This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/b5hEA0skW7XIPdQy24vlGY78QsQ.roa File: b5hEA0skW7XIPdQy24vlGY78QsQ.roa (raw, json) Hash identifier: wOWtUPMhhEOhukktL5n5JA5DpIw7T84vi3SfnV7rzhc= Subject key identifier: 6F:98:44:03:4B:24:5B:B5:C8:3D:D4:32:DB:8B:E5:19:8E:FC:42:C4 Certificate issuer: /CN=30a55632ec9034c9b9a3f290aaecd9a07c1f26ab Certificate serial: 019B797F18F3A592996A2C62FE70FFCE3821 Authority key identifier: 30:A5:56:32:EC:90:34:C9:B9:A3:F2:90:AA:EC:D9:A0:7C:1F:26:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKVWMuyQNMm5o_KQquzZoHwfJqs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/b5hEA0skW7XIPdQy24vlGY78QsQ.roa Signing time: Thu 01 Jan 2026 12:18:51 +0000 ROA not before: Thu 01 Jan 2026 12:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199508 IP address blocks: 45.8.128.0/22 maxlen: 22 62.220.224.0/22 maxlen: 22 62.220.252.0/22 maxlen: 22 85.194.236.0/23 maxlen: 23 89.41.48.0/24 maxlen: 24 89.42.43.0/24 maxlen: 24 93.90.48.0/20 maxlen: 20 185.11.208.0/22 maxlen: 22 185.195.149.0/24 maxlen: 24 185.195.150.0/23 maxlen: 23 195.192.250.0/23 maxlen: 23 2a01:b5a0::/32 maxlen: 32 2a03:6f40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.crl rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.mft rsync://rpki.ripe.net/repository/DEFAULT/MKVWMuyQNMm5o_KQquzZoHwfJqs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:18:f3:a5:92:99:6a:2c:62:fe:70:ff:ce:38:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30a55632ec9034c9b9a3f290aaecd9a07c1f26ab Validity Not Before: Jan 1 12:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f9844034b245bb5c83dd432db8be5198efc42c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:93:3f:85:1c:51:7d:a4:82:bb:c5:d3:e8:85: 26:0c:1c:08:03:30:13:53:b4:31:d3:86:9a:e2:55: e8:06:0a:fb:2c:7f:51:ce:84:7c:3b:c4:33:df:f8: ab:0c:bc:7b:05:ac:5a:93:80:f7:bd:cd:ee:12:e4: 97:95:9b:31:8e:bc:06:c0:ca:0a:ff:29:d3:ec:d4: 00:49:bb:88:f5:31:56:84:46:7d:1d:a2:94:8d:e3: 91:36:e2:79:95:b5:21:e9:79:0b:b4:c6:36:fe:9d: 0f:89:96:c1:e8:94:a5:73:49:48:28:ab:ea:34:39: 1b:22:e1:a3:ea:c9:12:fb:03:e0:93:84:2d:b9:8e: 1e:5a:72:f2:06:38:82:04:1c:0c:99:40:4c:25:55: a7:82:90:22:87:61:30:30:62:ca:8d:09:48:dc:96: dd:d3:6b:99:93:70:56:35:e1:cd:7a:6c:b6:55:18: 90:74:ca:88:a8:8c:eb:0c:40:4d:f2:d7:26:fd:27: 37:c8:a7:34:5c:a5:72:fe:49:ed:6d:c8:e1:36:46: 4b:e3:4f:70:67:1a:06:c6:56:c8:05:19:c8:2f:b6: d7:2e:ab:9c:9d:51:97:51:1f:cb:df:01:b4:96:96: 37:d6:e5:0e:e3:df:0c:5a:26:d5:a4:2c:f8:44:40: 2b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:98:44:03:4B:24:5B:B5:C8:3D:D4:32:DB:8B:E5:19:8E:FC:42:C4 X509v3 Authority Key Identifier: keyid:30:A5:56:32:EC:90:34:C9:B9:A3:F2:90:AA:EC:D9:A0:7C:1F:26:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKVWMuyQNMm5o_KQquzZoHwfJqs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/b5hEA0skW7XIPdQy24vlGY78QsQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.128.0/22 62.220.224.0/22 62.220.252.0/22 85.194.236.0/23 89.41.48.0/24 89.42.43.0/24 93.90.48.0/20 185.11.208.0/22 185.195.149.0-185.195.151.255 195.192.250.0/23 IPv6: 2a01:b5a0::/32 2a03:6f40::/32 Signature Algorithm: sha256WithRSAEncryption 52:0d:f5:4c:90:b2:70:f5:a5:26:87:2b:a1:fb:71:22:f8:28: 96:07:28:39:bc:9d:ac:f3:66:ca:6d:a5:f5:8f:89:e7:7f:26: 7a:6c:09:ce:a6:ce:f2:fe:15:ed:e1:c5:f7:94:f8:a3:07:64: 33:15:5c:03:6e:64:09:d5:d2:59:df:4c:e5:87:47:3a:e4:66: 23:36:03:52:ae:ac:43:bb:bb:6f:35:e2:e4:31:2a:84:9a:a4: 9b:c7:cd:6e:b3:13:d1:05:b2:46:8c:b5:7c:cd:22:b4:13:57: e6:e3:c1:c9:a2:14:7a:cc:41:35:73:29:53:f3:79:6a:2a:0d: f7:ef:e5:88:24:bf:20:0a:33:bc:8c:82:58:5d:f2:3d:d8:41: 57:f4:80:85:a0:20:99:76:86:c6:c0:11:04:49:5f:d2:2a:bb: 9e:00:e4:32:0d:64:70:6a:15:80:43:d6:15:0e:62:68:81:4e: ef:4d:33:5a:21:6a:11:13:2d:2d:35:f3:3f:f9:1e:6c:65:55: 46:52:e3:86:7e:d6:d3:3b:bc:1e:56:1b:2e:fa:83:6c:b2:ad: 05:c6:84:50:e2:d8:03:e3:45:dc:da:40:cf:32:60:0a:92:e4: d0:9f:9a:8c:1e:09:6f:2e:57:26:6a:86:b3:56:5a:ec:78:ae: 76:4b:79:b9 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgISAZt5fxjzpZKZaixi/nD/zjghMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwYTU1NjMyZWM5MDM0YzliOWEzZjI5MGFhZWNkOWEwN2Mx ZjI2YWIwHhcNMjYwMTAxMTIxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Zjk4NDQwMzRiMjQ1YmI1YzgzZGQ0MzJkYjhiZTUxOThlZmM0MmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZM/hRxRfaSCu8XT6IUmDBwIAzAT U7Qx04aa4lXoBgr7LH9RzoR8O8Qz3/irDLx7Baxak4D3vc3uEuSXlZsxjrwGwMoK /ynT7NQASbuI9TFWhEZ9HaKUjeORNuJ5lbUh6XkLtMY2/p0PiZbB6JSlc0lIKKvq NDkbIuGj6skS+wPgk4QtuY4eWnLyBjiCBBwMmUBMJVWngpAih2EwMGLKjQlI3Jbd 02uZk3BWNeHNemy2VRiQdMqIqIzrDEBN8tcm/Sc3yKc0XKVy/kntbcjhNkZL409w ZxoGxlbIBRnIL7bXLqucnVGXUR/L3wG0lpY31uUO498MWibVpCz4REAr3wIDAQAB o4ICXTCCAlkwHQYDVR0OBBYEFG+YRANLJFu1yD3UMtuL5RmO/ELEMB8GA1UdIwQY MBaAFDClVjLskDTJuaPykKrs2aB8HyarMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUtWV011eVFOTW01b19LUXF1elpvSHdmSnFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84NTAwMjQtODRlZS00NGM4LWIyZDkt N2QyMGViMDYzNDU1LzEvYjVoRUEwc2tXN1hJUGRReTI0dmxHWTc4UXNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS84NTAwMjQtODRlZS00NGM4LWIyZDktN2QyMGViMDYzNDU1 LzEvTUtWV011eVFOTW01b19LUXF1elpvSHdmSnFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjBKBAIAATBEAwQCLQiAAwQC PtzgAwQCPtz8AwQBVcLsAwQAWSkwAwQAWSorAwQEXVowAwQCuQvQMAwDBAC5w5UD BAO5w5ADBAHDwPowFAQCAAIwDgMFACoBtaADBQAqA29AMA0GCSqGSIb3DQEBCwUA A4IBAQBSDfVMkLJw9aUmhyuh+3Ei+CiWByg5vJ2s82bKbaX1j4nnfyZ6bAnOps7y /hXt4cX3lPijB2QzFVwDbmQJ1dJZ30zlh0c65GYjNgNSrqxDu7tvNeLkMSqEmqSb x81usxPRBbJGjLV8zSK0E1fm48HJohR6zEE1cylT83lqKg337+WIJL8gCjO8jIJY XfI92EFX9ICFoCCZdobGwBEESV/SKrueAOQyDWRwahWAQ9YVDmJogU7vTTNaIWoR Ey0tNfM/+R5sZVVGUuOGftbTO7weVhsu+oNssq0FxoRQ4tgD40Xc2kDPMmAKkuTQ n5qMHglvLlcmaoazVlrseK52S3m5 -----END CERTIFICATE-----Generated at Fri Jan 2 18:34:07 2026 by rpki-client