This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/rBb-Zp2DN1YryszXlTcGsxUi8kg.roa File: rBb-Zp2DN1YryszXlTcGsxUi8kg.roa (raw, json) Hash identifier: VjavbSWKLaeBoYTEkUDvu679eNkgyVWO00COvRWyhp8= Subject key identifier: AC:16:FE:66:9D:83:37:56:2B:CA:CC:D7:95:37:06:B3:15:22:F2:48 Certificate issuer: /CN=7b89385c0002330b096567b21514d8e1bc09689f Certificate serial: 019B76EB6D4E57D4C8888AF592D218C86D71 Authority key identifier: 7B:89:38:5C:00:02:33:0B:09:65:67:B2:15:14:D8:E1:BC:09:68:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4k4XAACMwsJZWeyFRTY4bwJaJ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/rBb-Zp2DN1YryszXlTcGsxUi8kg.roa Signing time: Thu 01 Jan 2026 00:18:18 +0000 ROA not before: Thu 01 Jan 2026 00:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51580 IP address blocks: 5.172.96.0/22 maxlen: 24 185.143.152.0/22 maxlen: 24 185.212.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.crl rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft rsync://rpki.ripe.net/repository/DEFAULT/e4k4XAACMwsJZWeyFRTY4bwJaJ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:6d:4e:57:d4:c8:88:8a:f5:92:d2:18:c8:6d:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b89385c0002330b096567b21514d8e1bc09689f Validity Not Before: Jan 1 00:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac16fe669d8337562bcaccd7953706b31522f248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f9:fe:e3:63:da:c1:25:df:d7:65:aa:1e:05: c8:b5:69:3e:b1:d5:07:54:bd:ba:7f:f5:3e:7a:9a: d9:82:fc:c7:c4:05:87:36:50:da:57:8f:9a:0c:5a: 39:65:98:9e:a3:bc:f5:c4:94:78:06:47:cf:6e:bf: 35:75:4b:2d:87:36:97:19:31:49:e0:58:4b:7c:5a: ec:46:02:cd:e3:96:27:74:ab:a2:75:d7:18:90:4d: 5c:2c:f6:68:53:ef:7a:35:3a:4f:de:12:b1:23:c3: 3b:e9:0b:d6:c8:17:ff:4a:19:48:ca:d4:81:fa:ff: 1f:e6:19:bf:e8:31:c4:fa:ab:47:ba:a9:b9:94:06: 7a:95:d4:07:1c:10:ba:9b:a0:7f:7d:ab:44:cc:7e: e9:d5:16:e6:65:bd:2e:e7:9b:c4:bb:ff:53:58:02: 42:6a:43:d8:46:3c:58:db:ff:fb:5e:f6:05:9f:fb: 02:d7:3b:cc:db:ca:fb:5a:dd:2b:fc:75:27:b4:2d: 6b:b1:6a:af:c0:a7:d9:4e:67:53:8b:36:ee:a0:e3: 8c:fe:e4:a7:a2:5f:dd:4e:26:62:26:87:84:dd:48: 72:22:88:d0:10:a2:2f:3b:4b:21:bd:dc:91:fc:97: 84:d7:99:bf:5d:d4:a5:e2:6b:90:5e:89:4e:24:9c: 2d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:16:FE:66:9D:83:37:56:2B:CA:CC:D7:95:37:06:B3:15:22:F2:48 X509v3 Authority Key Identifier: keyid:7B:89:38:5C:00:02:33:0B:09:65:67:B2:15:14:D8:E1:BC:09:68:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4k4XAACMwsJZWeyFRTY4bwJaJ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/rBb-Zp2DN1YryszXlTcGsxUi8kg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.172.96.0/22 185.143.152.0/22 185.212.16.0/22 Signature Algorithm: sha256WithRSAEncryption 54:72:a7:0b:48:cc:d0:aa:6f:6b:c4:c5:ae:c6:5e:d2:1a:ee: 28:a1:84:b0:89:47:51:02:a3:52:be:90:f9:38:bb:d3:0c:13: a4:65:7d:de:7a:eb:f2:64:3a:b0:34:46:6d:eb:d9:48:48:80: 3a:45:c6:da:dd:e2:88:9e:01:5b:36:ee:41:c7:35:56:9e:7a: aa:79:5f:4c:1a:d5:f8:3f:22:33:33:dd:4d:52:47:8f:e7:59: 6b:35:24:05:3f:52:16:9b:53:de:fa:ec:78:60:c0:52:00:d5: a8:df:7e:ab:17:40:4f:3b:cd:8d:96:e2:e1:aa:7a:8c:ff:ce: 81:98:19:2c:04:74:bf:3a:e9:5c:f1:7e:71:37:bc:7a:8f:be: 42:68:4c:f5:59:da:25:60:76:f3:98:26:82:be:45:0d:88:cb: 9e:64:a3:d4:29:31:52:09:60:21:f2:75:ba:9f:8b:07:31:5b: a8:48:c3:ee:09:f0:9b:09:19:09:1c:11:3d:dd:f6:05:66:db: ca:bf:4f:04:53:03:08:6a:cb:74:91:f6:38:16:10:28:d5:80: cd:34:16:12:c8:a7:6b:da:77:50:2a:4f:40:8f:56:34:8f:59: e1:2b:2e:3c:b9:0d:f8:e7:40:fd:6e:d8:81:3d:30:87:1d:df: 08:d9:73:b3 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt2621OV9TIiIr1ktIYyG1xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiODkzODVjMDAwMjMzMGIwOTY1NjdiMjE1MTRkOGUxYmMw OTY4OWYwHhcNMjYwMTAxMDAxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzE2ZmU2NjlkODMzNzU2MmJjYWNjZDc5NTM3MDZiMzE1MjJmMjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvn+42PawSXf12WqHgXItWk+sdUH VL26f/U+eprZgvzHxAWHNlDaV4+aDFo5ZZieo7z1xJR4BkfPbr81dUsthzaXGTFJ 4FhLfFrsRgLN45YndKuiddcYkE1cLPZoU+96NTpP3hKxI8M76QvWyBf/ShlIytSB +v8f5hm/6DHE+qtHuqm5lAZ6ldQHHBC6m6B/fatEzH7p1RbmZb0u55vEu/9TWAJC akPYRjxY2//7XvYFn/sC1zvM28r7Wt0r/HUntC1rsWqvwKfZTmdTizbuoOOM/uSn ol/dTiZiJoeE3UhyIojQEKIvO0shvdyR/JeE15m/XdSl4muQXolOJJwt4wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFKwW/madgzdWK8rM15U3BrMVIvJIMB8GA1UdIwQY MBaAFHuJOFwAAjMLCWVnshUU2OG8CWifMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTRrNFhBQUNNd3NKWldleUZSVFk0YndKYUo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8zNzk4MTYtZDZiNC00MmI1LTk1YWQt ZmUyNzkyMWUxNTQyLzEvckJiLVpwMkROMVlyeXN6WGxUY0dzeFVpOGtnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8zNzk4MTYtZDZiNC00MmI1LTk1YWQtZmUyNzkyMWUxNTQy LzEvZTRrNFhBQUNNd3NKWldleUZSVFk0YndKYUo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCBaxgAwQC uY+YAwQCudQQMA0GCSqGSIb3DQEBCwUAA4IBAQBUcqcLSMzQqm9rxMWuxl7SGu4o oYSwiUdRAqNSvpD5OLvTDBOkZX3eeuvyZDqwNEZt69lISIA6Rcba3eKIngFbNu5B xzVWnnqqeV9MGtX4PyIzM91NUkeP51lrNSQFP1IWm1Pe+ux4YMBSANWo336rF0BP O82NluLhqnqM/86BmBksBHS/Oulc8X5xN7x6j75CaEz1WdolYHbzmCaCvkUNiMue ZKPUKTFSCWAh8nW6n4sHMVuoSMPuCfCbCRkJHBE93fYFZtvKv08EUwMIast0kfY4 FhAo1YDNNBYSyKdr2ndQKk9Aj1Y0j1nhKy48uQ3450D9btiBPTCHHd8I2XOz -----END CERTIFICATE-----Generated at Tue Feb 10 00:29:42 2026 by rpki-client