This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/5rakYdNxKMjh5JNPex8iKzp_gtA.roa File: 5rakYdNxKMjh5JNPex8iKzp_gtA.roa (raw, json) Hash identifier: 6LspddKmtQtuac9ZuOl1VnhHP0Iq5oFWoFzvEG8ERXE= Subject key identifier: E6:B6:A4:61:D3:71:28:C8:E1:E4:93:4F:7B:1F:22:2B:3A:7F:82:D0 Certificate issuer: /CN=49c403d43b5f38fca2119cd1409a92763edefe71 Certificate serial: 019B7D5CA8D791D16DBD6013E53282D42FBA Authority key identifier: 49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/5rakYdNxKMjh5JNPex8iKzp_gtA.roa Signing time: Fri 02 Jan 2026 06:19:43 +0000 ROA not before: Fri 02 Jan 2026 06:19:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 273218 IP address blocks: 185.75.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:a8:d7:91:d1:6d:bd:60:13:e5:32:82:d4:2f:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49c403d43b5f38fca2119cd1409a92763edefe71 Validity Not Before: Jan 2 06:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e6b6a461d37128c8e1e4934f7b1f222b3a7f82d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:dd:09:c2:49:98:91:87:06:2c:57:91:57:c4: 39:9c:5a:69:66:42:8a:b3:b1:e0:df:5f:c5:e2:85: cf:d7:51:70:b3:3c:d9:60:c2:54:19:7a:f1:55:57: 72:3e:67:b4:24:9b:03:55:f2:c7:d8:47:5b:2f:03: d1:3a:b0:78:a8:aa:71:05:b2:a0:55:79:02:6b:85: 2f:66:bb:14:9e:ea:40:54:29:ee:71:ba:de:0e:88: 66:78:9b:4f:cb:90:a1:7d:37:07:32:ca:df:ba:45: e3:12:bc:b0:f3:36:8e:b7:e2:2c:80:f7:01:45:71: 71:e2:12:f3:dc:a3:4a:0b:1b:2b:d6:85:f1:f5:9b: c9:3b:73:dd:d8:93:27:c7:cb:ad:13:52:c0:0c:df: 6d:5b:17:21:c1:05:72:d8:51:43:a5:56:de:a1:c3: 16:a4:99:a9:2c:56:ee:35:68:21:68:dc:0f:6f:03: 48:8a:ae:d6:9c:5c:cf:9f:26:bd:ce:7b:cc:8e:eb: f1:ee:7d:c5:7f:86:9b:89:ee:7f:28:46:87:75:2b: 5c:64:3d:f4:a9:9a:84:f4:2a:85:ef:18:4e:10:df: 0b:d8:84:4f:ac:20:29:f4:01:0f:bf:22:fa:85:d0: 15:a5:0c:b8:74:58:ca:e4:df:ac:ce:bd:9d:25:c9: a1:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:B6:A4:61:D3:71:28:C8:E1:E4:93:4F:7B:1F:22:2B:3A:7F:82:D0 X509v3 Authority Key Identifier: keyid:49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/5rakYdNxKMjh5JNPex8iKzp_gtA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.75.12.0/24 Signature Algorithm: sha256WithRSAEncryption 05:ad:79:08:06:4c:db:f7:9c:91:0a:18:cb:2a:36:6a:20:c2: 7c:c8:f4:0b:00:e5:2d:86:32:8f:02:e0:0e:dc:1a:b3:a8:5e: 7b:cc:99:ae:c1:01:c6:08:71:4d:b7:3e:77:a3:6b:fc:4b:a4: 17:ee:33:cb:f5:93:f2:a5:31:b2:fc:ab:a5:c9:84:b3:c0:18: 03:76:97:90:d1:eb:fb:cf:10:06:59:c8:f1:a1:69:54:37:2f: 01:2c:19:8b:61:be:1a:38:fb:d6:16:9d:c0:76:b7:91:5a:5e: 64:ca:65:49:dc:0e:07:60:5b:eb:77:04:80:62:e7:e0:6b:35: a4:cb:3f:3e:f0:24:3b:f8:ff:f6:f9:c7:08:09:05:01:f0:10: 53:8b:d6:97:a1:62:61:8f:ec:5b:7d:d8:f9:30:e2:7e:ed:c6: 17:cb:35:8a:e7:35:79:a8:b0:d0:8b:68:05:b0:c7:41:6a:6c: 7e:fc:2d:be:b5:fd:d7:f1:1a:b4:e5:3e:11:5f:61:fe:89:81: 4d:18:63:a6:8c:75:80:9f:de:9c:7f:00:97:48:52:32:d4:9e: 98:2c:e9:b3:23:37:72:eb:91:ac:91:de:3b:0b:94:d2:2b:00: b6:a8:4b:82:f7:8c:75:11:0c:51:53:88:4b:5a:15:6b:c2:e3: 69:a6:f5:21 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XKjXkdFtvWAT5TKC1C+6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5YzQwM2Q0M2I1ZjM4ZmNhMjExOWNkMTQwOWE5Mjc2M2Vk ZWZlNzEwHhcNMjYwMTAyMDYxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNmI2YTQ2MWQzNzEyOGM4ZTFlNDkzNGY3YjFmMjIyYjNhN2Y4MmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqt0JwkmYkYcGLFeRV8Q5nFppZkKK s7Hg31/F4oXP11FwszzZYMJUGXrxVVdyPme0JJsDVfLH2EdbLwPROrB4qKpxBbKg VXkCa4UvZrsUnupAVCnucbreDohmeJtPy5ChfTcHMsrfukXjEryw8zaOt+IsgPcB RXFx4hLz3KNKCxsr1oXx9ZvJO3Pd2JMnx8utE1LADN9tWxchwQVy2FFDpVbeocMW pJmpLFbuNWghaNwPbwNIiq7WnFzPnya9znvMjuvx7n3Ff4abie5/KEaHdStcZD30 qZqE9CqF7xhOEN8L2IRPrCAp9AEPvyL6hdAVpQy4dFjK5N+szr2dJcmh1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOa2pGHTcSjI4eSTT3sfIis6f4LQMB8GA1UdIwQY MBaAFEnEA9Q7Xzj8ohGc0UCaknY+3v5xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2NRRDFEdGZPUHlpRVp6UlFKcVNkajdlX25FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9hMmY4N2ItNDgxMS00ZmUxLWIxNWQt Zjg4OWNhMTYxYzAxLzEvNXJha1lkTnhLTWpoNUpOUGV4OGlLenBfZ3RBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9hMmY4N2ItNDgxMS00ZmUxLWIxNWQtZjg4OWNhMTYxYzAx LzEvU2NRRDFEdGZPUHlpRVp6UlFKcVNkajdlX25FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUsMMA0G CSqGSIb3DQEBCwUAA4IBAQAFrXkIBkzb95yRChjLKjZqIMJ8yPQLAOUthjKPAuAO 3BqzqF57zJmuwQHGCHFNtz53o2v8S6QX7jPL9ZPypTGy/KulyYSzwBgDdpeQ0ev7 zxAGWcjxoWlUNy8BLBmLYb4aOPvWFp3AdreRWl5kymVJ3A4HYFvrdwSAYufgazWk yz8+8CQ7+P/2+ccICQUB8BBTi9aXoWJhj+xbfdj5MOJ+7cYXyzWK5zV5qLDQi2gF sMdBamx+/C2+tf3X8Rq05T4RX2H+iYFNGGOmjHWAn96cfwCXSFIy1J6YLOmzIzdy 65Gskd47C5TSKwC2qEuC94x1EQxRU4hLWhVrwuNppvUh -----END CERTIFICATE-----Generated at Sun Jan 25 19:39:32 2026 by rpki-client