This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/0BJKSsJW7qiVAHXCjZXJq3R-Kpk.roa File: 0BJKSsJW7qiVAHXCjZXJq3R-Kpk.roa (raw, json) Hash identifier: r7csimlTjHrK6Lrz57cYuylUp8cy5+rV8BLjohqs/qU= Subject key identifier: D0:12:4A:4A:C2:56:EE:A8:95:00:75:C2:8D:95:C9:AB:74:7E:2A:99 Certificate issuer: /CN=a1ea8de31ceca55803cf3af14d4a7279ae8446d0 Certificate serial: 019B7A5B065E04BCFCB0DBAC16F8F0ECA256 Authority key identifier: A1:EA:8D:E3:1C:EC:A5:58:03:CF:3A:F1:4D:4A:72:79:AE:84:46:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/0BJKSsJW7qiVAHXCjZXJq3R-Kpk.roa Signing time: Thu 01 Jan 2026 16:19:04 +0000 ROA not before: Thu 01 Jan 2026 16:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206492 IP address blocks: 5.154.170.0/24 maxlen: 24 45.150.248.0/22 maxlen: 22 185.185.32.0/22 maxlen: 22 185.185.32.0/24 maxlen: 24 194.148.52.0/22 maxlen: 22 2a0b:4d80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.crl rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.mft rsync://rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:06:5e:04:bc:fc:b0:db:ac:16:f8:f0:ec:a2:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ea8de31ceca55803cf3af14d4a7279ae8446d0 Validity Not Before: Jan 1 16:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d0124a4ac256eea8950075c28d95c9ab747e2a99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:7b:4b:b1:29:68:11:ec:5d:85:0a:e2:d4:c5: 2b:9a:16:10:b0:fc:2e:f0:ff:74:05:d8:e6:57:5f: 18:c1:59:1d:59:10:8f:aa:72:d2:4c:e7:6b:93:a2: c2:08:44:0c:ad:d3:86:38:ee:21:8b:78:7a:7c:15: 26:d6:fc:9f:57:51:0c:58:5d:2c:27:69:b8:48:a8: ca:f8:f7:45:77:21:38:f7:4a:28:9b:c5:35:b0:59: 46:c8:a1:8d:54:f9:9c:34:24:54:58:0c:2b:f1:23: 30:02:90:96:e7:10:89:b6:d2:3e:7d:9c:0c:a4:97: 76:61:97:af:e7:e4:d9:c7:5f:58:b1:46:07:4e:c3: 70:47:e2:29:01:02:be:15:0a:82:36:49:64:54:8b: 1e:30:48:14:9a:7e:40:7e:3b:b7:8d:ed:1d:36:c5: 43:54:10:85:8b:b8:53:95:e6:16:40:e9:64:ab:3c: 5b:f3:c4:8b:fe:2d:fd:bd:b5:c5:d4:cd:71:a9:9a: e5:da:61:8d:5d:84:49:22:0b:75:15:8a:3e:1b:fc: 4e:00:e8:90:0a:41:b1:b9:de:e6:d8:a6:13:9a:44: 95:9c:e8:9f:a8:ef:4b:56:b2:67:0a:d8:38:82:25: 26:c6:7f:97:cc:57:a7:10:53:90:c6:34:fd:10:cf: fd:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:12:4A:4A:C2:56:EE:A8:95:00:75:C2:8D:95:C9:AB:74:7E:2A:99 X509v3 Authority Key Identifier: keyid:A1:EA:8D:E3:1C:EC:A5:58:03:CF:3A:F1:4D:4A:72:79:AE:84:46:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/0BJKSsJW7qiVAHXCjZXJq3R-Kpk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.154.170.0/24 45.150.248.0/22 185.185.32.0/22 194.148.52.0/22 IPv6: 2a0b:4d80::/29 Signature Algorithm: sha256WithRSAEncryption 09:cf:5a:2e:1b:85:e2:45:a1:fb:78:0c:0d:9b:20:21:05:bc: 7f:45:2f:76:3b:29:ec:9f:20:f7:bd:eb:99:14:27:0f:a9:13: 1b:86:ab:9e:0f:14:8c:28:d2:c8:89:7f:b7:23:89:92:84:3d: 6c:98:01:3d:55:98:ee:be:9d:9f:50:cc:2e:90:29:c1:0c:c5: a1:84:7d:e5:ed:97:fc:64:cf:f0:c8:32:9a:51:ea:17:71:18: e7:51:ab:bf:ad:ac:33:c9:ea:4a:e8:42:2c:64:f0:86:5a:bd: 3d:a4:9d:2d:42:bd:c5:52:27:04:ac:42:c4:cc:c1:e5:28:10: 89:f0:6c:e6:c0:47:9b:eb:24:d4:45:e0:19:7b:75:5a:be:7d: f0:52:ce:82:53:bb:50:f5:85:ee:b0:fb:b5:1e:1b:e8:88:c8: 73:38:a0:d8:05:f2:3e:07:07:a0:42:bb:dc:35:b2:7e:16:5a: e4:4c:ec:fd:d6:e8:2e:17:09:5b:ad:91:5a:64:27:a8:c5:de: 95:d4:a6:31:2e:da:db:c9:f1:04:94:a1:d8:fb:95:bd:31:64: ac:3a:c2:71:35:3e:dd:26:05:ae:1d:54:0d:73:d2:cd:9b:df: c2:2c:93:bc:ba:13:13:c0:97:76:a9:86:d1:f0:26:4a:1c:55: b1:a2:d8:8a -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt6WwZeBLz8sNusFvjw7KJWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExZWE4ZGUzMWNlY2E1NTgwM2NmM2FmMTRkNGE3Mjc5YWU4 NDQ2ZDAwHhcNMjYwMTAxMTYxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDEyNGE0YWMyNTZlZWE4OTUwMDc1YzI4ZDk1YzlhYjc0N2UyYTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5XtLsSloEexdhQri1MUrmhYQsPwu 8P90BdjmV18YwVkdWRCPqnLSTOdrk6LCCEQMrdOGOO4hi3h6fBUm1vyfV1EMWF0s J2m4SKjK+PdFdyE490oom8U1sFlGyKGNVPmcNCRUWAwr8SMwApCW5xCJttI+fZwM pJd2YZev5+TZx19YsUYHTsNwR+IpAQK+FQqCNklkVIseMEgUmn5Afju3je0dNsVD VBCFi7hTleYWQOlkqzxb88SL/i39vbXF1M1xqZrl2mGNXYRJIgt1FYo+G/xOAOiQ CkGxud7m2KYTmkSVnOifqO9LVrJnCtg4giUmxn+XzFenEFOQxjT9EM/9QQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFNASSkrCVu6olQB1wo2Vyat0fiqZMB8GA1UdIwQY MBaAFKHqjeMc7KVYA8868U1KcnmuhEbQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2VxTjR4enNwVmdEenpyeFRVcHllYTZFUnRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9jYTk5ZDgtODUyNy00NWI4LWFmNmEt NzY1MjYyZjI5ZWFmLzEvMEJKS1NzSlc3cWlWQUhYQ2paWEpxM1ItS3BrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9jYTk5ZDgtODUyNy00NWI4LWFmNmEtNzY1MjYyZjI5ZWFm LzEvb2VxTjR4enNwVmdEenpyeFRVcHllYTZFUnRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQABZqqAwQC LZb4AwQCubkgAwQCwpQ0MA0EAgACMAcDBQMqC02AMA0GCSqGSIb3DQEBCwUAA4IB AQAJz1ouG4XiRaH7eAwNmyAhBbx/RS92OynsnyD3veuZFCcPqRMbhqueDxSMKNLI iX+3I4mShD1smAE9VZjuvp2fUMwukCnBDMWhhH3l7Zf8ZM/wyDKaUeoXcRjnUau/ rawzyepK6EIsZPCGWr09pJ0tQr3FUicErELEzMHlKBCJ8GzmwEeb6yTUReAZe3Va vn3wUs6CU7tQ9YXusPu1HhvoiMhzOKDYBfI+BwegQrvcNbJ+FlrkTOz91uguFwlb rZFaZCeoxd6V1KYxLtrbyfEElKHY+5W9MWSsOsJxNT7dJgWuHVQNc9LNm9/CLJO8 uhMTwJd2qYbR8CZKHFWxotiK -----END CERTIFICATE-----Generated at Mon Jan 26 22:36:32 2026 by rpki-client