This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/5XJcsA0Yt7Zdff_LSEdl66W_iVs.roa File: 5XJcsA0Yt7Zdff_LSEdl66W_iVs.roa (raw, json) Hash identifier: b2S+2HR2gX8LbhzerywHZG+Oq0Xjm9O6862mVOPJiR0= Subject key identifier: E5:72:5C:B0:0D:18:B7:B6:5D:7D:FF:CB:48:47:65:EB:A5:BF:89:5B Certificate issuer: /CN=0f9ba06b6d22673f7f7b3d0f889f4720441b6e0c Certificate serial: 019B7C7F3898BD98C048D4EE647DC28DE7C7 Authority key identifier: 0F:9B:A0:6B:6D:22:67:3F:7F:7B:3D:0F:88:9F:47:20:44:1B:6E:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5uga20iZz9_ez0PiJ9HIEQbbgw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/5XJcsA0Yt7Zdff_LSEdl66W_iVs.roa Signing time: Fri 02 Jan 2026 02:17:50 +0000 ROA not before: Fri 02 Jan 2026 02:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200249 IP address blocks: 185.252.140.0/22 maxlen: 22 185.252.140.0/24 maxlen: 24 185.252.141.0/24 maxlen: 24 185.252.142.0/24 maxlen: 24 185.252.143.0/24 maxlen: 24 2a13:7840::/29 maxlen: 29 2a13:7840::/32 maxlen: 32 2a13:7847::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.crl rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft rsync://rpki.ripe.net/repository/DEFAULT/D5uga20iZz9_ez0PiJ9HIEQbbgw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:38:98:bd:98:c0:48:d4:ee:64:7d:c2:8d:e7:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f9ba06b6d22673f7f7b3d0f889f4720441b6e0c Validity Not Before: Jan 2 02:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e5725cb00d18b7b65d7dffcb484765eba5bf895b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a7:3a:d1:e4:53:81:50:28:35:3f:50:b9:7e: 78:bf:4c:66:9d:19:b2:a4:e6:37:21:36:af:26:14: 7b:0b:0c:c6:a5:9f:d0:16:38:0d:83:ed:1e:0b:ae: c5:e4:1f:6d:bf:85:44:a3:a2:39:54:3d:c4:bb:db: d6:b7:12:84:bf:46:25:b7:62:26:79:f7:21:dd:ac: bf:c8:3f:94:82:0c:d6:98:2f:24:6f:a4:11:c1:c1: 14:46:57:cd:5a:1f:b6:99:17:a9:11:60:54:48:ea: 39:78:8a:d5:4f:ca:fb:cc:19:0e:3a:6c:36:77:f4: 87:0f:e1:df:66:91:d2:4f:45:86:cd:7b:56:46:82: a3:75:23:ea:fe:1a:76:72:4c:51:f3:1b:61:04:88: 1c:c3:38:44:ce:2e:f2:0e:20:6c:81:a6:2a:cb:ec: 89:6a:a8:37:48:e4:c1:a8:a5:b0:00:5c:c1:e6:a2: fe:3d:00:a4:2a:5e:8e:50:fe:23:14:2d:58:ce:e3: a7:57:30:e1:71:21:22:12:91:96:58:b7:61:bb:be: d9:a5:48:16:56:b9:29:77:4f:dc:22:cd:d1:16:b4: 14:0d:82:ff:84:25:c3:1a:14:15:69:48:27:fe:7e: a7:f0:71:6c:c0:27:33:4d:90:8c:16:75:f5:fe:ca: 23:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:72:5C:B0:0D:18:B7:B6:5D:7D:FF:CB:48:47:65:EB:A5:BF:89:5B X509v3 Authority Key Identifier: keyid:0F:9B:A0:6B:6D:22:67:3F:7F:7B:3D:0F:88:9F:47:20:44:1B:6E:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5uga20iZz9_ez0PiJ9HIEQbbgw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/5XJcsA0Yt7Zdff_LSEdl66W_iVs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.252.140.0/22 IPv6: 2a13:7840::/29 Signature Algorithm: sha256WithRSAEncryption a7:0b:1c:24:66:63:51:4c:55:20:5e:59:01:c9:2e:3e:62:48: 96:77:59:5e:93:46:42:a7:7e:ac:f4:c0:e6:41:c9:6a:5c:2c: da:17:2c:4f:e5:8d:d6:1a:cd:b0:b7:0b:81:98:93:c2:bf:5c: 82:72:56:e5:7f:f8:67:70:19:da:b0:27:6c:48:a5:b5:01:9f: 0c:08:17:8e:25:99:55:76:af:b6:4f:6d:75:68:b1:f8:cf:5d: 80:88:b4:9a:3c:94:83:7c:94:ac:41:e1:94:e1:0d:93:30:50: 2c:fb:36:50:91:0d:02:c1:c1:f1:91:b9:20:cf:b5:83:fe:48: c1:e4:6a:65:f4:b0:b4:ef:34:bf:8b:31:09:52:f9:0f:1b:9b: 74:c6:0d:18:d2:42:e2:be:00:9b:87:71:b6:74:ff:56:a5:bd: b1:81:d3:6f:59:9e:a7:e6:1d:3f:f3:94:98:2c:28:00:74:6c: f7:1c:44:bd:d6:a9:b9:48:8c:59:57:03:ad:d0:0d:cf:0a:af: 63:91:0a:9e:73:72:3a:f5:3f:27:b7:b4:cd:b5:91:66:6d:7f: 4f:e6:35:ed:1e:3a:31:62:fc:fb:39:e6:05:23:d0:c4:e4:7e: 80:65:55:e3:5e:f1:c5:fc:c7:98:70:7a:2a:09:22:d0:12:05: 1c:e4:65:0d -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8fziYvZjASNTuZH3CjefHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmOWJhMDZiNmQyMjY3M2Y3ZjdiM2QwZjg4OWY0NzIwNDQx YjZlMGMwHhcNMjYwMTAyMDIxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTcyNWNiMDBkMThiN2I2NWQ3ZGZmY2I0ODQ3NjVlYmE1YmY4OTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKc60eRTgVAoNT9QuX54v0xmnRmy pOY3ITavJhR7CwzGpZ/QFjgNg+0eC67F5B9tv4VEo6I5VD3Eu9vWtxKEv0Ylt2Im efch3ay/yD+UggzWmC8kb6QRwcEURlfNWh+2mRepEWBUSOo5eIrVT8r7zBkOOmw2 d/SHD+HfZpHST0WGzXtWRoKjdSPq/hp2ckxR8xthBIgcwzhEzi7yDiBsgaYqy+yJ aqg3SOTBqKWwAFzB5qL+PQCkKl6OUP4jFC1YzuOnVzDhcSEiEpGWWLdhu77ZpUgW Vrkpd0/cIs3RFrQUDYL/hCXDGhQVaUgn/n6n8HFswCczTZCMFnX1/sojoQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOVyXLANGLe2XX3/y0hHZeulv4lbMB8GA1UdIwQY MBaAFA+boGttImc/f3s9D4ifRyBEG24MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDV1Z2EyMGlaejlfZXowUGlKOUhJRVFiYmd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zN2M4ZmYtMTg3Zi00ZDkxLWI0ZDYt MTM2NjU2YTNlZGU3LzEvNVhKY3NBMFl0N1pkZmZfTFNFZGw2NldfaVZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8zN2M4ZmYtMTg3Zi00ZDkxLWI0ZDYtMTM2NjU2YTNlZGU3 LzEvRDV1Z2EyMGlaejlfZXowUGlKOUhJRVFiYmd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCufyMMA0E AgACMAcDBQMqE3hAMA0GCSqGSIb3DQEBCwUAA4IBAQCnCxwkZmNRTFUgXlkByS4+ YkiWd1lek0ZCp36s9MDmQclqXCzaFyxP5Y3WGs2wtwuBmJPCv1yCclblf/hncBna sCdsSKW1AZ8MCBeOJZlVdq+2T211aLH4z12AiLSaPJSDfJSsQeGU4Q2TMFAs+zZQ kQ0CwcHxkbkgz7WD/kjB5Gpl9LC07zS/izEJUvkPG5t0xg0Y0kLivgCbh3G2dP9W pb2xgdNvWZ6n5h0/85SYLCgAdGz3HES91qm5SIxZVwOt0A3PCq9jkQqec3I69T8n t7TNtZFmbX9P5jXtHjoxYvz7OeYFI9DE5H6AZVXjXvHF/MeYcHoqCSLQEgUc5GUN -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:52 2026 by rpki-client