This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/f69K1aG7WjoLOs2Y1pAtNPdEc1U.roa File: f69K1aG7WjoLOs2Y1pAtNPdEc1U.roa (raw, json) Hash identifier: cGXoJfZUx/B5ZqQ+rwCKHOTNtBGcpBtjUB50pxeKDJw= Subject key identifier: 7F:AF:4A:D5:A1:BB:5A:3A:0B:3A:CD:98:D6:90:2D:34:F7:44:73:55 Certificate issuer: /CN=301a648725ee26a460cb9b1cbcd9c9c832c449af Certificate serial: 019B7A5B7B3D76FC06AF1C4CCD1B9A6264C1 Authority key identifier: 30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/f69K1aG7WjoLOs2Y1pAtNPdEc1U.roa Signing time: Thu 01 Jan 2026 16:19:34 +0000 ROA not before: Thu 01 Jan 2026 16:19:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57395 IP address blocks: 5.183.48.0/22 maxlen: 22 89.207.153.0/24 maxlen: 24 176.98.160.0/24 maxlen: 24 176.98.161.0/24 maxlen: 24 176.98.162.0/24 maxlen: 24 176.98.163.0/24 maxlen: 24 176.98.164.0/24 maxlen: 24 176.98.165.0/24 maxlen: 24 176.98.166.0/24 maxlen: 24 176.98.167.0/24 maxlen: 24 185.181.168.0/24 maxlen: 24 185.181.169.0/24 maxlen: 24 185.181.170.0/24 maxlen: 24 185.181.171.0/24 maxlen: 24 185.254.0.0/24 maxlen: 24 185.254.1.0/24 maxlen: 24 193.150.64.0/24 maxlen: 24 2a0b:33c0:1::/48 maxlen: 48 2a0b:33c0:2::/48 maxlen: 48 2a0b:33c0:3::/48 maxlen: 48 2a0b:33c0:6::/48 maxlen: 48 2a0b:33c0:10::/48 maxlen: 48 2a0b:33c0:50::/48 maxlen: 48 2a0b:33c0:51::/48 maxlen: 48 2a0b:33c0:107::/48 maxlen: 48 2a0b:33c0:112::/48 maxlen: 48 2a0b:33c0:113::/48 maxlen: 48 2a0b:33c0:114::/48 maxlen: 48 2a0b:33c0:117::/48 maxlen: 48 2a0b:33c0:118::/48 maxlen: 48 2a0e:d200::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:7b:3d:76:fc:06:af:1c:4c:cd:1b:9a:62:64:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=301a648725ee26a460cb9b1cbcd9c9c832c449af Validity Not Before: Jan 1 16:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7faf4ad5a1bb5a3a0b3acd98d6902d34f7447355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:6b:aa:09:5c:eb:2a:e7:7b:57:33:d8:a4:94: 86:4f:91:7e:f4:ef:aa:84:5e:13:06:fb:d1:74:39: a1:7a:8c:24:b9:a4:a8:73:03:90:2d:14:84:30:5a: d0:be:a2:dd:4a:50:11:43:98:35:1d:6a:73:88:86: f5:ef:ad:af:74:33:77:66:32:83:31:67:46:7b:e0: 25:19:58:d8:6a:f1:34:72:2d:90:0f:83:9d:eb:a0: 93:be:02:2d:b8:e7:6c:68:14:e0:38:82:97:4d:bc: 85:43:13:c5:b9:96:7b:21:a1:2e:06:ae:d8:1e:c2: 7c:59:71:34:01:46:b7:07:5c:4e:d9:b8:e6:0f:ad: 63:70:aa:5f:bb:0a:83:5f:f9:e8:41:b0:96:aa:0c: 90:dc:42:7a:d1:69:2f:e8:e3:4a:bf:b6:da:9d:7d: 1a:00:81:9d:14:4e:e7:f5:f4:06:60:38:02:ac:22: 7a:45:74:bd:aa:42:f9:e6:1a:c1:89:b9:8b:1f:f8: a1:37:fb:1b:7b:73:97:51:75:d6:8d:2e:d2:99:37: 16:09:e0:a1:b2:86:80:83:11:6d:d2:4e:ab:4e:48: 98:69:d6:dd:49:13:a0:13:77:67:90:14:8a:53:d9: 87:f2:56:b3:e9:93:f1:12:2a:7f:cb:f2:9e:72:bb: ba:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:AF:4A:D5:A1:BB:5A:3A:0B:3A:CD:98:D6:90:2D:34:F7:44:73:55 X509v3 Authority Key Identifier: keyid:30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/f69K1aG7WjoLOs2Y1pAtNPdEc1U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.183.48.0/22 89.207.153.0/24 176.98.160.0/21 185.181.168.0/22 185.254.0.0/23 193.150.64.0/24 IPv6: 2a0b:33c0:1::-2a0b:33c0:3:ffff:ffff:ffff:ffff:ffff 2a0b:33c0:6::/48 2a0b:33c0:10::/48 2a0b:33c0:50::/47 2a0b:33c0:107::/48 2a0b:33c0:112::-2a0b:33c0:114:ffff:ffff:ffff:ffff:ffff 2a0b:33c0:117::-2a0b:33c0:118:ffff:ffff:ffff:ffff:ffff 2a0e:d200::/29 Signature Algorithm: sha256WithRSAEncryption bf:38:1a:1e:4d:1e:1f:a1:6a:a0:47:be:87:37:3c:35:3e:34: 10:00:2c:17:19:17:66:84:2f:22:20:68:e9:2c:96:66:66:02: c8:fd:5b:50:59:88:60:2d:75:1b:6b:c2:6e:b1:7d:46:5d:d6: ff:c8:9a:c3:d5:73:b5:2a:d3:68:bf:85:a4:5f:11:d4:ab:54: 38:6a:93:48:ae:13:51:a0:12:0b:1d:36:51:0d:43:1a:60:0c: 65:ce:0f:46:b1:36:70:03:04:ff:18:8e:64:60:00:7e:ec:65: e5:90:83:3e:13:7d:f6:05:cd:49:19:eb:67:f5:fc:3c:d1:44: ba:9e:58:54:98:96:fd:bf:be:94:92:9e:bc:14:00:c9:4d:7a: 25:d6:52:a2:9b:76:e6:62:71:e1:db:f6:5a:7f:a9:c7:0b:f7: e0:0b:4a:3c:1d:c2:3b:d9:16:d8:e8:1b:26:a4:53:f0:9a:92: 10:2a:a3:b7:59:b1:7a:c2:1c:e7:02:79:08:14:8a:12:9d:bc: 17:02:12:70:e8:37:ec:b4:c4:99:b6:26:ee:d9:80:25:99:da: df:13:d0:bb:ac:6b:e7:de:07:1c:c4:7c:c4:44:47:6a:73:f2: ad:da:88:e3:2e:7a:cf:59:1b:2a:4b:cb:a6:78:2b:8f:a1:01: 5e:70:ca:33 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt6W3s9dvwGrxxMzRuaYmTBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwMWE2NDg3MjVlZTI2YTQ2MGNiOWIxY2JjZDljOWM4MzJj NDQ5YWYwHhcNMjYwMTAxMTYxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZmFmNGFkNWExYmI1YTNhMGIzYWNkOThkNjkwMmQzNGY3NDQ3MzU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGuqCVzrKud7VzPYpJSGT5F+9O+q hF4TBvvRdDmheowkuaSocwOQLRSEMFrQvqLdSlARQ5g1HWpziIb1762vdDN3ZjKD MWdGe+AlGVjYavE0ci2QD4Od66CTvgItuOdsaBTgOIKXTbyFQxPFuZZ7IaEuBq7Y HsJ8WXE0AUa3B1xO2bjmD61jcKpfuwqDX/noQbCWqgyQ3EJ60Wkv6ONKv7banX0a AIGdFE7n9fQGYDgCrCJ6RXS9qkL55hrBibmLH/ihN/sbe3OXUXXWjS7SmTcWCeCh soaAgxFt0k6rTkiYadbdSROgE3dnkBSKU9mH8laz6ZPxEip/y/Kecru6BwIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFH+vStWhu1o6CzrNmNaQLTT3RHNVMB8GA1UdIwQY MBaAFDAaZIcl7iakYMubHLzZycgyxEmvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUJwa2h5WHVKcVJneTVzY3ZObkp5RExFU2E4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8wMjRmMGYtMjBjNS00ODI4LWIzMzIt YTViMmQwOWUwNWNmLzEvZjY5SzFhRzdXam9MT3MyWTFwQXROUGRFYzFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS8wMjRmMGYtMjBjNS00ODI4LWIzMzItYTViMmQwOWUwNWNm LzEvTUJwa2h5WHVKcVJneTVzY3ZObkp5RExFU2E4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGuBggrBgEFBQcBBwEB/wSBnjCBmzAqBAIAATAkAwQCBbcw AwQAWc+ZAwQDsGKgAwQCubWoAwQBuf4AAwQAwZZAMG0EAgACMGcwEgMHACoLM8AA AQMHAioLM8AAAAMHACoLM8AABgMHACoLM8AAEAMHASoLM8AAUAMHACoLM8ABBzAS AwcBKgszwAESAwcAKgszwAEUMBIDBwAqCzPAARcDBwAqCzPAARgDBQMqDtIAMA0G CSqGSIb3DQEBCwUAA4IBAQC/OBoeTR4foWqgR76HNzw1PjQQACwXGRdmhC8iIGjp LJZmZgLI/VtQWYhgLXUba8JusX1GXdb/yJrD1XO1KtNov4WkXxHUq1Q4apNIrhNR oBILHTZRDUMaYAxlzg9GsTZwAwT/GI5kYAB+7GXlkIM+E332Bc1JGetn9fw80US6 nlhUmJb9v76Ukp68FADJTXol1lKim3bmYnHh2/Zaf6nHC/fgC0o8HcI72RbY6Bsm pFPwmpIQKqO3WbF6whznAnkIFIoSnbwXAhJw6DfstMSZtibu2YAlmdrfE9C7rGvn 3gccxHzEREdqc/Kt2ojjLnrPWRsqS8umeCuPoQFecMoz -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:13 2026 by rpki-client