This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/1-Ri_hsGkr3yDmEKmoOv0YIZXLG4.roa File: 1-Ri_hsGkr3yDmEKmoOv0YIZXLG4.roa (raw, json) Hash identifier: 56KjRsURL02cJfN9ZbBPqkJyvGYvGYVoP3tBohTeEsI= Subject key identifier: F9:18:BF:86:C1:A4:AF:7C:83:98:42:A6:A0:EB:F4:60:86:57:2C:6E Certificate issuer: /CN=704ab9688427073ff7e179de5af002e09f236013 Certificate serial: 019B77C6D1F5ED74FF7C05C21E63BFDDF48B Authority key identifier: 70:4A:B9:68:84:27:07:3F:F7:E1:79:DE:5A:F0:02:E0:9F:23:60:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cEq5aIQnBz_34XneWvAC4J8jYBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/1-Ri_hsGkr3yDmEKmoOv0YIZXLG4.roa Signing time: Thu 01 Jan 2026 04:17:57 +0000 ROA not before: Thu 01 Jan 2026 04:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52102 IP address blocks: 5.102.136.0/23 maxlen: 23 5.102.136.0/24 maxlen: 24 5.102.137.0/24 maxlen: 24 5.102.138.0/23 maxlen: 23 5.102.138.0/24 maxlen: 24 5.102.139.0/24 maxlen: 24 5.102.140.0/23 maxlen: 23 5.102.140.0/24 maxlen: 24 5.102.141.0/24 maxlen: 24 5.102.142.0/23 maxlen: 23 5.102.142.0/24 maxlen: 24 5.102.143.0/24 maxlen: 24 91.221.230.0/23 maxlen: 24 91.221.230.0/24 maxlen: 24 91.221.231.0/24 maxlen: 24 2a04:8880::/32 maxlen: 32 2a04:8881::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.crl rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.mft rsync://rpki.ripe.net/repository/DEFAULT/cEq5aIQnBz_34XneWvAC4J8jYBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:d1:f5:ed:74:ff:7c:05:c2:1e:63:bf:dd:f4:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=704ab9688427073ff7e179de5af002e09f236013 Validity Not Before: Jan 1 04:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f918bf86c1a4af7c839842a6a0ebf46086572c6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:55:0b:0e:e2:00:40:b9:b0:9f:5f:e9:20:4a: b8:d0:be:80:2e:f3:00:c4:d3:04:e4:ec:ba:3c:9f: ac:1d:c4:59:af:94:f6:61:02:09:56:2b:6b:de:f0: 67:95:73:c5:cf:42:a0:98:50:e9:58:3e:e0:35:5d: 49:50:4a:8f:47:6c:86:b0:16:10:7f:c6:cd:ce:59: 49:44:84:5c:2b:2b:54:32:97:64:39:82:0d:4d:21: 42:14:3a:6a:b2:db:00:1b:71:03:5e:2d:ba:75:f0: 3c:fd:60:bc:c8:b8:d1:b4:81:70:2f:2d:2c:ee:e7: 41:8a:18:f2:9e:a1:4d:d8:94:18:95:05:36:ba:42: f6:83:b3:06:33:4d:40:36:ec:e3:e0:54:70:87:ec: 13:98:0f:1e:f8:b1:0f:0e:62:d4:5e:be:e1:e0:84: be:2c:63:5e:97:b9:55:17:c5:f2:cd:e6:5b:7f:93: 70:a4:30:ec:f1:dc:57:8c:e9:db:2a:73:b7:21:4e: e4:e4:d9:32:a1:e8:b1:ad:16:db:d2:44:de:b7:f6: 72:b5:3d:2e:74:a3:b0:aa:61:9a:3f:dc:75:79:f7: 44:ef:c4:c3:cd:95:34:2b:e9:f9:bc:ae:e3:18:c4: 2c:ad:ed:47:ae:1e:8e:b1:1e:c4:b4:36:2c:7c:4d: f5:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:18:BF:86:C1:A4:AF:7C:83:98:42:A6:A0:EB:F4:60:86:57:2C:6E X509v3 Authority Key Identifier: keyid:70:4A:B9:68:84:27:07:3F:F7:E1:79:DE:5A:F0:02:E0:9F:23:60:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cEq5aIQnBz_34XneWvAC4J8jYBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/1-Ri_hsGkr3yDmEKmoOv0YIZXLG4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.102.136.0/21 91.221.230.0/23 IPv6: 2a04:8880::/31 Signature Algorithm: sha256WithRSAEncryption 00:a2:4a:97:5b:28:90:f9:e4:23:12:13:96:46:2f:f2:56:e2: d2:d1:b5:44:4d:f0:b7:9f:97:23:1c:8f:ab:4a:0b:83:32:58: 2f:03:98:62:7e:31:c4:72:69:e2:7d:82:50:3e:ab:a3:40:34: e2:11:71:3c:3d:12:b5:47:79:0d:eb:88:1a:1e:6a:52:5d:5f: 30:de:ca:5e:ee:69:3f:32:f4:ed:5a:38:91:61:1f:a7:19:b9: 8d:52:d5:7b:ad:1f:11:0d:a2:d6:7b:d4:00:24:35:c6:45:e4: 74:01:af:f7:89:ec:78:fc:4b:f3:52:61:c5:75:eb:9d:83:02: 9e:38:22:6b:cf:c9:1d:d2:64:22:77:cd:69:fd:a6:e0:e7:2a: 9b:7d:86:db:34:27:e9:42:f9:22:ac:f4:78:6e:86:ba:7b:89: 5d:4e:df:e2:57:aa:03:7a:e7:8e:85:a0:55:93:46:74:a7:8f: 3f:59:5e:fe:7c:43:51:aa:b2:05:79:13:41:59:c9:a5:12:30: 94:ea:b9:9b:be:25:e3:9b:dc:5c:9f:ca:74:0c:89:1d:4c:fa: 25:6b:f6:3b:39:e3:8f:c9:aa:70:8a:63:6c:b9:6a:f1:53:da: e1:bb:a2:ed:52:ce:a8:d1:f1:12:ae:51:38:c7:21:34:b7:93: 25:ca:c2:18 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt3xtH17XT/fAXCHmO/3fSLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNGFiOTY4ODQyNzA3M2ZmN2UxNzlkZTVhZjAwMmUwOWYy MzYwMTMwHhcNMjYwMTAxMDQxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTE4YmY4NmMxYTRhZjdjODM5ODQyYTZhMGViZjQ2MDg2NTcyYzZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1ULDuIAQLmwn1/pIEq40L6ALvMA xNME5Oy6PJ+sHcRZr5T2YQIJVitr3vBnlXPFz0KgmFDpWD7gNV1JUEqPR2yGsBYQ f8bNzllJRIRcKytUMpdkOYINTSFCFDpqstsAG3EDXi26dfA8/WC8yLjRtIFwLy0s 7udBihjynqFN2JQYlQU2ukL2g7MGM01ANuzj4FRwh+wTmA8e+LEPDmLUXr7h4IS+ LGNel7lVF8XyzeZbf5NwpDDs8dxXjOnbKnO3IU7k5NkyoeixrRbb0kTet/ZytT0u dKOwqmGaP9x1efdE78TDzZU0K+n5vK7jGMQsre1Hrh6OsR7EtDYsfE31oQIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFPkYv4bBpK98g5hCpqDr9GCGVyxuMB8GA1UdIwQY MBaAFHBKuWiEJwc/9+F53lrwAuCfI2ATMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0VxNWFJUW5Cel8zNFhuZVd2QUM0SjhqWUJNLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9jMjQ0YjMtOGZjMS00Njg1LThmYjIt NDZhOGIxOTFhMzc0LzEvMS1SaV9oc0drcjN5RG1FS21vT3YwWUlaWExHNC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNTkvYzI0NGIzLThmYzEtNDY4NS04ZmIyLTQ2YThiMTkxYTM3 NC8xL2NFcTVhSVFuQnpfMzRYbmVXdkFDNEo4allCTS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAwVmiAME AVvd5jANBAIAAjAHAwUBKgSIgDANBgkqhkiG9w0BAQsFAAOCAQEAAKJKl1sokPnk IxITlkYv8lbi0tG1RE3wt5+XIxyPq0oLgzJYLwOYYn4xxHJp4n2CUD6ro0A04hFx PD0StUd5DeuIGh5qUl1fMN7KXu5pPzL07Vo4kWEfpxm5jVLVe60fEQ2i1nvUACQ1 xkXkdAGv94nsePxL81JhxXXrnYMCnjgia8/JHdJkInfNaf2m4Ocqm32G2zQn6UL5 Iqz0eG6GunuJXU7f4leqA3rnjoWgVZNGdKePP1le/nxDUaqyBXkTQVnJpRIwlOq5 m74l45vcXJ/KdAyJHUz6JWv2Oznjj8mqcIpjbLlq8VPa4bui7VLOqNHxEq5ROMch NLeTJcrCGA== -----END CERTIFICATE-----Generated at Tue Feb 10 03:06:08 2026 by rpki-client