This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/P5QGU51MBWbq811ui2M903jDzeM.roa File: P5QGU51MBWbq811ui2M903jDzeM.roa (raw, json) Hash identifier: cl6QRl57KjA79TtkotpuwrlWUT5toZEw0rnOBUVQkL8= Subject key identifier: 3F:94:06:53:9D:4C:05:66:EA:F3:5D:6E:8B:63:3D:D3:78:C3:CD:E3 Certificate issuer: /CN=5227b36e829e4d8565ed65748e1b1c93ccd00cee Certificate serial: 019B797E5C5FCA239B73F52F5D608109F08C Authority key identifier: 52:27:B3:6E:82:9E:4D:85:65:ED:65:74:8E:1B:1C:93:CC:D0:0C:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiezboKeTYVl7WV0jhsck8zQDO4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/P5QGU51MBWbq811ui2M903jDzeM.roa Signing time: Thu 01 Jan 2026 12:18:02 +0000 ROA not before: Thu 01 Jan 2026 12:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48940 IP address blocks: 95.181.248.0/21 maxlen: 21 95.181.248.0/22 maxlen: 22 95.181.248.0/23 maxlen: 23 95.181.250.0/23 maxlen: 23 95.181.252.0/22 maxlen: 22 95.181.252.0/23 maxlen: 23 95.181.254.0/23 maxlen: 23 185.78.32.0/22 maxlen: 22 185.78.32.0/23 maxlen: 23 185.78.34.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft rsync://rpki.ripe.net/repository/DEFAULT/UiezboKeTYVl7WV0jhsck8zQDO4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:5c:5f:ca:23:9b:73:f5:2f:5d:60:81:09:f0:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5227b36e829e4d8565ed65748e1b1c93ccd00cee Validity Not Before: Jan 1 12:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f9406539d4c0566eaf35d6e8b633dd378c3cde3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f1:f8:b5:7e:54:df:b8:4d:69:d1:5b:f0:56: 82:f3:b3:19:ee:2f:f5:66:f8:fe:24:17:93:01:7a: 5a:d4:26:20:ef:d0:65:09:09:b3:0e:49:57:ec:36: 7f:63:28:3d:a3:bf:74:19:f9:c5:68:b5:60:af:b9: 17:d4:07:0c:d6:2b:10:62:69:5f:eb:cc:b2:e8:b4: fe:b9:1b:47:f9:77:5e:e0:50:6d:3f:18:51:cc:d9: 1e:25:06:a0:b2:62:d3:97:8c:0f:97:50:16:1d:e7: 1f:18:27:2d:ea:e5:7a:bd:30:ca:75:c1:fd:d3:36: c6:ee:83:09:14:76:30:67:a5:48:ef:fa:7f:4d:c7: 0d:c1:11:60:4a:b1:9f:68:c1:d4:ac:84:7e:b8:77: 80:7b:1b:13:ee:94:93:95:53:81:e5:97:03:b1:11: 2f:0f:f7:84:ac:1b:9f:9a:e5:1e:00:6f:95:5a:e7: dc:8b:40:dd:d3:76:70:55:fd:08:73:0b:f3:fd:8c: 62:50:95:ac:c2:02:d4:88:dd:cd:e4:8a:06:e5:ec: 25:9c:e7:93:33:52:b2:7e:21:e0:81:97:6f:26:3e: 63:2c:5e:a1:43:1d:16:b6:10:4d:b3:bd:56:7c:7d: d7:44:7c:a6:59:bf:d0:e2:64:a1:7e:82:a7:dd:78: 96:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:94:06:53:9D:4C:05:66:EA:F3:5D:6E:8B:63:3D:D3:78:C3:CD:E3 X509v3 Authority Key Identifier: keyid:52:27:B3:6E:82:9E:4D:85:65:ED:65:74:8E:1B:1C:93:CC:D0:0C:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiezboKeTYVl7WV0jhsck8zQDO4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/P5QGU51MBWbq811ui2M903jDzeM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.181.248.0/21 185.78.32.0/22 Signature Algorithm: sha256WithRSAEncryption 23:b4:c1:37:a4:6a:f4:b4:b4:e0:2b:e3:46:c9:fc:78:69:e7: 93:3a:96:d9:a8:cc:db:0e:71:c8:92:0d:c3:ea:18:b6:fc:00: fb:c8:6b:02:34:a0:37:5f:bf:0d:de:72:46:42:9f:90:1b:7e: 40:e5:3b:5c:4d:81:86:84:cd:08:3e:94:60:18:52:71:13:83: 7c:58:da:4c:6b:18:b7:37:6d:6d:e5:35:eb:00:c5:c1:fc:8d: 59:5b:3a:16:eb:f4:4b:09:53:39:98:4a:c6:32:f0:4c:8b:19: 06:9b:17:98:4d:bf:a5:a8:d4:83:73:f4:66:c8:6d:8d:2e:61: 30:93:8e:d2:5e:bc:51:61:1b:0e:80:e0:b7:2e:00:2c:d4:f0: 4d:16:a3:0d:a2:4d:59:c8:f1:16:58:f6:8f:78:7f:42:26:c7: de:66:30:ad:1f:be:c8:0f:fc:f4:17:49:74:72:e2:2b:03:72: 17:e4:f8:6b:90:bd:e9:76:5b:61:af:20:50:23:43:38:c4:71: fe:d4:8c:ed:7a:bc:8e:27:61:fc:22:63:8a:22:17:4b:64:b9: fd:fc:12:18:6b:42:f7:d5:43:fa:fa:34:b7:fa:15:28:a1:bb: d6:0d:a3:a9:b2:a9:63:ae:3c:36:e0:76:c2:e8:92:33:dc:08: 4f:34:ed:0e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5flxfyiObc/UvXWCBCfCMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMjdiMzZlODI5ZTRkODU2NWVkNjU3NDhlMWIxYzkzY2Nk MDBjZWUwHhcNMjYwMTAxMTIxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjk0MDY1MzlkNGMwNTY2ZWFmMzVkNmU4YjYzM2RkMzc4YzNjZGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvH4tX5U37hNadFb8FaC87MZ7i/1 Zvj+JBeTAXpa1CYg79BlCQmzDklX7DZ/Yyg9o790GfnFaLVgr7kX1AcM1isQYmlf 68yy6LT+uRtH+Xde4FBtPxhRzNkeJQagsmLTl4wPl1AWHecfGCct6uV6vTDKdcH9 0zbG7oMJFHYwZ6VI7/p/TccNwRFgSrGfaMHUrIR+uHeAexsT7pSTlVOB5ZcDsREv D/eErBufmuUeAG+VWufci0Dd03ZwVf0Icwvz/YxiUJWswgLUiN3N5IoG5ewlnOeT M1KyfiHggZdvJj5jLF6hQx0WthBNs71WfH3XRHymWb/Q4mShfoKn3XiWOwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFD+UBlOdTAVm6vNdbotjPdN4w83jMB8GA1UdIwQY MBaAFFIns26Cnk2FZe1ldI4bHJPM0AzuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWllemJvS2VUWVZsN1dWMGpoc2NrOHpRRE80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9hN2FlMTEtMTIxYS00ZjIyLWJlM2Yt ZTkwN2FmMDdmZjExLzEvUDVRR1U1MU1CV2JxODExdWkyTTkwM2pEemVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9hN2FlMTEtMTIxYS00ZjIyLWJlM2YtZTkwN2FmMDdmZjEx LzEvVWllemJvS2VUWVZsN1dWMGpoc2NrOHpRRE80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDX7X4AwQC uU4gMA0GCSqGSIb3DQEBCwUAA4IBAQAjtME3pGr0tLTgK+NGyfx4aeeTOpbZqMzb DnHIkg3D6hi2/AD7yGsCNKA3X78N3nJGQp+QG35A5TtcTYGGhM0IPpRgGFJxE4N8 WNpMaxi3N21t5TXrAMXB/I1ZWzoW6/RLCVM5mErGMvBMixkGmxeYTb+lqNSDc/Rm yG2NLmEwk47SXrxRYRsOgOC3LgAs1PBNFqMNok1ZyPEWWPaPeH9CJsfeZjCtH77I D/z0F0l0cuIrA3IX5PhrkL3pdlthryBQI0M4xHH+1IzteryOJ2H8ImOKIhdLZLn9 /BIYa0L31UP6+jS3+hUoobvWDaOpsqljrjw24HbC6JIz3AhPNO0O -----END CERTIFICATE-----Generated at Sun Jan 25 15:11:35 2026 by rpki-client