This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/1-5QJBLxp5AmzSVUk8qikofQqav4.roa File: 1-5QJBLxp5AmzSVUk8qikofQqav4.roa (raw, json) Hash identifier: bXIAnhQl9MhR5WL6f2K74RtvR0mnQzIz2IKnZ9vIJ10= Subject key identifier: FB:94:09:04:BC:69:E4:09:B3:49:55:24:F2:A8:A4:A1:F4:2A:6A:FE Certificate issuer: /CN=ba76706d3e08813db8b2776628af846518e26dd2 Certificate serial: 019B76EAAFCA95CBECADF2CBBEA44C22E45C Authority key identifier: BA:76:70:6D:3E:08:81:3D:B8:B2:77:66:28:AF:84:65:18:E2:6D:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unZwbT4IgT24sndmKK-EZRjibdI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/1-5QJBLxp5AmzSVUk8qikofQqav4.roa Signing time: Thu 01 Jan 2026 00:17:30 +0000 ROA not before: Thu 01 Jan 2026 00:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203205 IP address blocks: 185.125.8.0/22 maxlen: 22 185.125.8.0/24 maxlen: 24 185.125.9.0/24 maxlen: 24 185.125.10.0/24 maxlen: 24 185.125.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft rsync://rpki.ripe.net/repository/DEFAULT/unZwbT4IgT24sndmKK-EZRjibdI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:af:ca:95:cb:ec:ad:f2:cb:be:a4:4c:22:e4:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba76706d3e08813db8b2776628af846518e26dd2 Validity Not Before: Jan 1 00:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb940904bc69e409b3495524f2a8a4a1f42a6afe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:b7:e2:0d:c2:a2:e0:34:88:6c:3f:ea:9a:1f: a5:54:0c:95:cd:16:3e:49:75:4f:dd:fa:9f:4f:82: b5:5c:13:16:6a:58:99:d4:43:c8:a6:ed:15:f9:eb: be:6f:8e:9d:57:26:0a:64:d9:a0:6f:50:92:cf:9b: 31:76:42:fc:95:df:93:a9:b1:b3:1c:63:94:10:3f: 42:39:8b:16:22:8d:91:eb:ca:84:23:96:67:59:e7: b6:1e:92:78:96:36:45:f8:bc:4d:a1:76:09:f1:ce: cf:ec:d6:46:b2:d8:21:69:95:00:e2:7b:f9:17:94: 12:15:18:4f:29:e1:c2:fc:0a:cb:f5:c8:c2:3f:02: 6e:e1:20:ba:ac:c6:d0:ff:e9:cd:02:a5:01:3b:d8: 71:2f:f5:57:73:3c:0e:83:50:10:e2:0f:29:a2:aa: 2f:97:eb:d6:51:cf:72:bd:42:4d:cf:5b:da:f8:c8: bf:bb:42:ec:4d:00:32:5f:c4:be:6c:87:0a:30:60: bd:a7:0a:71:0c:c9:c2:af:eb:e3:42:c5:92:c2:73: 3d:d4:8a:bc:7d:e0:f0:99:74:ac:6b:a5:90:41:32: 56:49:f5:bf:35:32:f3:04:d9:8a:08:bb:90:2d:f7: 2e:ac:67:20:17:c3:70:50:1c:ab:c6:93:63:ff:4e: fc:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:94:09:04:BC:69:E4:09:B3:49:55:24:F2:A8:A4:A1:F4:2A:6A:FE X509v3 Authority Key Identifier: keyid:BA:76:70:6D:3E:08:81:3D:B8:B2:77:66:28:AF:84:65:18:E2:6D:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unZwbT4IgT24sndmKK-EZRjibdI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/1-5QJBLxp5AmzSVUk8qikofQqav4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.125.8.0/22 Signature Algorithm: sha256WithRSAEncryption 07:8c:d9:58:0b:d8:46:b4:f2:7d:9e:38:a4:29:1f:64:82:61: 75:36:ef:60:c3:ca:ab:07:49:07:b9:d9:4c:7c:f7:f1:1d:69: ed:d4:c1:af:64:48:f0:a9:0e:c9:4e:01:a6:b6:93:f8:c1:a8: 77:2d:28:7b:bb:1b:21:05:8f:8e:1a:bd:47:eb:f1:2e:f3:07: 6f:7e:4e:2a:12:16:4b:e9:43:12:25:48:1f:5f:fd:6a:4f:d1: 22:d2:55:25:f9:f1:53:7c:2b:36:c6:5f:85:7d:91:4a:6e:8a: 2f:15:e7:87:90:a8:64:e7:e8:1f:ea:45:1f:62:48:d6:fa:67: cd:c9:c4:e1:82:85:7b:be:8c:f6:bd:93:db:8a:d3:a7:a3:15: a0:64:6b:93:5c:c2:d9:50:4f:e7:07:2a:dd:60:6c:bb:fb:3b: 66:f9:21:27:ee:42:fc:a3:ea:52:72:3d:12:4c:bb:61:e2:df: 08:f8:ba:44:db:49:1d:ee:88:be:fd:32:33:0b:07:43:40:da: a7:08:be:4b:2d:c9:bd:30:33:ea:7e:5c:c1:13:d2:3f:2d:b0: ea:89:7f:9a:23:b1:8c:68:8d:8e:ec:91:2c:8c:61:60:fe:16: 4f:64:94:17:64:64:60:42:e2:1f:c4:d2:24:75:43:32:35:6d: 97:c2:a4:50 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt26q/KlcvsrfLLvqRMIuRcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNzY3MDZkM2UwODgxM2RiOGIyNzc2NjI4YWY4NDY1MThl MjZkZDIwHhcNMjYwMTAxMDAxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjk0MDkwNGJjNjllNDA5YjM0OTU1MjRmMmE4YTRhMWY0MmE2YWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9LfiDcKi4DSIbD/qmh+lVAyVzRY+ SXVP3fqfT4K1XBMWaliZ1EPIpu0V+eu+b46dVyYKZNmgb1CSz5sxdkL8ld+TqbGz HGOUED9COYsWIo2R68qEI5ZnWee2HpJ4ljZF+LxNoXYJ8c7P7NZGstghaZUA4nv5 F5QSFRhPKeHC/ArL9cjCPwJu4SC6rMbQ/+nNAqUBO9hxL/VXczwOg1AQ4g8poqov l+vWUc9yvUJNz1va+Mi/u0LsTQAyX8S+bIcKMGC9pwpxDMnCr+vjQsWSwnM91Iq8 feDwmXSsa6WQQTJWSfW/NTLzBNmKCLuQLfcurGcgF8NwUByrxpNj/078KwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPuUCQS8aeQJs0lVJPKopKH0Kmr+MB8GA1UdIwQY MBaAFLp2cG0+CIE9uLJ3ZiivhGUY4m3SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW5ad2JUNElnVDI0c25kbUtLLUVaUmppYmRJLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82ZDQ3NTktYTA1ZS00NmJjLWJlNTgt NjY5ZWVkMmVjN2VhLzEvMS01UUpCTHhwNUFtelNWVWs4cWlrb2ZRcWF2NC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYzcvNmQ0NzU5LWEwNWUtNDZiYy1iZTU4LTY2OWVlZDJlYzdl YS8xL3VuWndiVDRJZ1QyNHNuZG1LSy1FWlJqaWJkSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArl9CDAN BgkqhkiG9w0BAQsFAAOCAQEAB4zZWAvYRrTyfZ44pCkfZIJhdTbvYMPKqwdJB7nZ THz38R1p7dTBr2RI8KkOyU4BpraT+MGody0oe7sbIQWPjhq9R+vxLvMHb35OKhIW S+lDEiVIH1/9ak/RItJVJfnxU3wrNsZfhX2RSm6KLxXnh5CoZOfoH+pFH2JI1vpn zcnE4YKFe76M9r2T24rTp6MVoGRrk1zC2VBP5wcq3WBsu/s7ZvkhJ+5C/KPqUnI9 Eky7YeLfCPi6RNtJHe6Ivv0yMwsHQ0Dapwi+Sy3JvTAz6n5cwRPSPy2w6ol/miOx jGiNjuyRLIxhYP4WT2SUF2RkYELiH8TSJHVDMjVtl8KkUA== -----END CERTIFICATE-----Generated at Thu Jan 1 17:29:47 2026 by rpki-client