This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5O8sHSt3JN07H1Lqi8batBu6zvA.roa File: 5O8sHSt3JN07H1Lqi8batBu6zvA.roa (raw, json) Hash identifier: 8Jzog+Wf9sVSVjtzmRy6dV4OlVSoBW5Y6vI41ai2ymQ= Subject key identifier: E4:EF:2C:1D:2B:77:24:DD:3B:1F:52:EA:8B:C6:DA:B4:1B:BA:CE:F0 Certificate issuer: /CN=e4c86da3f483246518d368034bc86113906a55a3 Certificate serial: 019BDBA10564C416B9885196194323FE10C6 Authority key identifier: E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5O8sHSt3JN07H1Lqi8batBu6zvA.roa Signing time: Tue 20 Jan 2026 13:38:41 +0000 ROA not before: Tue 20 Jan 2026 13:38:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29512 IP address blocks: 79.110.0.0/20 maxlen: 24 195.140.236.0/22 maxlen: 24 2a00:fbc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.mft rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 01:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:db:a1:05:64:c4:16:b9:88:51:96:19:43:23:fe:10:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4c86da3f483246518d368034bc86113906a55a3 Validity Not Before: Jan 20 13:38:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4ef2c1d2b7724dd3b1f52ea8bc6dab41bbacef0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:34:c9:5d:2e:9f:ce:de:42:c0:37:6b:0c:ae: 54:b0:ce:64:40:ae:17:c1:51:29:a9:16:94:ea:b4: c9:9c:da:6f:10:6a:bc:86:60:a9:56:05:a6:c2:2d: 69:2a:bb:17:ce:80:d6:3f:7d:51:9d:51:61:13:2c: 45:50:de:2c:2b:39:3e:3a:d8:28:43:e1:86:12:2b: 3d:ac:ad:44:31:7c:28:ec:29:7f:d2:3b:21:08:fd: 98:12:da:50:b5:30:43:bd:b7:58:41:66:fb:40:03: 6d:dd:cf:51:fc:fb:2d:79:78:e5:5d:8b:21:46:bf: 6c:20:ce:ec:3e:0d:ba:ce:8e:5d:6e:96:4a:db:0c: ca:3d:a2:3a:5a:ec:e8:e3:c4:cb:41:dc:bf:24:ba: f8:71:9f:e8:a8:cc:a5:e5:11:5f:58:81:17:62:86: 52:a0:33:3f:e8:3f:74:c7:16:c6:86:eb:73:3a:bf: c5:ee:1e:56:27:97:15:1e:03:7b:1f:a8:de:c5:61: 1e:1b:9c:f0:9b:b3:07:3f:98:98:01:58:ce:bb:86: 8e:21:4e:1a:81:50:19:6c:87:54:97:69:dc:05:30: 8c:95:9d:62:75:60:b6:06:6b:4e:14:96:2c:0e:ae: 8c:c5:4f:48:77:d1:b4:ea:3d:18:7b:85:b0:68:c7: e0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:EF:2C:1D:2B:77:24:DD:3B:1F:52:EA:8B:C6:DA:B4:1B:BA:CE:F0 X509v3 Authority Key Identifier: keyid:E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5O8sHSt3JN07H1Lqi8batBu6zvA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.110.0.0/20 195.140.236.0/22 IPv6: 2a00:fbc0::/29 Signature Algorithm: sha256WithRSAEncryption 7e:85:75:65:92:e2:72:bc:b8:15:6c:0d:66:85:dc:4b:c1:94: ec:90:50:da:f5:24:2a:9d:fb:8c:d6:f3:5b:f1:a2:de:27:b7: fa:c8:2f:4f:1e:50:e2:2a:04:05:53:d3:00:ce:d9:d9:2c:2d: 4b:c8:3e:e2:ca:e1:a3:c2:99:6a:9f:49:02:f6:6a:fa:94:b4: 9a:6a:1f:00:5d:74:63:61:d0:54:4a:cf:58:8d:80:ce:33:2e: 26:ed:09:4a:21:e8:c7:8c:c6:2d:0e:e3:28:40:fe:c3:bc:9b: 10:fd:b6:57:75:8f:3b:4c:a4:dc:2d:71:42:e8:fe:28:fa:b9: a1:56:9e:81:c9:ab:18:84:f3:60:01:2b:af:47:cd:99:8e:04: 1c:f7:3a:c8:8b:fc:2c:16:86:a3:cb:58:29:51:eb:8f:ca:a7: 3c:81:e1:25:96:18:6b:6c:d3:2e:73:48:b2:bc:d6:b8:d6:cd: 35:d4:b6:67:6e:f2:68:b8:94:83:50:6c:96:29:c2:ca:6c:69: da:d7:82:6e:bc:25:15:3f:af:cd:12:8c:75:9e:54:1e:1a:c5: 0e:91:b2:17:a8:27:32:f8:09:61:96:d0:71:78:ca:c6:d2:66: 24:1c:f0:f5:2f:05:a0:23:a4:d6:a4:a1:87:3f:4f:eb:d3:d8: 14:19:c5:1d -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZvboQVkxBa5iFGWGUMj/hDGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0Yzg2ZGEzZjQ4MzI0NjUxOGQzNjgwMzRiYzg2MTEzOTA2 YTU1YTMwHhcNMjYwMTIwMTMzODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNGVmMmMxZDJiNzcyNGRkM2IxZjUyZWE4YmM2ZGFiNDFiYmFjZWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDTJXS6fzt5CwDdrDK5UsM5kQK4X wVEpqRaU6rTJnNpvEGq8hmCpVgWmwi1pKrsXzoDWP31RnVFhEyxFUN4sKzk+Otgo Q+GGEis9rK1EMXwo7Cl/0jshCP2YEtpQtTBDvbdYQWb7QANt3c9R/PsteXjlXYsh Rr9sIM7sPg26zo5dbpZK2wzKPaI6Wuzo48TLQdy/JLr4cZ/oqMyl5RFfWIEXYoZS oDM/6D90xxbGhutzOr/F7h5WJ5cVHgN7H6jexWEeG5zwm7MHP5iYAVjOu4aOIU4a gVAZbIdUl2ncBTCMlZ1idWC2BmtOFJYsDq6MxU9Id9G06j0Ye4WwaMfgcQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFOTvLB0rdyTdOx9S6ovG2rQbus7wMB8GA1UdIwQY MBaAFOTIbaP0gyRlGNNoA0vIYROQalWjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNU1odG9fU0RKR1VZMDJnRFM4aGhFNUJxVmFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9iNGU1MDMtNTc0Yi00NTY1LTkyMTct YzUxMWEzZTkxMmI2LzEvNU84c0hTdDNKTjA3SDFMcWk4YmF0QnU2enZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9iNGU1MDMtNTc0Yi00NTY1LTkyMTctYzUxMWEzZTkxMmI2 LzEvNU1odG9fU0RKR1VZMDJnRFM4aGhFNUJxVmFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQET24AAwQC w4zsMA0EAgACMAcDBQMqAPvAMA0GCSqGSIb3DQEBCwUAA4IBAQB+hXVlkuJyvLgV bA1mhdxLwZTskFDa9SQqnfuM1vNb8aLeJ7f6yC9PHlDiKgQFU9MAztnZLC1LyD7i yuGjwplqn0kC9mr6lLSaah8AXXRjYdBUSs9YjYDOMy4m7QlKIejHjMYtDuMoQP7D vJsQ/bZXdY87TKTcLXFC6P4o+rmhVp6ByasYhPNgASuvR82ZjgQc9zrIi/wsFoaj y1gpUeuPyqc8geEllhhrbNMuc0iyvNa41s011LZnbvJouJSDUGyWKcLKbGna14Ju vCUVP6/NEox1nlQeGsUOkbIXqCcy+AlhltBxeMrG0mYkHPD1LwWgI6TWpKGHP0/r 09gUGcUd -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:28 2026 by rpki-client