This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/L7TLFBXL4z1WD9xSuh_8mjs8pNA.roa File: L7TLFBXL4z1WD9xSuh_8mjs8pNA.roa (raw, json) Hash identifier: /44RMLWxsefoSSby5FAIrP2+PlWLCEJGS/8SHUKD1gQ= Subject key identifier: 2F:B4:CB:14:15:CB:E3:3D:56:0F:DC:52:BA:1F:FC:9A:3B:3C:A4:D0 Certificate issuer: /CN=5954b6183e459748c89ee5431b8f31de692ae3b7 Certificate serial: 019B7F141468117E7E0848BAFE4F39EBBB9D Authority key identifier: 59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/L7TLFBXL4z1WD9xSuh_8mjs8pNA.roa Signing time: Fri 02 Jan 2026 14:19:40 +0000 ROA not before: Fri 02 Jan 2026 14:19:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401783 IP address blocks: 212.11.1.0/24 maxlen: 24 212.11.2.0/24 maxlen: 24 212.11.3.0/24 maxlen: 24 212.11.4.0/24 maxlen: 24 212.11.5.0/24 maxlen: 24 212.11.7.0/24 maxlen: 24 212.11.11.0/24 maxlen: 24 212.11.12.0/24 maxlen: 24 212.11.14.0/24 maxlen: 24 212.11.15.0/24 maxlen: 24 212.11.45.0/24 maxlen: 24 212.11.46.0/24 maxlen: 24 212.11.47.0/24 maxlen: 24 212.11.50.0/24 maxlen: 24 212.11.51.0/24 maxlen: 24 212.11.53.0/24 maxlen: 24 212.11.54.0/24 maxlen: 24 212.11.57.0/24 maxlen: 24 212.11.58.0/24 maxlen: 24 212.11.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.mft rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 02:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:14:68:11:7e:7e:08:48:ba:fe:4f:39:eb:bb:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5954b6183e459748c89ee5431b8f31de692ae3b7 Validity Not Before: Jan 2 14:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2fb4cb1415cbe33d560fdc52ba1ffc9a3b3ca4d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ae:52:9e:81:36:b2:7e:84:6b:59:06:4e:03: 3f:26:32:e9:e3:46:77:c4:b8:fc:89:fb:34:24:81: ba:d4:e5:21:6f:81:74:cf:95:bb:37:0d:ba:c3:dd: 6e:c6:71:21:09:a9:4f:38:39:79:d2:17:8a:81:d1: 3a:65:12:22:53:bb:51:bb:c5:98:a7:6f:10:38:77: 28:bf:d1:0c:cb:e7:05:45:59:3a:d6:64:2f:07:22: f5:61:de:44:cb:27:37:36:3d:57:4c:6e:27:46:fd: 17:1a:14:c8:31:49:f8:3d:85:e1:e8:b0:e7:7b:f0: 2a:40:dd:60:66:d7:fd:d4:e8:5b:fb:81:9c:35:ba: c5:dd:28:96:88:f1:7a:ed:55:51:1e:56:4c:a4:01: 16:d2:e2:ef:58:a2:37:bd:6a:ef:34:9f:b7:34:4c: 22:89:5f:ec:94:4e:e1:2f:a9:33:de:38:6d:d4:ae: 27:8a:12:c6:74:70:42:3b:c1:32:6c:25:fc:05:7e: 87:a9:fe:8e:b9:78:e1:45:02:63:5d:68:6c:8a:31: ef:b2:fd:87:c8:9f:90:62:b2:c9:ab:43:b6:28:dc: 06:0b:52:c9:93:32:23:cf:e4:75:eb:52:be:ef:fa: a7:b2:04:64:90:9d:1d:7c:ff:98:33:8a:f2:f4:1c: 8f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:B4:CB:14:15:CB:E3:3D:56:0F:DC:52:BA:1F:FC:9A:3B:3C:A4:D0 X509v3 Authority Key Identifier: keyid:59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/L7TLFBXL4z1WD9xSuh_8mjs8pNA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.11.1.0-212.11.5.255 212.11.7.0/24 212.11.11.0-212.11.12.255 212.11.14.0/23 212.11.45.0-212.11.47.255 212.11.50.0/23 212.11.53.0-212.11.54.255 212.11.57.0-212.11.59.255 Signature Algorithm: sha256WithRSAEncryption 22:af:56:22:2b:9a:58:5e:10:7e:fc:af:79:fe:ac:7c:aa:a3: 56:82:5c:5f:d2:d0:59:d2:fc:40:3e:48:07:37:91:a9:0a:9e: 63:7e:04:66:61:38:ee:41:dd:06:0a:93:d7:a2:2c:97:20:48: 23:6b:12:16:90:d8:d1:d3:cd:cb:32:c7:e5:76:3e:94:3f:c9: e3:7e:1a:7e:54:3b:ce:70:3d:9d:1d:8f:f1:81:06:e2:bd:a9: ec:31:24:c0:66:70:0e:ad:a2:6e:43:47:e8:41:1c:75:8f:a5: ea:c8:b1:d4:40:32:7c:a8:17:04:ea:bc:bb:00:7b:83:a4:a2: 09:a3:05:2f:ea:18:f4:8e:0d:80:55:9d:67:f3:ad:72:ae:c1: 36:78:f2:b8:e5:74:a0:ce:26:02:af:46:e2:ca:39:31:e2:84: 44:38:0c:83:51:e1:2f:64:70:63:f7:af:77:91:af:6a:68:37: e2:62:49:ee:f6:17:fd:51:83:be:2e:4f:05:07:32:ac:e9:9e: 4f:c4:0e:d7:2c:49:38:ae:c1:5b:74:5c:7a:28:60:3b:96:47: c9:1c:de:83:78:35:bd:a3:23:08:a5:bb:e7:46:a5:8a:d6:17: 65:71:c6:b1:26:99:75:ca:aa:f6:b3:25:98:55:b1:c0:f8:c3: 4a:01:26:c6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgISAZt/FBRoEX5+CEi6/k8567udMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NTRiNjE4M2U0NTk3NDhjODllZTU0MzFiOGYzMWRlNjky YWUzYjcwHhcNMjYwMTAyMTQxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZmI0Y2IxNDE1Y2JlMzNkNTYwZmRjNTJiYTFmZmM5YTNiM2NhNGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhK5SnoE2sn6Ea1kGTgM/JjLp40Z3 xLj8ifs0JIG61OUhb4F0z5W7Nw26w91uxnEhCalPODl50heKgdE6ZRIiU7tRu8WY p28QOHcov9EMy+cFRVk61mQvByL1Yd5Eyyc3Nj1XTG4nRv0XGhTIMUn4PYXh6LDn e/AqQN1gZtf91Ohb+4GcNbrF3SiWiPF67VVRHlZMpAEW0uLvWKI3vWrvNJ+3NEwi iV/slE7hL6kz3jht1K4nihLGdHBCO8EybCX8BX6Hqf6OuXjhRQJjXWhsijHvsv2H yJ+QYrLJq0O2KNwGC1LJkzIjz+R161K+7/qnsgRkkJ0dfP+YM4ry9ByPnQIDAQAB o4ICWzCCAlcwHQYDVR0OBBYEFC+0yxQVy+M9Vg/cUrof/Jo7PKTQMB8GA1UdIwQY MBaAFFlUthg+RZdIyJ7lQxuPMd5pKuO3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1ZTMkdENUZsMGpJbnVWREc0OHgzbWtxNDdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83ZGU2NWMtOTBmNS00ZGVmLWI4NzMt ZDJhZGVlZDc1NWQ4LzEvTDdUTEZCWEw0ejFXRDl4U3VoXzhtanM4cE5BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83ZGU2NWMtOTBmNS00ZGVmLWI4NzMtZDJhZGVlZDc1NWQ4 LzEvV1ZTMkdENUZsMGpJbnVWREc0OHgzbWtxNDdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHEGCCsGAQUFBwEHAQH/BGIwYDBeBAIAATBYMAwDBADUCwED BAHUCwQDBADUCwcwDAMEANQLCwMEANQLDAMEAdQLDjAMAwQA1AstAwQE1AsgAwQB 1AsyMAwDBADUCzUDBADUCzYwDAMEANQLOQMEAtQLODANBgkqhkiG9w0BAQsFAAOC AQEAIq9WIiuaWF4Qfvyvef6sfKqjVoJcX9LQWdL8QD5IBzeRqQqeY34EZmE47kHd BgqT16IslyBII2sSFpDY0dPNyzLH5XY+lD/J434aflQ7znA9nR2P8YEG4r2p7DEk wGZwDq2ibkNH6EEcdY+l6six1EAyfKgXBOq8uwB7g6SiCaMFL+oY9I4NgFWdZ/Ot cq7BNnjyuOV0oM4mAq9G4so5MeKERDgMg1HhL2RwY/evd5Gvamg34mJJ7vYX/VGD vi5PBQcyrOmeT8QO1yxJOK7BW3RceihgO5ZHyRzeg3g1vaMjCKW750alitYXZXHG sSaZdcqq9rMlmFWxwPjDSgEmxg== -----END CERTIFICATE-----Generated at Mon Jan 19 11:22:32 2026 by rpki-client