This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/5TcoI_eQskRxun2Us90RVhZVntc.roa File: 5TcoI_eQskRxun2Us90RVhZVntc.roa (raw, json) Hash identifier: nfuPBkTypNJiNRLl9OTvjxGLCwCmym5qNNM9A6KuZ3U= Subject key identifier: E5:37:28:23:F7:90:B2:44:71:BA:7D:94:B3:DD:11:56:16:55:9E:D7 Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6 Certificate serial: 019B275F83A4FFAD6B0799ACC145227230BC Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/5TcoI_eQskRxun2Us90RVhZVntc.roa Signing time: Tue 16 Dec 2025 13:35:29 +0000 ROA not before: Tue 16 Dec 2025 13:35:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 6079 IP address blocks: 85.208.34.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:5f:83:a4:ff:ad:6b:07:99:ac:c1:45:22:72:30:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6 Validity Not Before: Dec 16 13:35:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e5372823f790b24471ba7d94b3dd115616559ed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:62:03:cf:3f:a6:f1:94:1f:de:f3:5b:95:05: 9a:a5:01:70:56:63:09:15:59:25:8e:9a:27:c4:dd: c5:1c:70:6a:de:5f:dc:96:32:e9:12:64:ed:12:59: da:81:58:8e:be:bf:df:f5:46:fa:d6:c3:aa:57:ef: ca:a4:9c:1e:de:83:11:78:20:80:16:03:1c:34:2d: b4:e4:32:c3:de:86:af:0e:1a:03:b5:29:e9:6f:b7: 35:8e:4c:14:93:91:b4:43:21:12:2b:d9:38:2f:16: 81:eb:bc:16:ff:68:92:03:8d:a1:be:18:0e:3b:0d: 7e:3b:da:46:1b:2e:46:04:10:c0:44:da:31:9a:70: 91:7d:b8:28:a2:13:69:0b:a1:d0:78:34:d4:32:bf: 8f:f8:77:58:df:91:07:b3:15:5a:97:f0:67:46:e3: 74:31:f6:f8:7f:6c:27:8b:25:78:6d:bd:6f:f6:43: 47:44:0d:86:df:74:a1:da:9a:dd:b8:43:26:92:25: ce:7b:e1:f8:9a:5d:f8:8e:16:3d:19:59:97:37:58: 1a:b1:d0:34:94:e3:f1:75:ce:54:fc:4e:04:b3:e8: 0d:d2:bd:a6:38:a9:ec:cc:56:e6:04:78:9d:05:7a: 89:8d:60:f9:ee:7b:46:8e:d7:b4:79:d6:c3:82:5d: 5b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:37:28:23:F7:90:B2:44:71:BA:7D:94:B3:DD:11:56:16:55:9E:D7 X509v3 Authority Key Identifier: keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/5TcoI_eQskRxun2Us90RVhZVntc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.208.34.0/23 Signature Algorithm: sha256WithRSAEncryption 4d:7e:8d:af:10:ce:23:08:46:ed:30:07:d0:3d:b8:d9:7b:3c: df:c3:06:5a:29:06:6e:c3:0c:d4:b1:6f:39:ba:2b:77:81:3a: 06:bf:08:58:30:fb:3f:66:02:a3:10:ab:24:b6:30:60:8d:48: c3:49:73:1f:8d:61:43:5d:f6:c0:a8:05:7a:01:55:07:2b:1c: 3a:26:33:e5:79:6d:9b:7d:72:79:6b:b6:c2:08:26:b0:f7:10: 52:f6:14:17:1c:53:3e:b9:63:c0:d6:9c:17:6a:c7:86:6c:e6: 91:c2:b9:f0:40:82:7e:b7:c6:c9:e9:3d:cf:14:11:35:90:80: 52:52:e3:28:ca:00:e6:c9:b3:96:8f:41:9a:70:74:dc:d1:11: e2:ca:51:33:46:5b:ba:5f:e4:75:61:fe:7e:8e:df:36:fc:50: 89:8b:70:58:93:bd:82:75:a6:d7:c1:5d:b5:6d:66:40:d7:5d: b9:de:92:18:71:a5:3a:1c:88:09:de:cf:e1:8d:8e:94:78:ca: ad:47:09:48:9c:39:48:cc:2d:3a:60:65:0d:54:d9:44:f1:43: a9:22:00:8e:bb:68:aa:db:2d:9c:ea:5a:09:ad:77:4f:01:24: 12:ab:52:90:5a:6f:2b:18:cb:5f:2d:82:0d:a8:b4:2f:17:c3: f0:a5:2b:b9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsnX4Ok/61rB5mswUUicjC8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDBjNDlhMGU5N2UwZDVmM2NlZDNiN2I2YjlmNzJjYTBj YjUzZDYwHhcNMjUxMjE2MTMzNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTM3MjgyM2Y3OTBiMjQ0NzFiYTdkOTRiM2RkMTE1NjE2NTU5ZWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2IDzz+m8ZQf3vNblQWapQFwVmMJ FVkljponxN3FHHBq3l/cljLpEmTtElnagViOvr/f9Ub61sOqV+/KpJwe3oMReCCA FgMcNC205DLD3oavDhoDtSnpb7c1jkwUk5G0QyESK9k4LxaB67wW/2iSA42hvhgO Ow1+O9pGGy5GBBDARNoxmnCRfbgoohNpC6HQeDTUMr+P+HdY35EHsxVal/BnRuN0 Mfb4f2wniyV4bb1v9kNHRA2G33Sh2prduEMmkiXOe+H4ml34jhY9GVmXN1gasdA0 lOPxdc5U/E4Es+gN0r2mOKnszFbmBHidBXqJjWD57ntGjte0edbDgl1b2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOU3KCP3kLJEcbp9lLPdEVYWVZ7XMB8GA1UdIwQY MBaAFOLQxJoOl+DV887Tt7a59yygy1PWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEt NDY5MGEwMDcxNDFmLzEvNVRjb0lfZVFza1J4dW4yVXM5MFJWaFpWbnRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEtNDY5MGEwMDcxNDFm LzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVdAiMA0G CSqGSIb3DQEBCwUAA4IBAQBNfo2vEM4jCEbtMAfQPbjZezzfwwZaKQZuwwzUsW85 uit3gToGvwhYMPs/ZgKjEKsktjBgjUjDSXMfjWFDXfbAqAV6AVUHKxw6JjPleW2b fXJ5a7bCCCaw9xBS9hQXHFM+uWPA1pwXaseGbOaRwrnwQIJ+t8bJ6T3PFBE1kIBS UuMoygDmybOWj0GacHTc0RHiylEzRlu6X+R1Yf5+jt82/FCJi3BYk72CdabXwV21 bWZA11253pIYcaU6HIgJ3s/hjY6UeMqtRwlInDlIzC06YGUNVNlE8UOpIgCOu2iq 2y2c6loJrXdPASQSq1KQWm8rGMtfLYINqLQvF8PwpSu5 -----END CERTIFICATE-----Generated at Fri Dec 19 20:18:47 2025 by rpki-client