This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/5VgBPMnvg-Y4r70mw9zcqUHf-ms.roa File: 5VgBPMnvg-Y4r70mw9zcqUHf-ms.roa (raw, json) Hash identifier: P3U3l0akrscgsoVcKLjR90FDWEx4VR/+ukAn/96yuzo= Subject key identifier: E5:58:01:3C:C9:EF:83:E6:38:AF:BD:26:C3:DC:DC:A9:41:DF:FA:6B Certificate issuer: /CN=c51674fee5556728175efb56eaa8b99f3815afa7 Certificate serial: 019B78354707BB8E71791779A796C3499C05 Authority key identifier: C5:16:74:FE:E5:55:67:28:17:5E:FB:56:EA:A8:B9:9F:38:15:AF:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/5VgBPMnvg-Y4r70mw9zcqUHf-ms.roa Signing time: Thu 01 Jan 2026 06:18:36 +0000 ROA not before: Thu 01 Jan 2026 06:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49409 IP address blocks: 185.179.246.0/24 maxlen: 24 2a10:4d40::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:47:07:bb:8e:71:79:17:79:a7:96:c3:49:9c:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c51674fee5556728175efb56eaa8b99f3815afa7 Validity Not Before: Jan 1 06:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e558013cc9ef83e638afbd26c3dcdca941dffa6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:31:14:1b:b0:e8:0a:9a:18:a4:43:3e:08:5b: 73:c9:7f:fb:15:a6:cf:50:71:dd:97:5e:7f:71:22: 02:e8:9d:1c:eb:c5:2d:1c:0c:d9:a8:6c:d2:c1:0b: c0:45:10:bf:22:df:b8:e0:3f:01:b6:11:c9:46:c8: e4:b5:79:be:10:c0:2f:ff:93:f3:ec:47:d2:c3:dd: c5:3f:00:75:11:1a:da:ca:1d:21:e1:d2:e4:c3:20: a7:e4:42:33:f6:60:3b:21:55:56:04:7a:10:1d:f3: 1e:37:e2:a1:57:21:6c:9d:c0:6d:71:d2:b7:8c:c0: 80:8f:4f:74:9b:10:98:19:d8:7f:d4:47:09:25:fe: dd:f6:06:ef:17:a9:f0:49:da:65:22:ba:c6:87:b4: 80:6d:dd:dd:4f:03:b2:82:fb:98:f7:4f:66:af:0e: d4:5f:cc:ae:c7:2d:b7:9c:62:9e:73:e7:90:fc:a7: 98:62:2c:c8:fa:3c:9c:13:ed:03:cc:00:70:48:88: 46:30:85:5c:23:91:9b:90:48:e6:53:27:95:ca:23: 86:bd:75:79:c5:bb:25:c0:79:d4:b6:ea:c8:bd:47: 4f:b2:cd:74:86:5e:0b:9a:8d:49:a9:ee:ef:21:a7: 92:21:8f:65:76:45:d5:c9:f0:a2:3a:d5:f4:ac:06: aa:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:58:01:3C:C9:EF:83:E6:38:AF:BD:26:C3:DC:DC:A9:41:DF:FA:6B X509v3 Authority Key Identifier: keyid:C5:16:74:FE:E5:55:67:28:17:5E:FB:56:EA:A8:B9:9F:38:15:AF:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/5VgBPMnvg-Y4r70mw9zcqUHf-ms.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.179.246.0/24 IPv6: 2a10:4d40::/29 Signature Algorithm: sha256WithRSAEncryption 2a:f5:03:64:18:53:cb:a9:73:9d:b0:3c:54:f0:7f:62:f3:06: 9a:50:f2:94:33:80:01:03:34:1e:67:99:ba:62:6a:64:4b:f1: a2:78:cc:1f:fd:46:94:8f:73:b8:d3:50:da:52:72:75:7c:aa: 67:7a:3e:68:22:a2:73:60:c8:98:a8:22:c6:2b:81:f0:ba:b3: a8:03:87:27:7c:7d:e9:65:5f:d6:eb:f1:d8:5d:e5:f3:8b:f4: dd:87:14:37:2a:1e:7e:c5:b8:6d:81:cd:c1:95:6b:b2:52:bd: e2:2b:4c:9a:4d:57:b8:73:91:df:7d:e4:bd:a9:54:a1:6a:0e: 64:1c:b5:aa:6c:5a:be:1a:7e:84:88:83:0f:df:3a:90:1b:b0: 69:7a:7d:6f:de:b1:b7:61:07:54:19:28:10:ab:1c:a2:1c:32: 2e:61:70:84:ac:c3:f7:a2:04:da:eb:8e:7a:74:57:3c:20:ab: a6:5f:fe:48:f9:bd:c4:12:00:eb:40:8c:f0:96:62:16:49:18: aa:56:8b:eb:4e:7c:b1:41:11:fe:04:ef:b1:8c:3a:86:b2:a9: 1c:b4:5b:e2:b6:ea:2a:58:07:5d:a3:d5:c6:33:38:68:70:7d: c2:17:bd:69:32:34:93:7f:e2:67:43:f0:e5:49:85:34:96:81: 36:de:cd:b5 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4NUcHu45xeRd5p5bDSZwFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1MTY3NGZlZTU1NTY3MjgxNzVlZmI1NmVhYThiOTlmMzgx NWFmYTcwHhcNMjYwMTAxMDYxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTU4MDEzY2M5ZWY4M2U2MzhhZmJkMjZjM2RjZGNhOTQxZGZmYTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTEUG7DoCpoYpEM+CFtzyX/7FabP UHHdl15/cSIC6J0c68UtHAzZqGzSwQvARRC/It+44D8BthHJRsjktXm+EMAv/5Pz 7EfSw93FPwB1ERrayh0h4dLkwyCn5EIz9mA7IVVWBHoQHfMeN+KhVyFsncBtcdK3 jMCAj090mxCYGdh/1EcJJf7d9gbvF6nwSdplIrrGh7SAbd3dTwOygvuY909mrw7U X8yuxy23nGKec+eQ/KeYYizI+jycE+0DzABwSIhGMIVcI5GbkEjmUyeVyiOGvXV5 xbslwHnUturIvUdPss10hl4Lmo1Jqe7vIaeSIY9ldkXVyfCiOtX0rAaqtQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOVYATzJ74PmOK+9JsPc3KlB3/prMB8GA1UdIwQY MBaAFMUWdP7lVWcoF177VuqouZ84Fa+nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFJaMF91VlZaeWdYWHZ0VzZxaTVuemdWcjZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC81ZmIwODktMjU4OS00YzcxLWIwMjYt M2NiZTFhZjNiODJjLzEvNVZnQlBNbnZnLVk0cjcwbXc5emNxVUhmLW1zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC81ZmIwODktMjU4OS00YzcxLWIwMjYtM2NiZTFhZjNiODJj LzEveFJaMF91VlZaeWdYWHZ0VzZxaTVuemdWcjZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAubP2MA0E AgACMAcDBQMqEE1AMA0GCSqGSIb3DQEBCwUAA4IBAQAq9QNkGFPLqXOdsDxU8H9i 8waaUPKUM4ABAzQeZ5m6YmpkS/GieMwf/UaUj3O401DaUnJ1fKpnej5oIqJzYMiY qCLGK4HwurOoA4cnfH3pZV/W6/HYXeXzi/TdhxQ3Kh5+xbhtgc3BlWuyUr3iK0ya TVe4c5HffeS9qVShag5kHLWqbFq+Gn6EiIMP3zqQG7Bpen1v3rG3YQdUGSgQqxyi HDIuYXCErMP3ogTa6456dFc8IKumX/5I+b3EEgDrQIzwlmIWSRiqVovrTnyxQRH+ BO+xjDqGsqkctFvituoqWAddo9XGMzhocH3CF71pMjSTf+JnQ/DlSYU0loE23s21 -----END CERTIFICATE-----Generated at Mon Jan 26 13:11:04 2026 by rpki-client