a9:19:14:c3:4c:91:47:f5:48:27:c1: 65:33:15:f5:0d:09:8a:35:3e:f7:53:ce:bb:cb:9a:7b:2d:18: a8:b0:96:a2:ff:c9:57:b6:89:fd:a7:09:09:e4:3a:66:b0:9e: 67:b7:1c:b2 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt57VtsBSfMlnFZ7Vkax7JxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZjI2NGUzODA1YTNkMTA0NTM3MzU3YTE0ZmY5MjZhYzAy OTU5OWMwHhcNMjYwMTAxMTQxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhY2MyMGM0ZTM2Yzc2OGQ1N2JjNTFmNjAzZWRjMzQwM2ZhNjRiOGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XiBwQCKROYA1rSvy1yBT8S/sqpc jbFMqI7/1ylTKdTpI6bHfi0EMeszXmDXrvM5CGuU7uDs9wDGOfRq1wPzxxPAESYr AkmKYhnvXUR6vPpQywara12iUAZFqIj5OmNq8dnsWRTX5IgETVVQZj52RsZND/SO tPdVeEGpy8vzW7gCR2IybEY+IPSmtm7zsFN3QPFW30i53doF5y8xZ/zTn6EaJUPs RcPHk0udWog/NpSziqmf8Dl3I5f0KSRFNO1v79liDi60IS0VKOtfYXf/JN785pIO Klfm8s6oP9wUoqIb2//zKLEUeamIYNFc5Q+sh9jU09lwBWwiQAbJOYpxjQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKzCDE42x2jVe8UfYD7cNAP6ZLi1MB8GA1UdIwQY MBaAFNXyZOOAWj0QRTc1ehT/kmrAKVmcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWZKazQ0QmFQUkJGTnpWNkZQLVNhc0FwV1p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81ZDYzMmEtZTQ1My00MmE1LTgwNWYt M2RjZWNiY2EzNzAyLzEvck1JTVRqYkhhTlY3eFI5Z1B0dzBBX3BrdUxVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC81ZDYzMmEtZTQ1My00MmE1LTgwNWYtM2RjZWNiY2EzNzAy LzEvMWZKazQ0QmFQUkJGTnpWNkZQLVNhc0FwV1p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuSRmMA0E AgACMAcDBQMqBUzAMA0GCSqGSIb3DQEBCwUAA4IBAQCL/BrWSdjRUUfM0xD51VmH 9p+JxW80GDKBdZ5TNWSVDBZzwEp0WJoQs9vqGRlqFLmjTJHnameftILTXpPWKyyu wQ0GkfDbbC1ml9PafUGOjCUY/U99M9D76ahGrjYpJPzuWS8JlbHzprLB6h6VFP/Z ey7VUJHmAWyLSN3yu7bBfNW5tUOb5Oc4eDlE/EeWFqq+7ccV8+5DMu2gRbuwItkU gT/mpHs5PuVWQyLXbkfWFlpl5lcMihMVYzKdluPkcW7d15wrnUFxWw7MXhptqRkU w0yRR/VIJ8FlMxX1DQmKNT73U867y5p7LRiosJai/8lXton9pwkJ5DpmsJ5ntxyy -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:34 2026 by rpki-client