This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/kE5VlmslAvRcrZ42pGQyAHfoqrE.roa File: kE5VlmslAvRcrZ42pGQyAHfoqrE.roa (raw, json) Hash identifier: AmEozEHyDw1oYPPxW0JA4Yammx0So33uCTb4ELzWUD0= Subject key identifier: 90:4E:55:96:6B:25:02:F4:5C:AD:9E:36:A4:64:32:00:77:E8:AA:B1 Certificate issuer: /CN=8a695b3aba1ea4e654788c51641458cc99578040 Certificate serial: 019B79103DDB1E609A88C99C80A25DAC0CD0 Authority key identifier: 8A:69:5B:3A:BA:1E:A4:E6:54:78:8C:51:64:14:58:CC:99:57:80:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imlbOroepOZUeIxRZBRYzJlXgEA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/kE5VlmslAvRcrZ42pGQyAHfoqrE.roa Signing time: Thu 01 Jan 2026 10:17:46 +0000 ROA not before: Thu 01 Jan 2026 10:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42874 IP address blocks: 185.81.72.0/24 maxlen: 24 185.81.73.0/24 maxlen: 24 185.81.74.0/24 maxlen: 24 185.81.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.crl rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.mft rsync://rpki.ripe.net/repository/DEFAULT/imlbOroepOZUeIxRZBRYzJlXgEA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 23:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:3d:db:1e:60:9a:88:c9:9c:80:a2:5d:ac:0c:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a695b3aba1ea4e654788c51641458cc99578040 Validity Not Before: Jan 1 10:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=904e55966b2502f45cad9e36a464320077e8aab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b8:19:d3:9c:17:1d:fd:45:ac:27:7d:de:da: 39:24:80:3a:e1:ef:0e:2a:65:72:12:53:5a:28:fc: 04:3b:ad:03:9e:09:3d:09:e6:7e:e1:aa:66:3b:43: 8f:47:1b:c0:5b:c4:b1:a5:0b:54:f9:96:10:51:61: 9a:09:cf:b2:f6:6a:f3:e3:b6:a3:1b:75:7c:fe:53: cb:50:a8:c8:3c:60:f8:1c:c1:74:8b:c3:6e:70:8c: f7:d0:3f:47:95:28:f7:e2:1d:b3:0a:b3:f0:80:d1: 73:60:68:9a:bf:3c:8c:cb:b2:05:fd:79:00:10:02: be:66:d1:bb:e4:50:88:99:b0:83:cb:b0:28:d6:68: 2f:e3:38:80:1b:af:6a:f6:f2:f9:7d:cf:fe:00:e0: cc:76:24:10:20:db:60:f0:eb:2b:e8:71:a9:e5:72: 79:d8:50:07:43:dd:6b:6a:1d:f8:36:f6:8f:d1:d2: 85:f3:83:cd:23:3d:43:2d:26:82:0e:ae:5e:e1:90: 00:e6:8d:ea:0e:1d:e1:c9:17:e7:41:22:2d:e9:7b: b1:ed:8e:4e:85:69:48:c2:57:a8:bf:bd:74:2a:62: f6:47:88:cb:49:85:a9:fd:aa:c6:88:d0:c0:7b:6a: 87:8f:cc:a1:e1:b7:72:42:57:98:97:dd:d5:49:62: ca:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:4E:55:96:6B:25:02:F4:5C:AD:9E:36:A4:64:32:00:77:E8:AA:B1 X509v3 Authority Key Identifier: keyid:8A:69:5B:3A:BA:1E:A4:E6:54:78:8C:51:64:14:58:CC:99:57:80:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imlbOroepOZUeIxRZBRYzJlXgEA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/kE5VlmslAvRcrZ42pGQyAHfoqrE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.81.72.0/22 Signature Algorithm: sha256WithRSAEncryption 48:ab:3b:8c:0b:fc:0e:63:4e:cb:8b:f7:17:eb:90:33:35:e1: 2d:b0:7a:b3:04:d7:52:03:5b:9f:f1:3d:f8:c1:17:37:b5:74: 9a:b3:5b:2f:7c:40:cc:e8:af:0e:0c:e1:d7:90:7e:20:b9:79: 77:98:ee:65:5d:40:10:1a:d0:63:f9:42:ae:25:84:48:03:b4: 77:e4:05:c5:a0:a2:42:22:97:ac:4f:52:68:85:f2:b1:7c:30: ff:99:13:fb:8f:42:ea:7a:0a:45:85:68:d2:cb:2a:ff:04:81: bd:9f:06:b3:26:48:32:63:c5:f6:b7:04:58:b7:64:b8:53:ff: 18:5e:b9:23:30:33:e2:b5:aa:82:cb:af:72:e4:d5:79:1f:e1: ca:fd:f9:55:6b:38:75:86:40:59:61:a0:e3:37:37:a1:f2:98: 94:d0:b7:fd:db:5a:64:f1:17:ec:c9:e8:d8:de:40:9d:6e:22: 5b:f6:08:0e:e3:e0:bc:0d:b2:97:08:89:2e:52:10:58:b9:f6: 52:de:fa:fc:4a:ae:2e:12:28:e1:21:92:48:53:2c:1d:85:fa: ff:59:d8:32:c5:c9:80:2f:8c:23:7d:18:25:85:6a:47:2e:22: a2:6d:99:a0:b9:12:bf:7b:ea:bf:2b:90:43:dc:93:1e:84:31: 3c:af:c5:65 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ED3bHmCaiMmcgKJdrAzQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhNjk1YjNhYmExZWE0ZTY1NDc4OGM1MTY0MTQ1OGNjOTk1 NzgwNDAwHhcNMjYwMTAxMTAxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDRlNTU5NjZiMjUwMmY0NWNhZDllMzZhNDY0MzIwMDc3ZThhYWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrgZ05wXHf1FrCd93to5JIA64e8O KmVyElNaKPwEO60Dngk9CeZ+4apmO0OPRxvAW8SxpQtU+ZYQUWGaCc+y9mrz47aj G3V8/lPLUKjIPGD4HMF0i8NucIz30D9HlSj34h2zCrPwgNFzYGiavzyMy7IF/XkA EAK+ZtG75FCImbCDy7Ao1mgv4ziAG69q9vL5fc/+AODMdiQQINtg8Osr6HGp5XJ5 2FAHQ91rah34NvaP0dKF84PNIz1DLSaCDq5e4ZAA5o3qDh3hyRfnQSIt6Xux7Y5O hWlIwleov710KmL2R4jLSYWp/arGiNDAe2qHj8yh4bdyQleYl93VSWLKmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJBOVZZrJQL0XK2eNqRkMgB36KqxMB8GA1UdIwQY MBaAFIppWzq6HqTmVHiMUWQUWMyZV4BAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaW1sYk9yb2VwT1pVZUl4UlpCUll6SmxYZ0VBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC81MzgxOTQtNzU2MC00NDU2LWI0NWMt Y2EyNmMyMmNmYWZkLzEva0U1Vmxtc2xBdlJjclo0MnBHUXlBSGZvcXJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC81MzgxOTQtNzU2MC00NDU2LWI0NWMtY2EyNmMyMmNmYWZk LzEvaW1sYk9yb2VwT1pVZUl4UlpCUll6SmxYZ0VBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVFIMA0G CSqGSIb3DQEBCwUAA4IBAQBIqzuMC/wOY07Li/cX65AzNeEtsHqzBNdSA1uf8T34 wRc3tXSas1svfEDM6K8ODOHXkH4guXl3mO5lXUAQGtBj+UKuJYRIA7R35AXFoKJC IpesT1JohfKxfDD/mRP7j0LqegpFhWjSyyr/BIG9nwazJkgyY8X2twRYt2S4U/8Y XrkjMDPitaqCy69y5NV5H+HK/flVazh1hkBZYaDjNzeh8piU0Lf921pk8RfsyejY 3kCdbiJb9ggO4+C8DbKXCIkuUhBYufZS3vr8Sq4uEijhIZJIUywdhfr/WdgyxcmA L4wjfRglhWpHLiKibZmguRK/e+q/K5BD3JMehDE8r8Vl -----END CERTIFICATE-----Generated at Wed Jan 7 06:55:49 2026 by rpki-client