This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/m5w3Ma4fCgh741R3c4X5Al5UcNA.roa File: m5w3Ma4fCgh741R3c4X5Al5UcNA.roa (raw, json) Hash identifier: Su1TyZOSv86S0DYPclZsbCQqerrqEB8xvpHCZRksi1o= Subject key identifier: 9B:9C:37:31:AE:1F:0A:08:7B:E3:54:77:73:85:F9:02:5E:54:70:D0 Certificate issuer: /CN=89b5fad18dd9110413a31b4d8e18765a27d4c3f1 Certificate serial: 019B78A2FABFC741A7650544ED63E4D964AD Authority key identifier: 89:B5:FA:D1:8D:D9:11:04:13:A3:1B:4D:8E:18:76:5A:27:D4:C3:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/m5w3Ma4fCgh741R3c4X5Al5UcNA.roa Signing time: Thu 01 Jan 2026 08:18:25 +0000 ROA not before: Thu 01 Jan 2026 08:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39210 IP address blocks: 185.235.152.0/22 maxlen: 23 2a02:8387::/48 maxlen: 49 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 11:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:fa:bf:c7:41:a7:65:05:44:ed:63:e4:d9:64:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89b5fad18dd9110413a31b4d8e18765a27d4c3f1 Validity Not Before: Jan 1 08:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b9c3731ae1f0a087be354777385f9025e5470d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:06:a3:28:70:8c:b5:25:b1:91:0c:94:78:70: 1c:99:ee:27:21:0f:12:e0:0d:7a:23:0a:3d:d8:72: c6:32:7d:19:7d:14:c7:80:18:26:3c:aa:78:00:31: 98:51:fe:7b:11:48:4f:d5:06:3e:54:0b:89:a8:4a: b5:f1:73:de:3b:25:ea:8f:fe:29:a1:31:9c:b0:78: fd:f2:3f:76:79:bd:bd:ad:58:67:89:99:22:c3:e9: 49:cf:73:a8:3a:e4:bd:e2:a5:52:07:7c:de:44:e1: 2c:78:d3:8c:1b:b9:dd:bd:2b:b9:9a:ef:58:6d:a5: 1a:9a:b5:bf:66:6c:27:61:25:f9:67:5b:ef:34:8d: b6:63:c9:cb:13:6d:08:3a:86:15:db:9a:73:43:34: 0b:a4:53:be:4a:9a:7d:ca:1d:d2:ee:76:74:04:3f: d0:17:81:3e:d0:f5:2d:68:66:c5:08:46:08:57:c8: c0:14:ae:9c:00:46:28:8b:93:aa:e1:db:1a:0e:c8: a0:7a:9f:ad:07:9a:59:81:a1:ae:87:f2:20:d7:e5: f2:2b:51:a7:36:dc:78:1d:05:b9:ea:75:ff:99:16: e8:3e:21:1c:85:ab:cd:74:aa:85:de:5c:c1:cb:cb: d7:4a:14:c4:79:6c:dd:b5:9c:80:32:cf:89:44:c6: 78:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:9C:37:31:AE:1F:0A:08:7B:E3:54:77:73:85:F9:02:5E:54:70:D0 X509v3 Authority Key Identifier: keyid:89:B5:FA:D1:8D:D9:11:04:13:A3:1B:4D:8E:18:76:5A:27:D4:C3:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/m5w3Ma4fCgh741R3c4X5Al5UcNA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.235.152.0/22 IPv6: 2a02:8387::/48 Signature Algorithm: sha256WithRSAEncryption 06:9c:6e:d9:0d:a3:5f:c4:20:ce:1d:f9:a9:94:c5:6e:71:c6: d3:f9:81:fa:fb:35:7c:76:33:e4:b9:f6:be:10:e7:21:bf:3a: 5d:83:38:af:eb:49:49:39:01:5d:07:a4:0c:0f:2b:f0:d0:5e: 2e:6e:72:d8:e3:53:b6:62:39:89:88:5a:89:aa:18:74:b0:32: ca:22:4b:fe:1a:57:29:ef:12:b1:0e:6b:be:08:1e:fb:6d:a4: b4:b2:18:91:b9:b9:6d:3a:b9:d6:ba:ac:27:b4:9a:6b:7e:cb: 50:b5:ec:10:b9:ed:22:13:64:17:d4:f0:66:79:fc:e4:86:3b: 91:de:62:15:82:83:52:73:f3:8b:94:4e:d7:7c:5a:ae:6b:3b: df:60:f4:84:0e:1c:9f:dc:4f:15:27:5f:55:3c:64:1f:f8:94: fc:50:45:d3:3f:33:33:5c:c3:de:13:25:78:ce:d0:1a:cb:59: 6c:bd:f4:3d:77:92:64:40:47:c5:46:13:5c:89:3e:28:4d:f1: 0d:c1:20:b8:2d:3b:3e:22:9d:0b:33:31:73:13:54:cc:9b:04: ba:fc:e2:a3:f6:f0:fd:ce:67:4b:f4:14:8f:5a:65:5a:1c:aa: 0c:66:83:a1:f1:35:05:44:d0:ad:1e:d6:92:4e:f3:4d:d6:6f: 67:32:4e:ff -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt4ovq/x0GnZQVE7WPk2WStMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YjVmYWQxOGRkOTExMDQxM2EzMWI0ZDhlMTg3NjVhMjdk NGMzZjEwHhcNMjYwMTAxMDgxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjljMzczMWFlMWYwYTA4N2JlMzU0Nzc3Mzg1ZjkwMjVlNTQ3MGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQajKHCMtSWxkQyUeHAcme4nIQ8S 4A16Iwo92HLGMn0ZfRTHgBgmPKp4ADGYUf57EUhP1QY+VAuJqEq18XPeOyXqj/4p oTGcsHj98j92eb29rVhniZkiw+lJz3OoOuS94qVSB3zeROEseNOMG7ndvSu5mu9Y baUamrW/ZmwnYSX5Z1vvNI22Y8nLE20IOoYV25pzQzQLpFO+Spp9yh3S7nZ0BD/Q F4E+0PUtaGbFCEYIV8jAFK6cAEYoi5Oq4dsaDsigep+tB5pZgaGuh/Ig1+XyK1Gn Ntx4HQW56nX/mRboPiEchavNdKqF3lzBy8vXShTEeWzdtZyAMs+JRMZ4oQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFJucNzGuHwoIe+NUd3OF+QJeVHDQMB8GA1UdIwQY MBaAFIm1+tGN2REEE6MbTY4Ydlon1MPxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWJYNjBZM1pFUVFUb3h0TmpoaDJXaWZVd19FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS85MDFhZDItNmM2Yy00M2M2LWEyODAt NDI1MGNlNTUxN2Q5LzEvbTV3M01hNGZDZ2g3NDFSM2M0WDVBbDVVY05BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS85MDFhZDItNmM2Yy00M2M2LWEyODAtNDI1MGNlNTUxN2Q5 LzEvaWJYNjBZM1pFUVFUb3h0TmpoaDJXaWZVd19FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCueuYMA8E AgACMAkDBwAqAoOHAAAwDQYJKoZIhvcNAQELBQADggEBAAacbtkNo1/EIM4d+amU xW5xxtP5gfr7NXx2M+S59r4Q5yG/Ol2DOK/rSUk5AV0HpAwPK/DQXi5uctjjU7Zi OYmIWomqGHSwMsoiS/4aVynvErEOa74IHvttpLSyGJG5uW06uda6rCe0mmt+y1C1 7BC57SITZBfU8GZ5/OSGO5HeYhWCg1Jz84uUTtd8Wq5rO99g9IQOHJ/cTxUnX1U8 ZB/4lPxQRdM/MzNcw94TJXjO0BrLWWy99D13kmRAR8VGE1yJPihN8Q3BILgtOz4i nQszMXMTVMybBLr84qP28P3OZ0v0FI9aZVocqgxmg6HxNQVE0K0e1pJO803Wb2cy Tv8= -----END CERTIFICATE-----Generated at Mon Jan 26 18:16:10 2026 by rpki-client