This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/5TJtAqULg4ja_LAfVChOHrVcRIc.roa File: 5TJtAqULg4ja_LAfVChOHrVcRIc.roa (raw, json) Hash identifier: EAVBfXjuLVfxp6BBuit9OSxy31gzavG/9emVaX+/nqM= Subject key identifier: E5:32:6D:02:A5:0B:83:88:DA:FC:B0:1F:54:28:4E:1E:B5:5C:44:87 Certificate issuer: /CN=06e4bbdab896e66113f351b4d9c82df50e66a712 Certificate serial: 019B7F134C37EC20AA3A16B95A2DCABB828E Authority key identifier: 06:E4:BB:DA:B8:96:E6:61:13:F3:51:B4:D9:C8:2D:F5:0E:66:A7:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/5TJtAqULg4ja_LAfVChOHrVcRIc.roa Signing time: Fri 02 Jan 2026 14:18:49 +0000 ROA not before: Fri 02 Jan 2026 14:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206110 IP address blocks: 185.196.68.0/22 maxlen: 24 185.196.68.0/24 maxlen: 24 185.196.69.0/24 maxlen: 24 185.196.70.0/24 maxlen: 24 185.196.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.crl rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:4c:37:ec:20:aa:3a:16:b9:5a:2d:ca:bb:82:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06e4bbdab896e66113f351b4d9c82df50e66a712 Validity Not Before: Jan 2 14:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e5326d02a50b8388dafcb01f54284e1eb55c4487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4d:a6:52:66:ef:8b:08:93:2f:51:7b:9e:e5: 94:23:15:2b:12:fc:9c:7b:f5:0d:b6:0d:54:55:d3: 15:fa:cc:08:97:86:30:a5:55:00:e2:18:dd:1c:2a: 43:be:33:b2:6f:55:b0:7b:9d:db:36:a5:44:a1:5f: 6b:f2:7a:80:77:a6:54:7c:11:63:31:02:09:bd:84: 89:9d:87:04:f7:7a:c2:99:78:eb:06:ef:b7:ba:df: a7:4f:2d:ff:a7:b3:d0:70:62:12:25:f6:19:4c:b3: a3:f3:8a:86:ad:55:76:03:e9:31:0b:c4:d0:fe:b2: 58:f7:d7:f8:d1:67:d5:7a:6f:4d:ae:8f:d4:6c:db: 2b:19:12:01:f8:ce:0b:f0:bb:cb:5f:4e:1a:c7:1a: 9f:0d:ff:f8:31:2f:aa:5f:64:f3:0d:38:27:09:3c: 4f:27:e1:e4:78:7c:e8:cf:d1:6b:0d:cc:19:ae:8c: 5d:58:9c:dd:d0:ce:6f:ad:fa:1f:58:c4:e9:dc:88: 63:04:db:7e:2b:5b:4a:11:ee:16:41:c8:1d:43:97: 8f:7e:7e:4f:d3:74:19:30:d9:f8:5a:25:53:53:72: e2:c7:00:f8:43:70:4f:75:36:04:b5:67:77:f1:c7: f6:0c:fb:52:3f:c3:bb:44:d3:70:b9:a6:51:ca:b6: b9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:32:6D:02:A5:0B:83:88:DA:FC:B0:1F:54:28:4E:1E:B5:5C:44:87 X509v3 Authority Key Identifier: keyid:06:E4:BB:DA:B8:96:E6:61:13:F3:51:B4:D9:C8:2D:F5:0E:66:A7:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/5TJtAqULg4ja_LAfVChOHrVcRIc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.196.68.0/22 Signature Algorithm: sha256WithRSAEncryption 9c:eb:c7:54:1b:ee:b8:a0:a7:a0:75:3b:48:8c:42:19:f1:c8: 71:f3:17:05:32:bf:fc:e4:98:86:5f:f2:26:72:11:a2:40:61: c0:44:e1:52:f8:2c:78:76:7b:16:46:0d:ea:3d:ca:7a:29:61: 00:fb:0e:41:4c:69:87:01:a5:67:62:16:0c:18:1b:86:3b:d2: 33:d2:ff:6c:94:da:51:c1:a8:94:e2:a7:25:6d:e4:f6:89:53: 62:09:ae:d1:72:8e:ea:c0:89:24:e4:33:0c:2c:38:c2:a8:97: 26:49:30:f0:df:be:0c:54:e9:f8:d0:76:06:c6:87:aa:20:1c: 9f:56:9a:88:e4:92:8b:c6:14:cf:7e:df:5a:36:c1:10:d9:fe: fc:9c:f2:9c:6a:d4:ff:2e:e4:25:0e:2b:58:5c:34:a6:1c:bf: 17:cc:5b:63:e3:49:d9:92:84:f0:97:15:3b:4a:8f:6c:6f:b1: 47:06:b1:2e:c0:e6:e5:24:ed:94:38:65:92:0d:51:5f:2f:99: 3f:8f:55:c0:4c:07:79:cd:c6:d6:96:b8:81:ff:6f:83:86:85: 60:46:f1:31:7e:f8:0a:5c:90:24:4a:c1:fd:ed:25:40:a8:81: 55:67:d2:fc:b4:d3:f9:a2:c9:f6:69:3d:12:c0:3f:6a:ca:d0: d2:a9:84:94 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/E0w37CCqOha5Wi3Ku4KOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2ZTRiYmRhYjg5NmU2NjExM2YzNTFiNGQ5YzgyZGY1MGU2 NmE3MTIwHhcNMjYwMTAyMTQxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTMyNmQwMmE1MGI4Mzg4ZGFmY2IwMWY1NDI4NGUxZWI1NWM0NDg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArU2mUmbviwiTL1F7nuWUIxUrEvyc e/UNtg1UVdMV+swIl4YwpVUA4hjdHCpDvjOyb1Wwe53bNqVEoV9r8nqAd6ZUfBFj MQIJvYSJnYcE93rCmXjrBu+3ut+nTy3/p7PQcGISJfYZTLOj84qGrVV2A+kxC8TQ /rJY99f40WfVem9Nro/UbNsrGRIB+M4L8LvLX04axxqfDf/4MS+qX2TzDTgnCTxP J+HkeHzoz9FrDcwZroxdWJzd0M5vrfofWMTp3IhjBNt+K1tKEe4WQcgdQ5ePfn5P 03QZMNn4WiVTU3LixwD4Q3BPdTYEtWd38cf2DPtSP8O7RNNwuaZRyra5WQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOUybQKlC4OI2vywH1QoTh61XESHMB8GA1UdIwQY MBaAFAbku9q4luZhE/NRtNnILfUOZqcSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnVTNzJyaVc1bUVUODFHMDJjZ3Q5UTVtcHhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9kOTk5NDctMjI5OC00MjJmLTlkYTAt ZmUwZDI4YjY4Y2Q1LzEvNVRKdEFxVUxnNGphX0xBZlZDaE9IclZjUkljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9kOTk5NDctMjI5OC00MjJmLTlkYTAtZmUwZDI4YjY4Y2Q1 LzEvQnVTNzJyaVc1bUVUODFHMDJjZ3Q5UTVtcHhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucREMA0G CSqGSIb3DQEBCwUAA4IBAQCc68dUG+64oKegdTtIjEIZ8chx8xcFMr/85JiGX/Im chGiQGHAROFS+Cx4dnsWRg3qPcp6KWEA+w5BTGmHAaVnYhYMGBuGO9Iz0v9slNpR waiU4qclbeT2iVNiCa7Rco7qwIkk5DMMLDjCqJcmSTDw374MVOn40HYGxoeqIByf VpqI5JKLxhTPft9aNsEQ2f78nPKcatT/LuQlDitYXDSmHL8XzFtj40nZkoTwlxU7 So9sb7FHBrEuwOblJO2UOGWSDVFfL5k/j1XATAd5zcbWlriB/2+DhoVgRvExfvgK XJAkSsH97SVAqIFVZ9L8tNP5osn2aT0SwD9qytDSqYSU -----END CERTIFICATE-----Generated at Wed Jan 7 22:48:34 2026 by rpki-client