This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/F5y9ZOsLF94osiTAvUu_ZpYquTw.roa File: F5y9ZOsLF94osiTAvUu_ZpYquTw.roa (raw, json) Hash identifier: XwqPFonWgi2NEgeq0iK4xwmr9JNoIB6OncnPE0wX2yA= Subject key identifier: 17:9C:BD:64:EB:0B:17:DE:28:B2:24:C0:BD:4B:BF:66:96:2A:B9:3C Certificate issuer: /CN=f6413486886b56231dec573fad4f8ab32cbf92a4 Certificate serial: 019B7834377EC80A78FE410A9E05AF8D5202 Authority key identifier: F6:41:34:86:88:6B:56:23:1D:EC:57:3F:AD:4F:8A:B3:2C:BF:92:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/F5y9ZOsLF94osiTAvUu_ZpYquTw.roa Signing time: Thu 01 Jan 2026 06:17:26 +0000 ROA not before: Thu 01 Jan 2026 06:17:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203311 IP address blocks: 185.139.252.0/22 maxlen: 22 2a07:1180::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 06:19:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:37:7e:c8:0a:78:fe:41:0a:9e:05:af:8d:52:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6413486886b56231dec573fad4f8ab32cbf92a4 Validity Not Before: Jan 1 06:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=179cbd64eb0b17de28b224c0bd4bbf66962ab93c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:47:37:05:e7:57:51:87:1d:db:ca:81:77:bd: ea:a1:dd:6c:ea:a3:ad:9f:84:44:7b:d7:fd:ff:73: b0:17:6c:ac:fe:4b:53:23:81:fe:dc:6e:ff:8c:4e: c9:f0:66:2e:d3:29:8e:49:4a:13:a5:57:23:05:58: f8:7b:c0:76:11:ef:b9:76:97:5d:9d:40:d0:5c:c0: b7:d0:6b:b2:dc:41:ca:e7:61:53:6a:17:35:51:21: ec:2c:ce:f5:1f:e8:85:e7:e8:bb:f1:ce:d4:43:49: 90:b7:26:c7:97:44:cb:6d:e2:2e:c4:fd:82:c0:d4: ba:dc:61:09:0a:a9:fd:ad:84:ae:bd:95:5b:83:60: 75:48:90:80:16:91:5e:19:64:90:68:51:9d:42:20: f4:8d:bb:03:8f:9a:a2:1f:6e:6a:a0:2b:67:26:92: 99:ba:ba:cf:6d:72:1d:e7:44:a1:ba:d8:5d:53:7c: 76:75:0f:31:5b:2b:b3:cc:5f:55:ff:fe:a3:b6:0c: 66:73:b4:8f:9f:2c:3f:b1:a3:25:db:9e:eb:c1:0c: 98:da:ee:d1:29:a6:a0:84:51:ed:7e:34:f2:f2:a8: 6b:03:bf:34:c0:50:b8:98:4d:9e:73:33:f2:04:58: 85:cf:c8:c8:fa:c9:17:d7:3b:58:eb:4b:e8:7e:1a: 1c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:9C:BD:64:EB:0B:17:DE:28:B2:24:C0:BD:4B:BF:66:96:2A:B9:3C X509v3 Authority Key Identifier: keyid:F6:41:34:86:88:6B:56:23:1D:EC:57:3F:AD:4F:8A:B3:2C:BF:92:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/F5y9ZOsLF94osiTAvUu_ZpYquTw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.139.252.0/22 IPv6: 2a07:1180::/29 Signature Algorithm: sha256WithRSAEncryption 28:77:d0:2a:2d:ea:39:e5:d7:d6:5a:ea:a9:6b:03:20:b4:25: 62:5c:0c:03:80:2d:50:e9:58:27:01:3b:13:69:29:cb:9f:67: 12:0d:0d:a5:0e:14:0c:70:a7:57:6f:fe:ad:93:d5:a1:92:44: e1:35:21:5c:51:c8:2e:8d:b0:98:90:97:2e:3f:d6:cc:13:52: fc:b2:f6:f2:65:ea:eb:19:95:25:c8:ff:5a:01:1a:0e:d3:61: 9e:5d:54:35:ef:7b:95:19:45:25:69:1e:a3:83:6a:15:53:19: ef:3e:44:78:79:fc:e1:2a:b7:bb:93:7f:ac:07:0d:a1:2d:39: 94:43:ea:6a:d7:02:05:73:01:88:6c:89:53:e1:4c:ef:3b:1a: ae:8f:af:ca:cc:59:6e:6b:2a:c0:5e:b1:ab:b5:0a:26:43:40: e7:23:3d:c8:51:59:20:65:98:61:ad:01:f2:52:e8:cd:94:49: a2:da:40:d1:cd:62:2f:a8:fb:d6:e2:7c:a6:18:1a:39:89:e3: 34:ba:c4:55:e7:b2:c8:0c:0f:a6:fb:49:5d:8c:87:fe:34:9d: f9:43:ae:84:13:4a:18:5f:2f:a2:93:88:e7:4b:43:95:0c:2f: de:a7:88:e4:38:16:85:7d:c6:f9:ff:d8:a1:e0:8e:d2:90:04: 06:5b:19:70 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4NDd+yAp4/kEKngWvjVICMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NDEzNDg2ODg2YjU2MjMxZGVjNTczZmFkNGY4YWIzMmNi ZjkyYTQwHhcNMjYwMTAxMDYxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzljYmQ2NGViMGIxN2RlMjhiMjI0YzBiZDRiYmY2Njk2MmFiOTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Uc3BedXUYcd28qBd73qod1s6qOt n4REe9f9/3OwF2ys/ktTI4H+3G7/jE7J8GYu0ymOSUoTpVcjBVj4e8B2Ee+5dpdd nUDQXMC30Guy3EHK52FTahc1USHsLM71H+iF5+i78c7UQ0mQtybHl0TLbeIuxP2C wNS63GEJCqn9rYSuvZVbg2B1SJCAFpFeGWSQaFGdQiD0jbsDj5qiH25qoCtnJpKZ urrPbXId50ShuthdU3x2dQ8xWyuzzF9V//6jtgxmc7SPnyw/saMl257rwQyY2u7R KaaghFHtfjTy8qhrA780wFC4mE2eczPyBFiFz8jI+skX1ztY60vofhocewIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBecvWTrCxfeKLIkwL1Lv2aWKrk8MB8GA1UdIwQY MBaAFPZBNIaIa1YjHexXP61PirMsv5KkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWtFMGhvaHJWaU1kN0ZjX3JVLUtzeXlfa3FRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8yYjU4N2YtMzVlNC00YmJjLWJjZDAt OTllZWY2OTA1ZDgzLzEvRjV5OVpPc0xGOTRvc2lUQXZVdV9acFlxdVR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi8yYjU4N2YtMzVlNC00YmJjLWJjZDAtOTllZWY2OTA1ZDgz LzEvOWtFMGhvaHJWaU1kN0ZjX3JVLUtzeXlfa3FRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuYv8MA0E AgACMAcDBQMqBxGAMA0GCSqGSIb3DQEBCwUAA4IBAQAod9AqLeo55dfWWuqpawMg tCViXAwDgC1Q6VgnATsTaSnLn2cSDQ2lDhQMcKdXb/6tk9WhkkThNSFcUcgujbCY kJcuP9bME1L8svbyZerrGZUlyP9aARoO02GeXVQ173uVGUUlaR6jg2oVUxnvPkR4 efzhKre7k3+sBw2hLTmUQ+pq1wIFcwGIbIlT4UzvOxquj6/KzFluayrAXrGrtQom Q0DnIz3IUVkgZZhhrQHyUujNlEmi2kDRzWIvqPvW4nymGBo5ieM0usRV57LIDA+m +0ldjIf+NJ35Q66EE0oYXy+ik4jnS0OVDC/ep4jkOBaFfcb5/9ih4I7SkAQGWxlw -----END CERTIFICATE-----Generated at Thu Jan 1 12:26:55 2026 by rpki-client