This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/1-rvXWbfutRyQsFLB2O2HcSydvn8.roa File: 1-rvXWbfutRyQsFLB2O2HcSydvn8.roa (raw, json) Hash identifier: G/bEqZr33OdbdPx/abXyN5kc0kY5EzztDY6k+nCMKOc= Subject key identifier: FA:BB:D7:59:B7:EE:B5:1C:90:B0:52:C1:D8:ED:87:71:2C:9D:BE:7F Certificate issuer: /CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b Certificate serial: 019B79EC8B0743082E19E9218B0D5AC81611 Authority key identifier: 53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/1-rvXWbfutRyQsFLB2O2HcSydvn8.roa Signing time: Thu 01 Jan 2026 14:18:23 +0000 ROA not before: Thu 01 Jan 2026 14:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1299 IP address blocks: 46.16.192.0/21 maxlen: 24 85.118.192.0/21 maxlen: 24 87.120.72.0/24 maxlen: 24 87.120.73.0/24 maxlen: 24 87.120.74.0/24 maxlen: 24 87.120.75.0/24 maxlen: 24 87.120.76.0/24 maxlen: 24 87.120.77.0/24 maxlen: 24 87.120.78.0/24 maxlen: 24 87.120.79.0/24 maxlen: 24 91.92.8.0/24 maxlen: 24 91.92.9.0/24 maxlen: 24 91.92.10.0/24 maxlen: 24 91.92.11.0/24 maxlen: 24 91.92.12.0/24 maxlen: 24 91.92.13.0/24 maxlen: 24 91.92.14.0/24 maxlen: 24 91.92.15.0/24 maxlen: 24 93.123.88.0/24 maxlen: 24 93.123.89.0/24 maxlen: 24 93.123.90.0/24 maxlen: 24 93.123.91.0/24 maxlen: 24 93.123.92.0/24 maxlen: 24 93.123.93.0/24 maxlen: 24 93.123.94.0/24 maxlen: 24 93.123.95.0/24 maxlen: 24 94.156.136.0/24 maxlen: 24 94.156.137.0/24 maxlen: 24 94.156.138.0/24 maxlen: 24 94.156.139.0/24 maxlen: 24 94.156.140.0/24 maxlen: 24 94.156.141.0/24 maxlen: 24 94.156.142.0/24 maxlen: 24 94.156.143.0/24 maxlen: 24 149.62.192.0/18 maxlen: 24 185.201.36.0/22 maxlen: 24 193.104.79.0/24 maxlen: 24 193.193.171.0/24 maxlen: 24 193.193.182.0/24 maxlen: 24 193.194.147.0/24 maxlen: 24 193.194.155.0/24 maxlen: 24 194.147.223.0/24 maxlen: 24 2a12:4700::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:8b:07:43:08:2e:19:e9:21:8b:0d:5a:c8:16:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b Validity Not Before: Jan 1 14:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fabbd759b7eeb51c90b052c1d8ed87712c9dbe7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:1f:84:01:24:43:eb:20:8f:fe:2f:90:2e:5b: fc:4c:52:92:88:69:09:4d:13:3f:99:ac:ea:7c:5b: 39:5d:8b:35:c0:01:b8:67:2a:cb:ed:b2:de:dd:94: da:8f:c1:f4:28:89:46:66:e0:2c:ad:ef:c6:25:8b: 14:3f:3a:90:9e:11:87:a6:9a:a9:13:31:a9:cd:8c: d7:58:dd:c7:8b:3c:8b:37:4e:1c:81:04:82:1e:37: b1:1f:ac:c2:5e:21:9c:fb:b8:1a:96:78:5a:7e:97: d6:85:00:f8:28:3d:7a:4b:f2:a5:ec:ff:77:83:a8: 0f:9a:47:ff:d6:ea:81:c4:8a:61:ad:d3:b5:17:0a: 26:ec:35:9f:ca:3f:ac:00:ac:94:33:10:ef:6a:8e: 31:b9:3d:bc:2e:4a:b9:98:e3:20:d3:15:f3:ca:41: df:2d:84:88:da:8a:e6:48:9e:9a:80:ed:7a:4f:ae: 18:39:36:ff:79:73:0f:4a:cb:65:92:69:2e:cb:b5: 8a:fa:a6:4c:d7:67:46:75:40:02:31:4e:61:9b:3f: 43:de:6c:53:35:9d:d9:f4:f0:5e:cb:75:92:14:62: df:31:5b:8b:e1:cd:b1:ee:60:21:4c:fa:76:c8:10: 1a:86:07:ad:30:7d:d3:de:15:25:ee:bc:58:e3:7a: 9a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:BB:D7:59:B7:EE:B5:1C:90:B0:52:C1:D8:ED:87:71:2C:9D:BE:7F X509v3 Authority Key Identifier: keyid:53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/1-rvXWbfutRyQsFLB2O2HcSydvn8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.16.192.0/21 85.118.192.0/21 87.120.72.0/21 91.92.8.0/21 93.123.88.0/21 94.156.136.0/21 149.62.192.0/18 185.201.36.0/22 193.104.79.0/24 193.193.171.0/24 193.193.182.0/24 193.194.147.0/24 193.194.155.0/24 194.147.223.0/24 IPv6: 2a12:4700::/32 Signature Algorithm: sha256WithRSAEncryption 3e:d1:99:1c:6c:24:97:11:af:41:6e:b0:fb:0e:47:7f:43:45: 16:ba:c5:2f:75:cc:de:81:53:b1:f6:28:47:b1:e0:0e:9c:22: 83:4f:10:ad:42:f6:3f:ab:1a:72:a5:38:8d:d2:58:f9:06:ae: b1:d0:bf:b3:fb:e1:65:18:fa:7f:66:4e:49:57:f3:ca:d2:10: 52:09:43:de:9c:2e:74:28:1a:11:35:8f:bf:df:2c:e1:e1:e4: cf:4d:f0:07:bd:8e:4a:95:2a:99:1b:6e:a9:fb:3a:4a:f1:79: f0:0e:40:e5:88:5f:31:c5:0b:eb:b2:56:06:d5:31:d1:d1:bb: ce:3c:30:c8:84:53:b6:6a:6a:53:f1:46:27:95:15:ab:21:14: fc:b6:60:15:b3:a8:ee:a4:91:0d:d9:ac:d0:e5:bc:a4:f2:61: 7a:58:97:40:02:0e:9d:91:b1:6c:50:d1:0a:a1:db:5d:01:62: 38:46:7f:fb:7a:c2:0b:84:e6:46:8d:18:81:90:57:fb:31:ec: d6:60:4a:fa:61:5e:ca:2c:78:54:c2:8c:fe:3a:c1:38:7e:db: 37:03:bb:85:b1:73:bf:b3:0a:28:d3:7a:72:92:67:77:09:f8: 36:e0:16:2b:f3:59:4b:a3:ca:9b:b7:58:b3:d3:f2:de:74:ab: 36:60:59:75 -----BEGIN CERTIFICATE----- MIIFWzCCBEOgAwIBAgISAZt57IsHQwguGekhiw1ayBYRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMzZhMTA2Y2VjZGViYTkyZTBiODBlNWU5YTVjNzg5YmE3 NGM2MmIwHhcNMjYwMTAxMTQxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYWJiZDc1OWI3ZWViNTFjOTBiMDUyYzFkOGVkODc3MTJjOWRiZTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkh+EASRD6yCP/i+QLlv8TFKSiGkJ TRM/mazqfFs5XYs1wAG4ZyrL7bLe3ZTaj8H0KIlGZuAsre/GJYsUPzqQnhGHppqp EzGpzYzXWN3HizyLN04cgQSCHjexH6zCXiGc+7galnhafpfWhQD4KD16S/Kl7P93 g6gPmkf/1uqBxIphrdO1Fwom7DWfyj+sAKyUMxDvao4xuT28Lkq5mOMg0xXzykHf LYSI2ormSJ6agO16T64YOTb/eXMPSstlkmkuy7WK+qZM12dGdUACMU5hmz9D3mxT NZ3Z9PBey3WSFGLfMVuL4c2x7mAhTPp2yBAahgetMH3T3hUl7rxY43qaswIDAQAB o4ICZzCCAmMwHQYDVR0OBBYEFPq711m37rUckLBSwdjth3Esnb5/MB8GA1UdIwQY MBaAFFM2oQbOzeupLguA5emlx4m6dMYrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXphaEJzN042Nmt1QzREbDZhWEhpYnAweGlzLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8yNjY5ZWUtNGJhNy00MTEwLTgzNzAt ZGQ4MDNjNWI4NWRiLzEvMS1ydlhXYmZ1dFJ5UXNGTEIyTzJIY1N5ZHZuOC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNTAvMjY2OWVlLTRiYTctNDExMC04MzcwLWRkODAzYzViODVk Yi8xL1V6YWhCczdONjZrdUM0RGw2YVhIaWJwMHhpcy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjB8BggrBgEFBQcBBwEB/wRtMGswWgQCAAEwVAMEAy4QwAME A1V2wAMEA1d4SAMEA1tcCAMEA117WAMEA16ciAMEBpU+wAMEArnJJAMEAMFoTwME AMHBqwMEAMHBtgMEAMHCkwMEAMHCmwMEAMKT3zANBAIAAjAHAwUAKhJHADANBgkq hkiG9w0BAQsFAAOCAQEAPtGZHGwklxGvQW6w+w5Hf0NFFrrFL3XM3oFTsfYoR7Hg Dpwig08QrUL2P6sacqU4jdJY+QausdC/s/vhZRj6f2ZOSVfzytIQUglD3pwudCga ETWPv98s4eHkz03wB72OSpUqmRtuqfs6SvF58A5A5YhfMcUL67JWBtUx0dG7zjww yIRTtmpqU/FGJ5UVqyEU/LZgFbOo7qSRDdms0OW8pPJheliXQAIOnZGxbFDRCqHb XQFiOEZ/+3rCC4TmRo0YgZBX+zHs1mBK+mFeyix4VMKM/jrBOH7bNwO7hbFzv7MK KNN6cpJndwn4NuAWK/NZS6PKm7dYs9Py3nSrNmBZdQ== -----END CERTIFICATE-----Generated at Wed Jan 21 07:21:59 2026 by rpki-client