This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/5mo5xCIsbIhrhc8a0MMdjoHlY1A.roa File: 5mo5xCIsbIhrhc8a0MMdjoHlY1A.roa (raw, json) Hash identifier: pyWlQmd0OGBAWyVjo0BfVWnydEoUEqSFJZF/M2RGZlA= Subject key identifier: E6:6A:39:C4:22:2C:6C:88:6B:85:CF:1A:D0:C3:1D:8E:81:E5:63:50 Certificate issuer: /CN=ce46ea629afb0c2d54200b5a65727be18cbb45a4 Certificate serial: 019B7FF226963068B1E0FAF97FE11CF99A04 Authority key identifier: CE:46:EA:62:9A:FB:0C:2D:54:20:0B:5A:65:72:7B:E1:8C:BB:45:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/5mo5xCIsbIhrhc8a0MMdjoHlY1A.roa Signing time: Fri 02 Jan 2026 18:22:14 +0000 ROA not before: Fri 02 Jan 2026 18:22:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206854 IP address blocks: 185.172.212.0/22 maxlen: 22 185.172.212.0/24 maxlen: 24 185.172.213.0/24 maxlen: 24 185.172.214.0/24 maxlen: 24 185.172.215.0/24 maxlen: 24 2a0f:c7c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:26:96:30:68:b1:e0:fa:f9:7f:e1:1c:f9:9a:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce46ea629afb0c2d54200b5a65727be18cbb45a4 Validity Not Before: Jan 2 18:22:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e66a39c4222c6c886b85cf1ad0c31d8e81e56350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:56:7e:d2:ad:7c:00:d8:8a:24:af:f8:2f:a5: 38:59:55:df:3a:67:43:81:66:98:83:45:68:59:cd: 3c:69:1b:ef:98:dc:ff:f3:63:99:ec:0d:d7:a7:30: c6:b6:d1:9f:5f:39:5f:9c:5d:5b:05:fd:ba:29:b1: 98:d9:81:a0:73:dc:fd:ae:55:b4:f9:a6:68:ed:8a: 28:f2:b3:a0:9f:04:ae:cc:d5:92:d5:fd:e8:55:54: 74:26:9d:69:ba:de:25:8b:e5:8b:18:39:e7:68:8f: 3e:db:3f:3a:99:dc:16:20:29:8e:1c:0d:94:ad:5c: 4c:63:8b:15:7b:3a:73:0e:28:5f:ac:a0:99:b2:b9: d1:ef:1d:e9:5c:6a:66:5a:c2:f6:4f:3c:e5:dd:3b: 60:22:c7:55:3e:04:04:02:a1:7f:5e:9a:30:9b:0f: 66:c3:f0:b7:10:a6:f1:23:ff:74:f4:62:47:0f:af: 6f:a7:de:60:68:45:a7:97:7c:3d:ba:c1:40:9b:1e: b7:aa:01:8b:fb:ee:0d:2d:d7:c0:00:17:b8:68:4f: f8:c6:8e:33:64:8d:21:47:61:8c:4b:61:c6:cc:b9: 5e:f2:8e:75:0b:da:e0:65:59:a1:6c:b8:89:aa:49: a6:20:54:4a:b2:db:ff:5d:1f:cd:91:38:db:81:75: 7d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:6A:39:C4:22:2C:6C:88:6B:85:CF:1A:D0:C3:1D:8E:81:E5:63:50 X509v3 Authority Key Identifier: keyid:CE:46:EA:62:9A:FB:0C:2D:54:20:0B:5A:65:72:7B:E1:8C:BB:45:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/5mo5xCIsbIhrhc8a0MMdjoHlY1A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.172.212.0/22 IPv6: 2a0f:c7c0::/29 Signature Algorithm: sha256WithRSAEncryption 40:81:89:8d:1d:1f:a9:1b:7c:9e:3b:ec:b1:13:6d:09:03:3b: db:e4:93:1d:40:93:b7:27:3d:dd:3f:4a:b4:73:ca:60:7a:cc: 26:b8:1b:df:3a:46:25:fc:a8:67:ba:be:99:7d:17:81:7c:6a: f5:16:cc:3c:59:46:a3:aa:a7:20:e1:26:ce:5f:88:b6:4f:e1: 08:93:57:51:2f:79:a3:4c:4b:34:50:72:7b:35:e5:e2:47:9b: 94:5c:05:e1:e6:36:13:22:39:e5:ed:f9:f2:b6:db:67:c9:f6: 81:c8:a2:af:b0:db:22:35:16:ee:99:f6:9b:0d:9d:2a:55:0c: 68:1b:7d:69:1b:7f:34:61:5f:b8:2c:82:38:d6:bd:18:3a:83: f3:db:09:fc:98:0f:3e:46:a8:3b:57:a2:20:08:57:38:d3:d6: de:b0:36:54:af:24:2b:ee:b2:8e:c9:63:76:31:98:32:42:be: 01:69:fe:a2:31:e8:ab:e5:18:66:81:2f:04:70:41:ff:8a:63: 01:8a:d6:36:68:b7:37:2d:cf:1e:6b:29:28:3c:6b:bf:30:bd: ad:20:ba:b5:5b:c4:fb:6a:0f:3d:fc:26:62:38:75:9f:31:97: 48:b4:a5:f9:12:27:61:cd:07:9e:c8:90:8e:80:5f:d5:d5:93: 64:d7:b0:77 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/8iaWMGix4Pr5f+Ec+ZoEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlNDZlYTYyOWFmYjBjMmQ1NDIwMGI1YTY1NzI3YmUxOGNi YjQ1YTQwHhcNMjYwMTAyMTgyMjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjZhMzljNDIyMmM2Yzg4NmI4NWNmMWFkMGMzMWQ4ZTgxZTU2MzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7FZ+0q18ANiKJK/4L6U4WVXfOmdD gWaYg0VoWc08aRvvmNz/82OZ7A3XpzDGttGfXzlfnF1bBf26KbGY2YGgc9z9rlW0 +aZo7Yoo8rOgnwSuzNWS1f3oVVR0Jp1put4li+WLGDnnaI8+2z86mdwWICmOHA2U rVxMY4sVezpzDihfrKCZsrnR7x3pXGpmWsL2Tzzl3TtgIsdVPgQEAqF/Xpowmw9m w/C3EKbxI/909GJHD69vp95gaEWnl3w9usFAmx63qgGL++4NLdfAABe4aE/4xo4z ZI0hR2GMS2HGzLle8o51C9rgZVmhbLiJqkmmIFRKstv/XR/NkTjbgXV9WwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOZqOcQiLGyIa4XPGtDDHY6B5WNQMB8GA1UdIwQY MBaAFM5G6mKa+wwtVCALWmVye+GMu0WkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemticVlwcjdEQzFVSUF0YVpYSjc0WXk3UmFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8yYmUwMDktMWVmMS00ZDU3LThmMDEt N2UxODRiMDcwYmJkLzEvNW1vNXhDSXNiSWhyaGM4YTBNTWRqb0hsWTFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny8yYmUwMDktMWVmMS00ZDU3LThmMDEtN2UxODRiMDcwYmJk LzEvemticVlwcjdEQzFVSUF0YVpYSjc0WXk3UmFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuazUMA0E AgACMAcDBQMqD8fAMA0GCSqGSIb3DQEBCwUAA4IBAQBAgYmNHR+pG3yeO+yxE20J Azvb5JMdQJO3Jz3dP0q0c8pgeswmuBvfOkYl/Khnur6ZfReBfGr1Fsw8WUajqqcg 4SbOX4i2T+EIk1dRL3mjTEs0UHJ7NeXiR5uUXAXh5jYTIjnl7fnytttnyfaByKKv sNsiNRbumfabDZ0qVQxoG31pG380YV+4LII41r0YOoPz2wn8mA8+Rqg7V6IgCFc4 09besDZUryQr7rKOyWN2MZgyQr4Baf6iMeir5RhmgS8EcEH/imMBitY2aLc3Lc8e aykoPGu/ML2tILq1W8T7ag89/CZiOHWfMZdItKX5EidhzQeeyJCOgF/V1ZNk17B3 -----END CERTIFICATE-----Generated at Mon Jan 26 12:26:03 2026 by rpki-client