This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/5xBml7U-4lugY_mFciACfFr11lA.roa File: 5xBml7U-4lugY_mFciACfFr11lA.roa (raw, json) Hash identifier: hT0w3sNsbCx55sgMzKKPb+SHty16gYRniqe1E9kHT9k= Subject key identifier: E7:10:66:97:B5:3E:E2:5B:A0:63:F9:85:72:20:02:7C:5A:F5:D6:50 Certificate issuer: /CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a Certificate serial: 019B7A5B4AFB6C1DF4858F0A60A2A7FF2A06 Authority key identifier: F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/5xBml7U-4lugY_mFciACfFr11lA.roa Signing time: Thu 01 Jan 2026 16:19:21 +0000 ROA not before: Thu 01 Jan 2026 16:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39448 IP address blocks: 80.68.176.0/24 maxlen: 24 178.238.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.mft rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:4a:fb:6c:1d:f4:85:8f:0a:60:a2:a7:ff:2a:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a Validity Not Before: Jan 1 16:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e7106697b53ee25ba063f9857220027c5af5d650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:69:f3:b6:4b:e9:3f:e0:d6:ce:41:41:29:12: 59:9a:27:e3:c4:db:51:78:d6:cb:14:fb:fa:0a:f6: 37:68:88:21:88:c0:19:36:c8:aa:48:3d:a2:c6:66: 3d:0c:26:94:a3:2a:3d:6c:c3:67:ec:8c:84:7e:30: 4e:94:a3:aa:62:23:97:44:8b:3f:10:6c:a5:60:c9: 33:0d:52:bf:09:00:72:39:2c:6a:5b:c5:89:69:7c: 51:26:ce:e1:3f:2a:44:2d:4b:3f:a7:55:65:12:00: 93:01:9d:24:fb:61:1f:8d:e4:7c:fb:f0:74:45:13: 03:1d:38:8d:9b:af:18:2b:42:74:cc:90:9e:7e:d6: be:c4:53:a2:3b:ee:9e:5d:02:68:39:f2:35:e4:5d: 36:69:0c:72:a8:e0:cf:9a:df:fa:64:03:d4:1c:8d: 9f:c9:e7:91:0e:37:4a:ca:3a:96:d1:c4:4f:a5:26: 5b:ab:ea:03:46:c7:91:67:81:6e:59:3c:64:71:e7: 36:43:6e:08:e4:72:2b:a8:16:ab:b1:b1:59:86:e4: 05:4e:62:c9:51:59:c2:21:32:90:82:b2:4f:fb:4f: d9:a8:58:75:55:bd:5d:c1:ff:f1:c7:7f:56:fd:5d: f7:86:d3:78:10:22:59:b2:1a:02:9b:67:15:90:b9: 28:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:10:66:97:B5:3E:E2:5B:A0:63:F9:85:72:20:02:7C:5A:F5:D6:50 X509v3 Authority Key Identifier: keyid:F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/5xBml7U-4lugY_mFciACfFr11lA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.68.176.0/24 178.238.50.0/24 Signature Algorithm: sha256WithRSAEncryption 66:f2:e6:20:6e:b1:37:09:e5:87:8a:4e:79:d9:0f:05:7f:2b: 8d:39:8d:6a:53:92:ea:0b:6f:c8:06:bb:71:1e:22:d9:25:b3: b8:0f:2c:70:f4:74:e0:18:73:e4:02:4d:97:76:e8:e5:a3:db: a4:7b:8a:75:fd:f8:0c:30:4c:81:ab:51:2f:6c:a8:f1:54:5e: 5a:85:fb:24:16:c6:c6:c2:df:d5:68:41:25:e2:4b:f0:72:16: a8:9e:d9:24:a0:e8:9b:98:6d:52:cb:e3:07:52:04:56:a1:bf: b2:c5:de:61:1a:e9:8f:da:d7:36:ac:10:f9:62:fa:a2:96:9b: b9:37:1c:39:f9:da:80:86:05:c3:a9:b4:7b:a9:6a:02:27:97: b9:ff:d3:a8:c5:1f:7f:db:56:ac:7b:ae:58:c7:a9:ef:94:62: ab:a6:b7:59:74:ec:ba:9c:ce:99:59:79:51:96:18:76:72:51: e2:59:58:a3:fc:cd:01:93:b1:fb:0d:71:19:de:c3:25:8e:0f: da:a9:1d:ee:bf:2a:cd:a4:49:c2:67:af:26:d4:7f:82:a6:13: 10:41:9d:f7:ca:dd:5d:90:03:b9:16:ec:31:65:fd:d2:26:3d: 7e:85:da:aa:5e:a5:18:68:98:cf:49:81:22:88:ec:e4:ef:d9: 29:57:cf:a5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6W0r7bB30hY8KYKKn/yoGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2ZWVhMTBhZmFjZjNhOWMyNmVhMWIxZWM0ODhlOTU1ZTRk ZmEwNmEwHhcNMjYwMTAxMTYxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzEwNjY5N2I1M2VlMjViYTA2M2Y5ODU3MjIwMDI3YzVhZjVkNjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWnztkvpP+DWzkFBKRJZmifjxNtR eNbLFPv6CvY3aIghiMAZNsiqSD2ixmY9DCaUoyo9bMNn7IyEfjBOlKOqYiOXRIs/ EGylYMkzDVK/CQByOSxqW8WJaXxRJs7hPypELUs/p1VlEgCTAZ0k+2EfjeR8+/B0 RRMDHTiNm68YK0J0zJCefta+xFOiO+6eXQJoOfI15F02aQxyqODPmt/6ZAPUHI2f yeeRDjdKyjqW0cRPpSZbq+oDRseRZ4FuWTxkcec2Q24I5HIrqBarsbFZhuQFTmLJ UVnCITKQgrJP+0/ZqFh1Vb1dwf/xx39W/V33htN4ECJZshoCm2cVkLkomwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOcQZpe1PuJboGP5hXIgAnxa9dZQMB8GA1UdIwQY MBaAFPbuoQr6zzqcJuobHsSI6VXk36BqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXU2aEN2clBPcHdtNmhzZXhJanBWZVRmb0dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS82ZjU3NDYtYjQwNi00YzA1LTk3NDEt NTRkOGY2YjA2YjgzLzEvNXhCbWw3VS00bHVnWV9tRmNpQUNmRnIxMWxBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS82ZjU3NDYtYjQwNi00YzA1LTk3NDEtNTRkOGY2YjA2Yjgz LzEvOXU2aEN2clBPcHdtNmhzZXhJanBWZVRmb0dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUESwAwQA su4yMA0GCSqGSIb3DQEBCwUAA4IBAQBm8uYgbrE3CeWHik552Q8FfyuNOY1qU5Lq C2/IBrtxHiLZJbO4Dyxw9HTgGHPkAk2Xdujlo9uke4p1/fgMMEyBq1EvbKjxVF5a hfskFsbGwt/VaEEl4kvwchaontkkoOibmG1Sy+MHUgRWob+yxd5hGumP2tc2rBD5 Yvqilpu5Nxw5+dqAhgXDqbR7qWoCJ5e5/9OoxR9/21ase65Yx6nvlGKrprdZdOy6 nM6ZWXlRlhh2clHiWVij/M0Bk7H7DXEZ3sMljg/aqR3uvyrNpEnCZ68m1H+CphMQ QZ33yt1dkAO5FuwxZf3SJj1+hdqqXqUYaJjPSYEiiOzk79kpV8+l -----END CERTIFICATE-----Generated at Mon Jan 26 18:47:07 2026 by rpki-client