This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/u73VKktNNDp99ZZ8-aw2FkAHHqE.roa File: u73VKktNNDp99ZZ8-aw2FkAHHqE.roa (raw, json) Hash identifier: 50jFlydOYBg1FIR0dL8Ur0REyQFfT4z/eOZDEpcxAyc= Subject key identifier: BB:BD:D5:2A:4B:4D:34:3A:7D:F5:96:7C:F9:AC:36:16:40:07:1E:A1 Certificate issuer: /CN=aac6af0c29bebc7c485cf8001da9f19930ace45d Certificate serial: 019B7834CA9843B57226EEF0D365809C183A Authority key identifier: AA:C6:AF:0C:29:BE:BC:7C:48:5C:F8:00:1D:A9:F1:99:30:AC:E4:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/u73VKktNNDp99ZZ8-aw2FkAHHqE.roa Signing time: Thu 01 Jan 2026 06:18:04 +0000 ROA not before: Thu 01 Jan 2026 06:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199290 IP address blocks: 5.180.248.0/22 maxlen: 22 5.180.248.0/23 maxlen: 23 5.180.248.0/24 maxlen: 24 5.180.249.0/24 maxlen: 24 5.180.250.0/24 maxlen: 24 5.180.251.0/24 maxlen: 24 45.8.64.0/22 maxlen: 22 45.8.64.0/23 maxlen: 23 45.8.64.0/24 maxlen: 24 45.8.65.0/24 maxlen: 24 45.8.66.0/23 maxlen: 23 45.8.66.0/24 maxlen: 24 45.8.67.0/24 maxlen: 24 185.79.4.0/22 maxlen: 24 185.196.16.0/22 maxlen: 24 185.241.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.crl rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:ca:98:43:b5:72:26:ee:f0:d3:65:80:9c:18:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aac6af0c29bebc7c485cf8001da9f19930ace45d Validity Not Before: Jan 1 06:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bbbdd52a4b4d343a7df5967cf9ac361640071ea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e3:e7:c3:bd:8c:de:95:e7:46:27:e5:2b:d7: f8:f1:f1:f2:ac:b9:c4:b1:2b:7e:52:4b:30:3f:3a: d3:19:f7:0e:f9:06:cd:23:3c:d9:7b:28:33:29:98: 12:22:2b:40:a5:d0:26:fd:72:fc:58:da:92:aa:e8: d5:fe:9e:c1:1c:fd:fe:07:32:a0:5f:77:75:3f:a1: 32:0d:de:d1:1b:f1:40:df:0e:2a:86:fc:70:ee:76: af:48:76:b3:0f:28:57:0a:1e:a2:80:f8:fb:36:3b: 83:7f:1f:bd:d3:9f:41:c2:01:85:73:a9:bb:49:84: bf:d2:ca:3e:05:83:8f:71:b4:dd:f7:5c:e1:10:a1: 72:ac:8f:ac:fb:3c:cb:bf:aa:68:9a:eb:bd:66:d9: 8e:9e:ed:9a:b7:95:74:a4:8f:34:12:e6:9a:f2:be: 4a:3a:75:76:3a:c2:3a:6f:51:fe:7e:1a:4b:4f:87: c0:8d:4a:7a:0a:27:2e:9e:f1:07:3c:50:e2:1d:57: 43:98:3a:87:c4:68:dd:bc:20:96:94:97:1c:c5:2d: fa:3c:60:ce:7c:17:0c:0c:02:77:19:a1:61:7d:4b: cc:b7:f3:1c:80:64:91:2c:86:83:05:54:67:c7:4f: d7:b6:35:a2:43:0c:45:a9:da:c3:2a:c1:83:b7:67: 99:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:BD:D5:2A:4B:4D:34:3A:7D:F5:96:7C:F9:AC:36:16:40:07:1E:A1 X509v3 Authority Key Identifier: keyid:AA:C6:AF:0C:29:BE:BC:7C:48:5C:F8:00:1D:A9:F1:99:30:AC:E4:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/u73VKktNNDp99ZZ8-aw2FkAHHqE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.248.0/22 45.8.64.0/22 185.79.4.0/22 185.196.16.0/22 185.241.28.0/22 Signature Algorithm: sha256WithRSAEncryption 72:6d:07:ca:84:c9:46:eb:25:ea:68:58:46:b8:e0:b3:0e:da: a2:65:ac:48:9b:23:b7:ce:08:60:39:05:cc:a9:1c:1e:17:07: 8e:6b:c3:4e:09:2f:05:2a:f6:1f:31:84:77:b2:de:78:7d:ac: da:97:72:91:81:a1:e9:1e:6e:94:82:e8:67:32:50:92:73:44: c7:db:c1:72:e3:b5:cd:28:25:a6:91:c1:93:46:90:67:c1:8b: ed:b2:02:f2:e7:17:d7:5e:3b:ed:67:4d:ef:d0:f9:49:1f:52: 4c:78:d2:ff:b2:c9:b4:20:e3:20:45:ac:9b:d1:59:57:58:65: 92:ad:c5:36:85:6b:a9:a6:53:53:bf:5d:76:20:c0:3f:ec:94: db:03:15:33:64:d4:c7:e1:02:e7:d2:0a:6c:21:f6:d3:96:eb: 73:ba:0e:38:2d:c1:0f:f9:a2:1c:c3:fe:8f:6a:bf:56:50:42: 9b:23:6b:ca:77:1b:10:72:53:89:b4:81:e1:6e:e8:20:10:50: 02:a9:1b:3d:eb:e2:de:40:e1:15:0b:a9:5c:d4:33:56:52:1c: c2:69:2e:78:12:62:69:6c:80:f1:98:67:9b:eb:d3:81:03:f3: 76:2b:f6:79:3d:2a:c1:1e:7f:30:a0:5e:68:dd:f4:dc:06:2d: 8a:fc:a6:83 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt4NMqYQ7VyJu7w02WAnBg6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhYzZhZjBjMjliZWJjN2M0ODVjZjgwMDFkYTlmMTk5MzBh Y2U0NWQwHhcNMjYwMTAxMDYxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYmJkZDUyYTRiNGQzNDNhN2RmNTk2N2NmOWFjMzYxNjQwMDcxZWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuPnw72M3pXnRiflK9f48fHyrLnE sSt+UkswPzrTGfcO+QbNIzzZeygzKZgSIitApdAm/XL8WNqSqujV/p7BHP3+BzKg X3d1P6EyDd7RG/FA3w4qhvxw7navSHazDyhXCh6igPj7NjuDfx+9059BwgGFc6m7 SYS/0so+BYOPcbTd91zhEKFyrI+s+zzLv6pomuu9ZtmOnu2at5V0pI80Euaa8r5K OnV2OsI6b1H+fhpLT4fAjUp6CicunvEHPFDiHVdDmDqHxGjdvCCWlJccxS36PGDO fBcMDAJ3GaFhfUvMt/McgGSRLIaDBVRnx0/XtjWiQwxFqdrDKsGDt2eZwQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFLu91SpLTTQ6ffWWfPmsNhZABx6hMB8GA1UdIwQY MBaAFKrGrwwpvrx8SFz4AB2p8ZkwrORdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXNhdkRDbS12SHhJWFBnQUhhbnhtVENzNUYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9mOGM0NDUtMGFhYi00MDg3LWEwZDMt OTM0NzU5MTkxMGE4LzEvdTczVktrdE5ORHA5OVpaOC1hdzJGa0FISHFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9mOGM0NDUtMGFhYi00MDg3LWEwZDMtOTM0NzU5MTkxMGE4 LzEvcXNhdkRDbS12SHhJWFBnQUhhbnhtVENzNUYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCBbT4AwQC LQhAAwQCuU8EAwQCucQQAwQCufEcMA0GCSqGSIb3DQEBCwUAA4IBAQBybQfKhMlG 6yXqaFhGuOCzDtqiZaxImyO3zghgOQXMqRweFweOa8NOCS8FKvYfMYR3st54faza l3KRgaHpHm6UguhnMlCSc0TH28Fy47XNKCWmkcGTRpBnwYvtsgLy5xfXXjvtZ03v 0PlJH1JMeNL/ssm0IOMgRayb0VlXWGWSrcU2hWupplNTv112IMA/7JTbAxUzZNTH 4QLn0gpsIfbTlutzug44LcEP+aIcw/6Par9WUEKbI2vKdxsQclOJtIHhbuggEFAC qRs96+LeQOEVC6lc1DNWUhzCaS54EmJpbIDxmGeb69OBA/N2K/Z5PSrBHn8woF5o 3fTcBi2K/KaD -----END CERTIFICATE-----Generated at Tue Feb 10 01:15:47 2026 by rpki-client