This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/5MS9Zy98YuF3Bcrl6mc6yIWJ4-M.roa File: 5MS9Zy98YuF3Bcrl6mc6yIWJ4-M.roa (raw, json) Hash identifier: b+PbHQ1e20uIzoz27PMH3G/dgeCEzPhT1xUbwe84ub8= Subject key identifier: E4:C4:BD:67:2F:7C:62:E1:77:05:CA:E5:EA:67:3A:C8:85:89:E3:E3 Certificate issuer: /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6 Certificate serial: 019B7CEDCA6FEE0CBB79507E8B4402ECD68D Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/5MS9Zy98YuF3Bcrl6mc6yIWJ4-M.roa Signing time: Fri 02 Jan 2026 04:18:37 +0000 ROA not before: Fri 02 Jan 2026 04:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34056 IP address blocks: 46.229.48.0/22 maxlen: 22 92.244.96.0/19 maxlen: 19 109.108.64.0/19 maxlen: 19 2a00:1688::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:ca:6f:ee:0c:bb:79:50:7e:8b:44:02:ec:d6:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6 Validity Not Before: Jan 2 04:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4c4bd672f7c62e17705cae5ea673ac88589e3e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:17:b0:e0:8f:1c:a2:72:2f:95:89:47:ef:9f: c1:6d:16:2c:1b:35:b4:07:27:f3:84:32:26:9b:ca: 6a:02:1a:03:b7:28:cb:7a:13:aa:76:52:17:78:9b: 6c:1f:cb:5c:2d:78:06:01:57:2e:d5:62:9b:3e:d3: 39:3a:4e:d9:70:5c:5c:cf:d1:fc:9a:48:8f:54:0b: 26:16:6e:a5:8e:42:07:2c:ca:68:a3:9b:24:6f:a3: f3:f4:d7:40:c7:9a:eb:da:54:a9:99:05:5e:6f:c3: 1d:28:bb:9a:d3:96:ab:26:bc:a1:db:43:94:8a:08: 22:19:61:db:50:ee:ef:9e:3f:54:8c:59:29:a2:0a: c1:59:e4:81:37:ed:6e:c7:97:02:74:30:0a:67:83: 3c:31:10:dd:97:f9:fa:e7:25:1e:2c:f7:5b:88:e0: 1a:4e:17:2e:8a:41:70:ec:27:53:d5:0b:e1:73:ad: 86:46:29:a4:c9:5b:9d:7c:94:04:1e:8c:0d:ed:ef: ed:0b:05:e1:c6:78:aa:8c:69:28:e1:0a:bd:46:6d: ea:14:92:7a:d0:91:04:df:a1:0d:43:dc:ea:62:ee: be:08:12:b1:0b:de:b5:27:6c:f6:fd:71:da:b4:5a: d3:ec:8a:30:74:80:f2:79:3f:49:db:a4:61:42:e1: 0c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:C4:BD:67:2F:7C:62:E1:77:05:CA:E5:EA:67:3A:C8:85:89:E3:E3 X509v3 Authority Key Identifier: keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/5MS9Zy98YuF3Bcrl6mc6yIWJ4-M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.229.48.0/22 92.244.96.0/19 109.108.64.0/19 IPv6: 2a00:1688::/48 Signature Algorithm: sha256WithRSAEncryption 90:fa:b2:8d:cf:6f:5b:0c:24:d0:17:41:cd:a9:a1:22:a6:92: 71:05:d6:8f:31:ac:7a:9b:4f:8d:98:c0:36:1c:6b:9e:16:2c: 7a:10:04:13:7a:15:ea:e6:af:33:fe:0b:0b:28:7a:3d:a9:15: 38:b2:0a:cf:fc:d4:e6:26:45:5b:04:dd:11:4b:a5:35:4a:2e: 3e:82:39:d6:3f:9b:c8:cc:0e:ce:f1:58:17:e3:b0:a3:34:3e: de:00:2f:b0:96:cd:0f:81:14:7d:ad:11:a0:9c:f4:dc:04:2a: 68:db:79:31:b6:81:7a:97:9a:7c:a3:c9:87:cc:59:c3:f1:17: 74:e5:59:0a:b4:6b:2c:67:6f:3b:8f:17:eb:b9:36:5f:d5:5b: 07:1b:ee:f3:33:f4:d1:07:39:73:f5:13:fc:40:23:10:8b:f6: a4:56:48:1b:67:f6:1b:a3:1c:b9:4d:6d:88:32:b2:80:cc:6a: 76:b0:83:dc:70:e6:c6:47:0d:03:f8:18:2d:17:5a:ab:44:d6: 6e:66:99:6c:1c:ea:ee:a3:55:74:b4:f4:80:eb:65:0a:2f:5d: 0e:94:72:51:66:09:4b:80:5e:5b:68:d3:ab:65:b5:e7:65:00: 4f:37:14:bd:15:47:a7:04:b2:64:d0:a0:40:cf:d5:ee:3a:b8: 59:3d:f4:2e -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt87cpv7gy7eVB+i0QC7NaNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YmNjMTJhZmE0ZjA1NzM5ZjQ1ZjYwNWUyMjFjNjRjM2Mw ZDJlZDYwHhcNMjYwMTAyMDQxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNGM0YmQ2NzJmN2M2MmUxNzcwNWNhZTVlYTY3M2FjODg1ODllM2UzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhew4I8conIvlYlH75/BbRYsGzW0 ByfzhDImm8pqAhoDtyjLehOqdlIXeJtsH8tcLXgGAVcu1WKbPtM5Ok7ZcFxcz9H8 mkiPVAsmFm6ljkIHLMpoo5skb6Pz9NdAx5rr2lSpmQVeb8MdKLua05arJryh20OU iggiGWHbUO7vnj9UjFkpogrBWeSBN+1ux5cCdDAKZ4M8MRDdl/n65yUeLPdbiOAa ThcuikFw7CdT1Qvhc62GRimkyVudfJQEHowN7e/tCwXhxniqjGko4Qq9Rm3qFJJ6 0JEE36ENQ9zqYu6+CBKxC961J2z2/XHatFrT7IowdIDyeT9J26RhQuEMEQIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFOTEvWcvfGLhdwXK5epnOsiFiePjMB8GA1UdIwQY MBaAFKS8wSr6TwVzn0X2BeIhxkw8DS7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9iYjE0MGEtMmEyMS00ZjVmLWJkY2Mt ODhiMDE2YmJkNTgxLzEvNU1TOVp5OThZdUYzQmNybDZtYzZ5SVdKNC1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9iYjE0MGEtMmEyMS00ZjVmLWJkY2MtODhiMDE2YmJkNTgx LzEvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQCLuUwAwQF XPRgAwQFbWxAMA8EAgACMAkDBwAqABaIAAAwDQYJKoZIhvcNAQELBQADggEBAJD6 so3Pb1sMJNAXQc2poSKmknEF1o8xrHqbT42YwDYca54WLHoQBBN6FermrzP+Cwso ej2pFTiyCs/81OYmRVsE3RFLpTVKLj6COdY/m8jMDs7xWBfjsKM0Pt4AL7CWzQ+B FH2tEaCc9NwEKmjbeTG2gXqXmnyjyYfMWcPxF3TlWQq0ayxnbzuPF+u5Nl/VWwcb 7vMz9NEHOXP1E/xAIxCL9qRWSBtn9hujHLlNbYgysoDManawg9xw5sZHDQP4GC0X WqtE1m5mmWwc6u6jVXS09IDrZQovXQ6UclFmCUuAXlto06tltedlAE83FL0VR6cE smTQoEDP1e46uFk99C4= -----END CERTIFICATE-----Generated at Mon Jan 26 07:07:24 2026 by rpki-client