This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/5DlckLw7-djlSZ1lp36YaxGlvKE.roa File: 5DlckLw7-djlSZ1lp36YaxGlvKE.roa (raw, json) Hash identifier: eYIP1EqGYnvhmzjtkEGHQx/0NRgSz/vE0nE/kWbBXzk= Subject key identifier: E4:39:5C:90:BC:3B:F9:D8:E5:49:9D:65:A7:7E:98:6B:11:A5:BC:A1 Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903 Certificate serial: 019B77C7293BF011FA09A2BC836146A8A6F4 Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/5DlckLw7-djlSZ1lp36YaxGlvKE.roa Signing time: Thu 01 Jan 2026 04:18:19 +0000 ROA not before: Thu 01 Jan 2026 04:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206124 IP address blocks: 185.92.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:29:3b:f0:11:fa:09:a2:bc:83:61:46:a8:a6:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903 Validity Not Before: Jan 1 04:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4395c90bc3bf9d8e5499d65a77e986b11a5bca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:33:ae:0e:c9:a2:43:9f:bc:eb:3b:1a:6d:09: 06:a6:85:03:b4:96:8b:c4:c1:55:96:5b:45:8f:15: f0:b7:cd:72:88:8a:e2:f0:0e:0d:a8:eb:54:5c:97: 6c:83:97:c2:09:bd:93:38:c1:90:18:96:c4:cd:bc: f2:82:27:4c:83:06:20:16:8c:a9:15:b4:70:db:79: c8:db:06:52:d2:a1:f7:c3:b1:f0:1c:79:99:2c:2e: 17:57:a6:7d:e3:61:b2:ee:b0:8b:38:54:dd:0a:ff: d1:0d:08:a6:83:9e:45:f0:94:c8:f9:c4:0c:4a:aa: 40:8f:c4:97:85:86:d2:cf:48:a8:7d:47:95:cd:09: 18:31:78:6f:31:ef:2f:91:49:42:9a:08:4a:2a:60: 83:88:c8:0f:e2:3e:87:ff:e9:0b:d1:62:84:04:f8: ec:9e:a3:d6:dd:cd:61:61:1a:f9:f1:84:f1:09:7e: 22:59:41:f3:f9:d2:82:54:99:ca:4b:40:66:56:e6: cf:0f:44:3c:73:f3:e6:7a:d4:16:de:bd:29:22:4a: fc:e2:5d:ed:fd:f7:d5:fc:45:4b:07:1c:06:46:45: 89:67:e9:ac:d1:82:ce:ab:1f:7f:32:c3:e5:ee:81: 73:8e:cf:38:87:45:cc:ce:0b:cc:38:b8:fa:2e:2a: 69:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:39:5C:90:BC:3B:F9:D8:E5:49:9D:65:A7:7E:98:6B:11:A5:BC:A1 X509v3 Authority Key Identifier: keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/5DlckLw7-djlSZ1lp36YaxGlvKE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.92.236.0/24 Signature Algorithm: sha256WithRSAEncryption 59:2e:58:fe:2c:9c:1e:6a:74:36:a5:38:4e:01:cc:fe:07:c3: e6:e7:5d:84:16:c6:d6:0f:cf:ba:4d:45:4a:ee:dd:9b:10:8d: 5e:f1:34:64:b1:a0:0f:de:ba:e5:95:36:25:38:58:a7:47:f9: ef:e7:d3:80:86:32:ba:e7:be:c4:74:51:89:af:41:6e:2e:44: 75:9f:47:76:71:a1:2d:b6:81:22:b5:04:a0:75:2c:77:44:3f: 4b:ed:a1:af:b0:68:e6:e1:fb:90:f1:35:43:01:9f:4f:40:af: 98:b8:2f:dd:a0:4e:23:a8:1d:ae:07:98:1e:c7:d5:6a:31:c1: b3:cd:02:43:a3:f2:ab:26:ba:93:cd:04:59:6f:98:d5:75:5d: b9:47:79:e1:ae:ca:44:5d:7e:01:85:3f:d2:41:ca:e8:67:78: 0a:fc:41:c9:22:87:18:af:c8:a1:7e:3a:70:ba:2d:44:c8:c0: d8:1e:6f:54:21:e2:d5:6b:08:ea:d9:00:61:c6:de:c1:91:4f: c8:6d:76:a0:59:16:9e:c0:2d:80:d3:6b:b9:ca:3c:5b:d3:82: 72:57:1f:26:06:05:45:db:b7:15:04:0d:3b:1b:b3:16:b6:cd: d6:cf:8a:c4:89:4d:2d:c0:c6:3d:a4:f6:45:f6:2c:af:12:10: 59:f4:82:28 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xyk78BH6CaK8g2FGqKb0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYzVkZTdkNzI1NWI3ZDU4MjYwYzY1YTEyMGIxNjRlZjEw ZWY5MDMwHhcNMjYwMTAxMDQxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDM5NWM5MGJjM2JmOWQ4ZTU0OTlkNjVhNzdlOTg2YjExYTViY2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTOuDsmiQ5+86zsabQkGpoUDtJaL xMFVlltFjxXwt81yiIri8A4NqOtUXJdsg5fCCb2TOMGQGJbEzbzygidMgwYgFoyp FbRw23nI2wZS0qH3w7HwHHmZLC4XV6Z942Gy7rCLOFTdCv/RDQimg55F8JTI+cQM SqpAj8SXhYbSz0iofUeVzQkYMXhvMe8vkUlCmghKKmCDiMgP4j6H/+kL0WKEBPjs nqPW3c1hYRr58YTxCX4iWUHz+dKCVJnKS0BmVubPD0Q8c/PmetQW3r0pIkr84l3t /ffV/EVLBxwGRkWJZ+ms0YLOqx9/MsPl7oFzjs84h0XMzgvMOLj6LippiQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOQ5XJC8O/nY5UmdZad+mGsRpbyhMB8GA1UdIwQY MBaAFGvF3n1yVbfVgmDGWhILFk7xDvkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgt ZmRmNjYzOGQyYzA0LzEvNURsY2tMdzctZGpsU1oxbHAzNllheEdsdktFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgtZmRmNjYzOGQyYzA0 LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVzsMA0G CSqGSIb3DQEBCwUAA4IBAQBZLlj+LJweanQ2pThOAcz+B8Pm512EFsbWD8+6TUVK 7t2bEI1e8TRksaAP3rrllTYlOFinR/nv59OAhjK6577EdFGJr0FuLkR1n0d2caEt toEitQSgdSx3RD9L7aGvsGjm4fuQ8TVDAZ9PQK+YuC/doE4jqB2uB5gex9VqMcGz zQJDo/KrJrqTzQRZb5jVdV25R3nhrspEXX4BhT/SQcroZ3gK/EHJIocYr8ihfjpw ui1EyMDYHm9UIeLVawjq2QBhxt7BkU/IbXagWRaewC2A02u5yjxb04JyVx8mBgVF 27cVBA07G7MWts3Wz4rEiU0twMY9pPZF9iyvEhBZ9IIo -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:44 2026 by rpki-client