This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/5s6XKsomdWNWDCdDfvlwJ_bv16M.roa File: 5s6XKsomdWNWDCdDfvlwJ_bv16M.roa (raw, json) Hash identifier: 2MYOlX42yAcrFD0bmpi2VtXwK7LzEOj6ivS2Lm4VbdA= Subject key identifier: E6:CE:97:2A:CA:26:75:63:56:0C:27:43:7E:F9:70:27:F6:EF:D7:A3 Certificate issuer: /CN=d0baab9bd8c69d07b6501147543df74270a33a21 Certificate serial: 019B7F82D7F066260ACA69924D08578C4360 Authority key identifier: D0:BA:AB:9B:D8:C6:9D:07:B6:50:11:47:54:3D:F7:42:70:A3:3A:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/5s6XKsomdWNWDCdDfvlwJ_bv16M.roa Signing time: Fri 02 Jan 2026 16:20:40 +0000 ROA not before: Fri 02 Jan 2026 16:20:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43211 IP address blocks: 185.188.104.0/22 maxlen: 24 185.188.104.0/24 maxlen: 24 185.188.105.0/24 maxlen: 24 185.188.106.0/24 maxlen: 24 185.188.107.0/24 maxlen: 24 2a0b:be80::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft rsync://rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:d7:f0:66:26:0a:ca:69:92:4d:08:57:8c:43:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0baab9bd8c69d07b6501147543df74270a33a21 Validity Not Before: Jan 2 16:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e6ce972aca267563560c27437ef97027f6efd7a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a4:27:cc:52:81:36:10:b8:86:ee:7c:84:c6: 2a:32:52:7e:f5:71:59:d2:d6:c0:3f:17:88:f9:74: 0a:e1:a3:e9:06:4d:26:69:91:4e:6d:05:c5:4e:58: e5:ed:37:82:a2:91:f4:df:f7:eb:37:64:0a:8d:88: 04:0e:70:ab:d0:38:fa:a2:2f:01:5e:29:3c:68:11: 22:5e:4e:bd:80:13:b7:ad:b0:cd:7c:34:5c:c0:02: 90:ef:8a:7f:f1:85:66:62:73:4a:72:65:8b:02:eb: 5a:01:bd:2d:9a:00:e9:b4:e2:74:56:a8:a8:7a:51: 1f:c6:59:3e:e9:6f:af:7a:3f:11:5d:8b:0e:3d:f7: da:0f:d6:b5:ec:31:56:16:59:23:78:8c:7e:0a:5f: cd:dc:03:41:7e:9f:68:28:96:f3:9d:40:09:72:5d: db:ac:85:1d:b5:dc:7d:9a:40:83:87:2f:4a:95:81: ea:f2:ee:36:9f:6a:92:61:cc:a0:9d:11:ce:1a:6b: 30:32:04:d3:f7:0a:6a:97:06:e0:7c:73:52:3f:fb: 1c:a1:a0:c8:1d:53:84:1a:22:fe:bf:11:0e:91:6d: 01:8d:19:66:e6:d0:1f:ba:0e:51:fe:fc:0b:67:4e: 5b:c2:c0:3c:36:a7:70:72:d1:cf:58:e3:d7:a5:fe: 18:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:CE:97:2A:CA:26:75:63:56:0C:27:43:7E:F9:70:27:F6:EF:D7:A3 X509v3 Authority Key Identifier: keyid:D0:BA:AB:9B:D8:C6:9D:07:B6:50:11:47:54:3D:F7:42:70:A3:3A:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/5s6XKsomdWNWDCdDfvlwJ_bv16M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.188.104.0/22 IPv6: 2a0b:be80::/29 Signature Algorithm: sha256WithRSAEncryption 50:3c:6f:7a:de:87:22:c9:8f:2e:79:7d:17:03:f8:82:3e:85: 89:2b:49:32:5d:5c:71:e9:ce:94:24:22:2a:72:21:69:21:39: 66:cc:18:d6:fb:0d:ba:4d:45:d2:e9:31:42:a7:97:6a:ec:b3: 31:a7:40:22:d9:b1:18:a3:a0:40:7b:b0:72:14:93:81:de:7e: fb:29:c1:fe:de:65:b4:32:69:71:e8:6f:92:95:50:6d:82:e2: 45:37:ee:68:02:1b:1b:32:0a:1a:91:c7:37:3c:d0:70:d9:61: 8f:32:10:fa:e7:ba:4d:8c:d0:d1:9c:8f:db:1e:ee:e5:78:29: a6:15:b4:b6:4b:fc:d5:bf:0d:97:96:ef:ab:96:c8:d2:8a:10: a4:d8:29:e5:c0:93:7e:f4:ff:fe:5b:d4:63:ab:9e:e7:c7:86: 43:42:b5:52:2b:a9:4f:9e:19:4a:64:a1:d9:ce:a1:0e:be:10: 63:ea:48:7b:49:48:8c:ed:cb:f7:fd:2a:dd:23:6d:5f:bf:57: 90:54:5d:3c:bd:00:48:a4:46:cc:d8:cf:5f:58:f7:26:ad:e3: 9f:e3:de:21:da:49:00:85:9b:bc:41:71:ce:d9:f3:70:3c:a8: 2d:0d:e7:77:18:b2:0a:1e:ec:17:63:b4:b1:e2:04:4d:96:bf: 08:0c:35:3d -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/gtfwZiYKymmSTQhXjENgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwYmFhYjliZDhjNjlkMDdiNjUwMTE0NzU0M2RmNzQyNzBh MzNhMjEwHhcNMjYwMTAyMTYyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNmNlOTcyYWNhMjY3NTYzNTYwYzI3NDM3ZWY5NzAyN2Y2ZWZkN2EzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaQnzFKBNhC4hu58hMYqMlJ+9XFZ 0tbAPxeI+XQK4aPpBk0maZFObQXFTljl7TeCopH03/frN2QKjYgEDnCr0Dj6oi8B Xik8aBEiXk69gBO3rbDNfDRcwAKQ74p/8YVmYnNKcmWLAutaAb0tmgDptOJ0Vqio elEfxlk+6W+vej8RXYsOPffaD9a17DFWFlkjeIx+Cl/N3ANBfp9oKJbznUAJcl3b rIUdtdx9mkCDhy9KlYHq8u42n2qSYcygnRHOGmswMgTT9wpqlwbgfHNSP/scoaDI HVOEGiL+vxEOkW0BjRlm5tAfug5R/vwLZ05bwsA8NqdwctHPWOPXpf4YxwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFObOlyrKJnVjVgwnQ375cCf279ejMB8GA1UdIwQY MBaAFNC6q5vYxp0HtlARR1Q990JwozohMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMExxcm05akduUWUyVUJGSFZEMzNRbkNqT2lFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85MTk5ZWItZThlYi00MDRkLTg5NTUt OWJkNWQ1MTM4MDU5LzEvNXM2WEtzb21kV05XRENkRGZ2bHdKX2J2MTZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi85MTk5ZWItZThlYi00MDRkLTg5NTUtOWJkNWQ1MTM4MDU5 LzEvMExxcm05akduUWUyVUJGSFZEMzNRbkNqT2lFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCubxoMA0E AgACMAcDBQMqC76AMA0GCSqGSIb3DQEBCwUAA4IBAQBQPG963ociyY8ueX0XA/iC PoWJK0kyXVxx6c6UJCIqciFpITlmzBjW+w26TUXS6TFCp5dq7LMxp0Ai2bEYo6BA e7ByFJOB3n77KcH+3mW0Mmlx6G+SlVBtguJFN+5oAhsbMgoakcc3PNBw2WGPMhD6 57pNjNDRnI/bHu7leCmmFbS2S/zVvw2Xlu+rlsjSihCk2CnlwJN+9P/+W9Rjq57n x4ZDQrVSK6lPnhlKZKHZzqEOvhBj6kh7SUiM7cv3/SrdI21fv1eQVF08vQBIpEbM 2M9fWPcmreOf494h2kkAhZu8QXHO2fNwPKgtDed3GLIKHuwXY7Sx4gRNlr8IDDU9 -----END CERTIFICATE-----Generated at Sat Jan 3 06:40:35 2026 by rpki-client