This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/c06tR7wEve3BgRsZfi2xd-31eVA.roa File: c06tR7wEve3BgRsZfi2xd-31eVA.roa (raw, json) Hash identifier: V2mYqL9ivwyeeA9Wbx55/u2xDyhE5GyqU/pPOSpOihs= Subject key identifier: 73:4E:AD:47:BC:04:BD:ED:C1:81:1B:19:7E:2D:B1:77:ED:F5:79:50 Certificate issuer: /CN=f779f5f0288985abde09827e03d787a52149e7ec Certificate serial: 019B7AC7B03FB90E4E3A03A1E43F9001932A Authority key identifier: F7:79:F5:F0:28:89:85:AB:DE:09:82:7E:03:D7:87:A5:21:49:E7:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93n18CiJhaveCYJ-A9eHpSFJ5-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/c06tR7wEve3BgRsZfi2xd-31eVA.roa Signing time: Thu 01 Jan 2026 18:17:45 +0000 ROA not before: Thu 01 Jan 2026 18:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29467 IP address blocks: 5.149.112.0/21 maxlen: 24 153.92.48.0/20 maxlen: 24 178.251.160.0/21 maxlen: 24 185.4.124.0/22 maxlen: 24 185.97.244.0/22 maxlen: 24 185.123.216.0/22 maxlen: 24 2a02:70c0::/32 maxlen: 32 2a03:2f00::/32 maxlen: 32 2a03:92e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.crl rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.mft rsync://rpki.ripe.net/repository/DEFAULT/93n18CiJhaveCYJ-A9eHpSFJ5-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:b0:3f:b9:0e:4e:3a:03:a1:e4:3f:90:01:93:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f779f5f0288985abde09827e03d787a52149e7ec Validity Not Before: Jan 1 18:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=734ead47bc04bdedc1811b197e2db177edf57950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b9:5c:84:c0:92:8a:da:3a:3f:c0:98:e9:6d: 6c:74:4d:be:a3:f2:0b:19:9f:f4:25:25:f3:3f:cf: 19:06:81:ae:6f:95:28:7f:71:c1:48:c3:e8:8f:a0: 47:4b:84:3a:4f:72:a8:3d:c2:c4:8a:61:d2:03:00: 87:d6:ba:71:04:4a:9a:43:2d:9d:fb:82:41:50:2d: e3:01:3e:74:6f:90:5b:81:68:fe:f9:5d:65:9c:3d: c4:43:4f:53:a3:4d:2b:e3:11:b4:f7:b6:14:ae:9d: f1:ee:27:da:3c:75:0d:b4:97:1e:fe:67:11:df:58: 79:5e:03:bb:96:a1:ad:97:c8:a3:4b:5c:8e:d8:25: 10:76:aa:52:71:fe:78:3d:67:e0:9c:fe:1d:78:6d: 8f:c6:66:d4:13:4e:ac:e7:d5:4d:82:59:c6:5e:e6: ba:af:0b:5c:d0:75:85:95:83:8e:bd:b3:52:ba:b1: 5b:c3:08:1d:57:7f:cd:41:68:6a:ec:81:43:c4:fc: 11:c8:41:ec:a1:e6:90:1c:94:6c:1d:6c:75:91:03: 23:08:fe:78:14:93:e4:da:39:45:f2:e3:02:ca:33: 32:5d:d0:a3:2e:94:18:8b:02:b8:4e:1d:90:b5:14: 14:0e:09:2c:7d:51:c2:87:f7:85:fa:e3:df:fa:78: 5d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:4E:AD:47:BC:04:BD:ED:C1:81:1B:19:7E:2D:B1:77:ED:F5:79:50 X509v3 Authority Key Identifier: keyid:F7:79:F5:F0:28:89:85:AB:DE:09:82:7E:03:D7:87:A5:21:49:E7:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93n18CiJhaveCYJ-A9eHpSFJ5-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/c06tR7wEve3BgRsZfi2xd-31eVA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.149.112.0/21 153.92.48.0/20 178.251.160.0/21 185.4.124.0/22 185.97.244.0/22 185.123.216.0/22 IPv6: 2a02:70c0::/32 2a03:2f00::/32 2a03:92e0::/32 Signature Algorithm: sha256WithRSAEncryption 7d:d0:f7:08:9d:d6:27:1c:9c:b6:c8:3d:d8:62:de:ef:1a:ba: 25:99:f4:97:18:e4:83:13:ed:45:12:58:fe:24:36:c0:05:f5: be:75:51:6c:24:02:cd:7d:d2:0c:c0:87:36:4c:74:48:0c:d8: 08:1e:17:ce:15:e8:fd:ad:f4:aa:4f:1f:20:ec:9f:0f:e2:9c: cb:59:0f:83:27:61:8c:f6:b4:53:54:2f:7e:8f:b8:2f:54:19: 02:08:3d:aa:e4:fd:68:bc:9a:69:fd:cc:c0:ac:df:da:7d:07: 6f:ec:4a:df:ba:c7:cf:81:5a:a4:eb:52:67:10:d8:84:37:fe: 67:63:24:d0:77:c4:a1:1e:8c:71:8e:96:6b:a0:cc:45:05:4a: 4b:c9:ee:c2:2a:c0:e3:f6:81:1f:0d:a4:3a:a1:95:d0:71:4b: e2:46:dd:e9:1a:3d:97:ff:6e:91:59:ee:08:d2:37:cd:54:a5: 76:96:47:56:48:d2:2c:6f:5b:7c:1e:d4:79:1e:9e:dc:3b:b9: b9:7a:ce:12:4b:00:cc:84:3e:cc:75:f1:5d:b9:23:9c:75:8d: f3:88:6d:54:9c:d8:9c:b9:26:7d:f3:5b:f1:0c:20:40:12:74: f4:63:5f:25:77:06:64:dd:4e:fa:f6:c2:4e:5b:76:58:66:88: 99:37:c2:5d -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgISAZt6x7A/uQ5OOgOh5D+QAZMqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3NzlmNWYwMjg4OTg1YWJkZTA5ODI3ZTAzZDc4N2E1MjE0 OWU3ZWMwHhcNMjYwMTAxMTgxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzRlYWQ0N2JjMDRiZGVkYzE4MTFiMTk3ZTJkYjE3N2VkZjU3OTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyblchMCSito6P8CY6W1sdE2+o/IL GZ/0JSXzP88ZBoGub5Uof3HBSMPoj6BHS4Q6T3KoPcLEimHSAwCH1rpxBEqaQy2d +4JBUC3jAT50b5BbgWj++V1lnD3EQ09To00r4xG097YUrp3x7ifaPHUNtJce/mcR 31h5XgO7lqGtl8ijS1yO2CUQdqpScf54PWfgnP4deG2PxmbUE06s59VNglnGXua6 rwtc0HWFlYOOvbNSurFbwwgdV3/NQWhq7IFDxPwRyEHsoeaQHJRsHWx1kQMjCP54 FJPk2jlF8uMCyjMyXdCjLpQYiwK4Th2QtRQUDgksfVHCh/eF+uPf+nhdZwIDAQAB o4ICRDCCAkAwHQYDVR0OBBYEFHNOrUe8BL3twYEbGX4tsXft9XlQMB8GA1UdIwQY MBaAFPd59fAoiYWr3gmCfgPXh6UhSefsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTNuMThDaUpoYXZlQ1lKLUE5ZUhwU0ZKNS13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9hZWQzODEtNDVjYy00NGJjLWE1YzMt ZmU3OTYzYmVjN2QzLzEvYzA2dFI3d0V2ZTNCZ1JzWmZpMnhkLTMxZVZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9hZWQzODEtNDVjYy00NGJjLWE1YzMtZmU3OTYzYmVjN2Qz LzEvOTNuMThDaUpoYXZlQ1lKLUE5ZUhwU0ZKNS13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFoGCCsGAQUFBwEHAQH/BEswSTAqBAIAATAkAwQDBZVwAwQE mVwwAwQDsvugAwQCuQR8AwQCuWH0AwQCuXvYMBsEAgACMBUDBQAqAnDAAwUAKgMv AAMFACoDkuAwDQYJKoZIhvcNAQELBQADggEBAH3Q9wid1iccnLbIPdhi3u8auiWZ 9JcY5IMT7UUSWP4kNsAF9b51UWwkAs190gzAhzZMdEgM2AgeF84V6P2t9KpPHyDs nw/inMtZD4MnYYz2tFNUL36PuC9UGQIIPark/Wi8mmn9zMCs39p9B2/sSt+6x8+B WqTrUmcQ2IQ3/mdjJNB3xKEejHGOlmugzEUFSkvJ7sIqwOP2gR8NpDqhldBxS+JG 3ekaPZf/bpFZ7gjSN81UpXaWR1ZI0ixvW3we1Hkentw7ubl6zhJLAMyEPsx18V25 I5x1jfOIbVSc2Jy5Jn3zW/EMIEASdPRjXyV3BmTdTvr2wk5bdlhmiJk3wl0= -----END CERTIFICATE-----Generated at Tue Feb 10 02:48:03 2026 by rpki-client