This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/5fUbTKl8FSPc1kSYGwQAsVfb2vQ.roa File: 5fUbTKl8FSPc1kSYGwQAsVfb2vQ.roa (raw, json) Hash identifier: PLRtthNs8hk5vDeIh9r/ACQzulJpBpXJunHHwis/BW4= Subject key identifier: E5:F5:1B:4C:A9:7C:15:23:DC:D6:44:98:1B:04:00:B1:57:DB:DA:F4 Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519 Certificate serial: 019B7EA480C7F3657432DDC9E474928BEA09 Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/5fUbTKl8FSPc1kSYGwQAsVfb2vQ.roa Signing time: Fri 02 Jan 2026 12:17:48 +0000 ROA not before: Fri 02 Jan 2026 12:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12874 IP address blocks: 37.153.135.0/24 maxlen: 24 89.39.200.0/23 maxlen: 23 89.39.200.0/24 maxlen: 24 89.43.192.0/24 maxlen: 24 185.36.72.0/22 maxlen: 22 193.169.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:80:c7:f3:65:74:32:dd:c9:e4:74:92:8b:ea:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519 Validity Not Before: Jan 2 12:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e5f51b4ca97c1523dcd644981b0400b157dbdaf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ad:38:e9:b0:ad:28:04:7c:9b:69:e4:ef:32: 41:98:46:2a:a0:ad:7e:43:e0:11:08:8d:33:65:e1: d0:57:f4:71:fd:1b:12:f6:cd:89:fa:67:ee:0a:46: 08:8a:51:0b:b6:4f:84:d4:9b:43:16:34:69:c0:af: 50:ac:71:98:0f:1c:1b:9a:9e:50:d5:d0:51:24:a0: 3e:b8:9f:c4:41:97:90:f3:5f:df:61:bb:df:58:b3: 1e:50:9b:e0:51:75:68:5f:92:12:0a:ca:8d:aa:fc: cd:85:71:29:87:76:fe:06:5c:57:bf:2d:93:9c:01: c1:48:02:64:f9:2c:e5:85:e2:b4:2e:b0:38:44:2a: 98:70:93:7e:55:84:96:05:86:17:c5:34:90:c2:0c: 9d:42:ae:5c:e5:81:24:15:f5:aa:a4:21:77:54:bf: 9c:15:c8:b3:9b:21:6f:ec:b0:f8:17:fe:7c:db:3e: df:35:92:43:75:1a:18:06:a0:49:16:ed:22:43:b3: 88:2c:f1:cf:a3:63:83:2c:16:47:2f:24:63:13:f6: 38:a0:aa:e4:ba:7d:1f:25:27:32:34:71:4e:93:e9: 8b:ea:da:f5:67:e3:8e:e6:74:bd:8e:14:9f:9b:d3: b6:c6:29:91:f8:07:08:e0:99:52:e9:d6:8f:9a:ae: 74:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:F5:1B:4C:A9:7C:15:23:DC:D6:44:98:1B:04:00:B1:57:DB:DA:F4 X509v3 Authority Key Identifier: keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/5fUbTKl8FSPc1kSYGwQAsVfb2vQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.153.135.0/24 89.39.200.0/23 89.43.192.0/24 185.36.72.0/22 193.169.20.0/24 Signature Algorithm: sha256WithRSAEncryption 28:b8:68:fd:49:8b:e9:85:2c:22:cd:2c:f9:ef:fe:e5:62:d5: 31:e6:b2:e7:da:47:94:08:14:7d:d1:61:28:c8:14:38:3b:c9: d5:de:f7:7c:5f:25:57:19:ac:b8:12:c7:03:76:2e:4d:1a:ba: 7c:fb:8d:37:29:30:83:5f:1f:6d:e5:a1:73:ff:79:95:59:42: b3:6f:7c:53:f3:8b:2d:8a:ce:d2:c8:30:0c:38:d4:ec:b2:e9: b9:30:5b:32:15:70:56:b3:07:49:e4:8f:dc:a4:31:68:3d:12: 05:c1:f8:a8:79:f2:c4:cf:3f:18:8c:61:f8:f4:a9:41:63:e5: 31:4e:76:5d:51:76:31:2b:f0:ee:c3:11:86:ad:7a:48:0e:69: 97:28:f9:db:85:4f:c0:a1:a5:85:9e:ba:ba:ce:de:bf:f8:76: 04:aa:0e:38:a9:b4:95:b8:34:56:45:50:9e:61:97:02:78:67: 7a:50:0b:bd:b6:56:a9:a4:f5:88:95:8e:9a:4c:9a:4c:27:0f: d7:80:53:c0:73:4f:0f:30:d3:08:1b:09:95:76:1c:92:41:3c: b2:09:ad:6d:14:f5:4b:94:32:ed:44:5d:20:b5:c2:e7:e2:51: a7:f9:06:30:eb:d6:69:29:db:2b:c8:23:be:f0:8b:b2:af:29: 2b:23:e7:0c -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt+pIDH82V0Mt3J5HSSi+oJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZmE2NmZiODRhNzgxYTA1ODRmZDBkMWMyZGYzOWJkYTQ3 NjA1MTkwHhcNMjYwMTAyMTIxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNWY1MWI0Y2E5N2MxNTIzZGNkNjQ0OTgxYjA0MDBiMTU3ZGJkYWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6046bCtKAR8m2nk7zJBmEYqoK1+ Q+ARCI0zZeHQV/Rx/RsS9s2J+mfuCkYIilELtk+E1JtDFjRpwK9QrHGYDxwbmp5Q 1dBRJKA+uJ/EQZeQ81/fYbvfWLMeUJvgUXVoX5ISCsqNqvzNhXEph3b+BlxXvy2T nAHBSAJk+SzlheK0LrA4RCqYcJN+VYSWBYYXxTSQwgydQq5c5YEkFfWqpCF3VL+c FcizmyFv7LD4F/582z7fNZJDdRoYBqBJFu0iQ7OILPHPo2ODLBZHLyRjE/Y4oKrk un0fJScyNHFOk+mL6tr1Z+OO5nS9jhSfm9O2ximR+AcI4JlS6daPmq50EwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFOX1G0ypfBUj3NZEmBsEALFX29r0MB8GA1UdIwQY MBaAFGT6ZvuEp4GgWE/Q0cLfOb2kdgUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQt NzQwOGViOGJjNTg2LzEvNWZVYlRLbDhGU1BjMWtTWUd3UUFzVmZiMnZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQtNzQwOGViOGJjNTg2 LzEvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAJZmHAwQB WSfIAwQAWSvAAwQCuSRIAwQAwakUMA0GCSqGSIb3DQEBCwUAA4IBAQAouGj9SYvp hSwizSz57/7lYtUx5rLn2keUCBR90WEoyBQ4O8nV3vd8XyVXGay4EscDdi5NGrp8 +403KTCDXx9t5aFz/3mVWUKzb3xT84stis7SyDAMONTssum5MFsyFXBWswdJ5I/c pDFoPRIFwfioefLEzz8YjGH49KlBY+UxTnZdUXYxK/DuwxGGrXpIDmmXKPnbhU/A oaWFnrq6zt6/+HYEqg44qbSVuDRWRVCeYZcCeGd6UAu9tlappPWIlY6aTJpMJw/X gFPAc08PMNMIGwmVdhySQTyyCa1tFPVLlDLtRF0gtcLn4lGn+QYw69ZpKdsryCO+ 8IuyrykrI+cM -----END CERTIFICATE-----Generated at Mon Jan 19 14:40:15 2026 by rpki-client