This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/2FyZFvB-FVapPyp8OxF8Buhh3yE.roa File: 2FyZFvB-FVapPyp8OxF8Buhh3yE.roa (raw, json) Hash identifier: /qV6LbWkf2GFhmc8pLjxWR0FKBZh68Hu0SYXyVMMG5A= Subject key identifier: D8:5C:99:16:F0:7E:15:56:A9:3F:2A:7C:3B:11:7C:06:E8:61:DF:21 Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7 Certificate serial: 019B7EA58D27FC34F88DAECB03E715ADA3A6 Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/2FyZFvB-FVapPyp8OxF8Buhh3yE.roa Signing time: Fri 02 Jan 2026 12:18:57 +0000 ROA not before: Fri 02 Jan 2026 12:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 5.61.60.0/23 maxlen: 23 5.61.62.0/23 maxlen: 23 45.136.196.0/24 maxlen: 24 45.136.197.0/24 maxlen: 24 45.136.198.0/24 maxlen: 24 45.136.199.0/24 maxlen: 24 176.97.64.0/23 maxlen: 23 176.97.66.0/23 maxlen: 23 176.97.68.0/23 maxlen: 23 176.97.70.0/23 maxlen: 23 176.97.72.0/24 maxlen: 24 176.97.73.0/24 maxlen: 24 176.97.75.0/24 maxlen: 24 176.97.76.0/24 maxlen: 24 176.97.77.0/24 maxlen: 24 176.97.78.0/24 maxlen: 24 185.87.148.0/23 maxlen: 23 185.87.150.0/23 maxlen: 23 185.132.125.0/24 maxlen: 24 188.116.22.0/24 maxlen: 24 195.54.170.0/24 maxlen: 24 195.54.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:8d:27:fc:34:f8:8d:ae:cb:03:e7:15:ad:a3:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7 Validity Not Before: Jan 2 12:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d85c9916f07e1556a93f2a7c3b117c06e861df21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:04:ec:b7:73:c7:3f:10:21:a6:bb:f7:a4:89: 41:dc:24:f2:d6:b7:49:34:b6:a8:6c:e6:2a:6a:be: 1f:52:3d:5e:92:69:eb:3a:c5:44:9b:e4:d3:ab:66: 9c:d1:b7:01:aa:b0:03:c6:85:40:7e:8d:d5:f3:82: b1:34:7e:56:2b:ed:b7:73:88:09:ad:cb:70:af:69: fb:e1:96:62:72:97:d7:98:89:7f:73:ce:ad:a4:a5: 5d:3b:2f:7b:f4:72:24:2e:78:16:d6:ea:23:d2:83: 2b:31:92:d2:9a:ba:66:1a:10:99:e1:bc:99:72:d7: 0a:44:88:56:7a:f7:e4:1f:0c:30:60:f1:05:e0:d1: 0d:84:f3:d6:d8:40:c6:07:79:bd:22:54:ba:5d:6f: f1:db:ed:4d:ab:0a:8d:9d:b6:a9:de:15:59:08:84: b0:55:91:d4:25:b5:99:5f:39:dd:9d:8a:ef:10:28: de:7e:96:24:73:50:b5:34:ce:e5:ac:01:4b:9d:3a: a3:cf:e8:14:3e:38:5a:24:7b:1f:cc:8b:05:d4:74: 53:dc:4e:dd:a9:19:ff:c5:f4:fc:4e:be:99:0b:1b: c7:8d:87:41:5d:3d:e9:04:dd:f5:13:59:73:3f:1c: 0f:7b:3a:28:ac:15:d1:76:14:1e:6e:40:91:7f:0b: 23:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:5C:99:16:F0:7E:15:56:A9:3F:2A:7C:3B:11:7C:06:E8:61:DF:21 X509v3 Authority Key Identifier: keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/2FyZFvB-FVapPyp8OxF8Buhh3yE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.61.60.0/22 45.136.196.0/22 176.97.64.0-176.97.73.255 176.97.75.0-176.97.78.255 185.87.148.0/22 185.132.125.0/24 188.116.22.0/24 195.54.170.0/23 Signature Algorithm: sha256WithRSAEncryption 0d:b4:32:72:03:89:48:43:3b:2c:ec:c3:59:80:74:bd:7a:6e: ec:fb:f2:91:77:6c:d0:b7:13:af:d4:cf:eb:58:68:54:e1:da: 61:41:8c:ea:2e:2d:24:ee:f4:79:00:cb:eb:7e:ad:a1:2e:a2: c7:fe:72:ed:c0:6c:c0:ee:04:53:61:42:db:51:29:61:2e:bf: a9:1f:86:ef:86:a6:c2:32:37:e2:07:79:3b:22:f8:20:61:c7: 58:0e:48:71:99:4f:f7:77:10:43:7f:eb:58:c8:34:bc:af:ca: 84:6f:2a:d0:47:99:e1:e0:28:c8:70:4e:73:ae:8b:05:31:3e: 84:6b:60:1b:97:c8:8d:b7:9c:a4:7e:07:84:ac:11:75:17:43: 81:5a:3f:57:92:ef:d3:f1:97:35:7e:a2:d0:3d:77:eb:31:07: a2:3a:92:d0:90:a6:8a:33:82:c0:2e:ac:ad:a3:16:90:23:5d: 27:85:f3:a2:27:a4:97:ab:81:68:4f:e7:e3:07:d8:0c:b2:76: 6b:cf:10:ba:8e:52:2b:9b:3c:2d:f8:63:bc:86:d8:84:4e:b7: 18:71:f1:54:d8:21:01:13:bd:43:4f:7a:b7:6f:bd:bd:c1:2a: 7f:9b:1e:c0:05:cd:a3:ee:b7:54:8c:6a:a8:85:71:05:e6:31: e7:ea:7e:5c -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgISAZt+pY0n/DT4ja7LA+cVraOmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNGRjMjI1OTVmYzFmNTg4ZmJjNGRkZTA3YzFjMzk0OTk4 ZjMzYTcwHhcNMjYwMTAyMTIxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODVjOTkxNmYwN2UxNTU2YTkzZjJhN2MzYjExN2MwNmU4NjFkZjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQTst3PHPxAhprv3pIlB3CTy1rdJ NLaobOYqar4fUj1ekmnrOsVEm+TTq2ac0bcBqrADxoVAfo3V84KxNH5WK+23c4gJ rctwr2n74ZZicpfXmIl/c86tpKVdOy979HIkLngW1uoj0oMrMZLSmrpmGhCZ4byZ ctcKRIhWevfkHwwwYPEF4NENhPPW2EDGB3m9IlS6XW/x2+1NqwqNnbap3hVZCISw VZHUJbWZXzndnYrvECjefpYkc1C1NM7lrAFLnTqjz+gUPjhaJHsfzIsF1HRT3E7d qRn/xfT8Tr6ZCxvHjYdBXT3pBN31E1lzPxwPezoorBXRdhQebkCRfwsjHQIDAQAB o4ICQzCCAj8wHQYDVR0OBBYEFNhcmRbwfhVWqT8qfDsRfAboYd8hMB8GA1UdIwQY MBaAFBpNwiWV/B9Yj7xN3gfBw5SZjzOnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8wZjEyZjItOGEyYi00MzQ2LWI2YjYt MmI3OGIxOWI1YTg3LzEvMkZ5WkZ2Qi1GVmFwUHlwOE94RjhCdWhoM3lFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8wZjEyZjItOGEyYi00MzQ2LWI2YjYtMmI3OGIxOWI1YTg3 LzEvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDBGBAIAATBAAwQCBT08AwQC LYjEMAwDBAawYUADBAGwYUgwDAMEALBhSwMEALBhTgMEArlXlAMEALmEfQMEALx0 FgMEAcM2qjANBgkqhkiG9w0BAQsFAAOCAQEADbQycgOJSEM7LOzDWYB0vXpu7Pvy kXds0LcTr9TP61hoVOHaYUGM6i4tJO70eQDL636toS6ix/5y7cBswO4EU2FC21Ep YS6/qR+G74amwjI34gd5OyL4IGHHWA5IcZlP93cQQ3/rWMg0vK/KhG8q0EeZ4eAo yHBOc66LBTE+hGtgG5fIjbecpH4HhKwRdRdDgVo/V5Lv0/GXNX6i0D136zEHojqS 0JCmijOCwC6sraMWkCNdJ4Xzoiekl6uBaE/n4wfYDLJ2a88Quo5SK5s8LfhjvIbY hE63GHHxVNghARO9Q096t2+9vcEqf5sewAXNo+63VIxqqIVxBeYx5+p+XA== -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:32 2026 by rpki-client