This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/sbdmVuFID9uQRYJtZJ4fWH3G57k.roa File: sbdmVuFID9uQRYJtZJ4fWH3G57k.roa (raw, json) Hash identifier: 9b8Tb0KDChimmsKiC/A+gQbmV4xXpq9nJ9Cvm1zmBBA= Subject key identifier: B1:B7:66:56:E1:48:0F:DB:90:45:82:6D:64:9E:1F:58:7D:C6:E7:B9 Certificate issuer: /CN=33fe80aea100e98c0da5d1ffef98b371d11edda2 Certificate serial: 019B7C7F3B756D4D5AF321715593E48C17BA Authority key identifier: 33:FE:80:AE:A1:00:E9:8C:0D:A5:D1:FF:EF:98:B3:71:D1:1E:DD:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_6ArqEA6YwNpdH_75izcdEe3aI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/sbdmVuFID9uQRYJtZJ4fWH3G57k.roa Signing time: Fri 02 Jan 2026 02:17:51 +0000 ROA not before: Fri 02 Jan 2026 02:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31214 IP address blocks: 5.11.64.0/20 maxlen: 20 31.192.128.0/19 maxlen: 19 37.60.208.0/20 maxlen: 20 83.219.128.0/19 maxlen: 19 91.109.128.0/19 maxlen: 19 109.111.128.0/19 maxlen: 19 141.98.28.0/22 maxlen: 22 141.98.31.0/24 maxlen: 24 178.210.0.0/19 maxlen: 19 185.16.136.0/22 maxlen: 22 185.234.120.0/22 maxlen: 22 185.238.76.0/22 maxlen: 22 185.251.216.0/22 maxlen: 22 193.39.220.0/22 maxlen: 22 194.50.12.0/22 maxlen: 22 213.149.0.0/19 maxlen: 19 2a03:5800::/32 maxlen: 32 2a06:50c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.crl rsync://rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.mft rsync://rpki.ripe.net/repository/DEFAULT/M_6ArqEA6YwNpdH_75izcdEe3aI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:3b:75:6d:4d:5a:f3:21:71:55:93:e4:8c:17:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33fe80aea100e98c0da5d1ffef98b371d11edda2 Validity Not Before: Jan 2 02:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b1b76656e1480fdb9045826d649e1f587dc6e7b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:52:b0:6c:86:47:07:44:a6:68:85:2e:a3:e5: 64:2b:e1:3b:01:ec:36:01:6d:27:1b:33:ce:67:38: 7e:0e:95:89:38:2a:dc:4f:4a:0c:35:e8:b6:bd:ef: 42:bd:9a:b2:06:b1:09:bb:c9:2d:8d:c3:ae:47:58: 98:93:dd:f2:51:27:4a:bd:89:db:56:7e:47:ee:5c: 82:17:a3:25:9d:fe:de:f0:43:94:97:44:10:67:c1: eb:9f:5a:8d:10:ee:06:0d:8b:80:30:dd:0d:8c:ee: 12:da:70:81:20:06:df:b7:e9:bb:6e:d2:aa:12:2b: a0:22:bb:b0:36:13:d0:2f:b8:b8:2e:4d:d8:eb:62: 2b:16:42:88:b3:e0:95:34:bb:d9:7e:d1:47:fd:8e: da:41:8f:e5:78:8a:4a:53:04:d7:fd:58:48:d9:0d: 8a:58:1c:e5:88:76:5c:ec:09:7a:45:bd:8a:ea:c1: e6:c3:14:c7:8f:7a:f7:42:14:48:59:9a:c5:3b:99: 81:df:85:c1:b9:fa:b6:1e:58:46:db:d3:91:35:7b: ee:1d:a7:45:63:d3:87:33:61:78:cd:0c:a9:e4:0a: 69:d1:23:8e:73:ea:97:d8:a6:15:ae:37:d7:f7:94: c6:51:ce:a2:7d:bf:5f:03:ba:9f:b5:ef:42:c8:3d: 7f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:B7:66:56:E1:48:0F:DB:90:45:82:6D:64:9E:1F:58:7D:C6:E7:B9 X509v3 Authority Key Identifier: keyid:33:FE:80:AE:A1:00:E9:8C:0D:A5:D1:FF:EF:98:B3:71:D1:1E:DD:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_6ArqEA6YwNpdH_75izcdEe3aI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/sbdmVuFID9uQRYJtZJ4fWH3G57k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.11.64.0/20 31.192.128.0/19 37.60.208.0/20 83.219.128.0/19 91.109.128.0/19 109.111.128.0/19 141.98.28.0/22 178.210.0.0/19 185.16.136.0/22 185.234.120.0/22 185.238.76.0/22 185.251.216.0/22 193.39.220.0/22 194.50.12.0/22 213.149.0.0/19 IPv6: 2a03:5800::/32 2a06:50c0::/32 Signature Algorithm: sha256WithRSAEncryption 16:58:de:1d:c4:d3:5c:de:aa:1e:fa:43:7f:a7:09:a4:4a:89: 23:0f:4f:e8:6e:e8:0a:4c:0c:7d:7c:7f:c1:58:ab:94:eb:27: 94:b1:62:68:91:9f:4a:25:53:b5:b2:95:6b:56:7a:8f:dc:5c: 02:cf:76:07:36:46:a0:c8:bd:13:68:22:14:34:76:bc:42:dd: 46:9f:b6:34:77:1d:33:94:e0:ea:0d:5c:f9:5f:4f:e8:3f:bb: 68:9d:22:5f:6a:84:9f:9a:17:aa:89:d7:29:a1:cd:c6:2d:1b: 4a:ef:20:97:07:f3:83:50:2b:6c:70:31:24:82:e9:98:6d:dc: f3:12:92:34:fd:ba:ae:5b:25:14:97:32:d9:d8:b8:6b:48:b4: 19:04:d9:d9:8c:4d:9e:47:52:2c:66:8c:c2:c3:fb:d4:11:4c: 33:c3:a0:4d:a2:be:b1:38:76:87:2f:9b:cd:b8:c2:1e:5c:35: 45:d9:33:92:3d:fc:e3:91:16:5b:12:80:75:e3:6d:d2:5f:b9: 4b:0f:a5:d2:96:ae:be:0a:62:fa:d1:c0:28:a1:08:e3:56:cf: 45:2e:b2:3e:22:a2:94:04:56:80:21:ec:c8:8b:96:06:d5:f0: 3e:23:b9:34:9a:71:ed:d2:5f:5d:4d:27:3a:ae:00:ae:94:c3: 57:33:b0:c2 -----BEGIN CERTIFICATE----- MIIFaDCCBFCgAwIBAgISAZt8fzt1bU1a8yFxVZPkjBe6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzZmU4MGFlYTEwMGU5OGMwZGE1ZDFmZmVmOThiMzcxZDEx ZWRkYTIwHhcNMjYwMTAyMDIxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMWI3NjY1NmUxNDgwZmRiOTA0NTgyNmQ2NDllMWY1ODdkYzZlN2I5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlKwbIZHB0SmaIUuo+VkK+E7Aew2 AW0nGzPOZzh+DpWJOCrcT0oMNei2ve9CvZqyBrEJu8ktjcOuR1iYk93yUSdKvYnb Vn5H7lyCF6Mlnf7e8EOUl0QQZ8Hrn1qNEO4GDYuAMN0NjO4S2nCBIAbft+m7btKq EiugIruwNhPQL7i4Lk3Y62IrFkKIs+CVNLvZftFH/Y7aQY/leIpKUwTX/VhI2Q2K WBzliHZc7Al6Rb2K6sHmwxTHj3r3QhRIWZrFO5mB34XBufq2HlhG29ORNXvuHadF Y9OHM2F4zQyp5App0SOOc+qX2KYVrjfX95TGUc6ifb9fA7qfte9CyD1/sQIDAQAB o4ICdDCCAnAwHQYDVR0OBBYEFLG3ZlbhSA/bkEWCbWSeH1h9xue5MB8GA1UdIwQY MBaAFDP+gK6hAOmMDaXR/++Ys3HRHt2iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTV82QXJxRUE2WXdOcGRIXzc1aXpjZEVlM2FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS84MDI1MjUtNWMyYy00NTY0LWJhNWEt NmNkNjU5YWNiZjA3LzEvc2JkbVZ1RklEOXVRUllKdFpKNGZXSDNHNTdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS84MDI1MjUtNWMyYy00NTY0LWJhNWEtNmNkNjU5YWNiZjA3 LzEvTV82QXJxRUE2WXdOcGRIXzc1aXpjZEVlM2FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGJBggrBgEFBQcBBwEB/wR6MHgwYAQCAAEwWgMEBAULQAME BR/AgAMEBCU80AMEBVPbgAMEBVttgAMEBW1vgAMEAo1iHAMEBbLSAAMEArkQiAME ArnqeAMEArnuTAMEArn72AMEAsEn3AMEAsIyDAMEBdWVADAUBAIAAjAOAwUAKgNY AAMFACoGUMAwDQYJKoZIhvcNAQELBQADggEBABZY3h3E01zeqh76Q3+nCaRKiSMP T+hu6ApMDH18f8FYq5TrJ5SxYmiRn0olU7WylWtWeo/cXALPdgc2RqDIvRNoIhQ0 drxC3UaftjR3HTOU4OoNXPlfT+g/u2idIl9qhJ+aF6qJ1ymhzcYtG0rvIJcH84NQ K2xwMSSC6Zht3PMSkjT9uq5bJRSXMtnYuGtItBkE2dmMTZ5HUixmjMLD+9QRTDPD oE2ivrE4docvm824wh5cNUXZM5I9/OORFlsSgHXjbdJfuUsPpdKWrr4KYvrRwCih CONWz0Uusj4iopQEVoAh7MiLlgbV8D4juTSace3SX11NJzquAK6Uw1czsMI= -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:43 2026 by rpki-client