This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/m5uN5gFUF3gbk4WRMGuq9SiOJfA.roa File: m5uN5gFUF3gbk4WRMGuq9SiOJfA.roa (raw, json) Hash identifier: LN9MDTdCBxVFQarv1kh1zqmKwNbjtmG4WC5VRrPw2Ro= Subject key identifier: 9B:9B:8D:E6:01:54:17:78:1B:93:85:91:30:6B:AA:F5:28:8E:25:F0 Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA76ED57CFAB7C38BBBFA5B583DBE24 Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/m5uN5gFUF3gbk4WRMGuq9SiOJfA.roa Signing time: Fri 02 Jan 2026 12:21:00 +0000 ROA not before: Fri 02 Jan 2026 12:21:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35125 IP address blocks: 85.174.140.0/23 maxlen: 23 95.158.192.0/18 maxlen: 18 212.3.128.0/19 maxlen: 19 212.3.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:6e:d5:7c:fa:b7:c3:8b:bb:fa:5b:58:3d:be:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:21:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b9b8de6015417781b938591306baaf5288e25f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fd:1c:a1:ac:fd:fd:34:bc:97:78:71:7f:aa: 5a:5b:9b:b4:b1:3d:6d:e7:95:11:d4:1b:75:51:f1: ea:63:85:07:95:30:c9:8a:bd:26:70:80:92:8f:5b: 9c:da:90:d6:ab:73:d3:0a:5c:8b:c9:bf:39:cb:be: 2b:03:28:13:2d:02:19:05:01:41:0b:79:4a:22:67: 1a:41:57:48:26:0b:02:7a:91:6b:ba:ba:eb:20:e7: bc:24:cf:60:98:10:5c:f5:dc:87:26:e6:b0:1c:f1: 1a:e6:dd:8a:32:04:da:e1:0d:64:ef:17:18:30:50: 20:1b:e0:da:fd:9f:ed:4a:46:a6:71:21:47:96:e3: 0c:f0:a7:99:29:32:24:24:89:26:a8:68:ed:ed:de: e5:ff:ea:5a:44:e7:74:ea:94:dd:97:a3:f2:d5:1e: e9:d5:2d:a3:18:e4:71:08:96:5b:1b:c8:6f:ae:05: f6:1b:ed:30:41:bc:d8:c0:d7:9d:ac:69:b0:63:50: 8c:3d:79:c4:2c:71:f4:14:fd:5e:38:3b:80:3f:a2: 20:aa:8e:52:6e:4c:00:2e:15:75:79:b8:11:4e:9a: 7f:d2:92:94:b0:c7:61:99:57:99:c8:38:c4:18:c2: cc:a8:c3:78:09:d8:2e:1b:cd:a9:bb:f0:dd:aa:d1: 5c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:9B:8D:E6:01:54:17:78:1B:93:85:91:30:6B:AA:F5:28:8E:25:F0 X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/m5uN5gFUF3gbk4WRMGuq9SiOJfA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.174.140.0/23 95.158.192.0/18 212.3.128.0/19 Signature Algorithm: sha256WithRSAEncryption 41:60:31:71:88:5a:c1:fc:9b:08:16:8e:98:d1:ee:a2:b2:73: d1:48:8b:b2:fe:ba:31:ff:0b:6b:e8:f7:84:02:f7:d8:d5:02: 1f:27:8a:bc:c9:c5:e4:db:1f:ce:9d:61:ce:3b:06:8d:9a:0c: e5:02:f2:2c:b4:e9:fb:35:8f:33:84:3a:81:d5:09:91:9d:42: f1:68:60:f7:3f:ef:78:57:d2:18:0c:aa:f7:df:1d:62:0a:c1: f6:da:f2:0f:4c:62:21:33:d5:8a:ee:b2:28:09:b1:9b:03:f6: 20:c5:90:97:ce:94:09:6f:34:c8:a1:c8:89:47:f4:86:27:83: c4:9d:12:b9:af:d2:46:1d:5c:32:fd:47:53:81:d5:33:19:f5: 85:76:76:9e:b8:12:7c:19:ca:3c:9d:a5:8c:55:38:00:f6:39: 17:82:9a:33:18:44:a0:ca:66:0a:93:3c:5f:0b:b2:91:84:85: 27:81:76:a0:62:99:4d:a1:0d:05:6d:7c:f5:4f:87:0f:3d:24: dd:f0:73:fa:10:8e:20:43:a2:d8:77:63:b1:b8:99:fa:21:a5: b3:be:ab:d0:af:bc:20:b3:a1:79:84:4f:76:78:17:6b:dc:18: 41:86:18:c9:7f:de:da:66:58:01:d6:28:b6:c7:25:26:35:5a: 73:72:da:44 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+p27VfPq3w4u7+ltYPb4kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjliOGRlNjAxNTQxNzc4MWI5Mzg1OTEzMDZiYWFmNTI4OGUyNWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsv0coaz9/TS8l3hxf6paW5u0sT1t 55UR1Bt1UfHqY4UHlTDJir0mcICSj1uc2pDWq3PTClyLyb85y74rAygTLQIZBQFB C3lKImcaQVdIJgsCepFrurrrIOe8JM9gmBBc9dyHJuawHPEa5t2KMgTa4Q1k7xcY MFAgG+Da/Z/tSkamcSFHluMM8KeZKTIkJIkmqGjt7d7l/+paROd06pTdl6Py1R7p 1S2jGORxCJZbG8hvrgX2G+0wQbzYwNedrGmwY1CMPXnELHH0FP1eODuAP6Igqo5S bkwALhV1ebgRTpp/0pKUsMdhmVeZyDjEGMLMqMN4CdguG82pu/DdqtFcZQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJubjeYBVBd4G5OFkTBrqvUojiXwMB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvbTV1TjVnRlVGM2diazRXUk1HdXE5U2lPSmZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBVa6MAwQG X57AAwQF1AOAMA0GCSqGSIb3DQEBCwUAA4IBAQBBYDFxiFrB/JsIFo6Y0e6isnPR SIuy/rox/wtr6PeEAvfY1QIfJ4q8ycXk2x/OnWHOOwaNmgzlAvIstOn7NY8zhDqB 1QmRnULxaGD3P+94V9IYDKr33x1iCsH22vIPTGIhM9WK7rIoCbGbA/YgxZCXzpQJ bzTIociJR/SGJ4PEnRK5r9JGHVwy/UdTgdUzGfWFdnaeuBJ8Gco8naWMVTgA9jkX gpozGESgymYKkzxfC7KRhIUngXagYplNoQ0FbXz1T4cPPSTd8HP6EI4gQ6LYd2Ox uJn6IaWzvqvQr7wgs6F5hE92eBdr3BhBhhjJf97aZlgB1ii2xyUmNVpzctpE -----END CERTIFICATE-----Generated at Mon Jan 26 03:07:06 2026 by rpki-client