This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/A5PgGRLn4kXJK7rp7MRelJlQCGs.roa File: A5PgGRLn4kXJK7rp7MRelJlQCGs.roa (raw, json) Hash identifier: uoHX6U7FvckkMUmhHzgYs1oGVMNEJnR2TmiJTsJFLvY= Subject key identifier: 03:93:E0:19:12:E7:E2:45:C9:2B:BA:E9:EC:C4:5E:94:99:50:08:6B Certificate issuer: /CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd Certificate serial: 019B7FF133F7C80404A0BBFA7E2ACF182DBF Authority key identifier: FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/A5PgGRLn4kXJK7rp7MRelJlQCGs.roa Signing time: Fri 02 Jan 2026 18:21:12 +0000 ROA not before: Fri 02 Jan 2026 18:21:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206986 IP address blocks: 185.169.232.0/22 maxlen: 22 2a0a:7107:1af4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:33:f7:c8:04:04:a0:bb:fa:7e:2a:cf:18:2d:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd Validity Not Before: Jan 2 18:21:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0393e01912e7e245c92bbae9ecc45e949950086b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:10:75:1f:3e:46:47:40:e4:48:2b:06:49:86: bf:f9:89:4e:41:c3:3e:d4:e0:34:de:e6:dd:f9:18: 02:da:be:c2:c1:d7:6e:4f:7a:77:37:1b:3d:92:47: 56:83:7d:a7:ad:49:c1:50:c1:27:72:60:1a:ff:00: d2:5c:9e:a8:6b:8d:2d:bc:c3:0f:1e:af:c0:d3:eb: a4:94:ae:3e:e8:16:b5:e7:5a:c3:11:8e:32:64:47: 02:b8:f2:ba:dc:7c:f3:95:fc:82:b5:d8:a0:ff:70: f5:ee:a8:d4:2f:9e:50:2e:f8:48:4d:83:8a:69:8e: 7b:38:b5:e4:08:e3:ab:86:9c:59:23:b4:d6:30:66: 13:90:15:5a:3c:03:08:ea:d9:fd:f7:1d:87:01:42: fb:12:df:0b:96:fa:36:55:a9:95:60:13:7f:b0:bd: 41:fe:52:1f:b1:ba:ab:d5:df:c5:19:be:47:e9:df: 8c:e9:54:af:3b:dd:8f:47:1c:b2:39:7e:12:e4:33: 2b:f2:68:36:19:36:1c:f7:3d:e2:fc:1b:78:73:36: 73:ad:5f:49:c4:67:da:b0:05:7e:57:dc:92:d4:30: c8:16:dd:5a:ab:89:48:b8:a0:1e:45:79:c6:db:71: 1e:7b:27:ad:7d:56:86:0a:6c:04:66:28:da:29:9e: eb:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:93:E0:19:12:E7:E2:45:C9:2B:BA:E9:EC:C4:5E:94:99:50:08:6B X509v3 Authority Key Identifier: keyid:FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/A5PgGRLn4kXJK7rp7MRelJlQCGs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.169.232.0/22 IPv6: 2a0a:7107:1af4::/48 Signature Algorithm: sha256WithRSAEncryption 49:60:d3:16:7f:82:3e:9e:24:93:ca:7a:e4:00:12:b6:16:8f: 24:fc:16:8f:4b:9d:9f:e3:d4:94:0b:a2:9f:91:7e:31:3f:37: ca:16:3d:ca:ed:b1:47:64:c2:d2:09:6c:01:a1:0f:c4:1d:da: 16:f6:ac:bf:a9:27:3a:f4:b4:ee:90:d8:9c:62:80:9a:c0:8f: 80:c8:78:c8:38:c7:69:36:01:c3:3e:6b:e0:35:7e:bb:77:75: 5a:7f:c1:c3:4a:97:c9:ed:ba:e5:72:de:6b:79:ea:af:6d:ca: ec:f1:92:4d:5f:68:8b:81:26:48:3b:2f:32:af:e8:27:3f:58: 08:29:ca:e3:f2:3c:2a:e7:cc:9b:6d:68:ce:39:33:a8:33:7a: fe:ec:14:e5:33:2a:d5:9e:40:a2:04:e0:9a:fa:25:b0:1c:4e: 5c:3e:77:9c:9c:05:b0:ff:1c:28:2a:6a:ce:ac:67:e8:36:f4: b4:77:c6:91:25:e6:2e:b9:b4:04:ad:b8:93:e8:05:6a:42:14: 18:2b:30:16:82:e9:18:16:51:35:c2:a5:38:96:4a:e5:e4:33: 46:9c:17:da:47:37:99:48:63:63:f8:c4:e6:16:04:6c:8d:e0: 8b:f7:b1:2c:c6:e2:33:ba:d4:f0:25:81:ec:60:63:6d:ad:a1: 85:87:69:6d -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/8TP3yAQEoLv6firPGC2/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZGVjNGE0NmE2ZTZlNGY5YTkyZDBiYTJlMGIzYWI1NjU4 YmUxYmQwHhcNMjYwMTAyMTgyMTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzkzZTAxOTEyZTdlMjQ1YzkyYmJhZTllY2M0NWU5NDk5NTAwODZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBB1Hz5GR0DkSCsGSYa/+YlOQcM+ 1OA03ubd+RgC2r7CwdduT3p3Nxs9kkdWg32nrUnBUMEncmAa/wDSXJ6oa40tvMMP Hq/A0+uklK4+6Ba151rDEY4yZEcCuPK63HzzlfyCtdig/3D17qjUL55QLvhITYOK aY57OLXkCOOrhpxZI7TWMGYTkBVaPAMI6tn99x2HAUL7Et8Llvo2VamVYBN/sL1B /lIfsbqr1d/FGb5H6d+M6VSvO92PRxyyOX4S5DMr8mg2GTYc9z3i/Bt4czZzrV9J xGfasAV+V9yS1DDIFt1aq4lIuKAeRXnG23EeeyetfVaGCmwEZijaKZ7r4wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFAOT4BkS5+JFySu66ezEXpSZUAhrMB8GA1UdIwQY MBaAFP/exKRqbm5PmpLQui4LOrVli+G9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEt N2U4YzZkNGQ5YmVmLzEvQTVQZ0dSTG40a1hKSzdycDdNUmVsSmxRQ0dzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEtN2U4YzZkNGQ5YmVm LzEvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCuanoMA8E AgACMAkDBwAqCnEHGvQwDQYJKoZIhvcNAQELBQADggEBAElg0xZ/gj6eJJPKeuQA ErYWjyT8Fo9LnZ/j1JQLop+RfjE/N8oWPcrtsUdkwtIJbAGhD8Qd2hb2rL+pJzr0 tO6Q2JxigJrAj4DIeMg4x2k2AcM+a+A1frt3dVp/wcNKl8ntuuVy3mt56q9tyuzx kk1faIuBJkg7LzKv6Cc/WAgpyuPyPCrnzJttaM45M6gzev7sFOUzKtWeQKIE4Jr6 JbAcTlw+d5ycBbD/HCgqas6sZ+g29LR3xpEl5i65tAStuJPoBWpCFBgrMBaC6RgW UTXCpTiWSuXkM0acF9pHN5lIY2P4xOYWBGyN4Iv3sSzG4jO61PAlgexgY22toYWH aW0= -----END CERTIFICATE-----Generated at Sun Jan 25 17:39:56 2026 by rpki-client