This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/q448fa7_znU_mFgRxcDcgN4477g.roa File: q448fa7_znU_mFgRxcDcgN4477g.roa (raw, json) Hash identifier: B5NQG+C4rJ08vWE97izdeALjZxDvsgfYoMhiTTd/XKk= Subject key identifier: AB:8E:3C:7D:AE:FF:CE:75:3F:98:58:11:C5:C0:DC:80:DE:38:EF:B8 Certificate issuer: /CN=12694f6945a21d08d30192cfc1a6b780de728e3b Certificate serial: 019B7B367DB9D4A62D396AE5D97B50914A97 Authority key identifier: 12:69:4F:69:45:A2:1D:08:D3:01:92:CF:C1:A6:B7:80:DE:72:8E:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/q448fa7_znU_mFgRxcDcgN4477g.roa Signing time: Thu 01 Jan 2026 20:18:47 +0000 ROA not before: Thu 01 Jan 2026 20:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39888 IP address blocks: 5.83.39.0/24 maxlen: 24 5.83.41.0/24 maxlen: 24 185.75.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.mft rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:7d:b9:d4:a6:2d:39:6a:e5:d9:7b:50:91:4a:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12694f6945a21d08d30192cfc1a6b780de728e3b Validity Not Before: Jan 1 20:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab8e3c7daeffce753f985811c5c0dc80de38efb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:9c:7b:02:36:07:3d:87:7d:11:58:14:ca:a9: 3f:09:ca:13:ba:dc:0f:98:c0:f3:69:32:1f:6f:ba: 06:58:52:cb:76:66:48:87:47:b9:11:c6:6f:a5:8c: 07:bb:75:43:82:6c:ab:77:d7:28:ca:3c:36:7a:c0: b7:1f:0f:47:e7:2f:44:91:b8:85:9a:e2:f8:9b:bf: 5d:3a:1a:8e:44:69:df:c1:98:a4:25:a5:15:f0:e7: fa:37:b8:e4:42:e3:0d:a3:2e:31:a1:ed:c5:c2:14: a5:c4:ca:b6:3b:b0:39:37:41:00:d7:73:5b:44:45: 1a:6d:b3:9f:91:df:3e:6b:6f:b0:d2:00:7e:5e:58: 67:fa:61:09:ec:6d:04:a6:87:a7:eb:37:89:b0:c9: 2b:94:24:ae:9d:e2:f3:e5:65:dd:0b:f1:18:37:94: ee:01:46:9e:f5:d8:70:a1:3b:58:41:7a:65:5b:bb: 85:e0:25:36:d5:83:71:50:91:35:73:88:23:01:b5: 50:c2:6e:3f:ac:47:d8:68:88:6e:ac:9d:f2:24:30: 0c:12:ed:37:65:f6:22:8d:08:69:b7:7b:33:e5:d6: c0:fc:1c:79:03:3f:66:65:7b:36:96:33:77:99:86: a9:2b:09:44:8a:b7:bc:bd:1c:1b:ed:13:64:7a:1d: d9:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:8E:3C:7D:AE:FF:CE:75:3F:98:58:11:C5:C0:DC:80:DE:38:EF:B8 X509v3 Authority Key Identifier: keyid:12:69:4F:69:45:A2:1D:08:D3:01:92:CF:C1:A6:B7:80:DE:72:8E:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/q448fa7_znU_mFgRxcDcgN4477g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.39.0/24 5.83.41.0/24 185.75.53.0/24 Signature Algorithm: sha256WithRSAEncryption 28:5a:74:c5:df:4a:c8:fc:56:20:c5:a0:ff:ef:db:47:d0:9b: 87:af:57:f1:d3:ac:b5:bc:e8:5d:66:1f:72:ae:91:fe:29:30: ed:be:47:df:3d:f3:49:56:44:f3:1d:e4:3d:5e:79:7f:94:ae: a9:c7:94:0f:3f:b8:2d:05:84:54:d6:9a:f0:e1:2f:a2:67:99: a8:d4:fa:29:5d:e4:95:64:85:4c:64:37:9d:50:8f:8c:61:23: d0:d0:0a:1f:eb:18:a3:e3:05:7c:50:9a:0a:20:d0:a2:32:23: e5:8c:d4:84:0e:8d:e1:04:59:74:7a:d3:a9:31:d7:9d:b1:ab: 24:34:ae:7f:00:ea:49:8a:a4:04:71:04:29:ec:2e:20:09:8d: bd:3c:a2:b4:77:40:58:45:17:a0:82:a3:96:a5:c1:ae:6c:59: 4c:e4:0d:c1:dd:4c:f2:50:6f:99:44:a4:b4:9b:9e:26:d2:90: 59:cf:f2:1f:c5:b2:a5:59:27:e9:0d:40:36:a5:dd:f6:44:b6: a1:1b:fc:85:fe:6a:b0:df:a7:70:90:aa:28:30:e5:e9:7b:e3: 76:52:b0:d6:98:f8:3b:5c:c4:1c:98:da:22:f9:36:dd:31:78: ee:e3:44:aa:bd:ef:c8:37:68:aa:f9:0d:c0:c5:31:05:c0:2a: d2:59:ab:61 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7Nn251KYtOWrl2XtQkUqXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNjk0ZjY5NDVhMjFkMDhkMzAxOTJjZmMxYTZiNzgwZGU3 MjhlM2IwHhcNMjYwMTAxMjAxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjhlM2M3ZGFlZmZjZTc1M2Y5ODU4MTFjNWMwZGM4MGRlMzhlZmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJx7AjYHPYd9EVgUyqk/CcoTutwP mMDzaTIfb7oGWFLLdmZIh0e5EcZvpYwHu3VDgmyrd9coyjw2esC3Hw9H5y9EkbiF muL4m79dOhqORGnfwZikJaUV8Of6N7jkQuMNoy4xoe3FwhSlxMq2O7A5N0EA13Nb REUabbOfkd8+a2+w0gB+Xlhn+mEJ7G0Epoen6zeJsMkrlCSuneLz5WXdC/EYN5Tu AUae9dhwoTtYQXplW7uF4CU21YNxUJE1c4gjAbVQwm4/rEfYaIhurJ3yJDAMEu03 ZfYijQhpt3sz5dbA/Bx5Az9mZXs2ljN3mYapKwlEire8vRwb7RNkeh3ZOQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFKuOPH2u/851P5hYEcXA3IDeOO+4MB8GA1UdIwQY MBaAFBJpT2lFoh0I0wGSz8Gmt4Deco47MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW1sUGFVV2lIUWpUQVpMUHdhYTNnTjV5ampzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9kNzMwMGYtZGUwNi00ZjdiLWE5MDkt NjU5OGI0Y2ViMDY5LzEvcTQ0OGZhN196blVfbUZnUnhjRGNnTjQ0NzdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9kNzMwMGYtZGUwNi00ZjdiLWE5MDktNjU5OGI0Y2ViMDY5 LzEvRW1sUGFVV2lIUWpUQVpMUHdhYTNnTjV5ampzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABVMnAwQA BVMpAwQAuUs1MA0GCSqGSIb3DQEBCwUAA4IBAQAoWnTF30rI/FYgxaD/79tH0JuH r1fx06y1vOhdZh9yrpH+KTDtvkffPfNJVkTzHeQ9Xnl/lK6px5QPP7gtBYRU1prw 4S+iZ5mo1PopXeSVZIVMZDedUI+MYSPQ0Aof6xij4wV8UJoKINCiMiPljNSEDo3h BFl0etOpMdedsaskNK5/AOpJiqQEcQQp7C4gCY29PKK0d0BYRReggqOWpcGubFlM 5A3B3UzyUG+ZRKS0m54m0pBZz/IfxbKlWSfpDUA2pd32RLahG/yF/mqw36dwkKoo MOXpe+N2UrDWmPg7XMQcmNoi+TbdMXju40Sqve/IN2iq+Q3AxTEFwCrSWath -----END CERTIFICATE-----Generated at Mon Jan 26 02:44:08 2026 by rpki-client