This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/sxLRGjLVvC0VxiNXSnDxrxQM-Wc.roa File: sxLRGjLVvC0VxiNXSnDxrxQM-Wc.roa (raw, json) Hash identifier: d0MBKBQCF8Xfp+dr6m1b10Wq47qvsXJ6Ve2XiNdBQJM= Subject key identifier: B3:12:D1:1A:32:D5:BC:2D:15:C6:23:57:4A:70:F1:AF:14:0C:F9:67 Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Certificate serial: 019B7F852E74E99E938B287B5F88F5049ABF Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/sxLRGjLVvC0VxiNXSnDxrxQM-Wc.roa Signing time: Fri 02 Jan 2026 16:23:13 +0000 ROA not before: Fri 02 Jan 2026 16:23:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3257 IP address blocks: 5.180.4.0/22 maxlen: 22 5.182.28.0/22 maxlen: 22 45.86.16.0/22 maxlen: 22 89.39.242.0/24 maxlen: 24 91.242.72.0/23 maxlen: 24 91.242.73.0/24 maxlen: 24 91.242.74.0/23 maxlen: 23 91.242.94.0/24 maxlen: 24 91.242.95.0/24 maxlen: 24 91.242.103.0/24 maxlen: 24 94.231.198.0/24 maxlen: 24 178.175.176.0/22 maxlen: 22 185.40.105.0/24 maxlen: 24 185.180.145.0/24 maxlen: 24 185.212.11.0/24 maxlen: 24 194.50.206.0/23 maxlen: 24 195.138.103.0/24 maxlen: 24 195.138.104.0/22 maxlen: 22 195.138.105.0/24 maxlen: 24 195.138.106.0/24 maxlen: 24 195.138.112.0/24 maxlen: 24 195.138.120.0/24 maxlen: 24 195.138.122.0/23 maxlen: 23 195.138.124.0/22 maxlen: 22 195.138.124.0/24 maxlen: 24 195.216.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 17 Jan 2026 18:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:2e:74:e9:9e:93:8b:28:7b:5f:88:f5:04:9a:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Validity Not Before: Jan 2 16:23:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b312d11a32d5bc2d15c623574a70f1af140cf967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7a:87:3c:43:29:4f:a6:33:33:e7:3e:24:d0: e2:7a:77:25:fb:e9:89:7f:b0:e9:a7:df:f6:68:7d: 59:a3:41:36:87:91:6a:86:ca:42:87:24:38:8e:97: 07:d4:e6:79:b7:bb:5a:88:e8:29:9e:78:4f:84:3a: 03:19:84:32:23:43:7d:53:33:b1:b8:66:46:36:2d: 3d:1b:f8:3a:0b:9e:6d:c9:eb:b2:ff:e7:ea:18:1f: 6c:4b:77:24:e4:4a:67:d0:c8:f4:c6:af:03:ef:1e: a2:11:cd:c7:67:02:6a:18:43:18:24:3e:52:55:6c: 32:74:0b:fa:2f:c9:3f:96:f3:1d:a5:b4:d3:a4:9a: 71:d2:04:53:fd:a4:7f:d3:15:2e:23:6a:23:72:48: 0b:d8:23:71:31:c1:d6:57:54:43:14:a2:22:38:b9: 78:2f:b9:79:01:c3:13:41:ca:7c:2a:08:7e:9c:8d: 99:e2:18:e9:50:a5:bc:20:fd:64:ca:bb:3f:c9:39: ae:9d:f8:bb:f4:67:9e:61:3b:a1:9d:3d:d1:65:87: fb:2e:96:81:89:c1:6f:f5:98:8d:34:30:16:de:d9: 0b:18:55:05:f7:fe:7a:17:04:2e:2f:39:5f:eb:3e: c1:56:90:fb:30:63:8f:ef:d9:ee:ae:aa:75:30:d7: 76:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:12:D1:1A:32:D5:BC:2D:15:C6:23:57:4A:70:F1:AF:14:0C:F9:67 X509v3 Authority Key Identifier: keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/sxLRGjLVvC0VxiNXSnDxrxQM-Wc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.4.0/22 5.182.28.0/22 45.86.16.0/22 89.39.242.0/24 91.242.72.0/22 91.242.94.0/23 91.242.103.0/24 94.231.198.0/24 178.175.176.0/22 185.40.105.0/24 185.180.145.0/24 185.212.11.0/24 194.50.206.0/23 195.138.103.0-195.138.107.255 195.138.112.0/24 195.138.120.0/24 195.138.122.0-195.138.127.255 195.216.156.0/22 Signature Algorithm: sha256WithRSAEncryption 53:b6:a8:99:af:46:82:b6:69:eb:ee:b9:6c:3e:0b:5a:dd:c0: 59:e9:86:b8:a6:ee:f8:ab:04:2c:48:ff:ef:61:8a:50:f8:3d: 5e:18:e9:8f:03:18:6e:6b:8e:8f:a5:0b:7c:06:48:ef:db:fe: e2:4c:2c:0b:9a:65:6d:c2:64:77:7a:9f:92:89:cb:51:bb:88: f7:82:8d:e9:bb:0c:2e:13:26:8a:6f:e9:d9:8a:8a:a9:7a:e1: b5:0a:aa:cd:fc:82:8a:60:4c:e1:86:8b:ca:5d:52:81:ad:11: 80:b6:cf:2e:d7:e5:5c:d5:8d:ad:86:a0:03:7f:fd:76:8a:6e: da:25:14:8e:67:8d:b6:43:28:97:0b:0f:90:9a:f8:5d:bf:51: e1:e4:3e:3a:bc:aa:d3:d9:a5:ec:4f:3a:c1:32:4c:46:11:28: bc:d1:ae:0d:a6:da:00:a0:2f:51:ca:59:d0:f1:1e:cb:4d:76: 88:ca:f2:91:14:0d:7e:bb:bd:b7:6a:0d:9c:0a:21:3c:24:fb: a9:41:eb:6c:cc:5f:14:ac:86:79:95:26:ff:c1:f6:ee:2f:34: ce:78:ee:78:02:01:54:b4:50:8c:f5:f1:a7:33:1f:4f:17:ba: 17:d4:25:eb:27:c2:04:b8:7d:33:ea:70:ac:68:cb:f9:da:cf: c7:25:38:ca -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgISAZt/hS506Z6Tiyh7X4j1BJq/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3 MWE5YTgwHhcNMjYwMTAyMTYyMzEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzEyZDExYTMyZDViYzJkMTVjNjIzNTc0YTcwZjFhZjE0MGNmOTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3qHPEMpT6YzM+c+JNDiencl++mJ f7Dpp9/2aH1Zo0E2h5FqhspChyQ4jpcH1OZ5t7taiOgpnnhPhDoDGYQyI0N9UzOx uGZGNi09G/g6C55tyeuy/+fqGB9sS3ck5Epn0Mj0xq8D7x6iEc3HZwJqGEMYJD5S VWwydAv6L8k/lvMdpbTTpJpx0gRT/aR/0xUuI2ojckgL2CNxMcHWV1RDFKIiOLl4 L7l5AcMTQcp8Kgh+nI2Z4hjpUKW8IP1kyrs/yTmunfi79GeeYTuhnT3RZYf7LpaB icFv9ZiNNDAW3tkLGFUF9/56FwQuLzlf6z7BVpD7MGOP79nurqp1MNd2OwIDAQAB o4ICgzCCAn8wHQYDVR0OBBYEFLMS0Roy1bwtFcYjV0pw8a8UDPlnMB8GA1UdIwQY MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt M2FjOWU1NmMzMDg5LzEvc3hMUkdqTFZ2QzBWeGlOWFNuRHhyeFFNLVdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5 LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGYBggrBgEFBQcBBwEB/wSBiDCBhTCBggQCAAEwfAMEAgW0 BAMEAgW2HAMEAi1WEAMEAFkn8gMEAlvySAMEAVvyXgMEAFvyZwMEAF7nxgMEArKv sAMEALkoaQMEALm0kQMEALnUCwMEAcIyzjAMAwQAw4pnAwQCw4poAwQAw4pwAwQA w4p4MAwDBAHDinoDBAfDigADBALD2JwwDQYJKoZIhvcNAQELBQADggEBAFO2qJmv RoK2aevuuWw+C1rdwFnphrim7virBCxI/+9hilD4PV4Y6Y8DGG5rjo+lC3wGSO/b /uJMLAuaZW3CZHd6n5KJy1G7iPeCjem7DC4TJopv6dmKiql64bUKqs38gopgTOGG i8pdUoGtEYC2zy7X5VzVja2GoAN//XaKbtolFI5njbZDKJcLD5Ca+F2/UeHkPjq8 qtPZpexPOsEyTEYRKLzRrg2m2gCgL1HKWdDxHstNdojK8pEUDX67vbdqDZwKITwk +6lB62zMXxSshnmVJv/B9u4vNM547ngCAVS0UIz18aczH08XuhfUJesnwgS4fTPq cKxoy/naz8clOMo= -----END CERTIFICATE-----Generated at Sat Jan 17 02:51:11 2026 by rpki-client