This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/FSldjgXBXjGAUbFoSQDG1x2p2L4.roa File: FSldjgXBXjGAUbFoSQDG1x2p2L4.roa (raw, json) Hash identifier: /VsBntJD9ML7jEL3eLR/WzuhrYccqcvoqHnzK+4UGMQ= Subject key identifier: 15:29:5D:8E:05:C1:5E:31:80:51:B1:68:49:00:C6:D7:1D:A9:D8:BE Certificate issuer: /CN=87c37d035d95fefba1d47f98b9ff4973f17df6cd Certificate serial: 019B7A5AF7D1A11F260B320117CFACF8163A Authority key identifier: 87:C3:7D:03:5D:95:FE:FB:A1:D4:7F:98:B9:FF:49:73:F1:7D:F6:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/FSldjgXBXjGAUbFoSQDG1x2p2L4.roa Signing time: Thu 01 Jan 2026 16:19:00 +0000 ROA not before: Thu 01 Jan 2026 16:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42346 IP address blocks: 185.59.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:f7:d1:a1:1f:26:0b:32:01:17:cf:ac:f8:16:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87c37d035d95fefba1d47f98b9ff4973f17df6cd Validity Not Before: Jan 1 16:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=15295d8e05c15e318051b1684900c6d71da9d8be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e4:56:ba:b0:62:98:3b:f4:fa:c8:c5:33:2c: 5e:32:be:43:b9:4b:7e:0e:8a:a1:0f:cf:e4:1f:80: c8:83:d7:1c:ef:f6:99:6f:dd:46:8b:49:f2:91:89: 3d:77:bf:e7:4f:9d:3a:74:8e:4f:f4:d0:74:9d:51: 44:cd:b5:3d:de:e7:60:0c:f4:fe:5c:7a:53:2e:eb: 7b:af:4b:c2:13:a3:26:62:32:15:21:58:d9:45:08: 57:c7:81:54:fc:e9:48:35:4f:b3:36:ff:d4:04:75: e9:51:b9:5a:cd:af:40:5a:b6:6a:55:d7:b6:2a:0c: af:5b:de:e7:38:88:e9:5c:63:45:8e:50:a4:6e:47: 45:85:f9:60:92:5d:1a:18:9d:ac:86:e8:ec:d4:27: 74:31:4a:af:7e:d2:61:94:28:c1:5a:df:83:24:f8: 94:e8:8a:42:e5:89:5e:c5:5e:2c:48:1e:07:99:d5: 36:49:98:70:7b:c1:ac:03:1e:c3:27:7c:60:6c:a8: e1:7c:3b:82:ea:13:68:02:79:df:6f:46:bf:06:cd: 50:0d:83:ab:0f:cf:df:a0:74:d2:3b:18:b4:c7:c5: 3d:10:00:5f:cf:d5:f4:2f:08:94:ec:a0:4f:9c:5f: ca:15:25:1b:f6:f6:b7:9f:0e:f2:c2:0b:ac:66:af: d1:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:29:5D:8E:05:C1:5E:31:80:51:B1:68:49:00:C6:D7:1D:A9:D8:BE X509v3 Authority Key Identifier: keyid:87:C3:7D:03:5D:95:FE:FB:A1:D4:7F:98:B9:FF:49:73:F1:7D:F6:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/FSldjgXBXjGAUbFoSQDG1x2p2L4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.59.52.0/22 Signature Algorithm: sha256WithRSAEncryption 04:46:0d:42:8d:cb:b2:59:8f:91:01:53:57:8e:b0:0a:28:04: 93:83:8f:ff:0c:e8:1c:2d:83:24:31:7d:2f:53:5f:c9:51:16: 6e:b3:52:7b:45:27:a0:32:d6:ba:b7:cb:ec:9d:cd:a5:f5:18: 99:c1:95:3a:a6:0c:bd:ca:05:2c:d3:45:5c:74:1d:fb:90:4e: 28:af:0c:20:ec:52:84:7e:88:3a:a1:04:87:bc:53:1d:21:87: 6a:6b:cf:2e:14:6e:a7:cb:a2:b5:09:80:b9:15:12:4b:cf:1a: 6c:63:ad:22:ad:0c:3c:9b:4e:05:41:8f:5b:c7:56:b7:c4:98: 51:73:9f:eb:0a:1a:93:01:14:23:0f:80:15:07:3f:46:e0:c0: 25:db:ee:5d:31:91:dd:17:bb:33:14:13:33:71:6c:1d:4f:96: ad:81:71:c7:0b:df:6a:c4:1b:e6:92:e5:a6:dc:8c:e2:3e:06: f1:5e:32:ff:9f:b6:5a:d6:a9:06:b8:a4:d9:7c:d1:73:53:e4: 0f:25:d7:6c:ce:71:24:d3:b7:06:af:5b:4d:24:60:87:9e:0b: c4:cc:b3:aa:06:f4:5f:9d:1f:99:84:82:0c:81:15:01:c1:6f: 25:33:52:86:3c:e3:df:a7:65:41:f2:a6:83:fb:92:07:b9:29: ae:69:e2:70 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WvfRoR8mCzIBF8+s+BY6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3YzM3ZDAzNWQ5NWZlZmJhMWQ0N2Y5OGI5ZmY0OTczZjE3 ZGY2Y2QwHhcNMjYwMTAxMTYxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTI5NWQ4ZTA1YzE1ZTMxODA1MWIxNjg0OTAwYzZkNzFkYTlkOGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+RWurBimDv0+sjFMyxeMr5DuUt+ DoqhD8/kH4DIg9cc7/aZb91Gi0nykYk9d7/nT506dI5P9NB0nVFEzbU93udgDPT+ XHpTLut7r0vCE6MmYjIVIVjZRQhXx4FU/OlINU+zNv/UBHXpUblaza9AWrZqVde2 KgyvW97nOIjpXGNFjlCkbkdFhflgkl0aGJ2shujs1Cd0MUqvftJhlCjBWt+DJPiU 6IpC5YlexV4sSB4HmdU2SZhwe8GsAx7DJ3xgbKjhfDuC6hNoAnnfb0a/Bs1QDYOr D8/foHTSOxi0x8U9EABfz9X0LwiU7KBPnF/KFSUb9va3nw7ywgusZq/RJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBUpXY4FwV4xgFGxaEkAxtcdqdi+MB8GA1UdIwQY MBaAFIfDfQNdlf77odR/mLn/SXPxffbNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDhOOUExMlZfdnVoMUgtWXVmOUpjX0Y5OXMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS81ZWYwNjAtZjQ3My00MDQzLWI4YTIt ZTFiN2M3NjQ5ZmEzLzEvRlNsZGpnWEJYakdBVWJGb1NRREcxeDJwMkw0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS81ZWYwNjAtZjQ3My00MDQzLWI4YTItZTFiN2M3NjQ5ZmEz LzEvaDhOOUExMlZfdnVoMUgtWXVmOUpjX0Y5OXMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuTs0MA0G CSqGSIb3DQEBCwUAA4IBAQAERg1CjcuyWY+RAVNXjrAKKASTg4//DOgcLYMkMX0v U1/JURZus1J7RSegMta6t8vsnc2l9RiZwZU6pgy9ygUs00VcdB37kE4orwwg7FKE fog6oQSHvFMdIYdqa88uFG6ny6K1CYC5FRJLzxpsY60irQw8m04FQY9bx1a3xJhR c5/rChqTARQjD4AVBz9G4MAl2+5dMZHdF7szFBMzcWwdT5atgXHHC99qxBvmkuWm 3IziPgbxXjL/n7Za1qkGuKTZfNFzU+QPJddsznEk07cGr1tNJGCHngvEzLOqBvRf nR+ZhIIMgRUBwW8lM1KGPOPfp2VB8qaD+5IHuSmuaeJw -----END CERTIFICATE-----Generated at Mon Jan 26 03:56:49 2026 by rpki-client