This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/ml5DwiSOSMrQdu0mHLbNMRyQ_ps.roa File: ml5DwiSOSMrQdu0mHLbNMRyQ_ps.roa (raw, json) Hash identifier: 6bGrtUpm4h7WPij2cFakh2HSrOrr1AUT7tkPDjd7biE= Subject key identifier: 9A:5E:43:C2:24:8E:48:CA:D0:76:ED:26:1C:B6:CD:31:1C:90:FE:9B Certificate issuer: /CN=6dbd5cb29940ac2a8553b6ec0a8cec7c209f7ce7 Certificate serial: 019B7CEE5C18E4C9F86334479A6C58F53CCF Authority key identifier: 6D:BD:5C:B2:99:40:AC:2A:85:53:B6:EC:0A:8C:EC:7C:20:9F:7C:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/ml5DwiSOSMrQdu0mHLbNMRyQ_ps.roa Signing time: Fri 02 Jan 2026 04:19:14 +0000 ROA not before: Fri 02 Jan 2026 04:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43824 IP address blocks: 185.212.220.0/24 maxlen: 24 185.212.221.0/24 maxlen: 24 185.212.222.0/24 maxlen: 24 185.212.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:5c:18:e4:c9:f8:63:34:47:9a:6c:58:f5:3c:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dbd5cb29940ac2a8553b6ec0a8cec7c209f7ce7 Validity Not Before: Jan 2 04:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a5e43c2248e48cad076ed261cb6cd311c90fe9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:fb:42:ae:6f:01:66:c9:33:ea:e8:6c:c4:e9: e8:25:e8:5a:01:4a:2b:17:6d:ba:c2:24:22:e7:89: 60:0a:c5:84:fa:49:f6:69:10:9e:93:8d:5b:31:ee: fc:b2:10:7f:e1:16:66:c7:44:68:ac:98:7c:ba:a7: e4:13:54:21:53:1a:8e:cf:80:ba:99:b9:e4:54:01: fa:9a:24:ea:66:99:6a:f2:fa:fc:a5:76:47:9d:d5: 9a:82:5e:8f:d0:f9:e9:94:0c:6c:76:dc:19:5b:94: 03:48:e8:da:2a:d8:31:1e:9b:dd:1e:02:8e:7c:88: f7:2c:19:bc:ae:f0:7d:4b:d3:d9:2f:19:d1:d7:8c: ac:08:ed:d6:ab:da:b2:da:7d:11:41:47:c2:41:af: 0f:a7:79:3f:00:f3:e8:d2:fc:53:f4:43:cb:71:7e: 24:e7:cc:5d:5b:68:5a:6a:88:4e:22:1f:a6:52:a8: 6a:02:1a:3d:43:21:0d:d4:ca:19:5d:7e:3f:f8:3e: 6b:70:fc:d5:fc:00:d6:a7:36:0b:0c:d1:f9:50:e9: a1:f2:e1:6c:fb:6c:4c:d0:46:eb:65:a1:8d:7a:56: 69:e4:9c:ed:d9:dc:aa:9a:45:42:fd:85:94:91:fd: cd:0f:01:a5:3c:94:cc:22:27:8e:47:c5:39:0e:ad: 69:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:5E:43:C2:24:8E:48:CA:D0:76:ED:26:1C:B6:CD:31:1C:90:FE:9B X509v3 Authority Key Identifier: keyid:6D:BD:5C:B2:99:40:AC:2A:85:53:B6:EC:0A:8C:EC:7C:20:9F:7C:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/ml5DwiSOSMrQdu0mHLbNMRyQ_ps.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.212.220.0/22 Signature Algorithm: sha256WithRSAEncryption 05:ec:bc:70:ad:4a:cc:8d:c8:2a:31:d3:45:9d:6c:1a:1d:a7: fe:e5:91:d3:8c:83:31:1e:4e:3d:67:2e:b9:02:57:79:b5:2c: 1f:5b:59:5d:c9:74:36:4d:2c:1b:85:e3:cd:92:64:22:5a:82: 97:70:a5:75:2a:51:8a:bf:d9:7a:6c:c7:d0:5f:5d:4c:de:80: a8:0a:f0:b6:82:53:0d:bc:8f:d9:39:b6:da:cc:68:41:5c:dd: 26:c5:3b:0c:87:f0:70:8d:d1:05:b0:0b:0e:f6:e8:54:2e:4d: 19:b5:35:b0:cb:46:5e:a5:e5:da:54:6f:50:ab:90:e8:9e:1a: 72:90:1b:a8:e2:f4:d4:15:a0:ae:1b:be:23:46:18:66:8a:34: b1:ad:d7:1f:a3:95:65:07:a2:14:a0:d5:29:2a:26:5d:bb:a7: ce:d4:f3:77:83:1d:0c:5e:e8:b8:50:b2:94:16:fe:bf:ce:e3: 2d:41:40:d9:a8:51:38:05:18:26:b2:7e:f1:f3:d3:76:7c:f2: 21:10:1f:6b:ab:31:6a:8c:b0:0c:6e:72:69:16:89:88:5b:db: 72:91:83:ae:b9:2c:fa:33:d9:09:7d:0e:32:75:a6:8b:f8:16: 19:86:e1:4e:f0:0e:eb:4e:c2:66:b1:1c:02:7c:a8:9b:f4:5a: 84:50:4a:cc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87lwY5Mn4YzRHmmxY9TzPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkYmQ1Y2IyOTk0MGFjMmE4NTUzYjZlYzBhOGNlYzdjMjA5 ZjdjZTcwHhcNMjYwMTAyMDQxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTVlNDNjMjI0OGU0OGNhZDA3NmVkMjYxY2I2Y2QzMTFjOTBmZTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9PtCrm8BZskz6uhsxOnoJehaAUor F226wiQi54lgCsWE+kn2aRCek41bMe78shB/4RZmx0RorJh8uqfkE1QhUxqOz4C6 mbnkVAH6miTqZplq8vr8pXZHndWagl6P0PnplAxsdtwZW5QDSOjaKtgxHpvdHgKO fIj3LBm8rvB9S9PZLxnR14ysCO3Wq9qy2n0RQUfCQa8Pp3k/APPo0vxT9EPLcX4k 58xdW2haaohOIh+mUqhqAho9QyEN1MoZXX4/+D5rcPzV/ADWpzYLDNH5UOmh8uFs +2xM0EbrZaGNelZp5Jzt2dyqmkVC/YWUkf3NDwGlPJTMIieOR8U5Dq1p+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJpeQ8IkjkjK0HbtJhy2zTEckP6bMB8GA1UdIwQY MBaAFG29XLKZQKwqhVO27AqM7Hwgn3znMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmIxY3NwbEFyQ3FGVTdic0NvenNmQ0NmZk9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC82MTRiMDUtNzQ0NS00MDQ2LTlmYjEt MmZkZTgwNDM1ZjRkLzEvbWw1RHdpU09TTXJRZHUwbUhMYk5NUnlRX3BzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC82MTRiMDUtNzQ0NS00MDQ2LTlmYjEtMmZkZTgwNDM1ZjRk LzEvYmIxY3NwbEFyQ3FGVTdic0NvenNmQ0NmZk9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCudTcMA0G CSqGSIb3DQEBCwUAA4IBAQAF7LxwrUrMjcgqMdNFnWwaHaf+5ZHTjIMxHk49Zy65 Ald5tSwfW1ldyXQ2TSwbhePNkmQiWoKXcKV1KlGKv9l6bMfQX11M3oCoCvC2glMN vI/ZObbazGhBXN0mxTsMh/BwjdEFsAsO9uhULk0ZtTWwy0ZepeXaVG9Qq5Donhpy kBuo4vTUFaCuG74jRhhmijSxrdcfo5VlB6IUoNUpKiZdu6fO1PN3gx0MXui4ULKU Fv6/zuMtQUDZqFE4BRgmsn7x89N2fPIhEB9rqzFqjLAMbnJpFomIW9tykYOuuSz6 M9kJfQ4ydaaL+BYZhuFO8A7rTsJmsRwCfKib9FqEUErM -----END CERTIFICATE-----Generated at Sun Jan 25 15:12:20 2026 by rpki-client