This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/5wHePNmHiLxtlCYvlaGW1MyLNGY.roa File: 5wHePNmHiLxtlCYvlaGW1MyLNGY.roa (raw, json) Hash identifier: 19szNpHnnm6pkaW4TlJOhu+0nXLMQC+WoPm1n3sfLvM= Subject key identifier: E7:01:DE:3C:D9:87:88:BC:6D:94:26:2F:95:A1:96:D4:CC:8B:34:66 Certificate issuer: /CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae Certificate serial: 019B79108A11CF9F4F38C68679A694BAF03D Authority key identifier: B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/5wHePNmHiLxtlCYvlaGW1MyLNGY.roa Signing time: Thu 01 Jan 2026 10:18:05 +0000 ROA not before: Thu 01 Jan 2026 10:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211064 IP address blocks: 185.236.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:8a:11:cf:9f:4f:38:c6:86:79:a6:94:ba:f0:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae Validity Not Before: Jan 1 10:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e701de3cd98788bc6d94262f95a196d4cc8b3466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9f:de:63:7e:59:9d:f9:93:be:dc:ee:a3:ad: 1e:85:36:18:f5:64:f1:d9:ec:d7:8e:34:f0:6e:5e: fc:de:38:c2:2d:92:73:c2:68:a0:89:a1:25:a3:5e: 11:b7:3f:ce:03:5e:5f:71:86:e5:1e:e0:29:44:c2: 8f:61:6b:10:d1:17:a5:3e:99:35:3c:7a:3d:b4:20: 6c:00:a4:52:a0:d5:9c:89:14:24:0a:5a:4e:61:41: 78:a8:8f:f3:69:6c:79:24:7e:22:d3:1a:bc:b4:33: de:20:da:11:d7:c4:3e:89:53:f3:a7:44:ff:c4:0d: 35:bb:45:a2:d7:cd:e1:ed:c5:20:30:75:b8:c0:54: 9b:60:61:c4:3d:04:51:4a:b5:1d:ac:e9:61:66:92: 3a:84:37:52:f3:59:2b:be:7a:a9:49:29:88:8b:51: 47:03:f8:6b:74:ac:41:93:60:01:d4:ed:11:8b:34: 01:02:26:e1:d0:b1:7d:44:a7:18:fc:35:05:4a:13: a6:e2:42:61:66:e0:d4:45:41:5c:ed:46:2b:99:9d: 66:44:8a:4d:5d:b0:da:85:dd:ad:be:a4:ab:4b:6a: db:b8:17:af:90:9d:30:43:a3:6e:f7:75:a1:cc:c6: 64:de:ca:26:21:fe:8a:fa:bd:29:63:f6:69:0f:9a: 68:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:01:DE:3C:D9:87:88:BC:6D:94:26:2F:95:A1:96:D4:CC:8B:34:66 X509v3 Authority Key Identifier: keyid:B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/5wHePNmHiLxtlCYvlaGW1MyLNGY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.236.140.0/24 Signature Algorithm: sha256WithRSAEncryption 73:4b:19:84:e0:0e:ee:5d:ce:cf:03:82:3a:16:ad:66:ac:8b: 07:51:35:07:6f:a9:7e:f0:77:b4:71:b2:8b:6f:ff:76:ac:96: b8:11:6e:c4:84:dd:8e:08:e6:a3:ce:c4:52:ac:fc:df:d4:b5: 8b:64:2e:21:01:06:7c:48:e8:6f:ea:e7:ed:38:ff:a1:95:bb: ef:82:68:35:f7:2f:69:33:d1:f4:9f:29:fb:5d:1f:e3:1d:b3: 3a:c2:2e:3b:e9:97:77:cd:59:29:ab:60:b1:8c:b6:86:7e:97: ff:21:7f:ae:59:50:8a:bd:96:dc:9b:ed:58:60:c8:22:b9:69: 8d:7d:fe:17:49:0e:b1:14:62:a0:48:7d:b6:a4:c5:1e:fd:8f: d6:05:79:c0:a8:c0:1f:27:5d:92:c8:d5:b4:8c:6e:72:25:40: a5:81:76:20:ec:ea:0d:88:9e:3e:d7:cf:90:f9:54:9b:c8:7c: 9c:f3:ba:d7:dd:b8:2d:72:57:81:67:9f:75:19:ca:8a:b5:03: 40:b2:82:a2:ef:b5:ee:a2:1c:9c:ae:5b:b5:03:b7:21:f3:c3: 7f:2a:70:df:bd:f9:b1:52:82:0b:42:8a:44:07:f8:36:3d:06: 66:6b:14:6b:d6:c2:dd:31:7e:6f:b4:11:f1:3c:ad:90:fa:cd: 4e:6a:4a:83 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EIoRz59POMaGeaaUuvA9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYzUxYjBjMDYzY2ZjMTY5NDNmYzlhNDdlMmM4MDU5OTBm NmVhYWUwHhcNMjYwMTAxMTAxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzAxZGUzY2Q5ODc4OGJjNmQ5NDI2MmY5NWExOTZkNGNjOGIzNDY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5/eY35ZnfmTvtzuo60ehTYY9WTx 2ezXjjTwbl783jjCLZJzwmigiaElo14Rtz/OA15fcYblHuApRMKPYWsQ0RelPpk1 PHo9tCBsAKRSoNWciRQkClpOYUF4qI/zaWx5JH4i0xq8tDPeINoR18Q+iVPzp0T/ xA01u0Wi183h7cUgMHW4wFSbYGHEPQRRSrUdrOlhZpI6hDdS81krvnqpSSmIi1FH A/hrdKxBk2AB1O0RizQBAibh0LF9RKcY/DUFShOm4kJhZuDURUFc7UYrmZ1mRIpN XbDahd2tvqSrS2rbuBevkJ0wQ6Nu93WhzMZk3somIf6K+r0pY/ZpD5po9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOcB3jzZh4i8bZQmL5WhltTMizRmMB8GA1UdIwQY MBaAFLPFGwwGPPwWlD/JpH4sgFmQ9uquMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczhVYkRBWThfQmFVUDhta2ZpeUFXWkQyNnE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81ODc3OTItYmFlOS00MTgzLWE0YjEt ZmY1ZjFhZDY5MjY2LzEvNXdIZVBObUhpTHh0bENZdmxhR1cxTXlMTkdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi81ODc3OTItYmFlOS00MTgzLWE0YjEtZmY1ZjFhZDY5MjY2 LzEvczhVYkRBWThfQmFVUDhta2ZpeUFXWkQyNnE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueyMMA0G CSqGSIb3DQEBCwUAA4IBAQBzSxmE4A7uXc7PA4I6Fq1mrIsHUTUHb6l+8He0cbKL b/92rJa4EW7EhN2OCOajzsRSrPzf1LWLZC4hAQZ8SOhv6uftOP+hlbvvgmg19y9p M9H0nyn7XR/jHbM6wi476Zd3zVkpq2CxjLaGfpf/IX+uWVCKvZbcm+1YYMgiuWmN ff4XSQ6xFGKgSH22pMUe/Y/WBXnAqMAfJ12SyNW0jG5yJUClgXYg7OoNiJ4+18+Q +VSbyHyc87rX3bgtcleBZ591GcqKtQNAsoKi77Xuohycrlu1A7ch88N/KnDfvfmx UoILQopEB/g2PQZmaxRr1sLdMX5vtBHxPK2Q+s1OakqD -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:24 2026 by rpki-client