This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/b5rSVSE86TGLka-C9Y6AISDjJwY.roa File: b5rSVSE86TGLka-C9Y6AISDjJwY.roa (raw, json) Hash identifier: 0t2RVqp+17d/DpuBSPwdIacfG2COXwMxK/FmGDoAc0c= Subject key identifier: 6F:9A:D2:55:21:3C:E9:31:8B:91:AF:82:F5:8E:80:21:20:E3:27:06 Certificate issuer: /CN=f4460d6554d581ebb80e39e45015cd7d36d93f66 Certificate serial: 019B7E38C725B33DC666D3F14562D5CC8BFA Authority key identifier: F4:46:0D:65:54:D5:81:EB:B8:0E:39:E4:50:15:CD:7D:36:D9:3F:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/b5rSVSE86TGLka-C9Y6AISDjJwY.roa Signing time: Fri 02 Jan 2026 10:20:08 +0000 ROA not before: Fri 02 Jan 2026 10:20:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2535 IP address blocks: 149.182.216.0/23 maxlen: 23 149.182.216.0/24 maxlen: 24 149.182.217.0/24 maxlen: 24 149.184.142.0/23 maxlen: 23 149.184.142.0/24 maxlen: 24 149.184.143.0/24 maxlen: 24 149.184.144.0/23 maxlen: 23 149.184.144.0/24 maxlen: 24 149.184.145.0/24 maxlen: 24 149.184.160.0/20 maxlen: 20 149.184.160.0/21 maxlen: 21 149.184.168.0/21 maxlen: 21 149.184.224.0/19 maxlen: 19 149.184.224.0/20 maxlen: 20 149.184.240.0/20 maxlen: 20 149.185.136.0/24 maxlen: 24 149.185.200.0/24 maxlen: 24 149.189.160.0/20 maxlen: 20 149.189.160.0/21 maxlen: 21 149.189.168.0/21 maxlen: 21 149.189.192.0/21 maxlen: 21 149.189.192.0/22 maxlen: 22 149.189.196.0/22 maxlen: 22 149.195.58.0/23 maxlen: 23 149.195.58.0/24 maxlen: 24 149.195.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.mft rsync://rpki.ripe.net/repository/DEFAULT/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:c7:25:b3:3d:c6:66:d3:f1:45:62:d5:cc:8b:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4460d6554d581ebb80e39e45015cd7d36d93f66 Validity Not Before: Jan 2 10:20:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f9ad255213ce9318b91af82f58e802120e32706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:48:71:05:15:db:3e:07:28:82:c9:2c:28:e5: 05:70:50:9c:1c:b7:04:67:45:fd:34:73:42:53:2b: ce:e1:b1:4c:0f:0f:e2:0f:4f:58:66:e9:42:97:94: 2c:87:33:8a:36:97:ab:06:65:1f:53:12:33:38:da: 5d:d1:5a:ce:e7:da:80:00:72:d1:21:a1:84:7f:6e: 40:66:76:16:0e:d5:28:2c:c8:cd:c9:28:3e:08:c1: 3d:c3:76:af:77:cf:4a:c6:11:f8:4a:a1:fb:49:57: d7:9c:05:3d:1c:25:dd:0c:e8:5f:88:f2:85:2e:a2: f0:07:bc:98:1a:b6:66:d6:3c:89:c2:8a:c9:9f:e6: d0:8a:55:3e:22:12:ab:43:79:1a:be:ea:0c:69:89: 6f:c2:e4:db:e7:98:d6:38:67:f9:1e:0b:00:aa:35: 4f:77:67:91:cc:ec:04:8c:f0:64:2b:fd:c3:97:c6: c7:2f:ba:c2:44:b1:45:27:9a:35:03:e2:e9:44:31: 52:f1:ba:80:be:1e:20:c0:71:3d:06:44:0e:7b:e6: be:89:7a:d7:36:88:7b:c5:a3:d3:48:58:77:ba:b8: 30:75:fa:0d:aa:c4:5c:09:fb:69:bc:f7:70:98:7e: f9:b0:d9:5a:4e:3e:98:c3:4f:9c:8d:88:12:4f:a5: 27:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:9A:D2:55:21:3C:E9:31:8B:91:AF:82:F5:8E:80:21:20:E3:27:06 X509v3 Authority Key Identifier: keyid:F4:46:0D:65:54:D5:81:EB:B8:0E:39:E4:50:15:CD:7D:36:D9:3F:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/b5rSVSE86TGLka-C9Y6AISDjJwY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.182.216.0/23 149.184.142.0-149.184.145.255 149.184.160.0/20 149.184.224.0/19 149.185.136.0/24 149.185.200.0/24 149.189.160.0/20 149.189.192.0/21 149.195.58.0/23 Signature Algorithm: sha256WithRSAEncryption 74:4d:5e:aa:f1:8e:ae:eb:18:14:a7:cd:42:17:56:cf:b2:f9: d0:1f:4d:ea:a5:c3:7c:31:c6:aa:09:10:72:42:92:37:27:5b: 40:54:6a:40:4f:04:3c:ca:a2:17:3b:d6:0f:63:3f:ea:bb:00: a2:aa:f5:b3:1d:e6:8d:58:6d:c2:8b:b3:10:0e:d2:42:82:1b: 45:0d:88:d0:14:63:c8:2a:8c:9c:e2:0d:69:74:07:9d:38:9d: e2:f9:68:1e:31:e7:41:5a:9b:27:c1:8a:d0:29:be:9f:fe:1d: 86:ca:83:05:ec:00:76:a6:93:b0:f4:92:6a:ef:4b:04:4b:6b: 2d:ac:e5:81:60:2f:5d:40:dc:b5:58:0a:23:f7:c5:f3:54:53: c9:00:52:53:c7:c7:df:88:cd:3c:0f:d0:be:4c:5c:b1:ef:32: aa:3c:c5:16:43:f9:25:ca:24:08:0d:c2:80:16:d0:8c:d9:46: 4e:b5:c6:79:d8:20:fd:f2:77:58:69:2a:94:2f:61:71:be:c0: c4:5e:b4:84:00:f8:23:95:cd:3e:8d:88:57:6a:94:14:25:ab: 12:7a:dc:7c:5e:57:b9:d9:52:5f:37:ab:07:66:f8:02:99:b0: 21:5b:55:ee:64:af:61:de:a7:16:fe:95:d0:5d:64:bb:32:ec: b8:98:f3:68 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgISAZt+OMclsz3GZtPxRWLVzIv6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0NDYwZDY1NTRkNTgxZWJiODBlMzllNDUwMTVjZDdkMzZk OTNmNjYwHhcNMjYwMTAyMTAyMDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjlhZDI1NTIxM2NlOTMxOGI5MWFmODJmNThlODAyMTIwZTMyNzA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEhxBRXbPgcogsksKOUFcFCcHLcE Z0X9NHNCUyvO4bFMDw/iD09YZulCl5QshzOKNperBmUfUxIzONpd0VrO59qAAHLR IaGEf25AZnYWDtUoLMjNySg+CME9w3avd89KxhH4SqH7SVfXnAU9HCXdDOhfiPKF LqLwB7yYGrZm1jyJworJn+bQilU+IhKrQ3kavuoMaYlvwuTb55jWOGf5HgsAqjVP d2eRzOwEjPBkK/3Dl8bHL7rCRLFFJ5o1A+LpRDFS8bqAvh4gwHE9BkQOe+a+iXrX Noh7xaPTSFh3urgwdfoNqsRcCftpvPdwmH75sNlaTj6Yw0+cjYgST6UnTQIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFG+a0lUhPOkxi5GvgvWOgCEg4ycGMB8GA1UdIwQY MBaAFPRGDWVU1YHruA455FAVzX022T9mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUVZTlpWVFZnZXU0RGpua1VCWE5mVGJaUDJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi80NTVmNTYtMWU2Zi00NjdkLWI3MTEt ZWJkZjM4YjAwOTVjLzEvYjVyU1ZTRTg2VEdMa2EtQzlZNkFJU0RqSndZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi80NTVmNTYtMWU2Zi00NjdkLWI3MTEtZWJkZjM4YjAwOTVj LzEvOUVZTlpWVFZnZXU0RGpua1VCWE5mVGJaUDJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQBlbbYMAwD BAGVuI4DBAGVuJADBASVuKADBAWVuOADBACVuYgDBACVucgDBASVvaADBAOVvcAD BAGVwzowDQYJKoZIhvcNAQELBQADggEBAHRNXqrxjq7rGBSnzUIXVs+y+dAfTeql w3wxxqoJEHJCkjcnW0BUakBPBDzKohc71g9jP+q7AKKq9bMd5o1YbcKLsxAO0kKC G0UNiNAUY8gqjJziDWl0B504neL5aB4x50FamyfBitApvp/+HYbKgwXsAHamk7D0 kmrvSwRLay2s5YFgL11A3LVYCiP3xfNUU8kAUlPHx9+IzTwP0L5MXLHvMqo8xRZD +SXKJAgNwoAW0IzZRk61xnnYIP3yd1hpKpQvYXG+wMRetIQA+COVzT6NiFdqlBQl qxJ63HxeV7nZUl83qwdm+AKZsCFbVe5kr2Hepxb+ldBdZLsy7LiY82g= -----END CERTIFICATE-----Generated at Sun Jan 11 21:28:58 2026 by rpki-client