This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/b84BPERKuOU7XfEOPsJAZAHPSDU.roa File: b84BPERKuOU7XfEOPsJAZAHPSDU.roa (raw, json) Hash identifier: O1yboufDOcbfnri6uWC9z7NwLPBbQ/YoUC4nJjBq2XA= Subject key identifier: 6F:CE:01:3C:44:4A:B8:E5:3B:5D:F1:0E:3E:C2:40:64:01:CF:48:35 Certificate issuer: /CN=0b6ec8ed8fc93f72334f7a974a46bc27d1102923 Certificate serial: 019B78A338EC69369A5AB8265D7878EF3017 Authority key identifier: 0B:6E:C8:ED:8F:C9:3F:72:33:4F:7A:97:4A:46:BC:27:D1:10:29:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C27I7Y_JP3IzT3qXSka8J9EQKSM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/b84BPERKuOU7XfEOPsJAZAHPSDU.roa Signing time: Thu 01 Jan 2026 08:18:41 +0000 ROA not before: Thu 01 Jan 2026 08:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208492 IP address blocks: 5.34.192.0/20 maxlen: 20 5.34.192.0/24 maxlen: 24 5.34.193.0/24 maxlen: 24 5.34.200.0/24 maxlen: 24 5.34.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/C27I7Y_JP3IzT3qXSka8J9EQKSM.crl rsync://rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/C27I7Y_JP3IzT3qXSka8J9EQKSM.mft rsync://rpki.ripe.net/repository/DEFAULT/C27I7Y_JP3IzT3qXSka8J9EQKSM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 20:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:38:ec:69:36:9a:5a:b8:26:5d:78:78:ef:30:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b6ec8ed8fc93f72334f7a974a46bc27d1102923 Validity Not Before: Jan 1 08:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6fce013c444ab8e53b5df10e3ec2406401cf4835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:17:14:c3:ea:2d:d1:64:ca:51:a2:3c:f6:f8: 4e:54:55:78:c7:9b:28:fa:22:64:3c:a7:8a:af:ed: d0:18:62:18:3b:3e:e0:26:2f:b3:06:d7:ae:0c:c3: 96:b8:b7:19:57:7e:f0:ee:b7:c2:99:18:32:e2:5a: 3d:35:49:08:53:63:6a:8e:23:1e:b5:d4:0c:57:2d: 03:00:da:aa:2f:7e:1d:80:1e:a8:bb:6c:e6:e6:e0: 22:dd:ea:eb:06:b5:80:ba:5b:b3:04:80:e1:d0:b0: 45:db:af:de:ca:5c:b6:65:6a:14:f3:1f:71:92:4c: fc:28:94:b4:6e:02:bb:9b:e1:d2:2f:70:65:53:32: 28:a4:6a:e6:f8:4e:b1:ea:51:99:1b:bb:c1:01:7d: c2:9c:52:fa:58:83:64:d2:45:c1:06:11:6b:b4:1c: 12:5c:64:f3:a1:9a:9a:ec:c2:3d:79:6f:79:d3:d5: d7:3a:d2:be:94:67:f8:f1:43:d3:3e:da:8b:f5:41: bc:1b:b6:d1:32:80:84:ff:32:77:2f:15:8d:80:2e: 83:fa:52:74:0f:7c:ed:a8:95:50:28:49:de:61:72: 38:03:51:cc:13:61:b7:dc:d4:c6:77:cf:78:36:af: 09:21:cf:3d:7b:9a:80:d2:84:7b:ac:29:cf:bc:e8: f0:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:CE:01:3C:44:4A:B8:E5:3B:5D:F1:0E:3E:C2:40:64:01:CF:48:35 X509v3 Authority Key Identifier: keyid:0B:6E:C8:ED:8F:C9:3F:72:33:4F:7A:97:4A:46:BC:27:D1:10:29:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C27I7Y_JP3IzT3qXSka8J9EQKSM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/b84BPERKuOU7XfEOPsJAZAHPSDU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/C27I7Y_JP3IzT3qXSka8J9EQKSM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.34.192.0/20 Signature Algorithm: sha256WithRSAEncryption 02:a8:d4:64:5f:73:fa:f5:51:9f:45:06:ba:78:e6:78:8f:92: f2:b8:b3:ad:20:a5:17:9a:13:ef:8a:92:01:8d:68:ce:9b:5f: 62:12:c4:9c:8a:f2:d0:b1:5d:bb:b4:03:b9:06:c8:e7:3a:3c: 34:0b:ee:9d:1a:32:02:d8:77:fc:02:02:21:82:a6:39:9a:5c: 59:2c:10:4d:2e:79:aa:43:ff:0e:c7:b9:f2:fa:9b:a6:2e:98: d3:53:0e:e1:e2:18:f0:09:46:5e:18:85:10:b3:cb:b0:1c:df: 1c:9a:6e:ed:c4:49:b8:f3:21:e1:61:c9:50:66:80:a9:cb:f2: f3:69:d2:39:5e:e8:69:85:9f:2f:0c:94:08:79:1a:8b:3c:b0: 54:0a:fe:cb:dc:8e:e9:b0:f3:ab:e4:8c:b9:9c:a2:9f:4b:65: 0e:45:35:5d:79:7a:ab:c2:c6:17:12:73:99:ec:33:a1:59:0a: fc:ba:23:66:f5:c3:15:f9:a3:52:a5:c3:09:8b:8a:bf:e3:1a: bc:51:e5:68:4b:ae:18:0d:96:e2:a4:11:21:a9:18:f4:94:9d: 44:da:59:8a:56:d0:67:06:23:c6:6f:a8:ce:e1:08:23:0c:13: 1e:dd:f1:36:c1:81:3d:2b:33:99:a2:55:4e:7d:a5:99:3b:4a: 12:22:bb:f4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ozjsaTaaWrgmXXh47zAXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNmVjOGVkOGZjOTNmNzIzMzRmN2E5NzRhNDZiYzI3ZDEx MDI5MjMwHhcNMjYwMTAxMDgxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZmNlMDEzYzQ0NGFiOGU1M2I1ZGYxMGUzZWMyNDA2NDAxY2Y0ODM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxcUw+ot0WTKUaI89vhOVFV4x5so +iJkPKeKr+3QGGIYOz7gJi+zBteuDMOWuLcZV37w7rfCmRgy4lo9NUkIU2NqjiMe tdQMVy0DANqqL34dgB6ou2zm5uAi3errBrWAuluzBIDh0LBF26/eyly2ZWoU8x9x kkz8KJS0bgK7m+HSL3BlUzIopGrm+E6x6lGZG7vBAX3CnFL6WINk0kXBBhFrtBwS XGTzoZqa7MI9eW9509XXOtK+lGf48UPTPtqL9UG8G7bRMoCE/zJ3LxWNgC6D+lJ0 D3ztqJVQKEneYXI4A1HME2G33NTGd894Nq8JIc89e5qA0oR7rCnPvOjwqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG/OATxESrjlO13xDj7CQGQBz0g1MB8GA1UdIwQY MBaAFAtuyO2PyT9yM096l0pGvCfRECkjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzI3STdZX0pQM0l6VDNxWFNrYThKOUVRS1NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zMDQ3NjItNjczMy00YzczLTg1MjMt MDQ3Nzc1MTI5MTQ4LzEvYjg0QlBFUkt1T1U3WGZFT1BzSkFaQUhQU0RVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8zMDQ3NjItNjczMy00YzczLTg1MjMtMDQ3Nzc1MTI5MTQ4 LzEvQzI3STdZX0pQM0l6VDNxWFNrYThKOUVRS1NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEBSLAMA0G CSqGSIb3DQEBCwUAA4IBAQACqNRkX3P69VGfRQa6eOZ4j5LyuLOtIKUXmhPvipIB jWjOm19iEsScivLQsV27tAO5BsjnOjw0C+6dGjIC2Hf8AgIhgqY5mlxZLBBNLnmq Q/8Ox7ny+pumLpjTUw7h4hjwCUZeGIUQs8uwHN8cmm7txEm48yHhYclQZoCpy/Lz adI5XuhphZ8vDJQIeRqLPLBUCv7L3I7psPOr5Iy5nKKfS2UORTVdeXqrwsYXEnOZ 7DOhWQr8uiNm9cMV+aNSpcMJi4q/4xq8UeVoS64YDZbipBEhqRj0lJ1E2lmKVtBn BiPGb6jO4QgjDBMe3fE2wYE9KzOZolVOfaWZO0oSIrv0 -----END CERTIFICATE-----Generated at Mon Feb 2 08:07:35 2026 by rpki-client