This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/5Po2qtadpqTNf7p3MMLaT46C8vE.roa File: 5Po2qtadpqTNf7p3MMLaT46C8vE.roa (raw, json) Hash identifier: nFjym/eYekZGGRObI9fvHB7nvqlWQEguTM24IpDntwA= Subject key identifier: E4:FA:36:AA:D6:9D:A6:A4:CD:7F:BA:77:30:C2:DA:4F:8E:82:F2:F1 Certificate issuer: /CN=cfc4c2ae338845efe7802deec234eae3f7b95f31 Certificate serial: 019B78343A8BFBD13ED3FE2E73E61908514B Authority key identifier: CF:C4:C2:AE:33:88:45:EF:E7:80:2D:EE:C2:34:EA:E3:F7:B9:5F:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8TCrjOIRe_ngC3uwjTq4_e5XzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/5Po2qtadpqTNf7p3MMLaT46C8vE.roa Signing time: Thu 01 Jan 2026 06:17:27 +0000 ROA not before: Thu 01 Jan 2026 06:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57043 IP address blocks: 185.244.40.0/24 maxlen: 24 185.247.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft rsync://rpki.ripe.net/repository/DEFAULT/z8TCrjOIRe_ngC3uwjTq4_e5XzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:3a:8b:fb:d1:3e:d3:fe:2e:73:e6:19:08:51:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfc4c2ae338845efe7802deec234eae3f7b95f31 Validity Not Before: Jan 1 06:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4fa36aad69da6a4cd7fba7730c2da4f8e82f2f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a3:8b:40:83:3e:01:86:a6:14:cc:d9:1c:b9: f7:45:37:cc:ae:fe:1c:88:07:a0:d2:00:59:c3:a6: ce:d8:d7:db:8b:93:ea:0d:72:27:f8:d7:1b:be:dc: 85:86:ca:28:38:6e:ae:9c:16:e3:5f:91:bc:92:2a: 75:f0:a8:1d:84:7e:56:c0:5b:10:d3:e1:37:f9:32: ba:04:72:ae:d7:0b:1a:e9:66:f0:43:d8:96:3f:37: 04:02:e0:ef:5d:17:0d:b2:41:5e:88:21:1c:83:78: 91:44:5f:2b:e3:b2:ae:94:e5:dd:a9:ab:18:db:0e: bc:c0:7f:13:97:f2:8b:1d:f8:4d:ea:69:fc:86:e4: fa:d2:13:c0:1e:9a:9b:16:aa:76:cb:fe:5d:ea:bc: a4:a6:d6:b3:5a:6a:5a:1e:e8:7d:cd:7a:a2:71:94: aa:fe:83:3f:aa:eb:98:76:b3:bb:26:d6:e7:a6:f4: b3:76:f2:56:8f:5c:fb:c2:c3:0b:16:6a:f1:3f:8c: e8:67:ae:c5:a1:a0:49:65:ec:d9:09:66:22:d7:16: 8b:77:fb:c7:9c:ff:64:e9:94:c5:c9:32:23:6d:e8: cf:f0:77:dc:0b:0c:e3:e5:01:8c:80:f2:d5:ad:96: 90:b5:58:7f:91:20:a9:61:3d:45:e7:11:6d:d7:2a: 62:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:FA:36:AA:D6:9D:A6:A4:CD:7F:BA:77:30:C2:DA:4F:8E:82:F2:F1 X509v3 Authority Key Identifier: keyid:CF:C4:C2:AE:33:88:45:EF:E7:80:2D:EE:C2:34:EA:E3:F7:B9:5F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8TCrjOIRe_ngC3uwjTq4_e5XzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/5Po2qtadpqTNf7p3MMLaT46C8vE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.244.40.0/24 185.247.143.0/24 Signature Algorithm: sha256WithRSAEncryption 90:46:1c:fe:2f:94:8d:a3:9e:14:2c:23:cb:33:13:a3:dc:5f: 9c:b8:c2:b5:cc:16:be:37:32:e6:fe:2f:d6:53:ed:8a:3f:cb: 23:c2:52:bc:c2:53:4d:28:c9:89:20:b6:c9:30:1c:f0:5c:6c: 0a:d2:9f:81:80:d4:c7:6d:80:af:a5:3e:4d:d1:b4:b3:80:c0: d9:44:bb:35:fb:5c:29:94:af:9a:98:a7:7b:96:40:d5:26:9a: 26:8d:c6:0a:70:a1:0e:54:ec:76:fd:68:bd:00:04:45:77:f5: 2c:7d:9f:d0:29:85:9d:cb:8f:af:a3:11:97:10:18:10:55:b3: 71:d6:cf:bd:80:fd:17:2e:c8:ef:98:54:30:fd:4e:36:f8:84: a3:9c:5d:aa:8d:bb:04:6c:5d:f4:5e:0b:a4:34:9d:52:d3:4d: b9:8d:4d:ce:fb:dc:79:2a:40:cf:c7:3a:1d:56:b0:01:0a:4b: 83:98:e0:24:ff:53:3a:8b:ad:7c:9c:c0:54:a7:77:8f:5c:d6: 7f:39:16:f6:57:63:65:6f:b5:2c:c5:78:01:3b:b7:8e:cd:4d: 3b:90:4e:d9:db:3a:c9:da:92:00:a4:e4:63:11:99:e6:93:98: c6:90:0d:95:d1:72:2a:58:39:79:aa:2e:df:dc:1a:b8:53:87: d2:9d:8f:25 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NDqL+9E+0/4uc+YZCFFLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmYzRjMmFlMzM4ODQ1ZWZlNzgwMmRlZWMyMzRlYWUzZjdi OTVmMzEwHhcNMjYwMTAxMDYxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNGZhMzZhYWQ2OWRhNmE0Y2Q3ZmJhNzczMGMyZGE0ZjhlODJmMmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaOLQIM+AYamFMzZHLn3RTfMrv4c iAeg0gBZw6bO2Nfbi5PqDXIn+NcbvtyFhsooOG6unBbjX5G8kip18KgdhH5WwFsQ 0+E3+TK6BHKu1wsa6WbwQ9iWPzcEAuDvXRcNskFeiCEcg3iRRF8r47KulOXdqasY 2w68wH8Tl/KLHfhN6mn8huT60hPAHpqbFqp2y/5d6rykptazWmpaHuh9zXqicZSq /oM/quuYdrO7JtbnpvSzdvJWj1z7wsMLFmrxP4zoZ67FoaBJZezZCWYi1xaLd/vH nP9k6ZTFyTIjbejP8HfcCwzj5QGMgPLVrZaQtVh/kSCpYT1F5xFt1ypiswIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOT6NqrWnaakzX+6dzDC2k+OgvLxMB8GA1UdIwQY MBaAFM/Ewq4ziEXv54At7sI06uP3uV8xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejhUQ3JqT0lSZV9uZ0MzdXdqVHE0X2U1WHpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS85NzY5MjUtMjU1MS00YjJiLTkwMGEt ZTExMWYzMjI2MzZhLzEvNVBvMnF0YWRwcVROZjdwM01NTGFUNDZDOHZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS85NzY5MjUtMjU1MS00YjJiLTkwMGEtZTExMWYzMjI2MzZh LzEvejhUQ3JqT0lSZV9uZ0MzdXdqVHE0X2U1WHpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAufQoAwQA ufePMA0GCSqGSIb3DQEBCwUAA4IBAQCQRhz+L5SNo54ULCPLMxOj3F+cuMK1zBa+ NzLm/i/WU+2KP8sjwlK8wlNNKMmJILbJMBzwXGwK0p+BgNTHbYCvpT5N0bSzgMDZ RLs1+1wplK+amKd7lkDVJpomjcYKcKEOVOx2/Wi9AARFd/UsfZ/QKYWdy4+voxGX EBgQVbNx1s+9gP0XLsjvmFQw/U42+ISjnF2qjbsEbF30XgukNJ1S0025jU3O+9x5 KkDPxzodVrABCkuDmOAk/1M6i618nMBUp3ePXNZ/ORb2V2Nlb7UsxXgBO7eOzU07 kE7Z2zrJ2pIApORjEZnmk5jGkA2V0XIqWDl5qi7f3Bq4U4fSnY8l -----END CERTIFICATE-----Generated at Sun Jan 25 17:39:22 2026 by rpki-client