This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/m5mX7hMQbCWq-GlbxcSu3T6pYEk.roa File: m5mX7hMQbCWq-GlbxcSu3T6pYEk.roa (raw, json) Hash identifier: iTzlGtzNibw71SECgWWAtWLsGGjMg9WIxNFV2xfi6y4= Subject key identifier: 9B:99:97:EE:13:10:6C:25:AA:F8:69:5B:C5:C4:AE:DD:3E:A9:60:49 Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3 Certificate serial: 019B77C672D710E86106CB09B74B5D30798C Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/m5mX7hMQbCWq-GlbxcSu3T6pYEk.roa Signing time: Thu 01 Jan 2026 04:17:32 +0000 ROA not before: Thu 01 Jan 2026 04:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41059 IP address blocks: 185.1.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:72:d7:10:e8:61:06:cb:09:b7:4b:5d:30:79:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3 Validity Not Before: Jan 1 04:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b9997ee13106c25aaf8695bc5c4aedd3ea96049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:93:8a:9b:5c:05:2c:cf:35:96:88:5b:bf:0a: 3b:b8:99:b7:39:7e:29:b7:40:17:29:a2:37:32:e6: ba:f4:9a:0f:ad:b0:5b:ed:6f:02:e8:a4:76:ca:29: e6:76:1b:0c:07:70:04:35:f1:fb:52:80:05:49:08: ea:3b:dd:40:90:3a:cd:dd:9c:c6:6b:61:d9:89:dc: cd:aa:2d:68:4f:eb:53:81:df:d8:88:e9:c7:05:fa: 1e:2f:4b:41:24:95:02:84:a1:60:cb:90:18:a5:7e: 48:73:8d:6c:0f:fb:0e:ac:7e:65:ad:53:1c:da:cf: a7:af:36:5e:28:71:0f:50:fb:85:6d:5e:1b:6c:5f: 76:58:22:95:a3:c7:83:5f:e9:93:ca:19:a7:1f:40: 11:0d:42:60:4b:f7:f6:a4:01:90:93:4b:92:ff:3b: 27:c7:ed:78:5a:a7:4b:37:2c:8d:b3:cc:f7:20:c7: ae:5c:a5:98:b3:b1:f0:92:f4:0d:f5:df:7f:c8:e3: 54:06:2c:ec:d0:91:3b:0d:03:8c:dc:9f:1d:47:7e: 87:47:bf:ba:7a:3c:30:76:ec:1b:30:66:e1:de:df: 11:4a:4e:48:cd:1a:62:ab:80:13:07:9c:df:71:0f: 70:51:aa:a8:bc:5b:d4:96:83:e4:fb:3f:f3:4f:e8: 43:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:99:97:EE:13:10:6C:25:AA:F8:69:5B:C5:C4:AE:DD:3E:A9:60:49 X509v3 Authority Key Identifier: keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/m5mX7hMQbCWq-GlbxcSu3T6pYEk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.1.40.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:8c:96:11:fa:18:23:6c:fa:c9:23:82:04:b7:a1:0f:3f:e6: 8a:6c:59:c9:ba:be:bb:53:d4:05:de:3b:26:81:80:64:1c:5b: b6:32:1c:4e:f1:2a:c0:ac:4d:c9:af:0f:28:5c:38:1e:3b:47: 59:9c:64:e3:72:55:d0:20:2c:9f:ba:42:ff:02:96:ff:51:38: 15:0c:d5:6c:7e:fe:0f:c6:d4:36:e1:9d:af:be:52:c2:2a:89: 64:23:65:d5:5e:6b:c6:e5:83:e9:f5:43:7d:89:67:55:fa:91: 23:9c:d6:01:e2:9e:28:41:54:2d:1e:f6:fb:63:19:6b:e2:3c: 25:5f:26:ba:b4:ec:7b:73:ef:c5:0d:7c:3e:0c:12:ea:23:f2: 56:45:01:18:a4:3b:72:38:da:2f:07:57:6d:d9:34:49:6d:48: 96:67:b0:67:1f:e0:c3:bb:80:d4:f0:b7:f9:4f:36:57:87:7e: 4d:6a:02:d8:b1:1a:44:ee:9a:cb:b8:28:b4:e6:0f:3b:5e:8d: 07:55:f3:b6:b1:1c:f8:13:6e:10:44:6a:0c:74:d1:f5:be:d1: 4f:fa:96:05:f6:a2:a5:d6:e6:d7:d5:b4:49:f1:76:0c:e9:83: 3f:36:9a:77:f9:02:7b:2f:2a:2e:6d:fe:0b:cf:54:5d:b9:93: 30:ec:b6:1d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xnLXEOhhBssJt0tdMHmMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViZWM5MDMwYzcwYTNkNDE5MmQ1OWMyOGRjYzhkNTQ3Njk0 MzQwYjMwHhcNMjYwMTAxMDQxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Yjk5OTdlZTEzMTA2YzI1YWFmODY5NWJjNWM0YWVkZDNlYTk2MDQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+5OKm1wFLM81lohbvwo7uJm3OX4p t0AXKaI3Mua69JoPrbBb7W8C6KR2yinmdhsMB3AENfH7UoAFSQjqO91AkDrN3ZzG a2HZidzNqi1oT+tTgd/YiOnHBfoeL0tBJJUChKFgy5AYpX5Ic41sD/sOrH5lrVMc 2s+nrzZeKHEPUPuFbV4bbF92WCKVo8eDX+mTyhmnH0ARDUJgS/f2pAGQk0uS/zsn x+14WqdLNyyNs8z3IMeuXKWYs7HwkvQN9d9/yONUBizs0JE7DQOM3J8dR36HR7+6 ejwwduwbMGbh3t8RSk5IzRpiq4ATB5zfcQ9wUaqovFvUloPk+z/zT+hDjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJuZl+4TEGwlqvhpW8XErt0+qWBJMB8GA1UdIwQY MBaAFOvskDDHCj1BktWcKNzI1UdpQ0CzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQt NGE2Zjg2ODMyNjVjLzEvbTVtWDdoTVFiQ1dxLUdsYnhjU3UzVDZwWUVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQtNGE2Zjg2ODMyNjVj LzEvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQEoMA0G CSqGSIb3DQEBCwUAA4IBAQA8jJYR+hgjbPrJI4IEt6EPP+aKbFnJur67U9QF3jsm gYBkHFu2MhxO8SrArE3Jrw8oXDgeO0dZnGTjclXQICyfukL/Apb/UTgVDNVsfv4P xtQ24Z2vvlLCKolkI2XVXmvG5YPp9UN9iWdV+pEjnNYB4p4oQVQtHvb7Yxlr4jwl Xya6tOx7c+/FDXw+DBLqI/JWRQEYpDtyONovB1dt2TRJbUiWZ7BnH+DDu4DU8Lf5 TzZXh35NagLYsRpE7prLuCi05g87Xo0HVfO2sRz4E24QRGoMdNH1vtFP+pYF9qKl 1ubX1bRJ8XYM6YM/Npp3+QJ7Lyoubf4Lz1RduZMw7LYd -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:23 2026 by rpki-client