This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/Fs0_bj-i--rqKdPwFmLTS8ta8cY.roa File: Fs0_bj-i--rqKdPwFmLTS8ta8cY.roa (raw, json) Hash identifier: XlJLMtKrJChwNgN0h6ycaLGGdAOuPooXZOS5j5LvFnA= Subject key identifier: 16:CD:3F:6E:3F:A2:FB:EA:EA:29:D3:F0:16:62:D3:4B:CB:5A:F1:C6 Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019BD67C80C7292B61C1736B10D845D3523A Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/Fs0_bj-i--rqKdPwFmLTS8ta8cY.roa Signing time: Mon 19 Jan 2026 13:40:42 +0000 ROA not before: Mon 19 Jan 2026 13:40:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43201 IP address blocks: 5.42.216.0/24 maxlen: 24 37.72.131.0/24 maxlen: 24 46.175.132.0/24 maxlen: 24 91.213.155.0/24 maxlen: 24 194.104.139.0/24 maxlen: 24 194.104.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d6:7c:80:c7:29:2b:61:c1:73:6b:10:d8:45:d3:52:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Jan 19 13:40:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=16cd3f6e3fa2fbeaea29d3f01662d34bcb5af1c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f3:c0:96:06:a5:24:e7:45:65:05:fa:59:d1: 55:34:9f:81:5e:e5:c4:a6:54:99:6d:00:52:03:4d: a2:cb:63:f2:89:a6:08:e8:5a:ff:5c:87:80:03:d0: 99:80:96:19:6b:0e:76:5f:53:a4:e4:1e:f3:b5:57: 02:54:50:52:84:cc:48:a2:e1:dd:0a:bc:65:32:84: a3:d1:2a:ae:25:dd:82:04:ad:e5:c6:83:7d:e5:dd: 0b:1b:ad:d6:02:6f:98:52:7f:21:b4:30:87:1a:7a: 6c:df:6d:a7:d3:6f:1e:d6:9c:cf:97:1c:1c:8e:38: 20:d6:58:da:72:65:78:c6:19:24:f6:b5:f3:50:60: 31:04:1d:b6:31:42:9d:88:ee:87:73:e3:00:87:02: 1a:25:ac:83:ab:3c:17:94:2c:14:90:a0:a9:f5:bc: 52:43:e8:d9:ef:a4:7c:4a:0b:b7:2c:20:8c:5a:ca: 40:ad:7f:3f:76:6e:dc:d8:72:f5:e5:d5:c6:aa:a2: 38:c6:99:95:9d:77:09:4b:30:75:e0:58:c3:7d:a4: 2a:a8:9b:d4:3f:b2:fa:19:66:cb:74:a2:65:c4:72: 38:a1:7e:e8:b4:e0:7e:eb:04:ae:cb:53:79:c1:c5: 4c:27:c0:69:1b:c9:0b:5d:09:b7:3e:41:52:32:4d: 78:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:CD:3F:6E:3F:A2:FB:EA:EA:29:D3:F0:16:62:D3:4B:CB:5A:F1:C6 X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/Fs0_bj-i--rqKdPwFmLTS8ta8cY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.42.216.0/24 37.72.131.0/24 46.175.132.0/24 91.213.155.0/24 194.104.139.0-194.104.140.255 Signature Algorithm: sha256WithRSAEncryption 27:31:02:41:ca:20:47:96:90:28:d3:36:b8:7a:6d:06:82:0d: 7f:d2:6c:67:06:08:6f:f8:a1:3c:93:e0:d9:30:e8:0a:04:d6: fa:e1:da:d4:36:15:a7:bb:36:55:be:e7:e8:7c:47:b6:fa:92: 2f:8f:36:bc:ba:83:85:80:ad:5f:08:ef:bd:34:38:c7:dc:91: 4c:49:28:77:c6:2f:ee:29:3d:68:88:4a:52:4b:98:92:21:49: 21:72:86:88:8f:1d:42:8e:1b:56:20:ea:10:c8:f8:85:09:d1: 25:f7:93:54:b6:f3:40:9a:d8:23:05:9c:a0:55:89:70:8e:64: 74:7d:41:02:3d:ce:1f:88:04:ea:f8:4c:8d:a7:fa:52:49:29: 01:36:e7:3a:9a:b5:b9:42:bb:8b:d0:2b:f4:2a:e6:d0:7d:5e: ba:6b:40:e2:48:b9:8a:72:6b:fd:d8:f7:5d:4a:55:a6:89:2c: 7c:15:59:b3:aa:e6:14:9e:2d:ed:44:4c:9e:9d:72:f6:9c:ce: 75:26:fc:59:85:05:c6:4d:2b:ee:90:43:ed:c7:3b:02:02:1e: 60:60:46:be:0d:5a:b6:9d:a0:e0:43:cc:23:42:b1:fb:8c:70: 36:42:cd:e9:84:a0:87:d3:9c:f2:74:7f:3f:71:80:95:e3:29: d0:fd:bd:09 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZvWfIDHKSthwXNrENhF01I6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjYwMTE5MTM0MDQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNmNkM2Y2ZTNmYTJmYmVhZWEyOWQzZjAxNjYyZDM0YmNiNWFmMWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvPAlgalJOdFZQX6WdFVNJ+BXuXE plSZbQBSA02iy2PyiaYI6Fr/XIeAA9CZgJYZaw52X1Ok5B7ztVcCVFBShMxIouHd CrxlMoSj0SquJd2CBK3lxoN95d0LG63WAm+YUn8htDCHGnps322n028e1pzPlxwc jjgg1ljacmV4xhkk9rXzUGAxBB22MUKdiO6Hc+MAhwIaJayDqzwXlCwUkKCp9bxS Q+jZ76R8Sgu3LCCMWspArX8/dm7c2HL15dXGqqI4xpmVnXcJSzB14FjDfaQqqJvU P7L6GWbLdKJlxHI4oX7otOB+6wSuy1N5wcVMJ8BpG8kLXQm3PkFSMk14hwIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFBbNP24/ovvq6inT8BZi00vLWvHGMB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvRnMwX2JqLWktLXJxS2RQd0ZtTFRTOHRhOGNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQABSrYAwQA JUiDAwQALq+EAwQAW9WbMAwDBADCaIsDBADCaIwwDQYJKoZIhvcNAQELBQADggEB ACcxAkHKIEeWkCjTNrh6bQaCDX/SbGcGCG/4oTyT4Nkw6AoE1vrh2tQ2Fae7NlW+ 5+h8R7b6ki+PNry6g4WArV8I7700OMfckUxJKHfGL+4pPWiISlJLmJIhSSFyhoiP HUKOG1Yg6hDI+IUJ0SX3k1S280Ca2CMFnKBViXCOZHR9QQI9zh+IBOr4TI2n+lJJ KQE25zqatblCu4vQK/Qq5tB9XrprQOJIuYpya/3Y911KVaaJLHwVWbOq5hSeLe1E TJ6dcvacznUm/FmFBcZNK+6QQ+3HOwICHmBgRr4NWradoOBDzCNCsfuMcDZCzemE oIfTnPJ0fz9xgJXjKdD9vQk= -----END CERTIFICATE-----Generated at Tue Jan 20 02:45:00 2026 by rpki-client