This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/n5-40dHB96Mo9oDqm-GTLr6Okwk.roa File: n5-40dHB96Mo9oDqm-GTLr6Okwk.roa (raw, json) Hash identifier: lm7wMW2ZxjDGB62whvPGpRFJFIr6hVtb6E5bunii3pE= Subject key identifier: 9F:9F:B8:D1:D1:C1:F7:A3:28:F6:80:EA:9B:E1:93:2E:BE:8E:93:09 Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933 Certificate serial: 019B7D5CFE663238A8C567C77FA0B11E9CDD Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/n5-40dHB96Mo9oDqm-GTLr6Okwk.roa Signing time: Fri 02 Jan 2026 06:20:05 +0000 ROA not before: Fri 02 Jan 2026 06:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35199 IP address blocks: 85.219.196.0/24 maxlen: 24 89.174.22.0/24 maxlen: 24 89.174.170.0/24 maxlen: 24 217.153.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:fe:66:32:38:a8:c5:67:c7:7f:a0:b1:1e:9c:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933 Validity Not Before: Jan 2 06:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f9fb8d1d1c1f7a328f680ea9be1932ebe8e9309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ec:17:f7:f7:57:cd:a5:6e:0f:13:cc:c6:36: 06:a2:74:3f:59:82:08:87:29:9a:8c:7b:df:4a:9c: 17:8d:7f:01:1f:cd:68:3d:d7:bc:6d:49:ef:b7:2e: 77:74:d9:d6:67:50:b4:5f:40:65:56:e6:3a:cb:fc: 63:97:86:9f:de:ae:2c:65:69:7c:02:17:36:27:50: a5:69:bd:a8:cf:12:8d:c3:9d:2f:bb:b1:ae:aa:90: 45:58:29:a3:29:ca:a6:6f:5c:03:2a:ea:9c:a9:b0: 43:c9:5f:ba:f0:0a:ab:12:f7:3f:d9:c9:e5:89:45: 6b:f4:10:3d:8c:c2:8d:8d:2b:e1:78:07:d1:5a:d4: d7:73:2b:ab:ad:37:c8:45:a6:aa:79:e0:68:fe:3a: 05:e3:ac:05:5b:28:f6:21:1b:0a:bf:05:9e:b8:3f: 8e:e6:d3:fa:93:0b:51:5e:16:fa:f2:a1:50:36:39: 52:e5:ab:3a:5b:20:4b:3e:4b:da:4d:13:59:c3:c2: cc:b0:b5:00:e6:87:0c:91:c5:a6:2b:09:01:7f:27: 8b:05:2b:04:0c:bf:3c:e5:eb:b0:90:9c:c5:96:2f: 57:1c:b6:d2:b9:08:5b:a1:fe:1e:8c:28:5a:e4:bc: 19:12:a9:ed:2d:6b:94:d5:5b:f5:55:b3:06:90:d4: 9f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:9F:B8:D1:D1:C1:F7:A3:28:F6:80:EA:9B:E1:93:2E:BE:8E:93:09 X509v3 Authority Key Identifier: keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/n5-40dHB96Mo9oDqm-GTLr6Okwk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.219.196.0/24 89.174.22.0/24 89.174.170.0/24 217.153.228.0/23 Signature Algorithm: sha256WithRSAEncryption 57:4d:d2:bc:e3:93:5b:64:31:2b:19:b2:e5:f1:25:6b:85:c1: d2:11:99:43:f6:57:48:96:de:21:51:7b:16:e2:d0:3f:14:2d: 62:91:4c:a5:ce:6b:12:2f:cd:7e:74:69:23:1f:22:a1:ea:78: 20:47:dc:7b:62:1f:27:b7:31:80:fa:15:16:c4:b8:fc:27:03: f5:7b:0f:43:70:03:c9:ac:9e:ba:da:c8:1a:93:8c:7e:a2:95: ae:43:3c:a7:7d:22:3b:a7:ce:10:f7:58:3a:f5:e3:51:c8:0e: 32:18:b8:10:d6:8e:8f:fa:08:fc:a9:3b:57:67:aa:cd:1a:1d: 74:f3:8e:2e:04:ed:f6:d9:e1:b4:fc:12:13:14:a8:52:95:13: c4:ec:21:30:60:32:9a:27:aa:1c:31:ac:96:31:27:94:7e:8e: 1c:03:88:ec:50:08:49:e6:e1:75:69:2b:cd:6d:7e:2c:8e:20: ef:88:6b:06:30:70:74:95:fa:39:da:b5:49:24:de:87:e3:6f: 04:d4:ec:f2:95:b6:eb:5a:8d:ad:1b:57:36:0c:f8:ab:a3:d4: 8d:b8:b0:87:a6:0f:7a:44:5d:fb:d9:5f:2e:73:40:70:bc:44: 23:52:89:e2:3c:c1:b9:43:86:73:ba:8a:ec:38:5f:77:7e:49: 51:f3:eb:c2 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt9XP5mMjioxWfHf6CxHpzdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhY2E2M2RmMjQ4YjdhZGYzZGRkMDdlOGMyZDNlZWRkMDJj ZWY5MzMwHhcNMjYwMTAyMDYyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjlmYjhkMWQxYzFmN2EzMjhmNjgwZWE5YmUxOTMyZWJlOGU5MzA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlewX9/dXzaVuDxPMxjYGonQ/WYII hymajHvfSpwXjX8BH81oPde8bUnvty53dNnWZ1C0X0BlVuY6y/xjl4af3q4sZWl8 Ahc2J1Clab2ozxKNw50vu7GuqpBFWCmjKcqmb1wDKuqcqbBDyV+68AqrEvc/2cnl iUVr9BA9jMKNjSvheAfRWtTXcyurrTfIRaaqeeBo/joF46wFWyj2IRsKvwWeuD+O 5tP6kwtRXhb68qFQNjlS5as6WyBLPkvaTRNZw8LMsLUA5ocMkcWmKwkBfyeLBSsE DL885euwkJzFli9XHLbSuQhbof4ejCha5LwZEqntLWuU1Vv1VbMGkNSfTwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFJ+fuNHRwfejKPaA6pvhky6+jpMJMB8GA1UdIwQY MBaAFBrKY98ki3rfPd0H6MLT7t0CzvkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzIt OTFlMzE4NGJiMGFiLzEvbjUtNDBkSEI5Nk1vOW9EcW0tR1RMcjZPa3drLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzItOTFlMzE4NGJiMGFi LzEvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAVdvEAwQA Wa4WAwQAWa6qAwQB2ZnkMA0GCSqGSIb3DQEBCwUAA4IBAQBXTdK845NbZDErGbLl 8SVrhcHSEZlD9ldIlt4hUXsW4tA/FC1ikUylzmsSL81+dGkjHyKh6nggR9x7Yh8n tzGA+hUWxLj8JwP1ew9DcAPJrJ662sgak4x+opWuQzynfSI7p84Q91g69eNRyA4y GLgQ1o6P+gj8qTtXZ6rNGh10844uBO322eG0/BITFKhSlRPE7CEwYDKaJ6ocMayW MSeUfo4cA4jsUAhJ5uF1aSvNbX4sjiDviGsGMHB0lfo52rVJJN6H428E1Ozylbbr Wo2tG1c2DPiro9SNuLCHpg96RF372V8uc0BwvEQjUoniPMG5Q4ZzuorsOF93fklR 8+vC -----END CERTIFICATE-----Generated at Sun Jan 25 17:45:58 2026 by rpki-client