This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/Fh1t7rzPIhJXnOEVD4FNHFJov6I.roa File: Fh1t7rzPIhJXnOEVD4FNHFJov6I.roa (raw, json) Hash identifier: xyxnFW4AuKmT8OTwF87A3TgtZBfvGtO+UCiL5cJIqm4= Subject key identifier: 16:1D:6D:EE:BC:CF:22:12:57:9C:E1:15:0F:81:4D:1C:52:68:BF:A2 Certificate issuer: /CN=51e2be139ae779cd3d4feebccd368281a1f5e7a0 Certificate serial: 019B7EA4D5B796144D03C2E4F7583729FC4F Authority key identifier: 51:E2:BE:13:9A:E7:79:CD:3D:4F:EE:BC:CD:36:82:81:A1:F5:E7:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeK-E5rnec09T-68zTaCgaH156A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/Fh1t7rzPIhJXnOEVD4FNHFJov6I.roa Signing time: Fri 02 Jan 2026 12:18:10 +0000 ROA not before: Fri 02 Jan 2026 12:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5539 IP address blocks: 185.5.184.0/23 maxlen: 23 2a02:7c40::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft rsync://rpki.ripe.net/repository/DEFAULT/UeK-E5rnec09T-68zTaCgaH156A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:d5:b7:96:14:4d:03:c2:e4:f7:58:37:29:fc:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51e2be139ae779cd3d4feebccd368281a1f5e7a0 Validity Not Before: Jan 2 12:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=161d6deebccf2212579ce1150f814d1c5268bfa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:28:17:cb:e6:1e:f8:9f:0a:30:9d:f7:dc:96: 1c:80:c3:7e:b9:95:74:7c:a6:d3:a2:0d:90:6e:ef: 99:37:0a:b1:cd:aa:8d:91:01:bc:41:0d:78:ca:86: 88:82:63:15:49:25:a4:1c:b0:90:52:f2:fd:1c:fd: 1d:34:8f:74:25:89:82:56:57:a2:aa:5b:57:d1:3f: 70:e4:21:98:a7:cf:39:a9:26:4e:94:b2:3e:f0:4a: 25:36:88:c7:31:eb:5c:8f:96:f5:97:b9:a4:7a:3c: e6:c4:e0:54:5f:10:4b:1a:70:86:f2:e9:85:6b:e8: b0:2b:2c:ff:ee:1b:2d:e6:e1:66:39:24:e8:5a:25: fd:82:1e:0e:da:ed:72:2e:5c:01:ce:c9:c3:30:c4: c7:6e:39:f4:fd:0f:b5:4d:8a:53:83:92:27:5e:b8: 34:d0:61:42:c2:19:6f:b1:0f:df:6d:bf:62:66:df: 31:be:59:8d:de:fe:47:ab:d3:cc:cc:0a:62:fc:26: d0:c1:40:6e:34:64:e3:9d:0d:c7:14:95:7c:85:28: 2a:94:bb:0d:87:53:56:3e:66:1d:b2:f2:d3:ed:92: 4c:2a:ce:9c:a6:01:c3:cf:ff:16:85:c7:be:b9:7d: 42:73:e7:99:64:1d:f8:c9:7f:aa:3b:79:ec:37:55: b1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:1D:6D:EE:BC:CF:22:12:57:9C:E1:15:0F:81:4D:1C:52:68:BF:A2 X509v3 Authority Key Identifier: keyid:51:E2:BE:13:9A:E7:79:CD:3D:4F:EE:BC:CD:36:82:81:A1:F5:E7:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeK-E5rnec09T-68zTaCgaH156A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/Fh1t7rzPIhJXnOEVD4FNHFJov6I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.5.184.0/23 IPv6: 2a02:7c40::/33 Signature Algorithm: sha256WithRSAEncryption 14:1f:10:db:d9:bc:af:39:59:e4:fb:06:e3:87:47:5d:05:b4: 96:68:8e:cb:8b:94:d8:fd:d8:fa:15:d6:df:94:34:f9:cd:fc: 79:bf:a4:c5:ec:56:05:7b:99:7e:77:f2:03:a8:64:ee:d2:99: e2:bd:10:60:9d:86:89:c1:d9:88:4e:a1:94:da:18:c3:9e:52: 2b:2f:fe:66:1a:9c:ad:74:5e:4d:63:aa:ce:d9:88:f1:4c:f7: c6:36:29:a8:6a:e6:9a:e6:6b:ae:0e:9b:d9:85:ef:b2:40:9a: d5:80:6d:35:fe:9d:7c:af:2c:4e:43:06:82:be:5d:e5:ba:21: 3c:e5:a1:53:af:d7:4f:8d:bd:78:52:64:29:22:00:c5:08:ac: e5:3d:98:24:b7:11:eb:aa:32:fa:b4:23:74:b5:b9:40:66:f0: a8:b1:33:86:fb:99:e3:15:32:91:cf:74:a0:b3:1b:04:e7:3f: 99:2b:ab:df:f5:8d:28:92:7a:d4:5d:24:48:c0:08:db:55:d3: 59:68:46:c2:36:bc:d0:82:ad:2b:0a:ee:1f:5d:13:56:81:27: f5:77:e8:80:2b:65:2c:b6:23:35:a0:6f:ea:48:ad:0d:25:ef: a8:0e:98:49:9c:ba:b5:6e:be:8d:67:1e:e5:49:d0:58:d5:94: e6:f1:ff:cf -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt+pNW3lhRNA8Lk91g3KfxPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxZTJiZTEzOWFlNzc5Y2QzZDRmZWViY2NkMzY4MjgxYTFm NWU3YTAwHhcNMjYwMTAyMTIxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjFkNmRlZWJjY2YyMjEyNTc5Y2UxMTUwZjgxNGQxYzUyNjhiZmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCgXy+Ye+J8KMJ333JYcgMN+uZV0 fKbTog2Qbu+ZNwqxzaqNkQG8QQ14yoaIgmMVSSWkHLCQUvL9HP0dNI90JYmCVlei qltX0T9w5CGYp885qSZOlLI+8EolNojHMetcj5b1l7mkejzmxOBUXxBLGnCG8umF a+iwKyz/7hst5uFmOSToWiX9gh4O2u1yLlwBzsnDMMTHbjn0/Q+1TYpTg5InXrg0 0GFCwhlvsQ/fbb9iZt8xvlmN3v5Hq9PMzApi/CbQwUBuNGTjnQ3HFJV8hSgqlLsN h1NWPmYdsvLT7ZJMKs6cpgHDz/8Whce+uX1Cc+eZZB34yX+qO3nsN1WxkQIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFBYdbe68zyISV5zhFQ+BTRxSaL+iMB8GA1UdIwQY MBaAFFHivhOa53nNPU/uvM02goGh9eegMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWVLLUU1cm5lYzA5VC02OHpUYUNnYUgxNTZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8yZjU5MzEtMDVhOC00MzZiLTkyNzMt Y2Q3YjZlZGJmY2Y1LzEvRmgxdDdyelBJaEpYbk9FVkQ0Rk5IRkpvdjZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8yZjU5MzEtMDVhOC00MzZiLTkyNzMtY2Q3YjZlZGJmY2Y1 LzEvVWVLLUU1cm5lYzA5VC02OHpUYUNnYUgxNTZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBuQW4MA4E AgACMAgDBgcqAnxAADANBgkqhkiG9w0BAQsFAAOCAQEAFB8Q29m8rzlZ5PsG44dH XQW0lmiOy4uU2P3Y+hXW35Q0+c38eb+kxexWBXuZfnfyA6hk7tKZ4r0QYJ2GicHZ iE6hlNoYw55SKy/+ZhqcrXReTWOqztmI8Uz3xjYpqGrmmuZrrg6b2YXvskCa1YBt Nf6dfK8sTkMGgr5d5bohPOWhU6/XT429eFJkKSIAxQis5T2YJLcR66oy+rQjdLW5 QGbwqLEzhvuZ4xUykc90oLMbBOc/mSur3/WNKJJ61F0kSMAI21XTWWhGwja80IKt KwruH10TVoEn9XfogCtlLLYjNaBv6kitDSXvqA6YSZy6tW6+jWce5UnQWNWU5vH/ zw== -----END CERTIFICATE-----Generated at Mon Jan 26 07:40:31 2026 by rpki-client