This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/N5Hudy2VnUqERpoYZy52ejzqRK0.roa File: N5Hudy2VnUqERpoYZy52ejzqRK0.roa (raw, json) Hash identifier: b7FmbOQsfYS1R+Itfkubnt9bf1rGQpODcJT/qJhwWfM= Subject key identifier: 37:91:EE:77:2D:95:9D:4A:84:46:9A:18:67:2E:76:7A:3C:EA:44:AD Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e Certificate serial: 019B7C12C41A9E5E462272BDA0152B112BDF Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/N5Hudy2VnUqERpoYZy52ejzqRK0.roa Signing time: Fri 02 Jan 2026 00:19:23 +0000 ROA not before: Fri 02 Jan 2026 00:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212183 IP address blocks: 185.79.2.0/23 maxlen: 23 185.79.2.0/24 maxlen: 24 185.79.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:c4:1a:9e:5e:46:22:72:bd:a0:15:2b:11:2b:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e Validity Not Before: Jan 2 00:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3791ee772d959d4a84469a18672e767a3cea44ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:23:6e:12:32:00:38:76:b2:77:83:68:4d:4d: 97:4f:e3:90:11:7b:58:31:ed:e2:a2:58:7c:a1:2e: b2:5f:4d:5e:4b:bc:d4:df:ed:53:ad:b2:4a:40:01: dc:a0:61:c3:83:0e:28:6f:96:0d:df:8f:8f:ff:77: 9b:3c:19:f9:b1:62:b7:90:2b:a8:a5:d4:e4:a3:70: d0:e7:ba:7e:cf:00:2e:0f:7c:b4:b6:50:bd:3f:e2: 4a:17:8f:4a:87:50:ff:88:08:3c:ee:57:71:2f:13: bd:bc:a5:ec:6e:e2:20:9a:39:84:e6:58:99:64:e8: 3e:03:d8:ca:3a:b9:5f:02:33:c3:02:8e:b8:01:bd: 76:4d:04:ca:5f:f7:56:7e:b7:ef:63:46:cf:65:ae: d8:3d:f8:28:fc:f2:7a:3e:79:bf:12:ba:ac:8f:c5: 3d:1c:95:d4:35:62:e5:a7:5f:63:8b:95:fe:a4:10: a2:4d:5f:b4:83:71:5e:67:6b:9b:ee:97:ff:1f:3a: 6b:09:88:b9:ac:e6:46:06:e6:fe:75:b8:98:78:8e: 30:f5:a3:c8:0b:f5:50:52:a3:1a:53:0f:eb:c9:0a: c8:0f:25:f7:11:9d:15:fb:4b:bf:d0:2f:19:fd:36: 35:48:0d:31:7b:23:a1:a9:23:f7:59:62:62:86:19: 89:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:91:EE:77:2D:95:9D:4A:84:46:9A:18:67:2E:76:7A:3C:EA:44:AD X509v3 Authority Key Identifier: keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/N5Hudy2VnUqERpoYZy52ejzqRK0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.79.2.0/23 Signature Algorithm: sha256WithRSAEncryption 3c:8c:cb:5c:a5:83:b5:0e:61:c4:12:a9:31:dd:04:2f:77:ac: f6:94:ff:b1:16:04:41:a3:54:29:a5:5d:cd:5a:ec:9c:dd:98: fe:f5:b3:a6:71:01:33:48:40:53:3e:64:fb:26:fc:69:64:5f: 8e:92:be:34:70:e1:d0:cc:e1:16:fd:2d:7f:88:67:74:02:76: c1:c8:49:ac:72:ea:d9:7d:44:ef:82:be:a2:1b:5f:94:a0:2c: e7:cd:ad:79:1a:ef:9e:f3:02:2b:68:ee:71:56:7a:ea:50:11: bd:18:29:1c:9e:44:9c:01:11:c8:d0:55:df:ec:02:89:d9:e5: 35:5d:58:63:87:c1:89:a2:c0:8f:c2:d7:76:8d:e4:df:dc:87: f2:c9:25:a0:6f:df:65:8f:f6:ad:55:0c:04:4a:6f:18:c6:ee: 46:2c:21:2f:75:0a:21:4e:87:df:d7:fe:45:78:67:24:83:29: 85:5e:93:c0:d2:07:6f:98:ca:e1:1a:f8:8b:24:7c:b1:95:9b: 45:5d:bc:a4:a1:1a:ce:ff:cd:aa:0d:1e:ed:92:76:80:1b:a2: c3:f9:f1:56:09:92:00:17:e2:cc:2c:4d:4e:80:60:40:38:21: c3:8a:a6:ab:72:23:ed:ea:a1:48:c0:8f:5f:3e:43:78:0d:d4: 10:21:c9:b5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EsQanl5GInK9oBUrESvfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNzVmYjRmNTJhODI5ZDEzNmUyOWE5YTAyNWM2MzZkMTlh ZTMyOGUwHhcNMjYwMTAyMDAxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzkxZWU3NzJkOTU5ZDRhODQ0NjlhMTg2NzJlNzY3YTNjZWE0NGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryNuEjIAOHayd4NoTU2XT+OQEXtY Me3iolh8oS6yX01eS7zU3+1TrbJKQAHcoGHDgw4ob5YN34+P/3ebPBn5sWK3kCuo pdTko3DQ57p+zwAuD3y0tlC9P+JKF49Kh1D/iAg87ldxLxO9vKXsbuIgmjmE5liZ ZOg+A9jKOrlfAjPDAo64Ab12TQTKX/dWfrfvY0bPZa7YPfgo/PJ6Pnm/Erqsj8U9 HJXUNWLlp19ji5X+pBCiTV+0g3FeZ2ub7pf/HzprCYi5rOZGBub+dbiYeI4w9aPI C/VQUqMaUw/ryQrIDyX3EZ0V+0u/0C8Z/TY1SA0xeyOhqSP3WWJihhmJKQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDeR7nctlZ1KhEaaGGcudno86kStMB8GA1UdIwQY MBaAFA51+09SqCnRNuKamgJcY20ZrjKOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYt MzViYTI2N2RlZDNiLzEvTjVIdWR5MlZuVXFFUnBvWVp5NTJlanpxUkswLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYtMzViYTI2N2RlZDNi LzEvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuU8CMA0G CSqGSIb3DQEBCwUAA4IBAQA8jMtcpYO1DmHEEqkx3QQvd6z2lP+xFgRBo1QppV3N Wuyc3Zj+9bOmcQEzSEBTPmT7JvxpZF+Okr40cOHQzOEW/S1/iGd0AnbByEmscurZ fUTvgr6iG1+UoCznza15Gu+e8wIraO5xVnrqUBG9GCkcnkScARHI0FXf7AKJ2eU1 XVhjh8GJosCPwtd2jeTf3IfyySWgb99lj/atVQwESm8Yxu5GLCEvdQohToff1/5F eGckgymFXpPA0gdvmMrhGviLJHyxlZtFXbykoRrO/82qDR7tknaAG6LD+fFWCZIA F+LMLE1OgGBAOCHDiqarciPt6qFIwI9fPkN4DdQQIcm1 -----END CERTIFICATE-----Generated at Sun Jan 25 15:37:28 2026 by rpki-client