This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/Rvm5rSSeIZS_AAhhScN4O4hKgEc.roa File: Rvm5rSSeIZS_AAhhScN4O4hKgEc.roa (raw, json) Hash identifier: 5B1/cH7ZyFaYXNObYZVOWqpCnjLnry0zv0tSLtmdFIQ= Subject key identifier: 46:F9:B9:AD:24:9E:21:94:BF:00:08:61:49:C3:78:3B:88:4A:80:47 Certificate issuer: /CN=5975d519de239cf164cb94a6660c2530ceaef254 Certificate serial: 019B7910AB1DB3E4F957546EF43DD2CD7B14 Authority key identifier: 59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/Rvm5rSSeIZS_AAhhScN4O4hKgEc.roa Signing time: Thu 01 Jan 2026 10:18:14 +0000 ROA not before: Thu 01 Jan 2026 10:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48747 IP address blocks: 85.11.152.0/24 maxlen: 24 85.11.153.0/24 maxlen: 24 85.11.154.0/24 maxlen: 24 85.11.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:ab:1d:b3:e4:f9:57:54:6e:f4:3d:d2:cd:7b:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5975d519de239cf164cb94a6660c2530ceaef254 Validity Not Before: Jan 1 10:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=46f9b9ad249e2194bf00086149c3783b884a8047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:37:cc:58:e0:1c:eb:f8:b3:9d:21:63:69:38: f7:6e:f6:80:40:f5:be:c7:55:95:44:82:98:da:5b: 38:ba:d0:07:d2:62:fe:ec:be:b7:e7:23:16:b6:df: 06:2a:dd:1f:f5:33:8a:70:92:b1:de:c7:31:e2:53: 29:52:f0:66:46:43:03:78:de:1d:a2:7c:5a:08:d6: fa:ca:ca:64:1c:26:ef:00:97:b0:07:56:9d:33:2a: 54:4e:50:6a:f2:11:16:8d:54:0f:0a:89:32:2d:fb: 81:a0:bd:5d:ac:7d:06:af:62:1e:59:45:93:2a:a1: c5:78:9a:00:f3:89:49:eb:20:42:7c:a0:73:63:43: 44:ed:1e:1f:42:30:d6:34:c2:ce:20:b5:a5:42:79: 48:ff:7b:97:ac:b2:f3:d3:c2:9a:6f:b5:25:2c:fb: e8:d6:f0:c6:db:6b:0e:55:a8:71:95:42:09:ef:c6: 71:f9:85:bb:38:02:1d:cc:4d:6f:fb:1e:95:8b:56: f1:32:20:88:7a:b9:27:d4:55:84:4a:7c:6b:ec:0f: 2d:4b:66:f0:c9:8d:db:06:cb:f9:8f:41:2a:50:40: db:17:4b:fd:46:55:44:41:6d:59:96:5a:76:23:3d: 12:81:ca:92:47:56:8a:ea:7d:d2:7e:ec:25:0b:b7: 69:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:F9:B9:AD:24:9E:21:94:BF:00:08:61:49:C3:78:3B:88:4A:80:47 X509v3 Authority Key Identifier: keyid:59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/Rvm5rSSeIZS_AAhhScN4O4hKgEc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.11.152.0/22 Signature Algorithm: sha256WithRSAEncryption 98:f1:29:03:b0:32:56:2d:8b:85:81:12:74:83:4c:05:54:ef: c1:06:77:5f:ab:d2:2c:f7:75:08:81:37:49:cb:bd:4f:20:2c: b0:7f:e0:6e:43:f7:61:7b:c7:3f:72:78:49:48:d6:7f:66:d2: 3c:64:a8:2a:cf:db:0e:73:86:fc:ed:e0:a4:ca:35:b1:43:38: 0a:7c:6c:31:f0:b3:e0:e2:d1:2c:cd:9f:b1:4c:85:b3:46:13: 4a:f9:c5:34:8e:f4:33:cd:fc:74:67:02:67:58:12:11:ef:c8: 4b:95:fa:33:df:70:b7:c9:79:af:b8:43:a0:af:b0:55:79:61: 05:ef:b8:be:98:78:2c:04:56:b6:27:f3:59:75:45:77:1a:eb: 3d:52:61:3e:d0:75:da:79:7b:a8:df:62:5f:4f:ed:f6:b5:20: 84:b3:4d:ae:19:40:ed:9c:1f:f4:ab:74:d1:47:62:1c:69:ef: 4f:b4:e9:bd:ea:6a:eb:04:9a:9a:16:dd:34:c6:d8:30:c2:a6: 35:31:ec:0d:0b:f1:49:fe:bc:53:07:c6:6e:ac:64:fb:a1:93: 46:1a:12:0c:56:7f:c5:3a:c4:67:f1:51:40:a5:fe:dd:1c:cb: 71:bc:5c:cd:60:1d:c5:58:24:48:d9:99:9f:e5:6b:3c:00:fe: fd:96:e1:c4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EKsds+T5V1Ru9D3SzXsUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NzVkNTE5ZGUyMzljZjE2NGNiOTRhNjY2MGMyNTMwY2Vh ZWYyNTQwHhcNMjYwMTAxMTAxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NmY5YjlhZDI0OWUyMTk0YmYwMDA4NjE0OWMzNzgzYjg4NGE4MDQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTfMWOAc6/iznSFjaTj3bvaAQPW+ x1WVRIKY2ls4utAH0mL+7L635yMWtt8GKt0f9TOKcJKx3scx4lMpUvBmRkMDeN4d onxaCNb6yspkHCbvAJewB1adMypUTlBq8hEWjVQPCokyLfuBoL1drH0Gr2IeWUWT KqHFeJoA84lJ6yBCfKBzY0NE7R4fQjDWNMLOILWlQnlI/3uXrLLz08Kab7UlLPvo 1vDG22sOVahxlUIJ78Zx+YW7OAIdzE1v+x6Vi1bxMiCIerkn1FWESnxr7A8tS2bw yY3bBsv5j0EqUEDbF0v9RlVEQW1Zllp2Iz0SgcqSR1aK6n3SfuwlC7dpOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEb5ua0kniGUvwAIYUnDeDuISoBHMB8GA1UdIwQY MBaAFFl11RneI5zxZMuUpmYMJTDOrvJUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1hYVkdkNGpuUEZreTVTbVpnd2xNTTZ1OGxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8wYzBjMzctYjQwMS00MDFiLWFhNjUt MmNjNjc1NzI2OTc1LzEvUnZtNXJTU2VJWlNfQUFoaFNjTjRPNGhLZ0VjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS8wYzBjMzctYjQwMS00MDFiLWFhNjUtMmNjNjc1NzI2OTc1 LzEvV1hYVkdkNGpuUEZreTVTbVpnd2xNTTZ1OGxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVQuYMA0G CSqGSIb3DQEBCwUAA4IBAQCY8SkDsDJWLYuFgRJ0g0wFVO/BBndfq9Is93UIgTdJ y71PICywf+BuQ/dhe8c/cnhJSNZ/ZtI8ZKgqz9sOc4b87eCkyjWxQzgKfGwx8LPg 4tEszZ+xTIWzRhNK+cU0jvQzzfx0ZwJnWBIR78hLlfoz33C3yXmvuEOgr7BVeWEF 77i+mHgsBFa2J/NZdUV3Gus9UmE+0HXaeXuo32JfT+32tSCEs02uGUDtnB/0q3TR R2Icae9PtOm96mrrBJqaFt00xtgwwqY1MewNC/FJ/rxTB8ZurGT7oZNGGhIMVn/F OsRn8VFApf7dHMtxvFzNYB3FWCRI2Zmf5Ws8AP79luHE -----END CERTIFICATE-----Generated at Sun Jan 25 07:15:23 2026 by rpki-client