This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/b-_n2W3tKk55AZ6OfLhjhQmjHQM.roa File: b-_n2W3tKk55AZ6OfLhjhQmjHQM.roa (raw, json) Hash identifier: o8XoU14Iw4MJitDTGOKpTt9lHXFFyCkBas20Hr7/Z5o= Subject key identifier: 6F:EF:E7:D9:6D:ED:2A:4E:79:01:9E:8E:7C:B8:63:85:09:A3:1D:03 Certificate issuer: /CN=5a3b1dddab33e45506ad977040924720417d5688 Certificate serial: 019B78346E558B87531EB6E82FE7C71F97AD Authority key identifier: 5A:3B:1D:DD:AB:33:E4:55:06:AD:97:70:40:92:47:20:41:7D:56:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wjsd3asz5FUGrZdwQJJHIEF9Vog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/b-_n2W3tKk55AZ6OfLhjhQmjHQM.roa Signing time: Thu 01 Jan 2026 06:17:40 +0000 ROA not before: Thu 01 Jan 2026 06:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200915 IP address blocks: 185.91.152.0/22 maxlen: 23 2a05:eb40::/29 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.mft rsync://rpki.ripe.net/repository/DEFAULT/Wjsd3asz5FUGrZdwQJJHIEF9Vog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 16:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:6e:55:8b:87:53:1e:b6:e8:2f:e7:c7:1f:97:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a3b1dddab33e45506ad977040924720417d5688 Validity Not Before: Jan 1 06:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6fefe7d96ded2a4e79019e8e7cb8638509a31d03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:eb:a0:cb:62:51:5a:27:b5:c9:f9:86:c1:37: 0a:a5:32:2d:1b:18:5d:6d:4b:c5:a7:f9:ee:b8:78: 2a:b8:fa:eb:12:b2:50:6a:67:40:73:27:02:51:63: 35:9d:be:33:97:fc:4f:3d:7a:70:03:67:3a:84:b0: e9:61:dd:5b:0e:b8:5d:ef:1d:7f:d8:a9:88:ec:8f: af:0e:3a:cd:77:05:51:d6:00:e8:44:76:6b:5d:89: 8e:b6:46:d4:1d:e7:88:f0:20:a1:0a:1c:08:a3:09: db:59:a7:54:7a:b7:74:0e:b3:cc:5a:e0:11:7d:9b: cd:e2:da:d1:5e:fb:e1:2b:19:7f:4d:22:35:67:14: 08:bb:95:9c:13:73:ca:ef:54:03:3f:5d:a1:05:3e: 7a:b0:38:82:cf:01:13:64:3c:7e:e4:2f:a5:b0:a1: 51:7a:4a:c7:84:e3:76:27:81:2c:06:ce:11:31:96: 38:71:ff:0e:da:4b:77:5f:2c:5a:67:29:b6:c6:7d: 5b:c8:b3:f2:eb:6e:c7:7a:d7:4b:95:89:ee:70:82: 78:a5:bb:9f:6f:87:9a:c7:61:89:fc:82:c4:15:4e: 9f:00:15:26:98:57:24:42:d1:99:c1:13:74:ce:ec: 1f:67:19:9b:9b:4e:1d:37:48:15:6f:b1:95:a5:ee: af:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:EF:E7:D9:6D:ED:2A:4E:79:01:9E:8E:7C:B8:63:85:09:A3:1D:03 X509v3 Authority Key Identifier: keyid:5A:3B:1D:DD:AB:33:E4:55:06:AD:97:70:40:92:47:20:41:7D:56:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wjsd3asz5FUGrZdwQJJHIEF9Vog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/b-_n2W3tKk55AZ6OfLhjhQmjHQM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.91.152.0/22 IPv6: 2a05:eb40::/29 Signature Algorithm: sha256WithRSAEncryption 4e:40:d0:67:1a:c8:7f:07:4c:b8:ba:68:71:84:c2:fa:51:29: de:e9:b3:b3:d7:50:19:d3:b3:20:19:67:df:55:bf:48:13:18: 69:1f:d2:b2:78:f3:b0:76:20:dc:e5:6e:3f:66:2c:d8:7c:d4: 36:d1:58:bb:ec:b5:27:83:56:ca:83:e5:c4:d8:06:a9:b2:66: ab:97:e5:c7:08:70:cb:17:b3:99:46:32:1a:eb:bf:96:66:be: 72:a1:78:00:3c:97:6b:cd:50:bf:6f:36:57:95:08:ff:8b:30: a5:9e:af:3f:92:e0:6a:71:55:4f:b1:fb:a1:b0:16:9f:fd:c2: 92:d5:22:ad:7c:0a:a6:05:aa:3d:bf:77:d0:9d:42:8d:eb:88: bd:58:e1:72:e7:e1:14:d1:55:c3:56:48:82:64:11:7f:6f:0b: 0c:ce:dd:8c:9c:d4:91:1f:80:22:c7:bd:cd:e8:e8:58:a7:7c: d9:0c:5a:0d:14:a8:dc:ec:9a:4c:8c:78:b3:8c:f5:86:d1:d4: 6a:81:f5:67:70:92:95:72:73:35:99:7f:f9:f7:6c:4c:76:6a: 25:20:87:8a:fe:39:57:00:5a:32:fd:61:eb:f8:af:a9:61:b0: 4f:26:58:f7:f8:2b:d0:ff:f3:9c:79:7a:ce:fb:b1:c1:08:9b: 15:ef:32:f2 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4NG5Vi4dTHrboL+fHH5etMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhM2IxZGRkYWIzM2U0NTUwNmFkOTc3MDQwOTI0NzIwNDE3 ZDU2ODgwHhcNMjYwMTAxMDYxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZmVmZTdkOTZkZWQyYTRlNzkwMTllOGU3Y2I4NjM4NTA5YTMxZDAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uugy2JRWie1yfmGwTcKpTItGxhd bUvFp/nuuHgquPrrErJQamdAcycCUWM1nb4zl/xPPXpwA2c6hLDpYd1bDrhd7x1/ 2KmI7I+vDjrNdwVR1gDoRHZrXYmOtkbUHeeI8CChChwIownbWadUerd0DrPMWuAR fZvN4trRXvvhKxl/TSI1ZxQIu5WcE3PK71QDP12hBT56sDiCzwETZDx+5C+lsKFR ekrHhON2J4EsBs4RMZY4cf8O2kt3XyxaZym2xn1byLPy627HetdLlYnucIJ4pbuf b4eax2GJ/ILEFU6fABUmmFckQtGZwRN0zuwfZxmbm04dN0gVb7GVpe6v5wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFG/v59lt7SpOeQGejny4Y4UJox0DMB8GA1UdIwQY MBaAFFo7Hd2rM+RVBq2XcECSRyBBfVaIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2pzZDNhc3o1RlVHclpkd1FKSkhJRUY5Vm9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8xNzliZDgtZmM2OC00Zjc2LTg2ZmYt NjhmMzE2NjA3Mzc2LzEvYi1fbjJXM3RLazU1QVo2T2ZMaGpoUW1qSFFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8xNzliZDgtZmM2OC00Zjc2LTg2ZmYtNjhmMzE2NjA3Mzc2 LzEvV2pzZDNhc3o1RlVHclpkd1FKSkhJRUY5Vm9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuVuYMA0E AgACMAcDBQMqBetAMA0GCSqGSIb3DQEBCwUAA4IBAQBOQNBnGsh/B0y4umhxhML6 USne6bOz11AZ07MgGWffVb9IExhpH9KyePOwdiDc5W4/ZizYfNQ20Vi77LUng1bK g+XE2Aapsmarl+XHCHDLF7OZRjIa67+WZr5yoXgAPJdrzVC/bzZXlQj/izClnq8/ kuBqcVVPsfuhsBaf/cKS1SKtfAqmBao9v3fQnUKN64i9WOFy5+EU0VXDVkiCZBF/ bwsMzt2MnNSRH4Aix73N6OhYp3zZDFoNFKjc7JpMjHizjPWG0dRqgfVncJKVcnM1 mX/592xMdmolIIeK/jlXAFoy/WHr+K+pYbBPJlj3+CvQ//OceXrO+7HBCJsV7zLy -----END CERTIFICATE-----Generated at Mon Jan 12 23:45:30 2026 by rpki-client