This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2fbba7-ea0e-4089-9727-c33372c9d507/1/5u7r-95wuuMX-2fZHuvG2UHWlXU.roa File: 5u7r-95wuuMX-2fZHuvG2UHWlXU.roa (raw, json) Hash identifier: tBKl8/BRqmf50ldsgxKlxVMabmpWuazrAadJJugrD/I= Subject key identifier: E6:EE:EB:FB:DE:70:BA:E3:17:FB:67:D9:1E:EB:C6:D9:41:D6:95:75 Certificate issuer: /CN=9f36d08a3cd8a42f46a2c96dfd72ed8cee279477 Certificate serial: 019B7F15348F04611D2DB6C50727757986BA Authority key identifier: 9F:36:D0:8A:3C:D8:A4:2F:46:A2:C9:6D:FD:72:ED:8C:EE:27:94:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzbQijzYpC9Goslt_XLtjO4nlHc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2fbba7-ea0e-4089-9727-c33372c9d507/1/5u7r-95wuuMX-2fZHuvG2UHWlXU.roa Signing time: Fri 02 Jan 2026 14:20:54 +0000 ROA not before: Fri 02 Jan 2026 14:20:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50467 IP address blocks: 31.134.48.0/20 maxlen: 20 46.151.16.0/21 maxlen: 21 87.239.168.0/21 maxlen: 21 91.221.88.0/23 maxlen: 23 109.95.112.0/21 maxlen: 21 109.95.144.0/21 maxlen: 21 178.218.224.0/20 maxlen: 20 178.218.228.0/24 maxlen: 24 185.235.76.0/24 maxlen: 24 193.106.208.0/23 maxlen: 23 193.200.133.0/24 maxlen: 24 2a0c:db00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2fbba7-ea0e-4089-9727-c33372c9d507/1/nzbQijzYpC9Goslt_XLtjO4nlHc.crl rsync://rpki.ripe.net/repository/DEFAULT/52/2fbba7-ea0e-4089-9727-c33372c9d507/1/nzbQijzYpC9Goslt_XLtjO4nlHc.mft rsync://rpki.ripe.net/repository/DEFAULT/nzbQijzYpC9Goslt_XLtjO4nlHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:34:8f:04:61:1d:2d:b6:c5:07:27:75:79:86:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f36d08a3cd8a42f46a2c96dfd72ed8cee279477 Validity Not Before: Jan 2 14:20:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e6eeebfbde70bae317fb67d91eebc6d941d69575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a4:95:3a:11:7b:6c:2b:0b:54:91:ce:f5:fa: b1:f0:76:5a:30:eb:7a:35:91:f7:e6:78:92:f3:eb: 41:91:58:a4:8c:45:d2:c5:7b:94:89:b3:4e:8b:ad: 98:a6:b3:c7:41:01:60:0a:88:62:b5:37:de:89:7e: 8f:e0:1f:fb:3f:cc:aa:6b:d3:6d:d8:12:8e:7f:38: d2:af:19:20:e3:5f:9f:17:aa:8b:56:51:73:29:c3: 51:62:1f:e7:99:07:65:90:57:96:a9:06:3e:50:e9: a9:ac:97:88:65:76:58:0b:c8:a4:fa:e8:32:28:37: c8:a1:2f:4c:a6:ca:3a:46:ab:96:4b:84:5b:cd:ac: df:1c:69:e0:24:67:8b:02:18:57:80:98:b7:1e:bc: 94:7f:a6:2e:16:cf:87:50:71:43:82:93:48:b2:54: 22:2d:48:86:1e:55:61:df:e0:06:ec:41:d0:3c:da: 0a:49:d6:a0:91:e8:e1:ec:ba:f1:ba:08:4d:58:09: 61:2c:f9:77:28:cc:d4:b1:58:6f:ff:d1:87:ce:14: 00:e4:91:d5:21:0e:62:e6:a4:e8:11:b2:5b:b4:2a: ce:27:7e:4a:d1:d3:3e:c4:94:ac:31:68:5f:ef:8b: 2c:d8:2f:73:cb:9b:9a:1d:13:d5:aa:e4:cb:0e:ab: 2f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:EE:EB:FB:DE:70:BA:E3:17:FB:67:D9:1E:EB:C6:D9:41:D6:95:75 X509v3 Authority Key Identifier: keyid:9F:36:D0:8A:3C:D8:A4:2F:46:A2:C9:6D:FD:72:ED:8C:EE:27:94:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzbQijzYpC9Goslt_XLtjO4nlHc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2fbba7-ea0e-4089-9727-c33372c9d507/1/5u7r-95wuuMX-2fZHuvG2UHWlXU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2fbba7-ea0e-4089-9727-c33372c9d507/1/nzbQijzYpC9Goslt_XLtjO4nlHc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.134.48.0/20 46.151.16.0/21 87.239.168.0/21 91.221.88.0/23 109.95.112.0/21 109.95.144.0/21 178.218.224.0/20 185.235.76.0/24 193.106.208.0/23 193.200.133.0/24 IPv6: 2a0c:db00::/29 Signature Algorithm: sha256WithRSAEncryption 89:a6:e9:25:fc:9a:b0:3c:11:39:72:52:08:b5:3d:14:ba:c5: 7a:07:1c:31:35:28:bd:d1:e3:ff:e3:56:66:df:c0:08:82:1a: 1b:f0:02:41:44:29:d7:a4:be:a6:f4:6b:6b:6d:a1:19:a6:6a: 63:31:d6:f9:86:ac:4a:77:7d:51:23:77:e7:e9:3d:4d:12:a5: 1c:3d:b6:21:f7:7c:81:93:3a:86:08:3b:83:6d:e7:0c:19:53: 66:11:7a:d7:2f:72:53:57:07:a8:13:84:c2:d3:8c:93:8e:aa: 8e:89:51:00:95:6d:02:22:2c:c0:48:46:dd:df:6d:8f:03:8c: ec:17:cb:ab:9f:1e:e3:64:10:33:44:be:6d:94:d6:ee:0d:4f: 27:21:d1:91:83:f6:80:24:cf:91:27:82:38:7b:8f:b3:d2:45: c0:b2:4e:41:63:89:c1:b1:ea:9c:df:da:da:38:dc:40:15:07: 64:bb:10:04:de:e7:99:df:48:03:44:69:5b:70:e5:f9:50:7e: b0:c9:7c:34:ad:ee:79:c6:50:66:8c:6a:0d:76:60:49:f4:45: 82:cd:f8:d2:8b:20:ab:bf:4b:10:83:96:ee:60:df:ee:2e:c9: 97:4d:56:c3:01:84:69:f0:80:0b:79:19:df:77:bc:67:1f:71: 57:d3:df:fb -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgISAZt/FTSPBGEdLbbFByd1eYa6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMzZkMDhhM2NkOGE0MmY0NmEyYzk2ZGZkNzJlZDhjZWUy Nzk0NzcwHhcNMjYwMTAyMTQyMDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNmVlZWJmYmRlNzBiYWUzMTdmYjY3ZDkxZWViYzZkOTQxZDY5NTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaSVOhF7bCsLVJHO9fqx8HZaMOt6 NZH35niS8+tBkVikjEXSxXuUibNOi62YprPHQQFgCohitTfeiX6P4B/7P8yqa9Nt 2BKOfzjSrxkg41+fF6qLVlFzKcNRYh/nmQdlkFeWqQY+UOmprJeIZXZYC8ik+ugy KDfIoS9Mpso6RquWS4RbzazfHGngJGeLAhhXgJi3HryUf6YuFs+HUHFDgpNIslQi LUiGHlVh3+AG7EHQPNoKSdagkejh7LrxughNWAlhLPl3KMzUsVhv/9GHzhQA5JHV IQ5i5qToEbJbtCrOJ35K0dM+xJSsMWhf74ss2C9zy5uaHRPVquTLDqsvmQIDAQAB o4ICTjCCAkowHQYDVR0OBBYEFObu6/vecLrjF/tn2R7rxtlB1pV1MB8GA1UdIwQY MBaAFJ820Io82KQvRqLJbf1y7YzuJ5R3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnpiUWlqellwQzlHb3NsdF9YTHRqTzRubEhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8yZmJiYTctZWEwZS00MDg5LTk3Mjct YzMzMzcyYzlkNTA3LzEvNXU3ci05NXd1dU1YLTJmWkh1dkcyVUhXbFhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi8yZmJiYTctZWEwZS00MDg5LTk3MjctYzMzMzcyYzlkNTA3 LzEvbnpiUWlqellwQzlHb3NsdF9YTHRqTzRubEhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGQGCCsGAQUFBwEHAQH/BFUwUzBCBAIAATA8AwQEH4YwAwQD LpcQAwQDV++oAwQBW91YAwQDbV9wAwQDbV+QAwQEstrgAwQAuetMAwQBwWrQAwQA wciFMA0EAgACMAcDBQMqDNsAMA0GCSqGSIb3DQEBCwUAA4IBAQCJpukl/JqwPBE5 clIItT0UusV6BxwxNSi90eP/41Zm38AIghob8AJBRCnXpL6m9GtrbaEZpmpjMdb5 hqxKd31RI3fn6T1NEqUcPbYh93yBkzqGCDuDbecMGVNmEXrXL3JTVweoE4TC04yT jqqOiVEAlW0CIizASEbd322PA4zsF8urnx7jZBAzRL5tlNbuDU8nIdGRg/aAJM+R J4I4e4+z0kXAsk5BY4nBseqc39raONxAFQdkuxAE3ueZ30gDRGlbcOX5UH6wyXw0 re55xlBmjGoNdmBJ9EWCzfjSiyCrv0sQg5buYN/uLsmXTVbDAYRp8IALeRnfd7xn H3FX09/7 -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:41 2026 by rpki-client