This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/5RoZVTfrYaJl3awhTUEWKmh-mjw.roa File: 5RoZVTfrYaJl3awhTUEWKmh-mjw.roa (raw, json) Hash identifier: vLgOLE/P+EAVb2N+cRPxBkgd+Ontprhm/1obe74MJao= Subject key identifier: E5:1A:19:55:37:EB:61:A2:65:DD:AC:21:4D:41:16:2A:68:7E:9A:3C Certificate issuer: /CN=fb1a810e3ab1964b44ecb3778340b266dbda1126 Certificate serial: 019B7834EBD3F830FEA90D9EF0C6EF4ED7E9 Authority key identifier: FB:1A:81:0E:3A:B1:96:4B:44:EC:B3:77:83:40:B2:66:DB:DA:11:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/5RoZVTfrYaJl3awhTUEWKmh-mjw.roa Signing time: Thu 01 Jan 2026 06:18:12 +0000 ROA not before: Thu 01 Jan 2026 06:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 192.40.76.0/24 maxlen: 24 192.40.77.0/24 maxlen: 24 192.40.78.0/24 maxlen: 24 192.40.79.0/24 maxlen: 24 2a06:f044::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.crl rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:eb:d3:f8:30:fe:a9:0d:9e:f0:c6:ef:4e:d7:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb1a810e3ab1964b44ecb3778340b266dbda1126 Validity Not Before: Jan 1 06:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e51a195537eb61a265ddac214d41162a687e9a3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c2:d4:d7:9c:8d:2b:f4:c1:74:01:b7:c0:d7: af:e3:e9:82:e4:0c:5f:e6:e6:92:62:e8:7f:eb:0c: 48:4f:c3:49:4f:15:d8:a5:f6:b4:0e:21:51:61:57: ac:a0:1a:92:06:d2:29:72:89:d8:71:ad:74:e2:16: 4b:06:fe:47:f7:d0:93:0e:fa:93:6e:8e:a2:04:53: 2c:30:0e:33:d5:49:15:a3:62:cb:55:24:5c:cd:ea: ff:68:eb:a0:52:81:94:11:5d:14:9e:7a:78:eb:6f: 97:01:9d:fe:20:e5:ba:ba:e7:ed:32:28:88:16:ca: cb:58:82:41:ac:c0:1d:c4:cb:db:f4:af:6d:67:c4: 0c:85:cb:e2:76:f6:86:91:e7:cd:9d:7b:e6:ab:58: 2a:cc:37:9a:9d:e5:d3:22:14:56:38:7e:0e:d3:bc: 84:af:ab:54:06:9f:bf:f9:75:d5:a8:6f:d9:95:bc: 59:55:e8:cd:ee:13:85:41:55:17:e7:0b:7e:f5:6a: 5e:74:1f:6f:3c:05:a6:98:30:d0:40:28:b0:8e:13: 9d:a5:f2:2f:6b:35:0e:45:c0:a6:38:98:5b:3b:8e: 07:16:87:2e:23:ba:f1:28:75:a8:f1:c6:f1:36:e9: 6b:e9:14:2d:d0:bd:42:46:72:d8:4c:30:7a:40:8d: ae:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:1A:19:55:37:EB:61:A2:65:DD:AC:21:4D:41:16:2A:68:7E:9A:3C X509v3 Authority Key Identifier: keyid:FB:1A:81:0E:3A:B1:96:4B:44:EC:B3:77:83:40:B2:66:DB:DA:11:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/5RoZVTfrYaJl3awhTUEWKmh-mjw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.40.76.0/22 IPv6: 2a06:f044::/48 Signature Algorithm: sha256WithRSAEncryption 32:f3:d1:f1:32:7c:49:85:8d:ea:6b:77:0a:93:01:7c:45:07: 23:05:aa:3c:00:46:86:a2:e3:35:15:d6:bd:6c:c1:ed:1f:8f: d3:27:51:19:ff:18:04:89:6b:cd:3a:3e:d9:b3:c8:d8:e6:40: 0f:75:e1:36:65:2f:66:9c:e1:5b:2f:cb:4b:15:3c:bf:00:b3: e9:46:f8:33:32:90:3a:6f:b2:25:c6:cb:6d:e7:1a:a9:c0:63: 16:b9:50:68:35:7f:bf:e5:f1:90:b6:ea:c4:10:9f:7c:f2:14: db:69:c4:66:73:53:b6:a1:8b:13:f3:c7:a4:d6:32:18:93:58: d1:0a:7b:ba:d4:15:7d:02:f7:38:14:64:62:9e:7f:c8:4b:08: 11:86:9f:82:87:02:75:bd:3a:42:fd:e7:18:a1:57:1f:84:c8: 2a:5f:eb:32:81:92:9b:8b:4c:5f:97:18:54:c8:5c:da:8c:5d: d0:54:e8:90:fd:c9:54:01:6f:f9:a5:ca:54:3b:32:2d:88:c6: 3d:36:f5:c0:2d:86:6f:8a:d9:0c:94:75:d4:01:21:00:06:86: c6:6b:86:45:ca:1f:4a:27:b2:e4:38:b2:74:bc:8a:b5:54:5c: 98:6d:96:29:fc:a6:7c:d3:86:e4:bc:90:78:c3:3f:c7:f7:a0: b9:6c:50:71 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgISAZt4NOvT+DD+qQ2e8MbvTtfpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiMWE4MTBlM2FiMTk2NGI0NGVjYjM3NzgzNDBiMjY2ZGJk YTExMjYwHhcNMjYwMTAxMDYxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTFhMTk1NTM3ZWI2MWEyNjVkZGFjMjE0ZDQxMTYyYTY4N2U5YTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcLU15yNK/TBdAG3wNev4+mC5Axf 5uaSYuh/6wxIT8NJTxXYpfa0DiFRYVesoBqSBtIpconYca104hZLBv5H99CTDvqT bo6iBFMsMA4z1UkVo2LLVSRczer/aOugUoGUEV0Unnp462+XAZ3+IOW6uuftMiiI FsrLWIJBrMAdxMvb9K9tZ8QMhcvidvaGkefNnXvmq1gqzDeaneXTIhRWOH4O07yE r6tUBp+/+XXVqG/ZlbxZVejN7hOFQVUX5wt+9WpedB9vPAWmmDDQQCiwjhOdpfIv azUORcCmOJhbO44HFocuI7rxKHWo8cbxNulr6RQt0L1CRnLYTDB6QI2ulQIDAQAB o4ICHDCCAhgwHQYDVR0OBBYEFOUaGVU362GiZd2sIU1BFipofpo8MB8GA1UdIwQY MBaAFPsagQ46sZZLROyzd4NAsmbb2hEmMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS14cUJEanF4bGt0RTdMTjNnMEN5WnR2YUVTWS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAvOWQ2MDZlLTA4YTYtNGY0YS1iOTgw LWI1YWJmNDQwZTg5My8xLzVSb1pWVGZyWWFKbDNhd2hUVUVXS21oLW1qdy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMzAvOWQ2MDZlLTA4YTYtNGY0YS1iOTgwLWI1YWJmNDQwZTg5 My8xLzEteHFCRGpxeGxrdEU3TE4zZzBDeVp0dmFFU1kuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBALAKEww DwQCAAIwCQMHACoG8EQAADANBgkqhkiG9w0BAQsFAAOCAQEAMvPR8TJ8SYWN6mt3 CpMBfEUHIwWqPABGhqLjNRXWvWzB7R+P0ydRGf8YBIlrzTo+2bPI2OZAD3XhNmUv ZpzhWy/LSxU8vwCz6Ub4MzKQOm+yJcbLbecaqcBjFrlQaDV/v+XxkLbqxBCffPIU 22nEZnNTtqGLE/PHpNYyGJNY0Qp7utQVfQL3OBRkYp5/yEsIEYafgocCdb06Qv3n GKFXH4TIKl/rMoGSm4tMX5cYVMhc2oxd0FTokP3JVAFv+aXKVDsyLYjGPTb1wC2G b4rZDJR11AEhAAaGxmuGRcofSiey5DiydLyKtVRcmG2WKfymfNOG5LyQeMM/x/eg uWxQcQ== -----END CERTIFICATE-----Generated at Sun Jan 18 16:38:01 2026 by rpki-client