This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/S85KGuABcO7n_bO4AIe1ewK8q8g.roa File: S85KGuABcO7n_bO4AIe1ewK8q8g.roa (raw, json) Hash identifier: DRQavnwTOz4wK0AYi2a4Xmr2tC3b2FoHqOFT/oiiTE8= Subject key identifier: 4B:CE:4A:1A:E0:01:70:EE:E7:FD:B3:B8:00:87:B5:7B:02:BC:AB:C8 Certificate issuer: /CN=533eead413a1705fbfcb2adbe90c69f055e275da Certificate serial: 019B7BA3BE22E638F33B01BC4A05077F1202 Authority key identifier: 53:3E:EA:D4:13:A1:70:5F:BF:CB:2A:DB:E9:0C:69:F0:55:E2:75:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/S85KGuABcO7n_bO4AIe1ewK8q8g.roa Signing time: Thu 01 Jan 2026 22:18:07 +0000 ROA not before: Thu 01 Jan 2026 22:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31034 IP address blocks: 5.182.240.0/22 maxlen: 24 149.3.144.0/21 maxlen: 24 185.77.84.0/22 maxlen: 24 185.205.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.crl rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft rsync://rpki.ripe.net/repository/DEFAULT/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:be:22:e6:38:f3:3b:01:bc:4a:05:07:7f:12:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=533eead413a1705fbfcb2adbe90c69f055e275da Validity Not Before: Jan 1 22:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4bce4a1ae00170eee7fdb3b80087b57b02bcabc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:9e:ac:a1:f3:44:74:a8:3b:13:bc:8a:99:32: 68:20:a1:4f:69:4f:5d:26:77:79:21:9c:46:b0:3b: 1c:40:d6:51:83:b6:7b:29:c6:5b:a6:98:72:82:b3: ae:d2:86:64:d4:fe:42:d4:ae:26:98:a3:b1:bb:01: 25:77:e4:f8:35:a1:e6:2b:d6:c5:e3:84:a6:81:7a: a6:98:9b:f7:7b:20:4a:70:4c:9f:da:4c:1c:c7:23: 0c:f3:27:85:19:84:a1:62:5f:40:35:35:ed:61:03: b4:1d:bf:a9:cf:f4:8d:1e:3b:5f:52:5f:05:5f:cd: e0:c1:d2:2c:dd:05:30:ef:03:57:6f:10:bc:d3:ab: bb:1b:cf:4f:5a:fa:7b:02:77:73:00:97:38:88:b3: 45:04:4b:0d:c7:4b:1c:c5:b1:4a:8b:b2:43:38:c3: 12:fb:31:61:a6:42:b0:92:7d:19:0d:3d:97:7e:b0: e5:c8:ea:77:d1:76:41:c8:52:7b:9b:3a:35:61:52: 49:4e:ab:87:45:f1:81:97:8b:63:7f:02:3f:ea:90: 6e:61:73:67:80:df:38:27:8c:47:da:05:72:07:8d: c7:63:93:b0:54:2e:16:ab:5d:a9:56:3a:03:43:23: 61:67:85:ba:58:6a:b1:c3:6a:48:e4:16:46:05:29: f0:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:CE:4A:1A:E0:01:70:EE:E7:FD:B3:B8:00:87:B5:7B:02:BC:AB:C8 X509v3 Authority Key Identifier: keyid:53:3E:EA:D4:13:A1:70:5F:BF:CB:2A:DB:E9:0C:69:F0:55:E2:75:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/S85KGuABcO7n_bO4AIe1ewK8q8g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.240.0/22 149.3.144.0/21 185.77.84.0/22 185.205.40.0/22 Signature Algorithm: sha256WithRSAEncryption 5f:7f:7a:f0:ea:27:5f:6c:6a:4b:87:99:76:78:58:00:e8:b3: cc:d6:56:bb:79:06:a2:18:13:ab:a8:89:5f:44:42:2f:8e:d5: cc:ec:e6:36:a6:15:88:da:bd:ff:bb:07:c5:e2:15:b5:07:2e: 0c:84:5c:cc:4c:52:8d:20:d5:10:7b:da:45:9f:26:41:41:1a: 2f:5c:3f:92:1f:ef:63:02:33:8b:ef:f1:f7:d8:8c:e6:ef:70: 71:8f:41:75:46:d9:00:86:72:4a:cd:29:ac:b8:ab:03:b3:5d: 81:26:70:83:ed:d8:0b:c9:58:33:11:95:17:1e:1c:96:b9:e2: 9a:6b:1f:ca:d8:1d:65:c3:81:e7:bc:01:04:d2:e7:67:bf:7d: 27:05:ad:f9:7d:52:7a:ab:75:97:60:65:f4:0a:a7:93:5e:45: 50:c4:bf:ff:80:df:b8:6c:23:7b:21:42:d9:bf:d1:27:3a:92: 61:4e:73:3b:31:22:30:e0:91:8d:c6:24:59:8a:72:a9:77:0d: b8:59:48:fe:f6:8b:eb:fb:fa:5d:ac:d0:c8:0a:73:6a:ab:69: fe:1e:bf:d4:e0:6b:43:67:34:06:0d:a3:f6:6b:05:3f:ee:de: e2:85:a5:98:7e:bf:48:b2:4e:6a:c5:2e:fa:81:1a:9a:7a:59: 97:65:85:0d -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt7o74i5jjzOwG8SgUHfxICMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzM2VlYWQ0MTNhMTcwNWZiZmNiMmFkYmU5MGM2OWYwNTVl Mjc1ZGEwHhcNMjYwMTAxMjIxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YmNlNGExYWUwMDE3MGVlZTdmZGIzYjgwMDg3YjU3YjAyYmNhYmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJ6sofNEdKg7E7yKmTJoIKFPaU9d Jnd5IZxGsDscQNZRg7Z7KcZbpphygrOu0oZk1P5C1K4mmKOxuwEld+T4NaHmK9bF 44SmgXqmmJv3eyBKcEyf2kwcxyMM8yeFGYShYl9ANTXtYQO0Hb+pz/SNHjtfUl8F X83gwdIs3QUw7wNXbxC806u7G89PWvp7AndzAJc4iLNFBEsNx0scxbFKi7JDOMMS +zFhpkKwkn0ZDT2XfrDlyOp30XZByFJ7mzo1YVJJTquHRfGBl4tjfwI/6pBuYXNn gN84J4xH2gVyB43HY5OwVC4Wq12pVjoDQyNhZ4W6WGqxw2pI5BZGBSnwJQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFEvOShrgAXDu5/2zuACHtXsCvKvIMB8GA1UdIwQY MBaAFFM+6tQToXBfv8sq2+kMafBV4nXaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXo3cTFCT2hjRi1feXlyYjZReHA4RlhpZGRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi80OGYxYzYtMTEzNC00OTY5LWFmNjAt ZDAxN2MxNzU5NjM5LzEvUzg1S0d1QUJjTzduX2JPNEFJZTFld0s4cThnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi80OGYxYzYtMTEzNC00OTY5LWFmNjAtZDAxN2MxNzU5NjM5 LzEvVXo3cTFCT2hjRi1feXlyYjZReHA4RlhpZGRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCBbbwAwQD lQOQAwQCuU1UAwQCuc0oMA0GCSqGSIb3DQEBCwUAA4IBAQBff3rw6idfbGpLh5l2 eFgA6LPM1la7eQaiGBOrqIlfREIvjtXM7OY2phWI2r3/uwfF4hW1By4MhFzMTFKN INUQe9pFnyZBQRovXD+SH+9jAjOL7/H32Izm73Bxj0F1RtkAhnJKzSmsuKsDs12B JnCD7dgLyVgzEZUXHhyWueKaax/K2B1lw4HnvAEE0udnv30nBa35fVJ6q3WXYGX0 CqeTXkVQxL//gN+4bCN7IULZv9EnOpJhTnM7MSIw4JGNxiRZinKpdw24WUj+9ovr +/pdrNDICnNqq2n+Hr/U4GtDZzQGDaP2awU/7t7ihaWYfr9Isk5qxS76gRqaelmX ZYUN -----END CERTIFICATE-----Generated at Sun Jan 25 22:14:51 2026 by rpki-client