This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/e5B6UaZBynauNkkMPicw53NI3mU.roa File: e5B6UaZBynauNkkMPicw53NI3mU.roa (raw, json) Hash identifier: 4DmDWJi04vm3aen2qoxWEPXJCD5rR8XX9hHzfX6WDXM= Subject key identifier: 7B:90:7A:51:A6:41:CA:76:AE:36:49:0C:3E:27:30:E7:73:48:DE:65 Certificate issuer: /CN=5791bb1150beac5ea0c724f39d2ce7fccfc1546a Certificate serial: 019B7B35A90118B03C1A7FD79E4FD2CB64A5 Authority key identifier: 57:91:BB:11:50:BE:AC:5E:A0:C7:24:F3:9D:2C:E7:FC:CF:C1:54:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5G7EVC-rF6gxyTznSzn_M_BVGo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/e5B6UaZBynauNkkMPicw53NI3mU.roa Signing time: Thu 01 Jan 2026 20:17:52 +0000 ROA not before: Thu 01 Jan 2026 20:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62199 IP address blocks: 185.45.76.0/22 maxlen: 24 2a01:49a0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/V5G7EVC-rF6gxyTznSzn_M_BVGo.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/V5G7EVC-rF6gxyTznSzn_M_BVGo.mft rsync://rpki.ripe.net/repository/DEFAULT/V5G7EVC-rF6gxyTznSzn_M_BVGo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:a9:01:18:b0:3c:1a:7f:d7:9e:4f:d2:cb:64:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5791bb1150beac5ea0c724f39d2ce7fccfc1546a Validity Not Before: Jan 1 20:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7b907a51a641ca76ae36490c3e2730e77348de65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:51:02:a3:74:92:f6:90:b1:d8:2a:27:a0:78: 2d:16:a8:5d:c4:34:59:91:e0:d7:05:0f:a1:3c:a4: 2a:79:5e:da:7a:5c:82:d1:e2:66:42:84:3d:e9:27: 27:2e:87:e7:75:70:96:e6:0d:94:c4:6c:1e:b8:1c: e8:55:aa:f1:c8:ec:0c:7c:e3:62:43:24:0a:b4:21: 52:4c:23:68:90:53:5c:5f:fd:8a:1e:61:5a:85:d4: 09:69:6b:00:f3:9a:b8:92:c7:0a:31:f1:a9:66:31: 7d:3a:7f:21:8a:09:d9:5b:d3:2d:14:5a:d3:a2:c2: 10:d9:2a:37:63:1d:50:5c:ef:68:59:04:0a:71:51: 53:1c:27:a5:2d:c7:8e:83:9c:e3:11:f4:27:68:8d: 1c:e1:44:d9:90:30:78:12:85:e2:a4:45:19:d5:f7: 49:48:83:6d:9c:df:0e:0b:26:32:fa:d0:21:63:64: e0:a8:1f:fb:2c:ac:45:a5:63:a1:fe:ca:89:00:28: 2f:ef:9b:ef:7b:9a:64:0d:f2:0a:4d:64:5c:4c:3e: 19:d9:e3:79:80:1c:5e:58:28:23:f7:98:4c:60:1b: ba:43:e2:ef:fc:9e:72:51:30:8d:53:d4:25:c6:fb: 0a:ad:5c:8f:3e:48:08:36:44:d5:ae:25:74:82:28: b3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:90:7A:51:A6:41:CA:76:AE:36:49:0C:3E:27:30:E7:73:48:DE:65 X509v3 Authority Key Identifier: keyid:57:91:BB:11:50:BE:AC:5E:A0:C7:24:F3:9D:2C:E7:FC:CF:C1:54:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5G7EVC-rF6gxyTznSzn_M_BVGo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/e5B6UaZBynauNkkMPicw53NI3mU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/V5G7EVC-rF6gxyTznSzn_M_BVGo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.45.76.0/22 IPv6: 2a01:49a0::/32 Signature Algorithm: sha256WithRSAEncryption 86:17:1a:a5:fa:fb:aa:ec:21:a5:f3:43:9b:c1:1c:69:89:31: 2a:a1:40:b8:2c:02:3c:86:34:ea:bb:6e:a3:53:81:1f:f3:c4: 50:f0:ed:e6:bc:46:03:ef:fb:10:81:1b:9e:f3:e3:33:98:97: 65:63:1f:51:c4:8a:c4:b1:d9:13:fc:ee:90:67:4b:97:f8:5b: 7b:96:76:18:37:18:85:83:46:65:f3:46:2b:60:17:f9:75:8a: 27:2e:41:fc:b9:ff:e7:b4:29:8a:64:5d:21:82:b1:97:b5:22: 28:da:55:66:18:c1:6e:e2:b1:71:64:42:7e:7f:73:6f:04:4c: 40:6f:4c:4d:22:50:02:de:09:86:7c:7c:17:73:6f:26:97:a2: da:84:e4:9d:18:64:9b:3a:80:ec:a7:51:d9:a7:89:fc:93:1a: 9c:be:43:17:69:24:a5:23:4e:b3:e1:be:77:71:b0:83:f8:22: c9:d2:1a:b2:83:65:e1:eb:0d:05:1d:ad:78:ed:60:b3:3a:b5: fc:bb:c0:e1:60:1e:2e:32:e7:75:9f:bb:89:60:f8:68:15:df: 19:9e:c1:5c:be:8c:d2:18:d7:89:a2:54:4f:05:d3:54:07:fa: fa:45:8a:ed:9d:91:cc:3b:28:ad:28:cf:46:11:99:04:e7:8f: 66:31:19:2b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7NakBGLA8Gn/Xnk/Sy2SlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3OTFiYjExNTBiZWFjNWVhMGM3MjRmMzlkMmNlN2ZjY2Zj MTU0NmEwHhcNMjYwMTAxMjAxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YjkwN2E1MWE2NDFjYTc2YWUzNjQ5MGMzZTI3MzBlNzczNDhkZTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1ECo3SS9pCx2ConoHgtFqhdxDRZ keDXBQ+hPKQqeV7aelyC0eJmQoQ96ScnLofndXCW5g2UxGweuBzoVarxyOwMfONi QyQKtCFSTCNokFNcX/2KHmFahdQJaWsA85q4kscKMfGpZjF9On8hignZW9MtFFrT osIQ2So3Yx1QXO9oWQQKcVFTHCelLceOg5zjEfQnaI0c4UTZkDB4EoXipEUZ1fdJ SINtnN8OCyYy+tAhY2TgqB/7LKxFpWOh/sqJACgv75vve5pkDfIKTWRcTD4Z2eN5 gBxeWCgj95hMYBu6Q+Lv/J5yUTCNU9QlxvsKrVyPPkgINkTVriV0giiz2QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHuQelGmQcp2rjZJDD4nMOdzSN5lMB8GA1UdIwQY MBaAFFeRuxFQvqxeoMck850s5/zPwVRqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjVHN0VWQy1yRjZneHlUem5Tem5fTV9CVkdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy81Yzg5NDEtNWEyOC00NGUxLTkzOTUt YmQzMWM1YWNlYjU5LzEvZTVCNlVhWkJ5bmF1TmtrTVBpY3c1M05JM21VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy81Yzg5NDEtNWEyOC00NGUxLTkzOTUtYmQzMWM1YWNlYjU5 LzEvVjVHN0VWQy1yRjZneHlUem5Tem5fTV9CVkdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuS1MMA0E AgACMAcDBQAqAUmgMA0GCSqGSIb3DQEBCwUAA4IBAQCGFxql+vuq7CGl80ObwRxp iTEqoUC4LAI8hjTqu26jU4Ef88RQ8O3mvEYD7/sQgRue8+MzmJdlYx9RxIrEsdkT /O6QZ0uX+Ft7lnYYNxiFg0Zl80YrYBf5dYonLkH8uf/ntCmKZF0hgrGXtSIo2lVm GMFu4rFxZEJ+f3NvBExAb0xNIlAC3gmGfHwXc28ml6LahOSdGGSbOoDsp1HZp4n8 kxqcvkMXaSSlI06z4b53cbCD+CLJ0hqyg2Xh6w0FHa147WCzOrX8u8DhYB4uMud1 n7uJYPhoFd8ZnsFcvozSGNeJolRPBdNUB/r6RYrtnZHMOyitKM9GEZkE549mMRkr -----END CERTIFICATE-----Generated at Mon Jan 26 15:18:56 2026 by rpki-client